This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/hcqZCPDvPSfZpsnstBmJSYUoG0E.roa File: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (raw, json) Hash identifier: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw= Subject key identifier: 85:CA:99:08:F0:EF:3D:27:D9:A6:C9:EC:B4:19:89:49:85:28:1B:41 Certificate issuer: /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a Certificate serial: 019B7C134EE824F655D96FC17B5FCAF594F7 Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/hcqZCPDvPSfZpsnstBmJSYUoG0E.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5409 IP address blocks: 2001:678:584::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4e:e8:24:f6:55:d9:6f:c1:7b:5f:ca:f5:94:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85ca9908f0ef3d27d9a6c9ecb419894985281b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:35:c8:a7:e8:75:6b:91:85:ae:9a:40:b0: 90:ea:7c:cc:fc:76:61:29:61:57:ed:52:3a:ce:4d: a7:9f:13:39:fa:1f:0c:17:a5:a4:38:e3:9a:b4:e5: 5f:3a:44:8b:d5:87:c0:e4:71:b4:a0:a1:97:45:f6: f5:9b:ca:9b:29:8a:93:4e:19:9e:fd:af:1b:3c:13: 09:78:04:23:5c:2a:1e:b5:33:a2:47:c5:93:be:90: 09:60:5c:72:7c:f2:17:af:25:b6:b2:0c:fb:fe:36: 01:4e:93:9c:46:df:52:a2:9c:cd:04:a5:8e:df:5f: e8:73:53:0d:d2:8e:06:87:e1:82:6d:15:2b:0a:fc: a2:00:74:17:39:7f:ed:e2:87:f1:d9:48:36:7c:3a: 2b:bc:62:8e:e9:76:61:c1:8d:6d:70:22:72:4b:41: b9:7c:4d:cf:2a:4a:16:e3:c2:0b:2c:6f:92:11:5a: 33:52:fb:ea:d1:2b:1f:a9:6b:8a:af:09:14:f7:8b: e1:a4:fb:8a:ab:5d:cf:8f:39:a3:03:fb:50:c2:a5: b0:e1:bd:6b:87:d2:8d:85:27:4e:e9:60:e6:bd:f2: 76:22:04:ac:cd:1b:73:11:1d:88:50:c6:19:07:f4: 71:e8:ad:16:4b:3e:62:2a:90:39:27:7d:0b:37:b7: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:99:08:F0:EF:3D:27:D9:A6:C9:EC:B4:19:89:49:85:28:1B:41 X509v3 Authority Key Identifier: keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/hcqZCPDvPSfZpsnstBmJSYUoG0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:584::/48 Signature Algorithm: sha256WithRSAEncryption 37:5f:a8:67:56:d9:90:c6:c5:4a:e3:9d:13:55:e2:38:cf:18: 70:5e:8b:dd:8e:7e:85:94:e7:bb:ea:2e:fb:fc:93:46:23:10: 69:63:70:d4:74:ac:1d:e3:82:f6:d9:fe:18:2a:87:ee:35:78: a1:39:38:d5:ce:06:5f:97:4f:b3:21:76:6f:36:d8:a4:61:06: 96:8f:51:0c:a8:b0:31:eb:94:7c:fa:eb:dc:95:df:49:05:14: f9:ae:a9:a4:75:bc:0e:a4:83:eb:c1:62:38:b8:90:2f:fa:0c: f9:86:79:a2:bb:b7:9d:0b:35:27:e0:fe:68:df:8a:6e:57:5b: 2c:6f:40:dc:09:fd:d4:f3:31:8c:46:38:82:e2:fe:45:90:7d: 00:1f:d1:75:ad:0e:a4:06:e5:7d:a0:cc:62:11:cb:9b:0e:4a: 11:c7:ae:1c:e9:0d:5b:b2:4a:c5:15:33:84:ec:cc:d1:65:f8: 83:12:a7:cf:42:01:0b:5e:ac:4e:e2:7a:1f:52:a1:20:41:00: 7f:2a:a4:04:e0:86:f2:e1:68:23:95:fb:fd:fd:b4:c8:3d:83: a1:f1:59:61:27:7a:2b:2b:ff:74:01:f5:f3:ce:df:1e:53:0e: 28:ca:69:1c:20:65:3d:47:e9:8c:ad:73:fb:ab:7f:28:4a:6a: ab:ce:86:75 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8E07oJPZV2W/Be1/K9ZT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx NGE1NWEwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWNhOTkwOGYwZWYzZDI3ZDlhNmM5ZWNiNDE5ODk0OTg1MjgxYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKc1yKfodWuRha6aQLCQ6nzM/HZh KWFX7VI6zk2nnxM5+h8MF6WkOOOatOVfOkSL1YfA5HG0oKGXRfb1m8qbKYqTThme /a8bPBMJeAQjXCoetTOiR8WTvpAJYFxyfPIXryW2sgz7/jYBTpOcRt9SopzNBKWO 31/oc1MN0o4Gh+GCbRUrCvyiAHQXOX/t4ofx2Ug2fDorvGKO6XZhwY1tcCJyS0G5 fE3PKkoW48ILLG+SEVozUvvq0SsfqWuKrwkU94vhpPuKq13PjzmjA/tQwqWw4b1r h9KNhSdO6WDmvfJ2IgSszRtzER2IUMYZB/Rx6K0WSz5iKpA5J30LN7eMFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIXKmQjw7z0n2abJ7LQZiUmFKBtBMB8GA1UdIwQY MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt ZjIyM2RhY2I2MDE3LzEvaGNxWkNQRHZQU2ZacHNuc3RCbUpTWVVvRzBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3 LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAWE MA0GCSqGSIb3DQEBCwUAA4IBAQA3X6hnVtmQxsVK450TVeI4zxhwXovdjn6FlOe7 6i77/JNGIxBpY3DUdKwd44L22f4YKofuNXihOTjVzgZfl0+zIXZvNtikYQaWj1EM qLAx65R8+uvcld9JBRT5rqmkdbwOpIPrwWI4uJAv+gz5hnmiu7edCzUn4P5o34pu V1ssb0DcCf3U8zGMRjiC4v5FkH0AH9F1rQ6kBuV9oMxiEcubDkoRx64c6Q1bskrF FTOE7MzRZfiDEqfPQgELXqxO4nofUqEgQQB/KqQE4Iby4Wgjlfv9/bTIPYOh8Vlh J3orK/90AfXzzt8eUw4oymkcIGU9R+mMrXP7q38oSmqrzoZ1 -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:14 2026 by rpki-client