This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa File: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (raw, json) Hash identifier: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io= Subject key identifier: 1D:A5:AD:4D:DA:D6:35:0F:AD:EB:36:53:E4:7D:60:52:2B:AF:33:6D Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37 Certificate serial: 019B7834CBAD84E664A126E47427D3785FA4 Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42156 IP address blocks: 45.67.74.0/24 maxlen: 24 2a10:d600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cb:ad:84:e6:64:a1:26:e4:74:27:d3:78:5f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1da5ad4ddad6350fadeb3653e47d60522baf336d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:dd:51:83:d9:a4:7b:b8:18:df:f3:4b:89: f5:07:21:83:4c:8c:46:41:87:ba:bc:f3:90:46:2b: 10:d9:2b:26:bb:8e:bd:87:76:5e:ba:9f:75:a0:e2: 26:15:09:c7:fd:8c:17:1e:c6:28:50:01:19:e9:37: 38:bb:bd:9c:bd:1c:50:34:77:2a:e7:9a:db:0d:4a: bc:8e:4a:c7:94:ae:a0:0a:e0:f2:b3:f1:0b:10:2c: 1e:47:ce:e8:4a:19:22:c8:78:7a:ba:c2:c7:86:aa: 64:e9:f0:0f:30:f5:0b:79:90:e0:5f:75:b8:14:e3: 60:da:cf:23:17:78:d6:32:b9:ed:60:25:0b:95:39: 88:b8:4d:0f:f5:e5:b1:40:69:08:69:51:ea:44:26: 08:14:36:38:71:72:cd:20:60:66:dc:72:ab:e6:16: f4:52:eb:c0:0b:bb:c7:a7:93:2a:5b:42:19:a3:d7: 3e:cf:85:3d:ec:c3:4c:a6:2f:74:d5:86:e7:7d:7e: 75:1c:80:b3:b7:61:0b:20:03:0a:eb:2a:61:52:0b: aa:e9:f9:59:43:a2:09:21:37:89:4a:4f:82:e2:15: 59:af:fd:14:f1:0f:e1:59:9c:15:03:dc:8a:96:d2: 40:02:a9:7d:74:85:50:1b:6a:c2:3c:b8:f3:dc:0a: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A5:AD:4D:DA:D6:35:0F:AD:EB:36:53:E4:7D:60:52:2B:AF:33:6D X509v3 Authority Key Identifier: keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.74.0/24 IPv6: 2a10:d600::/48 Signature Algorithm: sha256WithRSAEncryption 0d:b0:2f:5a:65:bb:ea:1d:80:ca:49:88:55:f5:7b:66:35:6b: 8c:25:f3:77:cb:10:fe:a6:ee:c9:3c:62:c8:27:3b:86:44:2b: ad:c0:f7:e3:c6:41:6e:d7:f8:64:97:44:66:63:ba:12:d3:e8: 6f:76:c3:e8:86:50:3e:e2:0d:f4:21:aa:5d:9e:2b:83:71:32: 7c:8b:7f:f9:af:0a:fb:d3:99:55:a2:66:7c:84:6a:10:a8:c9: bd:d6:35:b6:2a:3c:8f:f1:5a:3a:29:3a:b6:d7:9b:04:f3:3b: cc:61:5f:97:b4:3f:77:12:50:85:d1:1d:ae:17:fc:01:b7:7f: 21:77:c5:ed:20:62:16:67:4d:7a:eb:94:18:95:29:20:42:f1: d2:a9:d9:a9:b3:58:50:97:74:87:f5:5d:9e:c4:62:06:77:b2: 17:a1:14:f0:c0:e7:49:51:f5:83:23:b5:7e:9f:ae:46:93:55: 37:04:0f:24:b2:0a:14:bf:fe:95:2c:0d:da:5d:3f:fe:6b:67: a7:bf:2b:7f:79:6c:c5:c5:1f:ea:d2:87:f1:6e:49:8c:20:74: 01:3d:0d:2f:8f:36:61:22:ab:90:96:72:34:78:7c:c3:a1:fe: d3:b7:0d:aa:68:de:f6:64:47:f6:50:2a:2c:0e:ea:37:bf:41: b7:be:c5:27 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NMuthOZkoSbkdCfTeF+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODcyODI2ZmNlMDJiZDk0ODVlZjI3NjY0MWQyYjU4NGY1 OTliMzcwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGE1YWQ0ZGRhZDYzNTBmYWRlYjM2NTNlNDdkNjA1MjJiYWYzMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nfdUYPZpHu4GN/zS4n1ByGDTIxG QYe6vPOQRisQ2Ssmu469h3Zeup91oOImFQnH/YwXHsYoUAEZ6Tc4u72cvRxQNHcq 55rbDUq8jkrHlK6gCuDys/ELECweR87oShkiyHh6usLHhqpk6fAPMPULeZDgX3W4 FONg2s8jF3jWMrntYCULlTmIuE0P9eWxQGkIaVHqRCYIFDY4cXLNIGBm3HKr5hb0 UuvAC7vHp5MqW0IZo9c+z4U97MNMpi901YbnfX51HICzt2ELIAMK6yphUguq6flZ Q6IJITeJSk+C4hVZr/0U8Q/hWZwVA9yKltJAAql9dIVQG2rCPLjz3AoxpQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB2lrU3a1jUPres2U+R9YFIrrzNtMB8GA1UdIwQY MBaAFC6HKCb84CvZSF7ydmQdK1hPWZs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0Yzct MjRjNzliMWNiNGRhLzEvSGFXdFRkcldOUS10NnpaVDVIMWdVaXV2TTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0YzctMjRjNzliMWNiNGRh LzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALUNKMA8E AgACMAkDBwAqENYAAAAwDQYJKoZIhvcNAQELBQADggEBAA2wL1plu+odgMpJiFX1 e2Y1a4wl83fLEP6m7sk8YsgnO4ZEK63A9+PGQW7X+GSXRGZjuhLT6G92w+iGUD7i DfQhql2eK4NxMnyLf/mvCvvTmVWiZnyEahCoyb3WNbYqPI/xWjopOrbXmwTzO8xh X5e0P3cSUIXRHa4X/AG3fyF3xe0gYhZnTXrrlBiVKSBC8dKp2amzWFCXdIf1XZ7E YgZ3shehFPDA50lR9YMjtX6frkaTVTcEDySyChS//pUsDdpdP/5rZ6e/K395bMXF H+rSh/FuSYwgdAE9DS+PNmEiq5CWcjR4fMOh/tO3Dapo3vZkR/ZQKiwO6je/Qbe+ xSc= -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:23 2026 by rpki-client