This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa File: HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa (raw, json) Hash identifier: TmKJc0/C+P9Rrj+HXzJL2J/O3BBKY350jNbCd9YcASM= Subject key identifier: 1D:02:84:40:6C:C9:F1:5F:CC:E0:03:19:14:10:86:C1:C0:00:AD:04 Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606 Certificate serial: 019B7EA587AA53EE3C508DD5CDAF5A60F7C4 Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa Signing time: Fri 02 Jan 2026 12:18:56 +0000 ROA not before: Fri 02 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214810 IP address blocks: 2001:67c:27bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:87:aa:53:ee:3c:50:8d:d5:cd:af:5a:60:f7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606 Validity Not Before: Jan 2 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d0284406cc9f15fcce00319141086c1c000ad04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:fa:d0:43:c1:16:70:55:30:27:cf:a0:0b: 2d:13:2c:7a:93:d5:92:11:5d:ee:23:83:b5:29:56: 3f:99:07:f2:27:d8:82:85:a0:d8:d9:f6:aa:f3:fb: fa:d5:6f:c3:c2:4a:38:97:ba:49:e0:e7:3e:3f:80: 10:66:a6:59:6e:9f:43:41:d5:e2:29:7a:fb:74:55: bd:fa:35:fd:fd:45:2c:86:70:00:f6:b3:a2:a5:0e: 38:b5:3c:e3:75:58:c4:ce:fa:ce:e0:54:ab:30:72: 01:82:04:c3:8d:c8:83:86:79:33:a6:96:2b:36:06: fd:51:5d:cf:32:42:4f:dc:94:87:20:26:32:98:e2: 4c:c7:c8:a0:d0:4e:f4:ad:c9:07:53:ed:5d:cf:96: ca:78:f2:bc:ea:81:97:c1:05:12:64:d2:63:49:1a: 92:66:27:66:2f:08:be:03:f6:14:d6:ac:b3:d2:03: 44:0b:ff:86:bd:17:d1:ce:40:5d:9f:52:cc:49:f1: 44:b6:eb:63:10:fd:3b:ec:2e:3a:52:b0:89:9d:36: ef:11:96:bf:73:bf:a4:48:20:96:e1:01:cc:9d:24: 54:e4:25:68:88:44:6a:bf:5d:8e:62:e8:25:c5:bd: 1f:8c:92:ee:e8:49:30:07:08:97:40:63:8d:72:49: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:02:84:40:6C:C9:F1:5F:CC:E0:03:19:14:10:86:C1:C0:00:AD:04 X509v3 Authority Key Identifier: keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:27bc::/48 Signature Algorithm: sha256WithRSAEncryption 1e:88:79:22:ff:1c:0b:95:a6:23:8f:a9:18:18:20:de:b4:b9: 74:68:07:ab:af:fb:35:15:a8:9a:b4:58:22:5d:7b:3b:ff:6f: 5d:b4:dd:da:9a:6c:16:23:aa:d1:19:6c:29:65:41:9e:d8:be: 77:85:9c:86:60:ae:47:74:02:44:35:a1:8e:8f:05:a7:e3:95: 43:df:e2:9e:ca:6a:7f:77:8d:92:d6:d5:18:8b:2a:42:81:2f: 44:84:a8:7b:0f:d5:3a:20:f5:75:98:fb:b2:d1:6a:97:de:d7: 4c:c6:1c:ec:25:77:12:18:b2:41:40:d6:9f:05:95:6f:b2:6b: 1c:c5:17:ba:72:df:b9:fb:a4:f2:fb:e2:47:8e:fa:02:3d:f1: a8:d7:46:a2:0e:60:af:e2:d3:06:f3:4a:08:56:c1:fc:dd:00: ed:d4:b7:4a:5b:b4:47:64:4a:87:98:2d:3d:58:23:74:ca:1b: 3b:81:de:89:2a:03:d9:2e:70:eb:48:e8:ee:47:6c:40:98:d5: cf:b7:54:9d:0c:a2:bd:fd:6a:86:eb:83:3c:bf:38:cf:c1:ef: 85:51:8c:29:d9:eb:86:2e:75:3d:c9:83:bf:5d:f0:76:80:38: 30:9c:c9:c5:98:f3:ac:66:d1:a9:d4:82:55:ec:b2:81:28:02: 4b:4f:57:ef -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pYeqU+48UI3Vza9aYPfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NjBjYjc0ZDAxOTgyNGMzNGIyMjNhZWQ0YzcwOWE4NTdi MmM2MDYwHhcNMjYwMTAyMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDAyODQ0MDZjYzlmMTVmY2NlMDAzMTkxNDEwODZjMWMwMDBhZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsD60EPBFnBVMCfPoAstEyx6k9WS EV3uI4O1KVY/mQfyJ9iChaDY2faq8/v61W/Dwko4l7pJ4Oc+P4AQZqZZbp9DQdXi KXr7dFW9+jX9/UUshnAA9rOipQ44tTzjdVjEzvrO4FSrMHIBggTDjciDhnkzppYr Ngb9UV3PMkJP3JSHICYymOJMx8ig0E70rckHU+1dz5bKePK86oGXwQUSZNJjSRqS ZidmLwi+A/YU1qyz0gNEC/+GvRfRzkBdn1LMSfFEtutjEP077C46UrCJnTbvEZa/ c7+kSCCW4QHMnSRU5CVoiERqv12OYuglxb0fjJLu6EkwBwiXQGONcknAfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB0ChEBsyfFfzOADGRQQhsHAAK0EMB8GA1UdIwQY MBaAFCRgy3TQGYJMNLIjrtTHCahXssYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkdETGROQVpna3cwc2lPdTFNY0pxRmV5eGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iMjkyMDUtMDc3Ny00ZWIwLThjMTMt M2JjNWRkZTU0MmMzLzEvSFFLRVFHeko4Vl9NNEFNWkZCQ0d3Y0FBclFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9iMjkyMDUtMDc3Ny00ZWIwLThjMTMtM2JjNWRkZTU0MmMz LzEvSkdETGROQVpna3cwc2lPdTFNY0pxRmV5eGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCe8 MA0GCSqGSIb3DQEBCwUAA4IBAQAeiHki/xwLlaYjj6kYGCDetLl0aAerr/s1Faia tFgiXXs7/29dtN3ammwWI6rRGWwpZUGe2L53hZyGYK5HdAJENaGOjwWn45VD3+Ke ymp/d42S1tUYiypCgS9EhKh7D9U6IPV1mPuy0WqX3tdMxhzsJXcSGLJBQNafBZVv smscxRe6ct+5+6Ty++JHjvoCPfGo10aiDmCv4tMG80oIVsH83QDt1LdKW7RHZEqH mC09WCN0yhs7gd6JKgPZLnDrSOjuR2xAmNXPt1SdDKK9/WqG64M8vzjPwe+FUYwp 2euGLnU9yYO/XfB2gDgwnMnFmPOsZtGp1IJV7LKBKAJLT1fv -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:23 2026 by rpki-client