This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/HGTWQmwsO_jbSec4ZsPysoI13ak.roa File: HGTWQmwsO_jbSec4ZsPysoI13ak.roa (raw, json) Hash identifier: GJRWwpuaz80Q8HV2RPloUktasT/iZdp6LYSzg5Ixo8A= Subject key identifier: 1C:64:D6:42:6C:2C:3B:F8:DB:49:E7:38:66:C3:F2:B2:82:35:DD:A9 Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019AE48AF3F580D3BA55A231498E7AAA2C07 Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/HGTWQmwsO_jbSec4ZsPysoI13ak.roa Signing time: Wed 03 Dec 2025 14:08:22 +0000 ROA not before: Wed 03 Dec 2025 14:08:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2200 IP address blocks: 2a07:2e40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:8a:f3:f5:80:d3:ba:55:a2:31:49:8e:7a:aa:2c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 3 14:08:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c64d6426c2c3bf8db49e73866c3f2b28235dda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:43:1e:bd:b8:05:29:2b:29:f9:12:ab:e2: 7b:e4:98:96:82:f5:d0:e1:4d:a7:f9:32:90:4d:82: 95:d8:0b:ed:de:08:a0:4d:78:09:f4:8e:4f:b5:f1: 51:2c:00:2e:22:38:b0:40:36:ff:3d:8c:e1:42:53: 30:05:b6:56:7d:11:b1:4e:4d:f1:54:5d:43:2b:3c: 85:92:84:85:39:63:3a:e3:53:8a:01:d8:72:16:c9: d5:14:e1:4f:e8:ed:de:31:16:e2:4d:0c:d4:53:31: 34:7b:1c:c4:87:e7:4a:80:4e:c5:6b:a1:db:b6:f4: a6:9d:b8:5e:8c:b6:b3:de:db:7b:68:05:64:c6:05: 03:f8:a6:53:df:09:97:94:08:6c:ba:a1:b2:91:0a: b6:15:80:72:83:0c:7d:48:93:19:cc:d6:48:c8:73: 1d:aa:0d:e5:43:8a:12:a0:78:c5:6f:4c:01:5f:1f: 01:6e:29:b4:01:13:3b:9a:87:b6:84:f0:f8:fa:b9: 0e:c7:bd:7a:38:f4:62:e2:b0:2e:78:fe:70:ca:28: 1e:e7:4d:96:f5:05:26:4e:a3:b6:70:56:b3:de:0d: b1:15:ed:b6:41:f9:5f:0c:48:f1:a3:ca:8d:f7:78: 8c:b3:9e:0d:b3:d5:11:84:0d:b9:de:67:97:35:7f: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:64:D6:42:6C:2C:3B:F8:DB:49:E7:38:66:C3:F2:B2:82:35:DD:A9 X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/HGTWQmwsO_jbSec4ZsPysoI13ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2e40::/29 Signature Algorithm: sha256WithRSAEncryption 5e:2e:c1:22:0b:44:25:11:bd:ee:95:45:27:33:f7:3b:9b:76: fc:ed:63:fe:92:99:01:25:e6:b7:09:f5:b6:37:d2:a1:56:ad: 80:1c:87:a9:9b:8f:56:b6:63:54:af:09:24:3d:23:1e:e6:22: 98:a0:36:c2:29:a1:85:bc:76:39:13:6d:ee:74:c0:f3:ab:75: c4:64:1b:c3:18:63:3e:9d:ca:d0:d0:f3:b2:eb:b5:05:cd:ae: 55:e0:58:45:9d:d8:88:f5:31:76:00:12:14:88:16:b4:21:59: 2b:59:6f:d1:17:f9:fc:be:be:2a:26:c3:3a:09:50:65:fb:9e: 02:64:1a:38:26:a4:97:63:01:90:c1:85:bb:82:9f:0c:45:c8: 7d:60:5f:8e:58:ac:1d:6f:90:7e:d0:a1:bd:66:b6:3f:f1:1d: fc:4c:d7:3f:ee:d3:05:d2:bf:5b:e1:78:48:bc:e6:6e:18:78: 68:4d:a3:bf:d0:ed:63:1e:7c:9e:39:38:b2:12:ae:6d:12:b8: 31:a8:07:e2:c1:cd:4a:8c:43:ed:a4:39:5c:a9:60:e2:81:ff: ff:55:f0:88:d6:76:c3:19:45:cc:2b:86:c1:66:d8:67:af:13: e4:be:9a:96:8d:2c:35:a1:e9:b8:7d:2c:c0:30:27:40:1a:f8: 04:be:73:0c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrkivP1gNO6VaIxSY56qiwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjAzMTQwODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzY0ZDY0MjZjMmMzYmY4ZGI0OWU3Mzg2NmMzZjJiMjgyMzVkZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tlDHr24BSkrKfkSq+J75JiWgvXQ 4U2n+TKQTYKV2Avt3gigTXgJ9I5PtfFRLAAuIjiwQDb/PYzhQlMwBbZWfRGxTk3x VF1DKzyFkoSFOWM641OKAdhyFsnVFOFP6O3eMRbiTQzUUzE0exzEh+dKgE7Fa6Hb tvSmnbhejLaz3tt7aAVkxgUD+KZT3wmXlAhsuqGykQq2FYBygwx9SJMZzNZIyHMd qg3lQ4oSoHjFb0wBXx8Bbim0ARM7moe2hPD4+rkOx716OPRi4rAueP5wyige502W 9QUmTqO2cFaz3g2xFe22QflfDEjxo8qN93iMs54Ns9URhA253meXNX8JwQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBxk1kJsLDv420nnOGbD8rKCNd2pMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvSEdUV1Ftd3NPX2piU2VjNFpzUHlzb0kxM2FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgcuQDAN BgkqhkiG9w0BAQsFAAOCAQEAXi7BIgtEJRG97pVFJzP3O5t2/O1j/pKZASXmtwn1 tjfSoVatgByHqZuPVrZjVK8JJD0jHuYimKA2wimhhbx2ORNt7nTA86t1xGQbwxhj Pp3K0NDzsuu1Bc2uVeBYRZ3YiPUxdgASFIgWtCFZK1lv0Rf5/L6+KibDOglQZfue AmQaOCakl2MBkMGFu4KfDEXIfWBfjlisHW+QftChvWa2P/Ed/EzXP+7TBdK/W+F4 SLzmbhh4aE2jv9DtYx58njk4shKubRK4MagH4sHNSoxD7aQ5XKlg4oH//1XwiNZ2 wxlFzCuGwWbYZ68T5L6alo0sNaHpuH0swDAnQBr4BL5zDA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:49 2025 by rpki-client