This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/hwJ3-YNSrCqijae1QuiJB84SYmg.roa File: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (raw, json) Hash identifier: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw= Subject key identifier: 87:02:77:F9:83:52:AC:2A:A2:8D:A7:B5:42:E8:89:07:CE:12:62:68 Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Certificate serial: 019B7C7FF6473B49D8BC53BD8C7DA9294E85 Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/hwJ3-YNSrCqijae1QuiJB84SYmg.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47294 IP address blocks: 2a13:e5c0:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f6:47:3b:49:d8:bc:53:bd:8c:7d:a9:29:4e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0 Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=870277f98352ac2aa28da7b542e88907ce126268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:65:78:28:b0:b0:f7:50:30:bf:08:03:2f: 52:47:de:68:b1:05:6d:12:2f:67:3b:a0:96:4c:eb: 03:97:ff:df:e6:a4:83:16:1f:ca:8a:07:0a:7a:01: aa:59:d3:ca:fc:72:66:c8:4f:90:74:7a:9f:1f:93: c5:59:e2:d4:c7:08:1f:5c:7b:d0:79:02:c1:55:07: 1b:e1:78:c4:44:b8:e1:d9:c8:68:aa:77:3f:b3:44: 1a:28:b1:57:7e:dc:bd:48:40:33:75:3f:b5:d9:f4: e3:07:58:f3:39:25:41:2f:81:fc:13:01:e5:33:28: a1:48:08:84:87:c6:39:3e:aa:9e:6e:d0:0c:b4:19: 4f:3d:b5:7e:f5:d1:d9:8e:a7:02:2f:5d:11:95:97: 00:8d:e6:2e:c7:a4:ea:99:fb:33:b2:65:4a:46:5b: 35:ba:0d:95:70:91:d5:62:12:96:07:75:2b:2e:45: 81:5d:08:5f:71:ba:94:24:cc:d9:d2:04:5b:8b:3e: bd:da:eb:ac:31:1f:b1:68:46:d2:64:71:ac:13:f4: 0f:69:e8:46:fb:7b:d3:2a:0f:cc:23:3b:d1:b1:0b: cb:29:a1:5b:8f:66:ff:f4:a4:02:4f:57:bd:72:b8: 0a:c2:1e:7e:7d:d7:40:ab:47:4b:7e:62:0b:84:18: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:02:77:F9:83:52:AC:2A:A2:8D:A7:B5:42:E8:89:07:CE:12:62:68 X509v3 Authority Key Identifier: keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/hwJ3-YNSrCqijae1QuiJB84SYmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:e5c0:8888::/48 Signature Algorithm: sha256WithRSAEncryption 1f:ce:04:d0:47:b0:c3:9c:44:ed:02:aa:d7:79:9c:29:fe:37: 8b:65:64:a3:b1:a6:a1:4a:3f:2c:58:a0:2f:b2:77:f9:8e:0e: db:b8:cb:18:28:f3:e9:f7:1e:41:c1:5a:e3:b2:59:55:15:17: 40:a1:26:02:d4:d6:5a:92:52:2e:1d:15:75:f2:17:a8:b8:7a: 7a:26:a1:ad:23:6e:70:d8:1e:a0:85:82:81:09:f4:6e:ec:63: 94:fa:8c:b5:c7:2e:47:cc:cc:33:8e:53:dc:94:4d:3e:50:d8: 4c:86:48:08:ab:11:9d:ab:d4:55:e1:c0:9d:78:48:c2:fb:37: f3:1e:31:68:1a:9c:12:98:68:e3:ec:b3:e8:b3:94:c1:56:1b: d4:ec:82:05:d6:81:59:93:2b:46:ec:4c:fc:34:5e:2e:cf:a5: ec:0b:ea:e4:72:06:59:bb:5e:b6:8b:80:4f:ef:17:5a:79:6d: 81:e7:1d:93:b5:3d:2b:64:73:9e:cd:28:19:33:2e:66:cc:c3: d8:e2:07:a9:33:22:96:04:d2:67:d5:e0:f0:2b:7d:1d:12:f9: c1:0d:79:ce:b4:a1:11:71:88:5c:4a:08:a0:66:7e:d2:18:6e: 41:f5:54:61:11:0d:c3:7e:fe:21:ff:10:5c:89:f4:76:f2:17: 36:0a:eb:3d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f/ZHO0nYvFO9jH2pKU6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx NGYwYTAwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzAyNzdmOTgzNTJhYzJhYTI4ZGE3YjU0MmU4ODkwN2NlMTI2MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDZleCiwsPdQML8IAy9SR95osQVt Ei9nO6CWTOsDl//f5qSDFh/KigcKegGqWdPK/HJmyE+QdHqfH5PFWeLUxwgfXHvQ eQLBVQcb4XjERLjh2choqnc/s0QaKLFXfty9SEAzdT+12fTjB1jzOSVBL4H8EwHl MyihSAiEh8Y5PqqebtAMtBlPPbV+9dHZjqcCL10RlZcAjeYux6TqmfszsmVKRls1 ug2VcJHVYhKWB3UrLkWBXQhfcbqUJMzZ0gRbiz692uusMR+xaEbSZHGsE/QPaehG +3vTKg/MIzvRsQvLKaFbj2b/9KQCT1e9crgKwh5+fddAq0dLfmILhBjIsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIcCd/mDUqwqoo2ntULoiQfOEmJoMB8GA1UdIwQY MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt MzNiZGM3M2VkMGVhLzEvaHdKMy1ZTlNyQ3FpamFlMVF1aUpCODRTWW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPlwIiI MA0GCSqGSIb3DQEBCwUAA4IBAQAfzgTQR7DDnETtAqrXeZwp/jeLZWSjsaahSj8s WKAvsnf5jg7buMsYKPPp9x5BwVrjsllVFRdAoSYC1NZaklIuHRV18heouHp6JqGt I25w2B6ghYKBCfRu7GOU+oy1xy5HzMwzjlPclE0+UNhMhkgIqxGdq9RV4cCdeEjC +zfzHjFoGpwSmGjj7LPos5TBVhvU7IIF1oFZkytG7Ez8NF4uz6XsC+rkcgZZu162 i4BP7xdaeW2B5x2TtT0rZHOezSgZMy5mzMPY4gepMyKWBNJn1eDwK30dEvnBDXnO tKERcYhcSgigZn7SGG5B9VRhEQ3Dfv4h/xBcifR28hc2Cus9 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:38 2026 by rpki-client