This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HUMU_jFVXQ-UKWM7mfpYS9_OcdU.roa File: HUMU_jFVXQ-UKWM7mfpYS9_OcdU.roa (raw, json) Hash identifier: CFp5NcIbLiaHOQYyVxr53Hj4Z0fp1o1sMrn3Va07f9E= Subject key identifier: 1D:43:14:FE:31:55:5D:0F:94:29:63:3B:99:FA:58:4B:DF:CE:71:D5 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB441AF5B918E1954BD506B26BED1 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HUMU_jFVXQ-UKWM7mfpYS9_OcdU.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210384 IP address blocks: 2a0e:aa07:e02b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b4:41:af:5b:91:8e:19:54:bd:50:6b:26:be:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d4314fe31555d0f9429633b99fa584bdfce71d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:85:33:58:85:51:cc:dd:00:ad:af:9c:0e: cc:34:04:3d:04:54:38:f5:6a:5d:55:84:b2:12:76: 32:16:e7:f0:04:74:f5:98:9f:10:99:4b:55:06:2c: be:ed:1a:57:7a:fd:6d:21:b2:99:cc:cb:fc:1a:44: e6:78:6f:56:90:17:01:b9:96:41:d7:df:8e:7b:f0: 28:ab:c2:fe:c2:43:a8:a9:fa:d9:20:a6:ef:0e:a6: 33:78:5a:23:21:16:23:b1:24:b9:99:35:f5:08:9e: c1:01:6d:47:a6:6b:50:d6:3f:37:67:03:cc:8c:39: 25:f0:bd:7a:c4:1f:a9:d7:20:f1:87:80:3a:1d:2f: 0d:de:69:ba:1b:89:35:b8:53:a7:65:50:23:2f:7c: 5e:c6:b3:31:7e:18:c7:b3:d6:a8:f5:ef:27:9b:bb: a0:51:bf:76:0e:c8:f2:0c:82:e1:24:d8:d2:a1:c5: d9:39:97:1f:bc:51:32:d7:af:79:27:99:eb:77:60: e4:ae:f6:47:0c:e8:4d:9a:02:f4:53:5a:39:94:9a: ee:86:bd:62:00:ad:13:12:e1:0e:2e:db:15:64:b8: 75:b7:c6:3c:c0:06:14:e7:7a:5d:a9:76:e8:73:16: eb:1c:00:a0:f4:70:03:0b:d9:e2:94:9b:53:b9:64: 05:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:43:14:FE:31:55:5D:0F:94:29:63:3B:99:FA:58:4B:DF:CE:71:D5 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HUMU_jFVXQ-UKWM7mfpYS9_OcdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e02b::/48 Signature Algorithm: sha256WithRSAEncryption a9:ae:e0:02:32:07:18:70:ac:75:9e:56:57:ee:9e:de:f9:30: 54:b3:82:8d:c1:95:d6:46:bc:de:b5:1c:0b:a5:2f:04:20:69: cb:96:ea:5a:9f:22:48:ab:f8:4b:dc:23:99:3b:aa:d8:ae:7c: f1:70:40:f9:58:67:2b:90:e2:e0:e5:2b:7e:86:fd:9d:23:37: 3d:de:41:2a:d5:da:37:30:7e:90:07:d2:be:68:72:64:c7:d1: 4c:e4:43:cc:52:14:a5:83:a8:6b:05:d1:3a:c3:89:df:dc:f6: 31:a4:41:a1:e5:c3:ba:d0:cd:82:20:8f:61:90:ca:61:d1:5f: 3b:bc:10:87:3d:1a:1d:02:f7:bd:f4:e2:dd:70:8b:bf:3f:41: 6c:ca:80:5c:bd:4a:f4:3d:84:29:1f:01:c6:e6:b0:a6:e1:04: 2e:cd:d0:39:2b:ae:14:a9:99:05:7f:ec:20:d2:ff:d9:8d:23: 43:42:91:cc:f8:2d:5c:48:3d:f3:9e:82:79:7d:22:ba:35:77: 03:6b:91:1e:5d:bf:39:34:20:7b:59:44:57:1d:87:8d:e8:ae: bb:ed:2b:83:b1:d3:9b:a8:ba:68:84:75:00:74:c6:d6:af:4f: f9:d4:21:9f:32:16:4f:76:d0:4d:e5:47:c0:3e:9e:a2:dd:22: ce:c3:33:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frRBr1uRjhlUvVBrJr7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDQzMTRmZTMxNTU1ZDBmOTQyOTYzM2I5OWZhNTg0YmRmY2U3MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz2FM1iFUczdAK2vnA7MNAQ9BFQ4 9WpdVYSyEnYyFufwBHT1mJ8QmUtVBiy+7RpXev1tIbKZzMv8GkTmeG9WkBcBuZZB 19+Oe/Aoq8L+wkOoqfrZIKbvDqYzeFojIRYjsSS5mTX1CJ7BAW1HpmtQ1j83ZwPM jDkl8L16xB+p1yDxh4A6HS8N3mm6G4k1uFOnZVAjL3xexrMxfhjHs9ao9e8nm7ug Ub92DsjyDILhJNjSocXZOZcfvFEy1695J5nrd2DkrvZHDOhNmgL0U1o5lJruhr1i AK0TEuEOLtsVZLh1t8Y8wAYU53pdqXbocxbrHACg9HADC9nilJtTuWQFmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB1DFP4xVV0PlCljO5n6WEvfznHVMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSFVNVV9qRlZYUS1VS1dNN21mcFlTOV9PY2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ar MA0GCSqGSIb3DQEBCwUAA4IBAQCpruACMgcYcKx1nlZX7p7e+TBUs4KNwZXWRrze tRwLpS8EIGnLlupanyJIq/hL3COZO6rYrnzxcED5WGcrkOLg5St+hv2dIzc93kEq 1do3MH6QB9K+aHJkx9FM5EPMUhSlg6hrBdE6w4nf3PYxpEGh5cO60M2CII9hkMph 0V87vBCHPRodAve99OLdcIu/P0FsyoBcvUr0PYQpHwHG5rCm4QQuzdA5K64UqZkF f+wg0v/ZjSNDQpHM+C1cSD3znoJ5fSK6NXcDa5EeXb85NCB7WURXHYeN6K677SuD sdObqLpohHUAdMbWr0/51CGfMhZPdtBN5UfAPp6i3SLOwzMT -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:58 2026 by rpki-client