This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa File: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (raw, json) Hash identifier: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY= Subject key identifier: 1F:11:E6:30:2E:21:9F:A2:D4:71:B7:BC:15:9C:90:F4:1A:7D:13:B2 Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Certificate serial: 019B7D5CDCF895D84F06CEEEBFAA412E16A6 Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64286 IP address blocks: 2001:3500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dc:f8:95:d8:4f:06:ce:ee:bf:aa:41:2e:16:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f11e6302e219fa2d471b7bc159c90f41a7d13b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:22:25:2c:e9:3d:18:d9:45:d4:97:2c:04: 9c:de:27:90:4e:c7:04:e0:a4:ef:c7:8b:91:ba:43: dd:b4:ec:f8:2b:5b:70:6d:5f:65:7c:c8:f6:c5:69: 52:a5:a4:70:c8:2e:8c:6f:da:18:ab:a4:25:9b:15: 52:8f:e2:11:0f:96:52:91:a1:45:63:3f:6f:2a:fb: e2:26:1d:54:d7:2a:97:87:f8:40:5c:97:c7:71:e5: 92:dd:50:e9:8b:a1:3d:2b:eb:2b:d0:20:2b:1b:fb: dc:eb:1c:c3:ed:53:81:5e:d1:07:43:c9:f7:43:7b: 8c:f6:55:91:e0:6a:64:18:c1:c7:8e:23:56:00:af: cc:63:cd:4b:99:cc:a9:9c:6a:a4:d6:83:54:18:6a: 41:c7:0f:d9:65:85:8f:34:05:5a:87:5a:1a:a4:e6: f2:c1:55:31:be:ac:dd:88:97:1b:4c:3a:c7:57:0b: b0:d7:ae:89:78:d9:e7:0e:b2:70:a1:b7:4e:d5:3b: 9d:2b:46:f0:40:e5:a8:81:ea:cc:44:35:a5:19:ee: cd:29:90:24:c8:1b:c4:c2:f2:dd:32:7f:1d:97:12: 3a:cb:25:38:39:1e:58:d1:dc:9d:0b:d0:c6:6f:cf: 4d:4f:53:65:26:95:e7:39:ad:68:91:03:2b:71:51: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:11:E6:30:2E:21:9F:A2:D4:71:B7:BC:15:9C:90:F4:1A:7D:13:B2 X509v3 Authority Key Identifier: keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3500::/32 Signature Algorithm: sha256WithRSAEncryption 14:98:61:99:b9:f5:c3:ef:3d:c5:c6:b5:70:20:de:a0:c9:ac: 33:7d:ea:5d:de:38:da:3b:bd:a0:31:7c:c9:a7:1a:1a:85:11: f5:7a:3e:4e:44:0f:0d:0d:ef:8b:c9:76:2f:32:f3:59:bb:7e: 4f:58:55:b9:6a:1c:1e:41:59:a1:8c:30:0c:17:3c:a1:2f:d0: 73:42:e4:f7:ac:53:69:65:ff:05:3f:e0:b0:a5:b6:5d:18:10: c1:49:c2:08:b1:c5:5c:be:76:39:37:66:40:1c:5c:63:ed:60: 1a:b2:ba:a2:ec:67:a0:75:f2:24:98:0e:b7:16:68:b9:8f:b8: ad:f7:25:69:7e:05:5c:d4:8d:c4:98:87:1b:9d:34:60:31:63: 41:a4:a7:d7:b6:42:ec:00:64:47:b4:f0:18:64:bb:f6:61:d3: 63:5e:fb:e8:44:34:89:b1:8e:0d:a9:f1:be:0d:de:51:b9:50: fa:89:d4:7d:c4:6e:8e:d7:40:50:c8:9c:fa:2e:58:ff:a9:d1: d5:35:50:fe:55:55:85:66:b6:bd:03:b7:94:d4:b8:7f:95:c6: 61:4f:29:64:3f:aa:39:fd:2a:ef:fb:5f:51:de:65:b3:0f:e0: 48:71:8b:d8:f0:ea:f3:92:9b:c8:4e:32:4b:31:82:d6:22:dc: e4:2f:df:aa -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XNz4ldhPBs7uv6pBLhamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm NWMzZDcwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjExZTYzMDJlMjE5ZmEyZDQ3MWI3YmMxNTljOTBmNDFhN2QxM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14UiJSzpPRjZRdSXLASc3ieQTscE 4KTvx4uRukPdtOz4K1twbV9lfMj2xWlSpaRwyC6Mb9oYq6QlmxVSj+IRD5ZSkaFF Yz9vKvviJh1U1yqXh/hAXJfHceWS3VDpi6E9K+sr0CArG/vc6xzD7VOBXtEHQ8n3 Q3uM9lWR4GpkGMHHjiNWAK/MY81LmcypnGqk1oNUGGpBxw/ZZYWPNAVah1oapOby wVUxvqzdiJcbTDrHVwuw166JeNnnDrJwobdO1TudK0bwQOWogerMRDWlGe7NKZAk yBvEwvLdMn8dlxI6yyU4OR5Y0dydC9DGb89NT1NlJpXnOa1okQMrcVH5pwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFB8R5jAuIZ+i1HG3vBWckPQafROyMB8GA1UdIwQY MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct YmU0ZDVkMDlkNzEwLzEvSHhIbU1DNGhuNkxVY2JlOEZaeVE5QnA5RTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAE1ADAN BgkqhkiG9w0BAQsFAAOCAQEAFJhhmbn1w+89xca1cCDeoMmsM33qXd442ju9oDF8 yacaGoUR9Xo+TkQPDQ3vi8l2LzLzWbt+T1hVuWocHkFZoYwwDBc8oS/Qc0Lk96xT aWX/BT/gsKW2XRgQwUnCCLHFXL52OTdmQBxcY+1gGrK6ouxnoHXyJJgOtxZouY+4 rfclaX4FXNSNxJiHG500YDFjQaSn17ZC7ABkR7TwGGS79mHTY1776EQ0ibGODanx vg3eUblQ+onUfcRujtdAUMic+i5Y/6nR1TVQ/lVVhWa2vQO3lNS4f5XGYU8pZD+q Of0q7/tfUd5lsw/gSHGL2PDq85KbyE4ySzGC1iLc5C/fqg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:48 2026 by rpki-client