This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/HWctAdx2obrE3iukcBA26ddQb60.roa File: HWctAdx2obrE3iukcBA26ddQb60.roa (raw, json) Hash identifier: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY= Subject key identifier: 1D:67:2D:01:DC:76:A1:BA:C4:DE:2B:A4:70:10:36:E9:D7:50:6F:AD Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019B77592B9427274FD2717DB42651C5CD3D Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/HWctAdx2obrE3iukcBA26ddQb60.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44643 IP address blocks: 31.6.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:94:27:27:4f:d2:71:7d:b4:26:51:c5:cd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d672d01dc76a1bac4de2ba4701036e9d7506fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:17:20:77:74:d5:00:64:ed:da:17:6c:27: be:d7:1f:d1:43:51:64:50:6f:43:8f:67:ed:12:1b: 6c:9d:9c:26:f8:cd:4d:f2:41:43:85:03:e8:e7:a1: 64:70:de:4b:c0:f7:05:77:7e:58:70:8c:b7:e1:b1: 24:68:c3:d2:1b:61:f1:a5:15:a0:1b:80:c9:a0:7b: 41:32:2f:0b:9b:fa:58:f9:4c:de:cc:1c:44:be:f5: 8a:f4:a4:a1:a2:13:90:9c:97:b3:2d:6d:40:94:d4: 27:ae:38:50:1e:e2:09:d9:07:3e:db:ae:4b:3b:b5: 02:ea:7a:fe:f4:0d:fa:16:95:1e:ad:af:e4:9c:b2: ef:de:f5:a6:61:43:fc:5d:2c:f1:a9:48:dc:fe:3b: 1b:fd:a1:d0:92:5c:85:02:ab:a3:78:95:13:d3:34: 10:3c:a2:7c:41:7c:e7:b1:4a:f8:39:d7:4d:45:6c: d9:1f:b7:eb:ba:6b:d1:09:c5:21:e6:2f:33:fd:85: 68:e1:73:e2:1c:ca:2c:90:71:28:ad:e1:e9:10:9a: 57:df:93:63:9c:f9:5a:38:dd:92:79:4e:f8:c2:8c: 80:c7:13:7e:f4:df:a6:b6:47:2a:87:fc:c1:29:f9: 09:2b:c7:2a:3a:03:fc:52:63:a4:0c:30:97:40:4a: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:2D:01:DC:76:A1:BA:C4:DE:2B:A4:70:10:36:E9:D7:50:6F:AD X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/HWctAdx2obrE3iukcBA26ddQb60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.248.0/22 Signature Algorithm: sha256WithRSAEncryption 52:50:a1:f7:02:da:29:5e:8f:fb:c9:10:f4:e5:8c:57:a4:06: 10:86:0d:a1:41:33:93:ff:8c:c8:32:31:4b:db:02:76:9a:a8: d9:c6:a6:cf:e5:6e:d5:b8:7e:4f:63:70:24:d8:b2:8a:a1:ae: 71:a9:4a:86:3d:48:49:49:63:65:4a:0c:ab:a2:66:2b:e5:02: 6c:00:99:91:6c:76:31:2d:b4:01:13:a0:b5:7c:3a:ca:19:46: 47:09:4b:cb:a4:c6:a8:6a:7f:98:9b:de:22:0e:a5:18:1b:23: da:7d:af:a7:65:3e:f1:c6:81:36:8e:72:d5:9f:30:09:49:63: 35:6e:a2:91:6f:d5:85:77:8f:53:51:58:ed:1f:af:b4:3f:c0: 73:e3:a1:e2:58:3a:21:83:e6:b2:15:0e:4f:7b:e6:f2:ca:ab: b8:ca:1f:a4:16:b9:e2:3a:ab:66:ac:0b:91:2e:e6:8d:4f:a8: 83:cc:4b:41:3e:77:e9:be:d4:44:c7:14:87:a4:b9:6a:db:c1: 5e:73:1a:1c:3a:75:b0:a4:d5:73:94:29:ae:65:77:0a:c9:9d: e5:65:1e:bc:9f:be:c2:79:54:bf:86:d3:69:83:56:1a:94:c1: 4c:d7:4d:16:cd:d9:45:21:48:0b:cf:64:ea:9a:1c:d5:d9:45: 43:24:84:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSuUJydP0nF9tCZRxc09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDY3MmQwMWRjNzZhMWJhYzRkZTJiYTQ3MDEwMzZlOWQ3NTA2ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUsXIHd01QBk7doXbCe+1x/RQ1Fk UG9Dj2ftEhtsnZwm+M1N8kFDhQPo56FkcN5LwPcFd35YcIy34bEkaMPSG2HxpRWg G4DJoHtBMi8Lm/pY+UzezBxEvvWK9KShohOQnJezLW1AlNQnrjhQHuIJ2Qc+265L O7UC6nr+9A36FpUera/knLLv3vWmYUP8XSzxqUjc/jsb/aHQklyFAqujeJUT0zQQ PKJ8QXznsUr4OddNRWzZH7frumvRCcUh5i8z/YVo4XPiHMoskHEoreHpEJpX35Nj nPlaON2SeU74woyAxxN+9N+mtkcqh/zBKfkJK8cqOgP8UmOkDDCXQEqPvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1nLQHcdqG6xN4rpHAQNunXUG+tMB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvSFdjdEFkeDJvYnJFM2l1a2NCQTI2ZGRRYjYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHwb4MA0G CSqGSIb3DQEBCwUAA4IBAQBSUKH3AtopXo/7yRD05YxXpAYQhg2hQTOT/4zIMjFL 2wJ2mqjZxqbP5W7VuH5PY3Ak2LKKoa5xqUqGPUhJSWNlSgyromYr5QJsAJmRbHYx LbQBE6C1fDrKGUZHCUvLpMaoan+Ym94iDqUYGyPafa+nZT7xxoE2jnLVnzAJSWM1 bqKRb9WFd49TUVjtH6+0P8Bz46HiWDohg+ayFQ5Pe+byyqu4yh+kFrniOqtmrAuR LuaNT6iDzEtBPnfpvtRExxSHpLlq28FecxocOnWwpNVzlCmuZXcKyZ3lZR68n77C eVS/htNpg1YalMFM100WzdlFIUgLz2TqmhzV2UVDJIRT -----END CERTIFICATE-----Generated at Mon Jan 26 15:16:41 2026 by rpki-client