This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy1V1JPke_t3go5olHFetJGhUAc.roa File: Hy1V1JPke_t3go5olHFetJGhUAc.roa (raw, json) Hash identifier: fMW/RheXh/P9WJFqcyAEtOqocHCZwiFcV4VgGxZX4AY= Subject key identifier: 1F:2D:55:D4:93:E4:7B:FB:77:82:8E:68:94:71:5E:B4:91:A1:50:07 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D0FE6120458DDF0FD3EF51A2E4EA5 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy1V1JPke_t3go5olHFetJGhUAc.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207852 IP address blocks: 2a0e:b107:270::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0f:e6:12:04:58:dd:f0:fd:3e:f5:1a:2e:4e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f2d55d493e47bfb77828e6894715eb491a15007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:1d:6b:ca:57:1c:6d:db:74:b6:27:2a:04: 28:02:a5:dd:fe:ef:e1:4f:1f:10:84:b1:2c:9b:44: d6:c2:87:95:5a:bf:63:c8:48:9a:6f:b5:96:36:25: 5b:5a:6f:1d:ea:55:71:a2:7e:d9:63:33:5b:5d:5b: 1f:cd:83:c4:e9:48:e0:81:d0:07:a1:8c:ac:cf:d8: aa:d5:40:0b:14:b9:23:be:5a:20:ac:79:4b:f6:f7: 93:69:15:63:b4:72:54:cc:fb:9d:eb:1b:60:81:45: 84:dd:b9:e1:45:6c:c3:11:df:e4:eb:30:23:7a:aa: 28:1a:67:3e:38:31:cd:b8:d9:19:2f:4e:37:83:55: fc:13:d0:5d:67:6c:a1:63:e5:a1:58:0f:4e:77:9d: 19:83:60:61:f1:92:f6:49:0b:18:5a:65:3d:98:e4: 60:af:47:07:33:2f:6d:e7:1a:77:5b:81:3c:4a:4c: eb:1b:4f:cb:fc:8b:e8:5b:3c:6c:36:45:be:87:7e: e4:38:23:9e:aa:68:2e:d1:5a:f8:5f:34:0d:97:f4: 1a:a1:af:b9:36:e0:65:30:78:b7:ca:12:7d:c1:46: 80:c9:dc:ba:69:e9:e1:d9:36:f0:f1:2e:29:f5:eb: 3d:01:b4:f4:df:85:c1:72:4d:23:29:f1:67:f3:88: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2D:55:D4:93:E4:7B:FB:77:82:8E:68:94:71:5E:B4:91:A1:50:07 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy1V1JPke_t3go5olHFetJGhUAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:270::/48 Signature Algorithm: sha256WithRSAEncryption 50:ad:0a:49:6a:3c:eb:4b:3b:ee:d7:dd:96:35:5f:b6:8b:63: 8a:7b:c7:8a:b0:24:82:e1:07:64:f5:88:31:97:a9:a6:79:aa: 6b:42:73:59:44:61:79:af:25:59:8e:0d:73:ff:50:ab:b8:a4: 17:0c:3c:cc:09:f3:e3:a4:04:de:3a:06:6b:28:b1:f3:b0:c5: d5:bf:25:98:af:4e:44:40:54:6a:b0:c0:a6:b8:dd:34:db:15: cb:0c:6d:cf:fa:aa:34:0b:8b:ed:cf:d4:30:d3:02:32:84:64: 2f:d6:a0:b5:2f:bd:7f:de:40:c2:a6:e7:b3:f6:4c:12:c5:91: 4a:48:f9:96:66:dd:30:59:4e:6a:7f:b1:c3:39:52:30:c8:14: 81:80:3e:89:fe:23:a4:c2:e2:0b:97:31:99:b0:38:8a:03:eb: 22:a2:b7:2e:34:c3:64:5f:69:4a:34:65:bd:38:12:e3:cd:01: f5:e5:1c:8e:fa:43:1e:1e:5f:7d:7f:a1:43:68:69:e0:bc:2a: 8f:dc:3d:9b:cc:1c:33:4e:ba:8b:e6:6c:9e:8a:2e:e7:4f:e9: 78:20:3b:50:2a:17:d0:f6:d3:81:70:72:94:ae:da:42:19:d4: c9:b2:f2:cc:55:fb:19:26:15:ac:14:b2:da:7f:3c:3b:48:7c: 22:4d:8b:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQ/mEgRY3fD9PvUaLk6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjJkNTVkNDkzZTQ3YmZiNzc4MjhlNjg5NDcxNWViNDkxYTE1MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZAda8pXHG3bdLYnKgQoAqXd/u/h Tx8QhLEsm0TWwoeVWr9jyEiab7WWNiVbWm8d6lVxon7ZYzNbXVsfzYPE6UjggdAH oYysz9iq1UALFLkjvlogrHlL9veTaRVjtHJUzPud6xtggUWE3bnhRWzDEd/k6zAj eqooGmc+ODHNuNkZL043g1X8E9BdZ2yhY+WhWA9Od50Zg2Bh8ZL2SQsYWmU9mORg r0cHMy9t5xp3W4E8SkzrG0/L/IvoWzxsNkW+h37kOCOeqmgu0Vr4XzQNl/Qaoa+5 NuBlMHi3yhJ9wUaAydy6aenh2Tbw8S4p9es9AbT034XBck0jKfFn84hC4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB8tVdST5Hv7d4KOaJRxXrSRoVAHMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSHkxVjFKUGtlX3QzZ281b2xIRmV0SkdoVUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwJw MA0GCSqGSIb3DQEBCwUAA4IBAQBQrQpJajzrSzvu192WNV+2i2OKe8eKsCSC4Qdk 9Ygxl6mmeaprQnNZRGF5ryVZjg1z/1CruKQXDDzMCfPjpATeOgZrKLHzsMXVvyWY r05EQFRqsMCmuN002xXLDG3P+qo0C4vtz9Qw0wIyhGQv1qC1L71/3kDCpuez9kwS xZFKSPmWZt0wWU5qf7HDOVIwyBSBgD6J/iOkwuILlzGZsDiKA+siorcuNMNkX2lK NGW9OBLjzQH15RyO+kMeHl99f6FDaGngvCqP3D2bzBwzTrqL5myeii7nT+l4IDtQ KhfQ9tOBcHKUrtpCGdTJsvLMVfsZJhWsFLLafzw7SHwiTYuH -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:30 2026 by rpki-client