This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/HdU5cxfsxlP0K4CqDFvCNnZmq28.roa File: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (raw, json) Hash identifier: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ= Subject key identifier: 1D:D5:39:73:17:EC:C6:53:F4:2B:80:AA:0C:5B:C2:36:76:66:AB:6F Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Certificate serial: 019B79EC362D37B3D550F5E977F944B7E48A Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/HdU5cxfsxlP0K4CqDFvCNnZmq28.roa Signing time: Thu 01 Jan 2026 14:18:01 +0000 ROA not before: Thu 01 Jan 2026 14:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 2001:67c:eb0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:36:2d:37:b3:d5:50:f5:e9:77:f9:44:b7:e4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dd5397317ecc653f42b80aa0c5bc2367666ab6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:7c:1c:10:fe:14:3d:bb:32:92:3f:d8:db: 85:b9:8f:b7:5c:61:49:99:bd:7d:1a:5e:52:00:7a: cb:af:74:57:ab:16:5b:ad:0f:c2:09:7a:5c:fe:5f: 92:ca:4e:99:72:d7:b6:d2:c3:2e:97:8c:84:99:c1: 0e:cd:06:76:e1:ef:e3:6c:28:83:41:70:a9:a8:8a: 4d:92:d7:e4:51:01:0a:1e:67:70:83:eb:da:aa:ac: f8:f3:fb:7e:cf:af:47:7d:1f:67:c6:42:40:40:0f: 74:ab:e0:44:e7:08:cd:43:1d:c2:8a:57:10:88:70: f0:3f:18:8b:e4:0d:d5:f2:4a:28:b4:48:1b:84:48: 77:cc:80:db:f0:39:b8:3c:72:4f:76:af:a9:ae:f9: 3c:61:76:2b:e9:57:4f:9b:89:52:3e:f0:ae:67:50: 6a:e1:d3:f3:16:fa:1c:e5:29:05:cf:88:fb:e7:43: 77:be:44:7a:0a:10:94:77:33:ca:af:dd:d7:a0:92: 3c:27:b5:ac:ae:8b:bf:e2:3f:81:3e:65:b2:6a:52: f1:a8:29:ac:98:1b:db:0e:be:fd:20:64:71:f1:26: ec:50:f2:6e:e0:e7:66:70:7b:01:fe:47:e3:b2:fd: f5:c1:af:75:bc:ce:56:00:ca:2b:39:af:aa:c2:93: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D5:39:73:17:EC:C6:53:F4:2B:80:AA:0C:5B:C2:36:76:66:AB:6F X509v3 Authority Key Identifier: keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/HdU5cxfsxlP0K4CqDFvCNnZmq28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:eb0::/48 Signature Algorithm: sha256WithRSAEncryption d1:ea:c5:c2:e4:5a:2d:a3:62:bf:b5:a4:26:4c:3d:31:fd:e9: 94:fc:37:fb:d6:1b:08:99:b5:3b:72:97:8f:df:d1:46:b1:0d: 70:cc:fa:6d:59:45:7e:f8:f7:73:29:ec:54:58:e6:e2:1d:dd: ff:3a:37:78:4c:17:a1:f7:56:53:45:a8:66:bc:67:72:f0:db: bd:57:6f:db:55:72:5b:a8:1f:0d:e0:d0:60:4f:b6:f7:01:d7: 6a:9f:6d:ff:db:ca:a9:ab:b4:4d:b7:be:a4:3d:ac:fe:ae:4b: c5:d0:9a:92:18:7d:aa:65:6f:0b:ad:a9:3a:b4:cb:c0:d7:06: 72:5d:1c:9f:b2:8e:02:62:fd:00:a8:5e:28:5c:69:c4:f3:9b: 85:eb:92:b7:5f:cd:5a:b0:99:e5:42:8e:f0:b5:99:48:ac:ae: bb:6e:a9:bd:40:18:d2:e9:62:29:4c:e9:41:1e:f7:e9:d3:3f: 65:4b:07:49:3c:3d:86:2d:42:40:81:99:8e:e4:dc:f2:05:51: fb:6c:32:c9:77:1a:f4:d5:2b:fe:f6:96:a4:73:af:45:65:3a: 7c:c5:98:0a:6d:f4:31:80:31:95:c4:b8:61:87:7e:6a:84:d3: 7e:d3:7a:82:f9:20:1b:91:be:1a:63:9f:3e:38:7f:a2:ea:c7: 50:26:b3:58 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57DYtN7PVUPXpd/lEt+SKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2 MmY4ZTgwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGQ1Mzk3MzE3ZWNjNjUzZjQyYjgwYWEwYzViYzIzNjc2NjZhYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOx8HBD+FD27MpI/2NuFuY+3XGFJ mb19Gl5SAHrLr3RXqxZbrQ/CCXpc/l+Syk6Zcte20sMul4yEmcEOzQZ24e/jbCiD QXCpqIpNktfkUQEKHmdwg+vaqqz48/t+z69HfR9nxkJAQA90q+BE5wjNQx3CilcQ iHDwPxiL5A3V8kootEgbhEh3zIDb8Dm4PHJPdq+prvk8YXYr6VdPm4lSPvCuZ1Bq 4dPzFvoc5SkFz4j750N3vkR6ChCUdzPKr93XoJI8J7Wsrou/4j+BPmWyalLxqCms mBvbDr79IGRx8SbsUPJu4OdmcHsB/kfjsv31wa91vM5WAMorOa+qwpPphwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB3VOXMX7MZT9CuAqgxbwjZ2ZqtvMB8GA1UdIwQY MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt YmZiZDU2OTRhOTRkLzEvSGRVNWN4ZnN4bFAwSzRDcURGdkNOblptcTI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA6w MA0GCSqGSIb3DQEBCwUAA4IBAQDR6sXC5Foto2K/taQmTD0x/emU/Df71hsImbU7 cpeP39FGsQ1wzPptWUV++PdzKexUWObiHd3/Ojd4TBeh91ZTRahmvGdy8Nu9V2/b VXJbqB8N4NBgT7b3Addqn23/28qpq7RNt76kPaz+rkvF0JqSGH2qZW8Lrak6tMvA 1wZyXRyfso4CYv0AqF4oXGnE85uF65K3X81asJnlQo7wtZlIrK67bqm9QBjS6WIp TOlBHvfp0z9lSwdJPD2GLUJAgZmO5NzyBVH7bDLJdxr01Sv+9pakc69FZTp8xZgK bfQxgDGVxLhhh35qhNN+03qC+SAbkb4aY58+OH+i6sdQJrNY -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:10 2026 by rpki-client