This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/HlFzm-zahAFjRHtl1bHeIsDoPDc.roa File: HlFzm-zahAFjRHtl1bHeIsDoPDc.roa (raw, json) Hash identifier: osKIkxfPFsY8+sDd/0d/lLUvdIHTe/QQACWaNNkv5qM= Subject key identifier: 1E:51:73:9B:EC:DA:84:01:63:44:7B:65:D5:B1:DE:22:C0:E8:3C:37 Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05 Certificate serial: 019B7BA52C9206049365E492532F65B89C79 Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/HlFzm-zahAFjRHtl1bHeIsDoPDc.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2001:67c:e0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2c:92:06:04:93:65:e4:92:53:2f:65:b8:9c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e51739becda840163447b65d5b1de22c0e83c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:62:36:83:c5:1b:f2:92:c4:2b:6e:70:9b: 39:76:a3:59:41:29:5c:e2:a9:0e:36:40:3d:49:a6: 28:af:73:42:d4:c6:15:3f:d9:c6:c2:f9:fd:b7:a6: ea:71:11:d2:55:10:42:44:4d:a7:fd:7a:f3:f0:c8: b9:75:c2:96:36:15:51:59:12:61:ea:34:66:e8:00: 28:7f:78:01:4d:5e:da:48:41:82:03:79:d0:23:38: cd:8d:8d:85:55:bb:fd:8f:06:eb:0b:d7:ae:e1:71: 43:52:58:e3:57:9f:41:fd:b2:31:da:4c:f0:b7:ac: 7c:a4:91:17:64:df:61:e6:a0:30:de:c6:bc:fa:6d: 46:b0:5c:48:79:40:e6:5b:40:cd:ed:2d:4c:8c:c1: a2:2a:19:9d:bb:f7:d7:83:ed:4a:52:cc:5a:12:4f: 4e:47:6f:e1:28:26:20:3b:02:72:2b:54:f7:83:65: 47:73:81:49:24:9c:86:32:23:ab:a8:1d:ce:c4:7c: c5:46:e6:65:92:8a:06:fc:22:95:3c:cd:ed:55:55: 76:0b:2d:e8:b1:f4:fd:5d:d2:8d:cf:ee:89:05:df: e5:55:55:bb:b0:6b:07:c8:f9:53:f7:51:96:df:ce: 63:d6:89:67:1c:38:23:83:e6:3a:7b:b2:9a:9a:66: 3a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:73:9B:EC:DA:84:01:63:44:7B:65:D5:B1:DE:22:C0:E8:3C:37 X509v3 Authority Key Identifier: keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/HlFzm-zahAFjRHtl1bHeIsDoPDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e0c::/48 Signature Algorithm: sha256WithRSAEncryption 91:78:47:e4:9a:e7:b2:28:47:ea:ee:db:e6:95:04:3c:34:f5: ac:91:b8:99:04:24:33:81:b4:4c:62:d0:60:14:dd:08:68:87: 4a:4a:81:f7:88:ad:44:1e:04:8c:0f:da:5c:f3:15:fd:7e:37: 01:45:c0:d4:c6:24:72:89:35:33:1f:77:4c:94:59:1d:02:2b: 56:87:0f:f7:d6:79:b6:18:40:f8:ae:04:2a:f3:c9:1e:4e:11: 6d:c7:f6:d5:23:cf:34:2f:d1:26:f0:be:5a:69:43:0e:24:30: 44:be:6e:d8:a0:a3:50:73:9c:1a:a7:01:71:70:ec:7c:d1:d8: 6c:8c:f2:d2:14:23:8e:fd:54:b7:52:89:35:b1:e8:27:f0:df: bc:d0:6c:ec:11:fd:9e:63:6a:74:68:39:46:d4:e9:e4:4e:c2: 6e:85:68:51:66:ec:d6:7c:fb:b1:d5:15:83:2c:27:ab:76:fe: 31:58:25:65:26:2e:2b:d1:b1:6c:c6:bf:d2:cb:a4:4c:94:8c: bf:d1:9d:f3:f8:d0:62:a8:7a:18:98:23:7e:b5:4d:af:19:19: 20:58:52:30:ef:a9:47:db:b0:80:f7:e6:a8:f6:e3:8d:e6:78: 6f:33:fb:dc:6b:0c:d3:69:7f:e7:d0:17:20:c4:81:41:ae:9c: 28:33:f0:65 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pSySBgSTZeSSUy9luJx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTk3ODIzMjVkMzA1NGNiNjk1NmFkMjI3MDQ1MzBkZTky YTBmMDUwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUxNzM5YmVjZGE4NDAxNjM0NDdiNjVkNWIxZGUyMmMwZTgzYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomxiNoPFG/KSxCtucJs5dqNZQSlc 4qkONkA9SaYor3NC1MYVP9nGwvn9t6bqcRHSVRBCRE2n/Xrz8Mi5dcKWNhVRWRJh 6jRm6AAof3gBTV7aSEGCA3nQIzjNjY2FVbv9jwbrC9eu4XFDUljjV59B/bIx2kzw t6x8pJEXZN9h5qAw3sa8+m1GsFxIeUDmW0DN7S1MjMGiKhmdu/fXg+1KUsxaEk9O R2/hKCYgOwJyK1T3g2VHc4FJJJyGMiOrqB3OxHzFRuZlkooG/CKVPM3tVVV2Cy3o sfT9XdKNz+6JBd/lVVW7sGsHyPlT91GW385j1olnHDgjg+Y6e7KammY6vwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB5Rc5vs2oQBY0R7ZdWx3iLA6Dw3MB8GA1UdIwQY MBaAFHzpeCMl0wVMtpVq0icEUw3pKg8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEt OTg4ZTc3MGIwMTViLzEvSGxGem0temFoQUZqUkh0bDFiSGVJc0RvUERjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEtOTg4ZTc3MGIwMTVi LzEvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA4M MA0GCSqGSIb3DQEBCwUAA4IBAQCReEfkmueyKEfq7tvmlQQ8NPWskbiZBCQzgbRM YtBgFN0IaIdKSoH3iK1EHgSMD9pc8xX9fjcBRcDUxiRyiTUzH3dMlFkdAitWhw/3 1nm2GED4rgQq88keThFtx/bVI880L9Em8L5aaUMOJDBEvm7YoKNQc5wapwFxcOx8 0dhsjPLSFCOO/VS3Uok1segn8N+80GzsEf2eY2p0aDlG1OnkTsJuhWhRZuzWfPux 1RWDLCerdv4xWCVlJi4r0bFsxr/Sy6RMlIy/0Z3z+NBiqHoYmCN+tU2vGRkgWFIw 76lH27CA9+ao9uON5nhvM/vcawzTaX/n0BcgxIFBrpwoM/Bl -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:42 2026 by rpki-client