This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/HhvM_cWf-mzkNsm94rztI-C7y08.roa File: HhvM_cWf-mzkNsm94rztI-C7y08.roa (raw, json) Hash identifier: lA8aPQTjiiTzdx9s+9KPIs/+tQNNHz5HRWOh4YEqirI= Subject key identifier: 1E:1B:CC:FD:C5:9F:FA:6C:E4:36:C9:BD:E2:BC:ED:23:E0:BB:CB:4F Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A0CF4DD155794E2CED4990B75D3F Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/HhvM_cWf-mzkNsm94rztI-C7y08.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206444 IP address blocks: 2a12:bec1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a0:cf:4d:d1:55:79:4e:2c:ed:49:90:b7:5d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e1bccfdc59ffa6ce436c9bde2bced23e0bbcb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:5d:aa:6a:f4:90:02:f7:5e:37:73:10:44: 55:42:53:31:72:56:f6:b3:2d:3c:8a:50:c4:9a:72: d1:6c:2c:b8:7b:31:e1:21:65:92:e2:d3:fd:bf:f6: b1:2e:06:e9:9c:8b:63:f9:11:51:bc:6a:08:13:46: 2d:d7:b5:71:aa:2e:89:8d:10:05:14:d6:84:48:fe: 28:7d:7e:cf:c7:e3:ea:98:29:1e:4e:36:bc:fc:58: bc:25:5f:d5:59:44:04:7d:81:a4:09:2f:75:d0:d3: 96:82:2d:c8:6c:6f:87:2a:6a:20:0a:8a:76:f9:9f: 00:c4:69:8c:a1:41:7a:e0:f3:28:71:13:14:d3:a7: 71:c8:de:92:4a:b0:a1:27:04:66:7b:4c:08:ac:79: 5c:e3:2a:5b:20:41:35:33:88:e8:9b:8f:fa:cc:14: 94:cc:44:a0:58:7b:85:40:ff:61:79:b8:95:70:07: e6:76:64:1e:26:2c:c0:91:c8:f5:8b:a5:bf:b3:8a: 72:63:99:75:9f:38:dc:ea:c5:79:ad:89:d2:74:e9: b2:c5:f3:49:a0:67:48:9b:91:4c:e7:b2:7b:3f:33: d5:31:ad:f0:ff:6c:4b:b9:a1:2e:83:7d:e7:d0:fa: 35:5e:dc:0b:eb:81:57:f9:d9:14:6e:87:78:c3:ae: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1B:CC:FD:C5:9F:FA:6C:E4:36:C9:BD:E2:BC:ED:23:E0:BB:CB:4F X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/HhvM_cWf-mzkNsm94rztI-C7y08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec1::/32 Signature Algorithm: sha256WithRSAEncryption 81:f4:8c:b7:c7:f7:f6:d7:a3:f3:1b:52:e8:b3:cf:5d:1b:2a: c7:88:bc:73:a5:34:8f:ac:49:76:4d:bd:d6:80:60:5a:f5:40: c9:eb:56:b9:5e:a1:91:4c:34:c1:3e:b4:fa:f0:46:dc:44:11: c3:d2:ce:a3:9d:66:57:2f:d1:70:a5:e3:6d:c2:7a:e2:bb:35: d7:1c:0e:dd:20:8c:8a:d2:9e:de:1c:59:7c:48:6f:34:1a:64: 5e:a7:9c:77:83:44:02:e0:7c:74:7d:29:4e:2d:3e:0b:ac:fd: 67:e1:f3:8e:78:5c:37:4b:2c:3f:9e:dd:e3:8b:d6:af:09:88: ba:96:8d:01:f7:57:0c:85:0b:69:e1:4c:76:d8:1e:f7:b7:76: 90:d1:fb:ed:37:50:cb:b4:76:4a:1b:80:ba:6d:be:30:dc:d2: 15:f2:f1:a8:03:ba:da:5e:5c:45:8b:80:d9:12:95:d1:96:31: df:a9:d0:cc:8d:f6:90:84:bb:98:af:01:58:18:50:64:c5:9f: aa:09:80:b5:41:a2:2e:30:4f:62:54:de:63:9b:d4:d3:3c:ab: c7:0a:58:43:37:06:d8:77:ae:06:15:06:11:e7:40:a1:b7:5f: 1c:68:63:a6:36:48:ac:e3:e2:2c:92:65:3a:34:7b:42:e5:7c: 6a:37:d1:23 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EKDPTdFVeU4s7UmQt10/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTFiY2NmZGM1OWZmYTZjZTQzNmM5YmRlMmJjZWQyM2UwYmJjYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kBdqmr0kAL3XjdzEERVQlMxclb2 sy08ilDEmnLRbCy4ezHhIWWS4tP9v/axLgbpnItj+RFRvGoIE0Yt17Vxqi6JjRAF FNaESP4ofX7Px+PqmCkeTja8/Fi8JV/VWUQEfYGkCS910NOWgi3IbG+HKmogCop2 +Z8AxGmMoUF64PMocRMU06dxyN6SSrChJwRme0wIrHlc4ypbIEE1M4jom4/6zBSU zESgWHuFQP9hebiVcAfmdmQeJizAkcj1i6W/s4pyY5l1nzjc6sV5rYnSdOmyxfNJ oGdIm5FM57J7PzPVMa3w/2xLuaEug33n0Po1XtwL64FX+dkUbod4w650qQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFB4bzP3Fn/ps5DbJveK87SPgu8tPMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvSGh2TV9jV2YtbXprTnNtOTRyenRJLUM3eTA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhK+wTAN BgkqhkiG9w0BAQsFAAOCAQEAgfSMt8f39tej8xtS6LPPXRsqx4i8c6U0j6xJdk29 1oBgWvVAyetWuV6hkUw0wT60+vBG3EQRw9LOo51mVy/RcKXjbcJ64rs11xwO3SCM itKe3hxZfEhvNBpkXqecd4NEAuB8dH0pTi0+C6z9Z+HzjnhcN0ssP57d44vWrwmI upaNAfdXDIULaeFMdtge97d2kNH77TdQy7R2ShuAum2+MNzSFfLxqAO62l5cRYuA 2RKV0ZYx36nQzI32kIS7mK8BWBhQZMWfqgmAtUGiLjBPYlTeY5vU0zyrxwpYQzcG 2HeuBhUGEedAobdfHGhjpjZIrOPiLJJlOjR7QuV8ajfRIw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:13 2026 by rpki-client