This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/h6CMS5oBPwqxsthnPIFhjc0V9K8.roa File: h6CMS5oBPwqxsthnPIFhjc0V9K8.roa (raw, json) Hash identifier: SyY/BmEPaPkpZh5+caF1REe1XeX5Sv+dw9c9C5Elg48= Subject key identifier: 87:A0:8C:4B:9A:01:3F:0A:B1:B2:D8:67:3C:81:61:8D:CD:15:F4:AF Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e Certificate serial: 019B78353AFDEF7E4685A54BE17C3FC341BB Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/h6CMS5oBPwqxsthnPIFhjc0V9K8.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 185.224.44.0/23 maxlen: 23 2a14:6940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3a:fd:ef:7e:46:85:a5:4b:e1:7c:3f:c3:41:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87a08c4b9a013f0ab1b2d8673c81618dcd15f4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:25:45:fc:00:dd:d6:3a:f0:81:39:59:df: 43:67:e1:24:a9:ab:b7:15:d0:19:ef:51:40:4b:b4: 6f:ed:13:b0:0c:3c:5f:eb:30:bf:24:e1:fe:b8:51: c0:d8:2a:bc:bd:8d:1c:eb:5a:7b:13:c3:d2:d7:29: 21:b6:db:05:50:b7:ad:9d:e9:c7:1a:0f:38:bf:66: 19:39:ee:5d:da:d4:d1:64:8d:ad:3c:00:65:66:e6: 9a:5d:3c:39:97:26:3d:57:39:9b:e1:66:2c:0c:d9: 3a:64:7c:c9:70:3e:28:a1:8b:14:4d:7c:11:88:f3: 43:15:73:aa:e2:31:06:81:39:c6:e8:9c:44:bc:6b: b2:ab:2c:4c:ac:9e:48:44:d4:e0:b9:a5:0d:79:39: 98:9a:c3:ee:ea:59:d4:a1:db:51:cd:c9:fa:1b:6a: a9:6a:01:51:c1:34:61:62:34:07:21:3e:63:8d:8d: 26:fb:2f:23:85:a5:9d:0c:36:dc:59:a3:e5:33:7c: 3f:43:70:25:93:d0:c2:d1:d6:dd:69:3c:21:2c:bc: 3a:d5:5b:6c:5d:64:e4:94:eb:e4:45:33:2e:b5:91: bd:79:79:f3:8b:d0:9c:3a:43:4a:38:c3:7b:69:d7: 58:4d:c0:ef:bd:02:1c:f9:5d:18:60:1b:0b:c2:74: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A0:8C:4B:9A:01:3F:0A:B1:B2:D8:67:3C:81:61:8D:CD:15:F4:AF X509v3 Authority Key Identifier: keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/h6CMS5oBPwqxsthnPIFhjc0V9K8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.44.0/23 IPv6: 2a14:6940::/32 Signature Algorithm: sha256WithRSAEncryption 0a:60:b6:12:62:45:0f:47:b0:1e:09:c3:15:89:17:8d:cc:66: 87:01:e2:fd:e6:61:7c:08:57:a2:03:2b:a5:70:da:a1:ed:11: 62:bf:2a:52:f0:94:ce:5e:3e:67:32:9c:96:63:a5:63:4c:0a: 70:c5:f4:3c:a4:9e:85:5b:21:ec:71:37:8d:08:02:bf:d3:d3: e2:59:f1:7c:5b:80:80:de:4d:ff:51:77:34:bd:49:ab:62:4e: 53:88:fb:aa:e9:ac:38:80:29:49:dc:d2:cd:50:0e:14:80:8e: 21:97:c1:ab:a7:d8:13:90:fc:22:f4:88:a5:02:ac:8b:b8:78: 81:5c:64:a5:ba:40:c0:fc:c0:d5:53:18:29:85:61:98:92:e8: cb:df:f8:17:0c:06:bf:d2:ea:8d:f1:6b:85:43:82:74:4e:22: 6d:ab:9d:ef:0b:24:a0:1d:0e:1e:d7:71:bf:8b:f8:73:4a:3f: b6:3d:5d:28:cd:49:fa:b4:3d:a7:1e:91:e0:11:df:30:72:b6: 3a:4c:0a:dd:c5:ad:07:b8:c3:51:c2:51:86:f7:cb:db:15:2c: 3c:73:07:d9:52:22:9c:68:7e:9b:d6:02:5a:5a:1c:69:9c:e8: 8a:79:3d:34:c8:99:1d:72:7c:a7:20:2b:3d:24:ae:65:2b:59: 97:b5:0a:c6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NTr9735GhaVL4Xw/w0G7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTUwMDA3NzJiM2MzZmEyYmJkNzcyN2QzZDM4OTM5MWEx NDYzM2UwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2EwOGM0YjlhMDEzZjBhYjFiMmQ4NjczYzgxNjE4ZGNkMTVmNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv4lRfwA3dY68IE5Wd9DZ+Ekqau3 FdAZ71FAS7Rv7ROwDDxf6zC/JOH+uFHA2Cq8vY0c61p7E8PS1ykhttsFULetnenH Gg84v2YZOe5d2tTRZI2tPABlZuaaXTw5lyY9Vzmb4WYsDNk6ZHzJcD4ooYsUTXwR iPNDFXOq4jEGgTnG6JxEvGuyqyxMrJ5IRNTguaUNeTmYmsPu6lnUodtRzcn6G2qp agFRwTRhYjQHIT5jjY0m+y8jhaWdDDbcWaPlM3w/Q3Alk9DC0dbdaTwhLLw61Vts XWTklOvkRTMutZG9eXnzi9CcOkNKOMN7addYTcDvvQIc+V0YYBsLwnRqlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIegjEuaAT8KsbLYZzyBYY3NFfSvMB8GA1UdIwQY MBaAFB0VAAdys8P6K713J9PTiTkaFGM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgt YjIxMjlmYjRjYTVhLzEvaDZDTVM1b0JQd3F4c3RoblBJRmhqYzBWOUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgtYjIxMjlmYjRjYTVh LzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBueAsMA0E AgACMAcDBQAqFGlAMA0GCSqGSIb3DQEBCwUAA4IBAQAKYLYSYkUPR7AeCcMViReN zGaHAeL95mF8CFeiAyulcNqh7RFivypS8JTOXj5nMpyWY6VjTApwxfQ8pJ6FWyHs cTeNCAK/09PiWfF8W4CA3k3/UXc0vUmrYk5TiPuq6aw4gClJ3NLNUA4UgI4hl8Gr p9gTkPwi9IilAqyLuHiBXGSlukDA/MDVUxgphWGYkujL3/gXDAa/0uqN8WuFQ4J0 TiJtq53vCySgHQ4e13G/i/hzSj+2PV0ozUn6tD2nHpHgEd8wcrY6TArdxa0HuMNR wlGG98vbFSw8cwfZUiKcaH6b1gJaWhxpnOiKeT00yJkdcnynICs9JK5lK1mXtQrG -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:23 2026 by rpki-client