This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HHy_ms5suGBD9YzUQvIifX47Y8A.roa File: HHy_ms5suGBD9YzUQvIifX47Y8A.roa (raw, json) Hash identifier: wBY2ES7mtCPIixP9qPggCBIvzAxt9l4VccDxsNJnCqk= Subject key identifier: 1C:7C:BF:9A:CE:6C:B8:60:43:F5:8C:D4:42:F2:22:7D:7E:3B:63:C0 Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b Certificate serial: 019C2B3C390A44219EF7F7B3C335F84545D3 Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HHy_ms5suGBD9YzUQvIifX47Y8A.roa Signing time: Thu 05 Feb 2026 00:38:12 +0000 ROA not before: Thu 05 Feb 2026 00:38:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210699 IP address blocks: 2a06:9801:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2b:3c:39:0a:44:21:9e:f7:f7:b3:c3:35:f8:45:45:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b Validity Not Before: Feb 5 00:38:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c7cbf9ace6cb86043f58cd442f2227d7e3b63c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:03:f4:d0:55:40:ff:b0:5b:e4:46:fb:9e: c0:f5:f3:07:da:92:00:3c:81:15:01:64:04:5c:53: c1:07:0e:d8:ab:1b:53:4d:84:11:8c:f3:ba:54:14: fa:d1:0a:62:f5:a6:31:92:f1:1d:9a:6f:e0:28:9c: 06:2e:6e:ea:de:da:0e:27:bc:cb:87:5a:d2:31:d1: d6:8f:b2:a8:03:e1:91:59:43:91:30:2d:7c:53:4c: 8e:1b:27:ef:6e:45:a4:16:c7:f5:7b:de:f2:70:ef: 7e:29:92:9d:8f:84:1f:cd:87:23:b7:1a:2d:c6:1e: d0:b8:12:20:4f:d4:54:b1:d1:2e:56:20:da:09:76: 05:bf:dc:86:e7:66:81:e9:23:20:d8:14:bb:96:a7: f7:73:a7:f5:ae:64:b6:11:53:59:08:78:dc:6d:a8: 18:9f:4b:42:a9:43:45:eb:2b:51:ff:b3:35:5e:cf: d6:b2:1f:90:c3:16:ad:27:03:8e:fb:30:d0:c8:d1: e3:3e:2a:d6:b1:4e:2c:42:28:6c:34:88:d4:cd:25: 5d:4a:0e:4d:d1:06:22:5f:3c:07:ac:48:f5:4a:28: 11:b5:df:8e:03:3f:56:b2:c6:93:53:bb:5a:8a:5f: 6f:62:a3:cd:c8:64:a7:80:6d:82:1d:42:e3:5a:3b: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7C:BF:9A:CE:6C:B8:60:43:F5:8C:D4:42:F2:22:7D:7E:3B:63:C0 X509v3 Authority Key Identifier: keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HHy_ms5suGBD9YzUQvIifX47Y8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9801:40::/44 Signature Algorithm: sha256WithRSAEncryption c5:8b:87:bc:77:64:21:fd:1c:0f:ec:cc:93:60:6a:93:09:5e: df:5f:75:4f:1a:1e:f6:b4:7a:9d:f8:8d:04:74:10:23:01:35: 1c:bd:52:50:eb:54:00:e0:e3:1e:9a:f1:77:de:63:bc:71:90: 5b:11:76:e9:de:b2:5d:b7:ad:68:a0:b2:42:ba:c9:a5:14:2c: 8a:78:64:ac:d9:b4:46:30:f3:15:bb:5f:f6:91:9d:89:05:50: c6:4a:4a:73:f1:15:83:e6:47:12:f7:3e:30:ce:4e:ed:7c:46: 9f:25:d8:22:e0:ce:37:82:b3:bb:19:9a:8c:13:f0:3b:fd:c0: 7a:90:41:f2:1c:02:9f:b5:37:70:74:2c:ff:2e:a1:a8:1e:80: 63:59:a3:36:08:93:30:41:49:f1:22:d5:1e:c8:11:dc:a6:08: 49:33:79:0e:35:1a:43:61:d8:07:6a:a3:15:89:15:15:76:ae: f3:da:1b:c2:e0:a9:d4:7b:03:dd:81:2a:6f:b3:74:15:cf:f0: 6f:37:fe:05:9f:bf:e8:2e:4c:0a:92:3f:ff:6e:a3:ca:76:11: cc:11:82:e3:5c:10:91:79:b5:9e:3e:82:e8:9c:c1:72:b8:44: 38:b3:fb:a0:26:5d:0b:13:27:be:b6:4f:40:b8:2c:f3:71:bc: df:40:b0:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwrPDkKRCGe9/ezwzX4RUXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3 Y2EzNmIwHhcNMjYwMjA1MDAzODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzdjYmY5YWNlNmNiODYwNDNmNThjZDQ0MmYyMjI3ZDdlM2I2M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ecD9NBVQP+wW+RG+57A9fMH2pIA PIEVAWQEXFPBBw7YqxtTTYQRjPO6VBT60Qpi9aYxkvEdmm/gKJwGLm7q3toOJ7zL h1rSMdHWj7KoA+GRWUORMC18U0yOGyfvbkWkFsf1e97ycO9+KZKdj4QfzYcjtxot xh7QuBIgT9RUsdEuViDaCXYFv9yG52aB6SMg2BS7lqf3c6f1rmS2EVNZCHjcbagY n0tCqUNF6ytR/7M1Xs/Wsh+QwxatJwOO+zDQyNHjPirWsU4sQihsNIjUzSVdSg5N 0QYiXzwHrEj1SigRtd+OAz9WssaTU7tail9vYqPNyGSngG2CHULjWjueHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBx8v5rObLhgQ/WM1ELyIn1+O2PAMB8GA1UdIwQY MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt ZWQ4Y2ZhZjFiODFmLzEvSEh5X21zNXN1R0JEOVl6VVF2SWlmWDQ3WThBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaYAQBA MA0GCSqGSIb3DQEBCwUAA4IBAQDFi4e8d2Qh/RwP7MyTYGqTCV7fX3VPGh72tHqd +I0EdBAjATUcvVJQ61QA4OMemvF33mO8cZBbEXbp3rJdt61ooLJCusmlFCyKeGSs 2bRGMPMVu1/2kZ2JBVDGSkpz8RWD5kcS9z4wzk7tfEafJdgi4M43grO7GZqME/A7 /cB6kEHyHAKftTdwdCz/LqGoHoBjWaM2CJMwQUnxItUeyBHcpghJM3kONRpDYdgH aqMViRUVdq7z2hvC4KnUewPdgSpvs3QVz/BvN/4Fn7/oLkwKkj//bqPKdhHMEYLj XBCRebWePoLonMFyuEQ4s/ugJl0LEye+tk9AuCzzcbzfQLDK -----END CERTIFICATE-----Generated at Sun Feb 8 04:50:34 2026 by rpki-client