This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HsotX8bd-E1l_XVMgB26zbBWPlc.roa File: HsotX8bd-E1l_XVMgB26zbBWPlc.roa (raw, json) Hash identifier: qKa0rWEWS6jQCZX2r7iJHBZSGptFYwaAtatAZbw1YX8= Subject key identifier: 1E:CA:2D:5F:C6:DD:F8:4D:65:FD:75:4C:80:1D:BA:CD:B0:56:3E:57 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A77A074FF98BC9B3C98BBD22BEA7 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HsotX8bd-E1l_XVMgB26zbBWPlc.roa Signing time: Fri 02 Jan 2026 16:23:44 +0000 ROA not before: Fri 02 Jan 2026 16:23:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214762 IP address blocks: 2a0f:b240:5c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a7:7a:07:4f:f9:8b:c9:b3:c9:8b:bd:22:be:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eca2d5fc6ddf84d65fd754c801dbacdb0563e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:6f:9f:91:cc:48:60:3e:71:39:71:f4:8c: e8:aa:48:2b:93:e3:99:a0:0c:b1:9f:4d:d6:15:dc: ba:78:c1:43:b3:73:ef:21:da:9e:66:7e:05:63:af: 61:33:d3:bd:07:d1:56:80:5c:ab:c6:65:97:6a:c6: 54:bf:6d:62:b4:cf:19:44:89:fb:2e:d4:e6:4e:df: 74:a9:7e:12:a4:12:f9:e0:97:f2:93:f2:a1:bb:dc: 2f:1f:55:5c:f3:63:08:5f:fc:29:27:69:b5:b8:8a: e1:cc:b7:c2:8d:77:82:b2:78:1d:91:28:21:c5:f1: a5:c1:6d:37:a0:9c:bb:15:9d:d3:47:a7:93:0b:ff: 31:8c:48:86:53:8e:3c:95:f1:6f:33:98:36:20:73: 29:95:ae:fe:35:92:e9:ed:66:57:cb:c6:f0:a4:4a: 61:dd:fb:25:4c:aa:6f:e5:54:8f:5f:07:5a:59:5a: fd:0d:cb:f9:24:91:b4:44:2f:8b:c2:94:c4:43:17: e4:54:25:cd:76:9a:79:76:0e:56:ac:ba:0c:05:70: f0:92:01:6d:76:3d:f1:00:f4:1b:29:c9:5f:18:5f: 91:d0:fe:dd:8f:e2:c1:ff:b7:0f:28:12:7b:4d:a9: a1:03:82:a1:e6:7c:53:e5:eb:0b:d7:1c:b8:30:af: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CA:2D:5F:C6:DD:F8:4D:65:FD:75:4C:80:1D:BA:CD:B0:56:3E:57 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/HsotX8bd-E1l_XVMgB26zbBWPlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5c00::/40 Signature Algorithm: sha256WithRSAEncryption 22:8e:c5:f0:cd:a8:e7:59:5a:86:2c:1a:97:9c:76:04:a6:d8: 3f:a0:42:37:6e:06:bb:42:f3:e9:21:32:8e:f6:ac:67:cd:50: 19:06:36:4f:e4:9e:bd:ef:98:56:9e:16:2e:20:c2:a1:4f:5a: a3:c9:5b:35:fa:85:9b:aa:98:ae:bb:ca:d8:f5:3a:cb:1d:97: f9:68:ea:ce:4d:5d:25:f3:f1:84:5f:2b:5c:7a:97:e8:c1:3f: bc:fe:05:98:7f:89:d0:fc:80:95:fa:e5:d0:51:61:ab:fd:4d: 89:41:37:19:32:59:9a:7f:6a:d0:5d:db:08:a2:88:16:ae:7b: f6:63:6c:5a:8e:97:95:81:54:3d:47:a7:ff:82:77:dc:c3:fa: 8f:b6:65:e8:bc:24:e5:d3:30:f4:a8:b8:d9:96:2f:bc:b2:c3: 32:20:cc:d7:a4:88:91:c9:75:90:54:ae:07:33:02:c5:fe:f1: 25:f6:b8:2a:9f:0a:35:b9:8a:64:44:2f:c5:dc:0d:f1:95:c2: 6d:e3:ec:c9:e3:96:44:64:b8:b9:1a:b8:af:7e:f8:a8:67:f0: 14:c8:5c:7a:60:b1:27:c1:d6:39:8a:0c:49:7c:02:5f:e8:45: ed:1b:11:ca:68:f6:d6:03:a7:42:d9:87:8d:f8:cc:81:94:37: 49:a8:28:65 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/had6B0/5i8mzyYu9Ir6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWNhMmQ1ZmM2ZGRmODRkNjVmZDc1NGM4MDFkYmFjZGIwNTYzZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMtvn5HMSGA+cTlx9Izoqkgrk+OZ oAyxn03WFdy6eMFDs3PvIdqeZn4FY69hM9O9B9FWgFyrxmWXasZUv21itM8ZRIn7 LtTmTt90qX4SpBL54Jfyk/Khu9wvH1Vc82MIX/wpJ2m1uIrhzLfCjXeCsngdkSgh xfGlwW03oJy7FZ3TR6eTC/8xjEiGU448lfFvM5g2IHMpla7+NZLp7WZXy8bwpEph 3fslTKpv5VSPXwdaWVr9Dcv5JJG0RC+LwpTEQxfkVCXNdpp5dg5WrLoMBXDwkgFt dj3xAPQbKclfGF+R0P7dj+LB/7cPKBJ7TamhA4Kh5nxT5esL1xy4MK+SbQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFB7KLV/G3fhNZf11TIAdus2wVj5XMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvSHNvdFg4YmQtRTFsX1hWTWdCMjZ6YkJXUGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFww DQYJKoZIhvcNAQELBQADggEBACKOxfDNqOdZWoYsGpecdgSm2D+gQjduBrtC8+kh Mo72rGfNUBkGNk/knr3vmFaeFi4gwqFPWqPJWzX6hZuqmK67ytj1Ossdl/lo6s5N XSXz8YRfK1x6l+jBP7z+BZh/idD8gJX65dBRYav9TYlBNxkyWZp/atBd2wiiiBau e/ZjbFqOl5WBVD1Hp/+Cd9zD+o+2Zei8JOXTMPSouNmWL7yywzIgzNekiJHJdZBU rgczAsX+8SX2uCqfCjW5imREL8XcDfGVwm3j7MnjlkRkuLkauK9++Khn8BTIXHpg sSfB1jmKDEl8Al/oRe0bEcpo9tYDp0LZh434zIGUN0moKGU= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:26 2026 by rpki-client