This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa File: HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa (raw, json) Hash identifier: iTEJqDydJmTzPI0AxKyGiy/lzp+8Axti0R4ZxzfqlZo= Subject key identifier: 1C:C7:85:79:6B:70:F4:DE:EB:93:76:98:54:2F:D5:4D:65:E0:CC:C3 Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658 Certificate serial: 019B7C7FABCB40F911F30E2502F4AC6CA0E5 Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa Signing time: Fri 02 Jan 2026 02:18:20 +0000 ROA not before: Fri 02 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139321 IP address blocks: 2001:678:acc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ab:cb:40:f9:11:f3:0e:25:02:f4:ac:6c:a0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658 Validity Not Before: Jan 2 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cc785796b70f4deeb937698542fd54d65e0ccc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:97:c8:c2:d1:53:12:f0:85:b3:71:0f:8c: 68:87:8f:a2:0d:09:b9:25:79:3e:fc:8b:2f:03:d2: fd:8f:b7:38:d3:7a:12:63:43:f6:83:52:73:3e:3e: 3a:ac:43:2e:96:f5:2e:aa:0e:80:48:2d:be:5d:14: 54:b5:7e:be:b6:92:69:50:6a:6b:89:d1:d9:42:01: 2d:ca:3f:e9:d0:5e:18:7f:e0:37:e9:dd:2c:81:2d: c9:2c:6c:62:df:b4:d9:c5:1d:1d:3f:3b:ba:c2:6d: 01:74:6c:52:15:83:ae:fc:d1:8e:51:9a:55:10:97: d5:f1:a3:98:30:6f:3e:2c:6a:98:df:85:1a:fc:00: 64:32:86:09:41:a3:b9:2a:18:80:c5:3b:99:2c:27: 92:23:86:6e:fb:b2:2a:40:76:68:5a:d9:23:30:cc: b0:0d:7e:1e:83:ce:fe:6b:3f:01:bf:7b:a4:8c:89: 99:ef:e7:86:e0:99:9c:af:24:d9:7e:f7:1d:62:d8: 61:af:34:87:45:18:c5:89:f7:cd:f7:ab:e3:43:91: 91:a0:ef:09:3e:bc:a2:90:d1:26:db:05:3b:e8:bd: ae:b9:d2:db:c4:22:9d:9b:06:37:bc:e7:40:80:4f: 24:94:bd:b6:18:c6:fc:82:95:ba:06:ab:d7:e6:6a: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C7:85:79:6B:70:F4:DE:EB:93:76:98:54:2F:D5:4D:65:E0:CC:C3 X509v3 Authority Key Identifier: keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:acc::/48 Signature Algorithm: sha256WithRSAEncryption b3:99:52:44:ed:f3:12:39:2c:8d:6b:18:65:1d:fc:4b:eb:e9: c2:b3:9f:5c:e8:68:e9:fb:f9:21:94:5b:22:51:7e:90:05:c3: 60:e2:af:fc:d6:25:79:06:cb:3e:0b:2a:44:f0:bd:d8:3b:04: 23:7c:9a:33:d1:3a:6d:4c:b0:16:0a:b4:2e:b7:32:82:35:06: 91:78:79:b9:6e:09:7c:0b:fd:95:b6:45:77:0b:9e:58:e1:5f: f4:ef:02:b2:28:28:4f:ce:7f:30:d8:8b:d6:cd:b3:0a:c5:ca: 48:d3:3d:a5:09:83:c2:10:f7:04:41:b6:a7:87:b5:f9:e9:e8: cb:4b:fe:ec:3f:ec:bf:f3:a2:1b:3d:58:59:66:b3:ec:b6:a3: 4c:92:a8:c8:d2:6f:8d:eb:76:2b:ee:31:4f:94:9d:9f:ef:34: 18:21:b8:61:0e:f8:e7:21:bf:3b:79:02:cc:71:06:dd:55:57: 9a:b1:40:d9:85:ae:f1:a1:c6:21:b3:dd:0c:5f:bf:c6:c9:c2: 7c:2c:68:6f:05:8f:5f:25:43:59:44:c0:93:e6:c0:b6:be:d5: 37:88:75:9a:93:cd:0b:9d:d2:36:a7:2e:aa:99:d8:6a:24:57: 1b:cf:b0:c9:56:0e:36:4b:39:da:3f:6d:bd:0a:4a:06:a3:a4: c6:bf:2b:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f6vLQPkR8w4lAvSsbKDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk ZDU2NTgwHhcNMjYwMTAyMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2M3ODU3OTZiNzBmNGRlZWI5Mzc2OTg1NDJmZDU0ZDY1ZTBjY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNqXyMLRUxLwhbNxD4xoh4+iDQm5 JXk+/IsvA9L9j7c403oSY0P2g1JzPj46rEMulvUuqg6ASC2+XRRUtX6+tpJpUGpr idHZQgEtyj/p0F4Yf+A36d0sgS3JLGxi37TZxR0dPzu6wm0BdGxSFYOu/NGOUZpV EJfV8aOYMG8+LGqY34Ua/ABkMoYJQaO5KhiAxTuZLCeSI4Zu+7IqQHZoWtkjMMyw DX4eg87+az8Bv3ukjImZ7+eG4JmcryTZfvcdYthhrzSHRRjFiffN96vjQ5GRoO8J PryikNEm2wU76L2uudLbxCKdmwY3vOdAgE8klL22GMb8gpW6BqvX5mp1YwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBzHhXlrcPTe65N2mFQv1U1l4MzDMB8GA1UdIwQY MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt ZDQ2ZmZjNTAxZjM2LzEvSE1lRmVXdHc5TjdyazNhWVZDX1ZUV1hnek1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2 LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeArM MA0GCSqGSIb3DQEBCwUAA4IBAQCzmVJE7fMSOSyNaxhlHfxL6+nCs59c6Gjp+/kh lFsiUX6QBcNg4q/81iV5Bss+CypE8L3YOwQjfJoz0TptTLAWCrQutzKCNQaReHm5 bgl8C/2VtkV3C55Y4V/07wKyKChPzn8w2IvWzbMKxcpI0z2lCYPCEPcEQbanh7X5 6ejLS/7sP+y/86IbPVhZZrPstqNMkqjI0m+N63Yr7jFPlJ2f7zQYIbhhDvjnIb87 eQLMcQbdVVeasUDZha7xocYhs90MX7/GycJ8LGhvBY9fJUNZRMCT5sC2vtU3iHWa k80LndI2py6qmdhqJFcbz7DJVg42SznaP229CkoGo6TGvytN -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:28 2026 by rpki-client