This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Hxy4OYK276xESCf3Anb_fwGbVFA.roa File: Hxy4OYK276xESCf3Anb_fwGbVFA.roa (raw, json) Hash identifier: OEZqLe2GA3/g06uklHFF+Qr+gAumMT+wNuHWtE1vS0I= Subject key identifier: 1F:1C:B8:39:82:B6:EF:AC:44:48:27:F7:02:76:FF:7F:01:9B:54:50 Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 019B76EB626606F1175EDC5CFF6C42EDC30C Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Hxy4OYK276xESCf3Anb_fwGbVFA.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51391 IP address blocks: 2a0b:6b86:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:62:66:06:f1:17:5e:dc:5c:ff:6c:42:ed:c3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1cb83982b6efac444827f70276ff7f019b5450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:43:7f:d2:d4:39:2b:26:72:b4:e8:cc:44:db: e6:bf:b4:3e:b7:19:93:3b:64:0f:3e:ba:09:82:30: 7d:a0:cb:00:4b:47:27:97:03:89:34:fc:b6:cb:cf: f1:13:26:3c:91:71:03:03:60:a7:74:79:37:6c:14: f3:ab:b2:16:95:f7:15:3b:09:83:5a:5a:cf:71:f1: bf:5e:77:44:14:00:a0:36:dd:f9:1a:6f:77:6b:e5: 42:f2:c2:69:88:f2:58:15:51:b8:96:6b:6c:9c:f7: 67:4c:0e:53:08:5a:e0:b2:89:61:bb:be:62:3e:c1: 7d:84:33:22:4c:69:8b:97:b1:1b:57:f6:15:ce:07: a2:81:43:f8:da:74:73:5d:33:65:4c:97:71:e5:82: 40:3f:55:05:6d:7f:66:23:97:c6:b6:d1:39:32:4e: c3:d8:35:2f:3f:ab:64:21:d6:14:2a:ed:b2:bc:b9: 03:5a:a0:08:1c:a4:2d:49:53:cb:ad:8f:2b:27:ee: 1f:0f:63:bc:20:80:b6:72:2c:cd:ce:4e:01:2f:cf: 67:b7:0a:c8:79:18:c5:96:06:39:05:55:b6:77:ea: 98:ed:bb:7c:c7:cd:56:96:08:95:5b:08:71:4d:e0: b6:d2:d3:0e:50:48:46:c4:7b:04:4a:cb:ad:20:e9: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1C:B8:39:82:B6:EF:AC:44:48:27:F7:02:76:FF:7F:01:9B:54:50 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Hxy4OYK276xESCf3Anb_fwGbVFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:6b86:100::/40 Signature Algorithm: sha256WithRSAEncryption 5b:ac:90:00:39:15:76:d1:31:c7:a5:f8:91:c7:2d:75:ea:53: ec:f3:e9:70:6a:7b:00:06:e8:b2:7d:f7:fc:87:0b:85:1c:9d: ea:fd:15:dd:a7:53:c9:c5:6e:25:4a:6b:85:1d:c6:cd:63:1c: 44:02:a5:a2:b5:5f:a1:95:a8:11:9a:48:a3:ef:09:93:12:9f: e5:27:fa:63:22:26:fe:33:df:23:c9:18:51:37:25:d0:85:44: bb:4e:52:af:b6:52:6b:7e:af:ff:a9:70:37:f3:93:10:68:95: 16:b2:e3:a3:85:79:fd:18:18:24:3f:47:2a:e9:19:02:c5:52: 0d:9d:2c:b9:59:25:23:77:8c:ed:fb:19:24:f4:f6:4e:9d:58: 97:72:0a:f6:38:ae:a8:e8:cd:16:f4:f4:f4:16:9c:ef:2f:9b: 0f:07:1e:68:c2:72:18:01:74:d4:24:f5:df:42:ca:94:af:27: 97:d4:a3:48:a5:c9:5a:e9:96:dc:4c:0d:2c:28:3b:5a:34:b7: c0:e9:bc:21:6a:a4:af:b6:7a:43:bd:69:ba:cb:5f:d7:c5:3e: 4e:e0:8b:43:70:ae:1d:eb:61:f2:d1:33:31:d2:bb:8f:5b:95: 24:7d:ae:32:29:0a:78:c3:47:49:3b:63:b5:c5:e6:4b:cb:58: 65:1f:9a:67 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt262JmBvEXXtxc/2xC7cMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjFjYjgzOTgyYjZlZmFjNDQ0ODI3ZjcwMjc2ZmY3ZjAxOWI1NDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikN/0tQ5KyZytOjMRNvmv7Q+txmT O2QPProJgjB9oMsAS0cnlwOJNPy2y8/xEyY8kXEDA2CndHk3bBTzq7IWlfcVOwmD WlrPcfG/XndEFACgNt35Gm93a+VC8sJpiPJYFVG4lmtsnPdnTA5TCFrgsolhu75i PsF9hDMiTGmLl7EbV/YVzgeigUP42nRzXTNlTJdx5YJAP1UFbX9mI5fGttE5Mk7D 2DUvP6tkIdYUKu2yvLkDWqAIHKQtSVPLrY8rJ+4fD2O8IIC2cizNzk4BL89ntwrI eRjFlgY5BVW2d+qY7bt8x81WlgiVWwhxTeC20tMOUEhGxHsESsutIOkfvwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFB8cuDmCtu+sREgn9wJ2/38Bm1RQMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvSHh5NE9ZSzI3NnhFU0NmM0FuYl9md0diVkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgtrhgEw DQYJKoZIhvcNAQELBQADggEBAFuskAA5FXbRMcel+JHHLXXqU+zz6XBqewAG6LJ9 9/yHC4Ucner9Fd2nU8nFbiVKa4Udxs1jHEQCpaK1X6GVqBGaSKPvCZMSn+Un+mMi Jv4z3yPJGFE3JdCFRLtOUq+2Umt+r/+pcDfzkxBolRay46OFef0YGCQ/RyrpGQLF Ug2dLLlZJSN3jO37GST09k6dWJdyCvY4rqjozRb09PQWnO8vmw8HHmjCchgBdNQk 9d9CypSvJ5fUo0ilyVrpltxMDSwoO1o0t8DpvCFqpK+2ekO9abrLX9fFPk7gi0Nw rh3rYfLRMzHSu49blSR9rjIpCnjDR0k7Y7XF5kvLWGUfmmc= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:01 2026 by rpki-client