This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hUhqxySQBJ9rk9QpY5TSxNst4RM.roa File: hUhqxySQBJ9rk9QpY5TSxNst4RM.roa (raw, json) Hash identifier: mN7mi+FF/IkSdyFsHXrDpaGdJoYfPN2fjIk7izkqhig= Subject key identifier: 85:48:6A:C7:24:90:04:9F:6B:93:D4:29:63:94:D2:C4:DB:2D:E1:13 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3DFF610CB53BA5C1AF2E417C9B83 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hUhqxySQBJ9rk9QpY5TSxNst4RM.roa Signing time: Fri 02 Jan 2026 06:20:21 +0000 ROA not before: Fri 02 Jan 2026 06:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211358 IP address blocks: 2a0e:b107:12d1::/48 maxlen: 48 2a0e:b107:12d2::/48 maxlen: 48 2a0e:b107:12d3::/48 maxlen: 48 2a0e:b107:12d4::/48 maxlen: 48 2a0e:b107:12d5::/48 maxlen: 48 2a0e:b107:12d7::/48 maxlen: 48 2a0e:b107:12dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3d:ff:61:0c:b5:3b:a5:c1:af:2e:41:7c:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85486ac72490049f6b93d4296394d2c4db2de113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:47:01:b5:4b:58:9a:2b:75:50:ec:5e:03: 8e:7f:84:94:16:83:7e:ba:2e:99:ca:23:26:70:78: a4:0b:0a:15:c1:4f:27:d9:d8:b4:70:8e:ad:ee:a3: 51:17:ce:9e:24:e0:c8:5e:72:d0:28:a4:22:b7:c5: a2:44:16:18:0b:23:d9:ab:78:6c:0e:62:16:bd:c9: 4c:05:ee:05:43:f5:8e:91:54:5d:8c:06:ea:1a:e5: 8f:80:fd:44:83:32:4f:84:4b:e9:8b:a3:ff:52:81: 9f:3b:1e:7b:46:4a:a2:4d:9b:72:14:16:3d:c2:43: 82:e4:4d:9b:90:33:ef:4b:e8:9c:94:c9:e3:ff:cf: 93:0e:81:47:f0:fa:35:95:8e:5f:0e:db:40:ee:4a: 4a:a8:5a:13:c9:38:22:20:aa:2d:c8:0f:22:32:f0: 2a:56:8a:89:8f:71:90:60:ed:66:da:0a:e5:f6:91: 42:46:79:f7:33:e8:b7:84:5b:7b:38:08:97:c0:cd: 58:0e:a3:92:a1:dd:d8:2e:dc:34:52:78:f9:bb:f7: a1:44:21:6d:e1:4d:49:ea:b5:bf:c5:97:94:7c:7b: 9b:f2:15:54:37:f7:72:c6:29:84:61:a8:6f:d6:e2: 8b:98:a7:0f:2a:cf:0e:3a:0f:0e:25:ab:83:99:b1: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:48:6A:C7:24:90:04:9F:6B:93:D4:29:63:94:D2:C4:DB:2D:E1:13 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hUhqxySQBJ9rk9QpY5TSxNst4RM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:12d1::-2a0e:b107:12d5:ffff:ffff:ffff:ffff:ffff 2a0e:b107:12d7::/48 2a0e:b107:12dc::/48 Signature Algorithm: sha256WithRSAEncryption 7f:45:e5:01:d0:8c:b7:e8:b2:4e:20:2f:a3:a9:8c:76:9e:32: 57:70:20:76:5f:1f:c2:71:56:ff:66:6d:ad:c3:93:96:0b:9b: b2:c7:e7:46:c8:33:00:bc:7b:62:e5:06:60:f5:3c:3f:aa:b6: db:d3:60:7a:fe:0e:24:91:4f:4b:35:cd:bc:46:d7:cf:bd:11: 88:8b:da:5a:f8:6a:84:f5:4a:6d:56:d8:8d:a1:09:d7:f8:d8: 6c:1e:9f:7e:be:f0:36:1c:97:7e:2d:c9:fc:e7:b4:a5:59:3d: 87:e8:64:ee:28:71:32:ab:1f:d2:f4:b9:c1:a9:1b:cd:83:1a: 2c:a8:d8:6b:f4:de:c3:34:8e:80:85:57:d1:5a:96:1e:bc:b0: a1:e9:6d:78:40:f3:3f:30:47:21:29:25:fb:7c:1b:1d:90:57: 28:4e:a8:28:1f:df:ee:1d:b1:b4:08:a3:fe:57:87:22:83:6a: 93:f8:33:2c:0a:b9:22:e7:64:8e:38:86:c7:4d:76:34:30:f9: 32:7e:2b:13:73:99:94:07:2f:e2:d9:73:45:c3:4f:e1:9e:de: b3:d8:42:27:a7:bd:fc:5a:95:86:f2:bd:c1:8c:c2:9a:21:20: 62:51:3d:e7:9a:ba:be:91:06:51:ff:0e:55:13:6d:c7:de:c7: 9f:56:ad:95 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9XT3/YQy1O6XBry5BfJuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTQ4NmFjNzI0OTAwNDlmNmI5M2Q0Mjk2Mzk0ZDJjNGRiMmRlMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1VHAbVLWJordVDsXgOOf4SUFoN+ ui6ZyiMmcHikCwoVwU8n2di0cI6t7qNRF86eJODIXnLQKKQit8WiRBYYCyPZq3hs DmIWvclMBe4FQ/WOkVRdjAbqGuWPgP1EgzJPhEvpi6P/UoGfOx57RkqiTZtyFBY9 wkOC5E2bkDPvS+iclMnj/8+TDoFH8Po1lY5fDttA7kpKqFoTyTgiIKotyA8iMvAq VoqJj3GQYO1m2grl9pFCRnn3M+i3hFt7OAiXwM1YDqOSod3YLtw0Unj5u/ehRCFt 4U1J6rW/xZeUfHub8hVUN/dyximEYahv1uKLmKcPKs8OOg8OJauDmbFgKwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFIVIasckkASfa5PUKWOU0sTbLeETMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaFVocXh5U1FCSjlyazlRcFk1VFN4TnN0NFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAqDrEH EtEDBwEqDrEHEtQDBwAqDrEHEtcDBwAqDrEHEtwwDQYJKoZIhvcNAQELBQADggEB AH9F5QHQjLfosk4gL6OpjHaeMldwIHZfH8JxVv9mba3Dk5YLm7LH50bIMwC8e2Ll BmD1PD+qttvTYHr+DiSRT0s1zbxG18+9EYiL2lr4aoT1Sm1W2I2hCdf42Gwen36+ 8DYcl34tyfzntKVZPYfoZO4ocTKrH9L0ucGpG82DGiyo2Gv03sM0joCFV9Falh68 sKHpbXhA8z8wRyEpJft8Gx2QVyhOqCgf3+4dsbQIo/5XhyKDapP4MywKuSLnZI44 hsdNdjQw+TJ+KxNzmZQHL+LZc0XDT+Ge3rPYQienvfxalYbyvcGMwpohIGJRPeea ur6RBlH/DlUTbcfex59WrZU= -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client