This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HlOpkdQhq6Xq7y0vOHhzEcj2ZzQ.roa File: HlOpkdQhq6Xq7y0vOHhzEcj2ZzQ.roa (raw, json) Hash identifier: 3mh/3F85NnxpQ6Gq6Jq49Oy1YPcKrYxfUCOcYygiKwg= Subject key identifier: 1E:53:A9:91:D4:21:AB:A5:EA:EF:2D:2F:38:78:73:11:C8:F6:67:34 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CDAA371DF1FB5A6F90B303B18C1BA Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HlOpkdQhq6Xq7y0vOHhzEcj2ZzQ.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198316 IP address blocks: 2a0e:b107:1a60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:da:a3:71:df:1f:b5:a6:f9:0b:30:3b:18:c1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e53a991d421aba5eaef2d2f38787311c8f66734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:f5:9b:2a:df:e6:d6:67:79:df:29:36:e2: aa:25:a6:8d:81:2a:9c:5f:86:3f:40:a1:9e:bd:c7: 82:cb:83:47:c4:c3:fa:3d:32:8c:e3:b4:43:4f:04: cd:70:82:c4:79:70:8b:69:31:9a:23:d6:9f:4e:4b: aa:59:d3:8c:05:13:cf:70:0f:73:3c:c0:99:cf:82: 1b:cc:b5:a4:46:74:3a:47:c5:35:6d:72:7f:20:8b: 9b:5d:cf:63:2a:69:d1:9e:54:d2:dd:96:0b:ef:a2: 71:aa:b7:8e:1f:2b:5b:6b:42:9d:8a:a8:ea:cc:15: 83:a8:b6:17:12:54:2e:28:2c:6d:0a:69:21:dd:c9: 0e:92:a9:43:8c:6a:15:4d:6f:f2:0b:13:c2:93:16: e3:a2:0f:f1:01:1d:84:da:cd:27:0d:98:0e:13:97: c3:91:b7:2a:f1:73:b3:01:f6:fe:ee:bb:78:ca:3e: 25:9b:e8:d2:9e:14:57:d2:3f:81:99:66:e0:4e:46: bc:f7:bc:df:94:50:a1:e2:af:d5:bc:4d:6f:66:6f: da:60:5c:6f:6d:b3:08:ac:f1:ee:c3:33:98:ac:de: 71:80:c9:24:73:c5:d5:bb:b3:64:e8:2b:58:07:c3: 3b:f0:cd:72:aa:e2:ef:7e:33:8a:42:87:4d:7c:c7: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:53:A9:91:D4:21:AB:A5:EA:EF:2D:2F:38:78:73:11:C8:F6:67:34 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HlOpkdQhq6Xq7y0vOHhzEcj2ZzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1a60::/44 Signature Algorithm: sha256WithRSAEncryption 0f:59:38:10:4c:85:aa:a2:2b:a1:2f:9c:f6:b0:46:15:19:4a: 5e:95:fe:b1:85:51:cd:ae:e2:f5:ec:c3:3a:b9:28:4c:cf:c6: 49:bf:4c:7f:b7:dc:e1:87:83:d6:07:2d:a2:63:68:0d:8c:1a: cc:f4:8a:09:4a:c8:41:3d:3b:8f:70:3e:69:c7:30:33:be:c4: b9:e2:26:ef:8e:27:a9:26:26:6d:f7:49:8f:3f:36:4a:97:4b: 9e:4e:82:83:e3:8c:fb:5b:ca:e4:38:e1:26:49:7e:0a:67:ff: 09:f0:0e:52:2f:e2:e1:f7:5e:ed:d3:f7:6d:a9:34:7c:20:6d: 0d:ee:60:74:14:ce:cc:1e:6b:2a:26:9a:03:44:91:b4:14:53: 08:34:d2:16:fd:f0:fd:4a:10:f2:5c:6e:b8:ba:d6:48:bf:45: 96:c4:3f:ef:de:ef:21:db:43:93:f9:b1:26:6d:07:e0:d1:20: 00:bf:a9:c0:b1:d6:1a:6f:6f:d9:2b:76:cf:06:c6:be:cd:fb: be:3b:d1:f2:b4:15:07:8b:c9:81:2d:80:66:72:f0:e6:b2:8a: 82:b6:fd:82:9e:8e:18:bc:fc:3b:a8:49:c3:6d:fc:e6:7f:45: 21:5d:f2:fd:d6:a1:89:a5:45:f6:b1:1e:3c:0e:cd:08:aa:82: c0:0e:76:56 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNqjcd8ftab5CzA7GMG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUzYTk5MWQ0MjFhYmE1ZWFlZjJkMmYzODc4NzMxMWM4ZjY2NzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw71myrf5tZned8pNuKqJaaNgSqc X4Y/QKGevceCy4NHxMP6PTKM47RDTwTNcILEeXCLaTGaI9afTkuqWdOMBRPPcA9z PMCZz4IbzLWkRnQ6R8U1bXJ/IIubXc9jKmnRnlTS3ZYL76JxqreOHytba0Kdiqjq zBWDqLYXElQuKCxtCmkh3ckOkqlDjGoVTW/yCxPCkxbjog/xAR2E2s0nDZgOE5fD kbcq8XOzAfb+7rt4yj4lm+jSnhRX0j+BmWbgTka897zflFCh4q/VvE1vZm/aYFxv bbMIrPHuwzOYrN5xgMkkc8XVu7Nk6CtYB8M78M1yquLvfjOKQodNfMd7wwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB5TqZHUIaul6u8tLzh4cxHI9mc0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSGxPcGtkUWhxNlhxN3kwdk9IaHpFY2oyWnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxpg MA0GCSqGSIb3DQEBCwUAA4IBAQAPWTgQTIWqoiuhL5z2sEYVGUpelf6xhVHNruL1 7MM6uShMz8ZJv0x/t9zhh4PWBy2iY2gNjBrM9IoJSshBPTuPcD5pxzAzvsS54ibv jiepJiZt90mPPzZKl0ueToKD44z7W8rkOOEmSX4KZ/8J8A5SL+Lh917t0/dtqTR8 IG0N7mB0FM7MHmsqJpoDRJG0FFMINNIW/fD9ShDyXG64utZIv0WWxD/v3u8h20OT +bEmbQfg0SAAv6nAsdYab2/ZK3bPBsa+zfu+O9HytBUHi8mBLYBmcvDmsoqCtv2C no4YvPw7qEnDbfzmf0UhXfL91qGJpUX2sR48Ds0IqoLADnZW -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client