This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Hfkxt46FCO9UMdghLYUiNvlFLG0.roa File: Hfkxt46FCO9UMdghLYUiNvlFLG0.roa (raw, json) Hash identifier: BXB1xJV/V3P2EU81jtLx3R8mLRSB5yRXbn8yGjGiV0Q= Subject key identifier: 1D:F9:31:B7:8E:85:08:EF:54:31:D8:21:2D:85:22:36:F9:45:2C:6D Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A37C66C1F870AB241A80F75603F4 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Hfkxt46FCO9UMdghLYUiNvlFLG0.roa Signing time: Thu 01 Jan 2026 22:19:05 +0000 ROA not before: Thu 01 Jan 2026 22:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209641 IP address blocks: 2a0c:4185::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a3:7c:66:c1:f8:70:ab:24:1a:80:f7:56:03:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1df931b78e8508ef5431d8212d852236f9452c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:e5:5c:d8:0a:51:85:ca:c7:cd:a6:3b:a1: 4a:7c:19:e1:47:00:6e:58:e4:11:ce:1f:ae:6a:9b: 80:d5:51:ea:72:1b:ad:b3:f9:9c:1e:4d:97:5c:7f: 4e:fa:e0:dc:7f:9c:3e:c1:a7:27:39:0c:4c:32:17: d5:1b:30:28:8b:3e:ec:cc:93:70:48:c9:75:c8:69: b2:9d:88:2d:66:9f:40:07:5d:c2:16:68:ec:1b:a9: 98:ab:e5:60:9f:19:b3:2d:15:b6:4f:bc:e3:af:2d: 5f:f5:38:85:83:86:92:04:b1:ec:dc:3e:bd:e2:75: 63:c2:6f:a6:e8:11:94:8f:44:e2:7f:a1:55:7b:c8: 64:9b:01:7f:16:4a:68:bb:d8:bc:c8:bf:48:04:f8: 45:0b:4d:70:43:73:eb:95:2f:18:c1:94:55:15:b9: 4a:99:4a:82:74:85:ad:22:9c:2a:87:b4:ef:df:1b: 62:79:a6:13:9e:ac:d9:ed:60:95:a1:5c:25:08:11: a4:8c:68:20:a9:f8:88:08:f6:2e:67:3b:84:97:2f: 39:b1:51:5b:db:e4:a4:4a:1b:8f:f8:b2:66:5a:1f: 43:7e:80:67:5d:83:ad:1c:f8:58:1e:3a:1a:cb:7c: ad:21:7f:95:4c:3f:8f:6a:7c:9f:6d:85:a3:d4:17: 67:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F9:31:B7:8E:85:08:EF:54:31:D8:21:2D:85:22:36:F9:45:2C:6D X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Hfkxt46FCO9UMdghLYUiNvlFLG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:4185::/32 Signature Algorithm: sha256WithRSAEncryption 59:7f:5a:b8:b6:74:5a:17:83:43:90:ad:57:19:48:5e:d7:5e: b0:a4:a4:7b:28:d2:78:b0:76:3a:0c:3e:08:41:d0:31:62:97: f7:40:58:b5:7c:78:76:58:80:09:82:c9:bb:a0:82:dc:b0:7b: 25:58:df:e7:bf:b2:db:80:2b:c5:92:48:e4:2d:1a:17:00:7d: c3:80:b8:fb:85:0b:21:9f:81:1f:58:bd:dd:c2:d8:1c:c3:6c: ba:74:18:95:10:b8:5f:70:3a:dc:9c:d8:d4:a3:d2:7b:0a:e0: d7:c4:b2:16:d2:c5:20:1b:d5:55:6c:36:3c:7c:8a:b1:75:c4: 81:77:83:d5:fd:89:29:a9:fb:d6:8d:05:c7:60:87:bc:76:73: 8e:e4:34:66:95:4d:66:47:c7:cd:b1:07:1f:f8:d5:cc:5f:37: 79:84:1c:d1:72:37:6e:09:b8:04:56:c9:71:b8:1f:90:e2:0e: df:7c:69:ae:2c:a3:69:dc:c0:9a:19:d5:97:4b:2d:61:8e:d2: a3:d1:6b:27:6c:b5:a6:03:70:bf:7b:aa:d2:64:0b:0d:ed:d8: a2:61:1b:61:fd:83:99:6a:8d:0b:f3:c7:14:40:4d:f6:0e:77: d5:78:85:78:8a:92:1d:73:bc:61:4c:24:81:16:40:a5:21:34: d9:f0:3a:f2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pKN8ZsH4cKskGoD3VgP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGY5MzFiNzhlODUwOGVmNTQzMWQ4MjEyZDg1MjIzNmY5NDUyYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KXlXNgKUYXKx82mO6FKfBnhRwBu WOQRzh+uapuA1VHqchuts/mcHk2XXH9O+uDcf5w+wacnOQxMMhfVGzAoiz7szJNw SMl1yGmynYgtZp9AB13CFmjsG6mYq+VgnxmzLRW2T7zjry1f9TiFg4aSBLHs3D69 4nVjwm+m6BGUj0Tif6FVe8hkmwF/Fkpou9i8yL9IBPhFC01wQ3PrlS8YwZRVFblK mUqCdIWtIpwqh7Tv3xtieaYTnqzZ7WCVoVwlCBGkjGggqfiICPYuZzuEly85sVFb 2+SkShuP+LJmWh9DfoBnXYOtHPhYHjoay3ytIX+VTD+PanyfbYWj1BdnnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFB35MbeOhQjvVDHYIS2FIjb5RSxtMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvSGZreHQ0NkZDTzlVTWRnaExZVWlOdmxGTEcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgxBhTAN BgkqhkiG9w0BAQsFAAOCAQEAWX9auLZ0WheDQ5CtVxlIXtdesKSkeyjSeLB2Ogw+ CEHQMWKX90BYtXx4dliACYLJu6CC3LB7JVjf57+y24ArxZJI5C0aFwB9w4C4+4UL IZ+BH1i93cLYHMNsunQYlRC4X3A63JzY1KPSewrg18SyFtLFIBvVVWw2PHyKsXXE gXeD1f2JKan71o0Fx2CHvHZzjuQ0ZpVNZkfHzbEHH/jVzF83eYQc0XI3bgm4BFbJ cbgfkOIO33xpriyjadzAmhnVl0stYY7So9FrJ2y1pgNwv3uq0mQLDe3YomEbYf2D mWqNC/PHFEBN9g531XiFeIqSHXO8YUwkgRZApSE02fA68g== -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:27 2026 by rpki-client