This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa File: HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa (raw, json) Hash identifier: x07LEmxGJBV5xPNSCMiyKaX4u86SUnl4qoOBSfBpXEw= Subject key identifier: 1D:6E:51:51:2B:6E:2D:BC:58:40:E7:BC:1A:EF:87:FC:4E:5A:59:5D Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8 Certificate serial: 019B79ED1D9C4C073E96FA78D3B58DF92052 Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49088 IP address blocks: 2001:67c:edc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1d:9c:4c:07:3e:96:fa:78:d3:b5:8d:f9:20:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d6e51512b6e2dbc5840e7bc1aef87fc4e5a595d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:9c:64:33:2c:c8:c0:bd:6d:02:9b:9b:3f: 70:86:80:31:84:51:1f:4f:73:25:ce:29:bc:47:c1: e6:be:c3:db:98:60:3d:2a:08:06:04:64:78:9a:1f: 6b:06:dd:b9:1b:1e:e5:25:3c:ae:5a:8f:9a:d1:fe: 27:fc:c4:17:53:56:63:43:0f:68:23:c8:2c:9e:98: 29:08:a0:db:06:3f:91:98:a7:b9:75:ca:5e:61:75: 16:ae:81:49:84:bb:29:29:42:d5:09:65:97:41:4f: ba:23:af:13:e8:cb:bd:b7:55:cf:a3:b5:f1:10:39: 01:11:46:bb:4e:ec:1d:8f:e6:fb:3d:52:5c:d9:d8: f2:0c:03:08:b2:87:2c:8a:7c:46:c7:65:e7:92:90: 64:1a:21:19:5a:2d:d6:8f:ab:fa:36:51:6d:4a:8a: f3:49:2f:b1:18:44:7c:e4:68:99:66:8b:46:8c:66: 76:72:2f:49:c8:78:4c:c6:da:27:2d:3f:76:c6:e1: e4:b5:35:04:34:a2:7d:ad:1e:8f:51:27:65:8b:77: 99:14:17:d6:01:17:96:65:d0:bd:6d:63:68:21:df: b0:85:20:5b:44:0a:cc:df:1a:c6:8a:fa:08:38:5e: fa:c0:8f:5e:83:1b:84:26:70:54:fe:74:a6:3d:d2: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6E:51:51:2B:6E:2D:BC:58:40:E7:BC:1A:EF:87:FC:4E:5A:59:5D X509v3 Authority Key Identifier: keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:edc::/48 Signature Algorithm: sha256WithRSAEncryption 10:d3:c1:a4:54:91:e6:0e:f6:ca:88:c5:fd:55:b5:cb:1a:1d: 61:37:b7:b6:04:80:b7:57:20:0d:96:3f:d5:b9:28:55:e2:df: a5:e9:87:ca:e8:aa:fe:c4:8a:ae:be:73:ba:a9:11:bb:39:8d: 9c:84:4e:9c:e5:99:04:7f:46:d2:5a:8e:fa:5d:ec:96:da:86: 58:6f:79:d9:51:06:59:4f:02:81:00:24:73:54:99:a4:c8:80: 12:38:7d:4b:ec:a1:45:14:70:4b:b3:c5:14:58:b4:a5:c9:39: 2b:4c:b2:0c:08:d7:36:b5:c8:56:5f:d4:f5:32:ae:02:da:94: 35:2e:ea:6d:13:48:94:94:75:fd:74:82:f5:65:71:77:de:9a: 05:ba:06:ad:05:68:71:c4:a2:d3:e7:ab:5b:90:10:b1:a3:f8: 92:48:6a:29:3d:d2:2f:99:7b:b9:6b:02:70:5a:29:7c:be:01: ca:bc:12:9e:37:bc:c8:ac:b7:9a:b6:3b:cd:e9:80:7f:95:c3: 49:a9:05:4c:63:9e:d1:c3:3b:3e:32:86:96:92:c5:39:c6:c8: b9:5f:24:1b:1f:79:bc:d0:a1:38:39:23:43:72:a9:06:bd:59: 2f:1c:5e:72:9b:49:4c:99:d7:d6:9a:df:4c:e8:9e:7c:8c:ba: 01:6d:fd:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57R2cTAc+lvp407WN+SBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmIzMmQ5ZDNlYmM2ZWU0OWJkNmZhNmNkOTBlNGY1Yzdk NTQ0ZTgwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDZlNTE1MTJiNmUyZGJjNTg0MGU3YmMxYWVmODdmYzRlNWE1OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlICcZDMsyMC9bQKbmz9whoAxhFEf T3Mlzim8R8HmvsPbmGA9KggGBGR4mh9rBt25Gx7lJTyuWo+a0f4n/MQXU1ZjQw9o I8gsnpgpCKDbBj+RmKe5dcpeYXUWroFJhLspKULVCWWXQU+6I68T6Mu9t1XPo7Xx EDkBEUa7Tuwdj+b7PVJc2djyDAMIsocsinxGx2XnkpBkGiEZWi3Wj6v6NlFtSorz SS+xGER85GiZZotGjGZ2ci9JyHhMxtonLT92xuHktTUENKJ9rR6PUSdli3eZFBfW AReWZdC9bWNoId+whSBbRArM3xrGivoIOF76wI9egxuEJnBU/nSmPdK5lQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB1uUVErbi28WEDnvBrvh/xOWlldMB8GA1UdIwQY MBaAFE5rMtnT68buSb1vps2Q5PXH1UToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjIt MDk2ZWUyOWQ5OTdkLzEvSFc1UlVTdHVMYnhZUU9lOEd1LUhfRTVhV1YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjItMDk2ZWUyOWQ5OTdk LzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7c MA0GCSqGSIb3DQEBCwUAA4IBAQAQ08GkVJHmDvbKiMX9VbXLGh1hN7e2BIC3VyAN lj/VuShV4t+l6YfK6Kr+xIquvnO6qRG7OY2chE6c5ZkEf0bSWo76XeyW2oZYb3nZ UQZZTwKBACRzVJmkyIASOH1L7KFFFHBLs8UUWLSlyTkrTLIMCNc2tchWX9T1Mq4C 2pQ1LuptE0iUlHX9dIL1ZXF33poFugatBWhxxKLT56tbkBCxo/iSSGopPdIvmXu5 awJwWil8vgHKvBKeN7zIrLeatjvN6YB/lcNJqQVMY57Rwzs+MoaWksU5xsi5XyQb H3m80KE4OSNDcqkGvVkvHF5ym0lMmdfWmt9M6J58jLoBbf3G -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:00 2026 by rpki-client