This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hQiDLASIhC7vUzhsh00Wynlpqmg.roa File: hQiDLASIhC7vUzhsh00Wynlpqmg.roa (raw, json) Hash identifier: pmd5yw+HCOA2PkfZoUnqjhDhBeNLVPVSVAM59Qtv0js= Subject key identifier: 85:08:83:2C:04:88:84:2E:EF:53:38:6C:87:4D:16:CA:79:69:AA:68 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFF407E4AD48C49150378975E2F9F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hQiDLASIhC7vUzhsh00Wynlpqmg.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205121 IP address blocks: 2a0e:97c0:ad0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:40:7e:4a:d4:8c:49:15:03:78:97:5e:2f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8508832c0488842eef53386c874d16ca7969aa68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:b6:02:b7:dd:c7:8d:94:42:1f:fb:15:3e: 8f:04:d4:81:61:77:4e:aa:46:17:e8:c4:78:48:93: 60:7c:3f:d5:5c:ec:ce:96:60:3f:c9:be:4d:34:b5: 5d:9a:5d:d1:bf:fa:b4:a1:aa:53:75:fc:6c:9e:61: ae:ac:c2:47:f4:0e:a7:2f:1a:ae:2d:e0:5b:9a:69: 69:49:4d:f1:a9:b6:e5:ba:99:4f:d1:32:4e:4a:87: 2e:ab:18:f0:9e:a0:d4:64:6a:f6:8e:41:5d:b7:37: d4:d4:3c:a1:a0:c5:43:7c:94:2c:11:87:6a:1c:10: e4:37:47:e2:52:05:1b:59:30:4c:cd:32:04:29:eb: 79:3e:af:74:eb:35:45:a1:fc:7b:43:aa:d9:75:45: 99:59:6d:ce:73:af:ec:ec:ea:05:a2:da:d4:8c:57: 9c:1f:5e:5b:f1:5a:87:7f:04:d1:f5:0f:0e:b0:c7: e1:aa:31:a0:a5:0d:24:99:57:d4:1e:34:cf:c9:c5: ba:64:35:2b:3b:fe:a9:b9:9f:5d:92:be:d3:99:fd: 12:c4:8c:6a:f6:26:4c:2d:6e:6f:67:90:9f:23:e5: 05:6b:d5:f2:96:f1:2d:98:8b:1f:8d:3d:15:20:c2: a1:6f:64:24:c3:72:16:ff:f2:3e:3f:da:fe:09:e2: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:08:83:2C:04:88:84:2E:EF:53:38:6C:87:4D:16:CA:79:69:AA:68 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hQiDLASIhC7vUzhsh00Wynlpqmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:ad0::/44 Signature Algorithm: sha256WithRSAEncryption 89:63:02:e1:50:95:b0:f6:af:40:40:ff:ed:47:ba:01:1c:f5: be:23:9f:53:4b:76:9b:02:16:28:69:95:65:f9:4c:c9:73:07: 7c:ad:0f:17:df:3d:ad:da:ce:cb:e3:bb:7b:58:4e:db:43:05: be:bc:c4:55:fd:a7:d6:11:21:8d:25:d1:2c:a7:6f:a8:ec:41: f9:66:29:13:dd:85:dd:37:75:9b:c7:46:e2:1d:0d:af:7f:4a: 72:8d:22:1e:ea:b1:0a:41:31:f4:b5:5b:1c:98:1d:9a:42:91: bf:f0:4e:8d:5f:1a:5a:34:0d:63:b4:b3:e3:f5:d5:8e:24:dc: a3:a2:13:c2:ff:ac:61:aa:50:95:dc:d4:a8:e5:87:54:16:46: 52:56:e7:db:63:25:d4:a7:0e:ab:90:03:8a:48:9f:8c:49:28: 66:b5:fb:5f:20:4c:01:82:21:2a:d6:7e:35:69:19:33:9f:60: 5f:a4:43:58:06:82:03:9e:02:b6:44:1f:b4:75:57:fb:ed:6b: 1a:c8:d7:60:6e:e4:52:04:c3:d7:fb:1d:02:e7:93:8f:92:47: 2a:d6:ff:52:aa:85:c1:96:60:2e:9e:66:59:2c:40:68:09:3d: 0e:ce:c3:c1:30:40:8d:75:1d:93:db:07:1b:82:f0:e6:f9:4e: a8:ca:d1:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XP9AfkrUjEkVA3iXXi+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTA4ODMyYzA0ODg4NDJlZWY1MzM4NmM4NzRkMTZjYTc5NjlhYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf62Arfdx42UQh/7FT6PBNSBYXdO qkYX6MR4SJNgfD/VXOzOlmA/yb5NNLVdml3Rv/q0oapTdfxsnmGurMJH9A6nLxqu LeBbmmlpSU3xqbbluplP0TJOSocuqxjwnqDUZGr2jkFdtzfU1DyhoMVDfJQsEYdq HBDkN0fiUgUbWTBMzTIEKet5Pq906zVFofx7Q6rZdUWZWW3Oc6/s7OoFotrUjFec H15b8VqHfwTR9Q8OsMfhqjGgpQ0kmVfUHjTPycW6ZDUrO/6puZ9dkr7Tmf0SxIxq 9iZMLW5vZ5CfI+UFa9XylvEtmIsfjT0VIMKhb2Qkw3IW//I+P9r+CeIqtQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIUIgywEiIQu71M4bIdNFsp5aapoMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaFFpRExBU0loQzd2VXpoc2gwMFd5bmxwcW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwArQ MA0GCSqGSIb3DQEBCwUAA4IBAQCJYwLhUJWw9q9AQP/tR7oBHPW+I59TS3abAhYo aZVl+UzJcwd8rQ8X3z2t2s7L47t7WE7bQwW+vMRV/afWESGNJdEsp2+o7EH5ZikT 3YXdN3Wbx0biHQ2vf0pyjSIe6rEKQTH0tVscmB2aQpG/8E6NXxpaNA1jtLPj9dWO JNyjohPC/6xhqlCV3NSo5YdUFkZSVufbYyXUpw6rkAOKSJ+MSShmtftfIEwBgiEq 1n41aRkzn2BfpENYBoIDngK2RB+0dVf77WsayNdgbuRSBMPX+x0C55OPkkcq1v9S qoXBlmAunmZZLEBoCT0OzsPBMECNdR2T2wcbgvDm+U6oytG5 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:05 2026 by rpki-client