This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/_HIuZzar-n1-NtnPT4ILWhx5JcQ.roa File: _HIuZzar-n1-NtnPT4ILWhx5JcQ.roa (raw, json) Hash identifier: YlonPhrB8pJKsMOBqBGjR8HF+guVCdo8Qc+kWpMQAYM= Subject key identifier: FC:72:2E:67:36:AB:FA:7D:7E:36:D9:CF:4F:82:0B:5A:1C:79:25:C4 Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8 Certificate serial: 019B76EAB39D1036F8918E1B69D00C57E02E Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/_HIuZzar-n1-NtnPT4ILWhx5JcQ.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15542 IP address blocks: 2001:67c:2e64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b3:9d:10:36:f8:91:8e:1b:69:d0:0c:57:e0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc722e6736abfa7d7e36d9cf4f820b5a1c7925c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:34:24:2b:e9:fe:75:e2:17:eb:bf:df:49: 6d:70:93:ff:54:60:b8:0f:78:5f:b4:86:2f:6a:7d: 93:c2:bf:a2:aa:9d:71:52:03:54:3a:9f:f0:36:0a: 41:60:a9:11:e9:a8:dc:71:3f:13:84:1f:7a:82:4b: 4d:5f:a6:2a:45:5d:e4:b2:20:fa:95:82:7f:07:30: 9d:ee:e2:3f:23:c0:a4:76:7c:6b:40:c4:e5:fa:4b: 78:98:aa:8f:30:2e:82:24:07:d9:d0:19:7c:ff:39: 3a:26:62:c8:94:37:98:7a:b2:99:bf:0c:fc:d0:30: dc:26:da:1d:ea:0c:01:eb:50:8f:8f:55:53:26:78: 77:a3:b6:04:d1:6d:cf:8e:c6:9b:b7:4c:da:6a:ba: 5f:cf:c9:01:41:0d:d4:1e:f0:de:97:09:01:a2:f6: f5:6c:d3:31:d5:31:ae:e2:68:6e:1f:5b:15:b2:08: 39:71:e4:b5:68:cf:7b:0b:47:16:9b:c9:17:24:78: e1:17:44:c2:65:55:38:67:08:73:8b:4e:1a:cb:ed: 6b:82:50:70:26:4b:0c:be:ab:99:ee:e4:ec:80:86: 09:0b:88:18:0d:44:39:51:04:bc:5b:40:18:f9:d8: c8:f9:b7:77:f3:29:31:19:98:a6:fe:41:c7:49:51: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:72:2E:67:36:AB:FA:7D:7E:36:D9:CF:4F:82:0B:5A:1C:79:25:C4 X509v3 Authority Key Identifier: keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/_HIuZzar-n1-NtnPT4ILWhx5JcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2e64::/48 Signature Algorithm: sha256WithRSAEncryption 0c:43:71:e3:1e:0b:8f:96:e0:de:f0:57:1e:45:bc:65:7e:a3: 5d:a9:c0:c9:cd:d4:a7:2d:3a:9e:5a:ba:b3:0a:be:82:d0:be: 84:db:d2:c5:90:f3:11:1a:f1:99:1d:b8:4f:91:d3:ae:25:60: 67:25:07:80:7e:b6:37:0f:d0:23:db:75:18:01:10:7d:0b:43: a4:80:52:df:f8:c1:42:fc:62:db:56:47:9a:46:c1:86:c5:6d: 7f:fb:4d:38:bf:59:51:ba:da:cc:2c:be:94:01:7b:9b:5b:3d: d9:b5:11:bf:09:8d:25:40:62:93:89:15:f3:88:7f:f9:db:75: 19:50:c9:67:6b:dd:39:df:63:87:66:9f:29:cc:60:b9:83:47: 08:40:5a:4d:71:6e:7a:7b:6c:82:2f:60:21:cb:10:ec:b7:2e: 76:04:cb:ef:39:be:8a:09:30:a7:7f:33:ab:14:4e:fe:af:36: 33:82:f8:e5:fe:d4:99:15:3b:9f:c3:64:22:0e:fd:ae:be:c3: d2:0f:0e:15:08:f3:e7:76:16:31:15:ef:09:3e:8d:92:55:d6: 12:54:8a:19:20:c6:6d:02:86:e7:b0:65:bf:ec:73:19:e2:75: b9:d4:c8:52:1a:0f:43:0a:e2:e5:b6:a7:e0:55:b7:8b:b1:76: 89:7e:83:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26rOdEDb4kY4badAMV+AuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTJkYzJjMWM5Mzg0N2JmOTc5ZjliMDEwZWRjNGNkYTg0 OWY0ZjgwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzcyMmU2NzM2YWJmYTdkN2UzNmQ5Y2Y0ZjgyMGI1YTFjNzkyNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fo0JCvp/nXiF+u/30ltcJP/VGC4 D3hftIYvan2Twr+iqp1xUgNUOp/wNgpBYKkR6ajccT8ThB96gktNX6YqRV3ksiD6 lYJ/BzCd7uI/I8CkdnxrQMTl+kt4mKqPMC6CJAfZ0Bl8/zk6JmLIlDeYerKZvwz8 0DDcJtod6gwB61CPj1VTJnh3o7YE0W3Pjsabt0zaarpfz8kBQQ3UHvDelwkBovb1 bNMx1TGu4mhuH1sVsgg5ceS1aM97C0cWm8kXJHjhF0TCZVU4Zwhzi04ay+1rglBw JksMvquZ7uTsgIYJC4gYDUQ5UQS8W0AY+djI+bd38ykxGZim/kHHSVFILwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPxyLmc2q/p9fjbZz0+CC1oceSXEMB8GA1UdIwQY MBaAFE3i3Cwck4R7+Xn5sBDtxM2oSfT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMt MTQ1YzM2ZTM4Mjc2LzEvX0hJdVp6YXItbjEtTnRuUFQ0SUxXaHg1SmNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMtMTQ1YzM2ZTM4Mjc2 LzEvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC5k MA0GCSqGSIb3DQEBCwUAA4IBAQAMQ3HjHguPluDe8FceRbxlfqNdqcDJzdSnLTqe WrqzCr6C0L6E29LFkPMRGvGZHbhPkdOuJWBnJQeAfrY3D9Aj23UYARB9C0OkgFLf +MFC/GLbVkeaRsGGxW1/+004v1lRutrMLL6UAXubWz3ZtRG/CY0lQGKTiRXziH/5 23UZUMlna90532OHZp8pzGC5g0cIQFpNcW56e2yCL2AhyxDsty52BMvvOb6KCTCn fzOrFE7+rzYzgvjl/tSZFTufw2QiDv2uvsPSDw4VCPPndhYxFe8JPo2SVdYSVIoZ IMZtAobnsGW/7HMZ4nW51MhSGg9DCuLltqfgVbeLsXaJfoN4 -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:43 2026 by rpki-client