This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa File: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (raw, json) Hash identifier: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04= Subject key identifier: 1F:A1:D3:0C:E8:D9:95:0D:95:1B:E0:6D:78:3E:08:D6:74:D1:9F:89 Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Certificate serial: 019B7F1536ED6C655CF679372FF170A3A31C Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60609 IP address blocks: 45.67.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:36:ed:6c:65:5c:f6:79:37:2f:f1:70:a3:a3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa1d30ce8d9950d951be06d783e08d674d19f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:82:0b:f3:48:99:78:28:ab:95:b8:8e:dd: 0e:fb:50:78:45:32:bd:b6:4f:ea:a7:b2:a5:71:89: f4:73:48:19:91:ca:7a:44:ff:a8:c6:67:22:0d:f8: b1:bf:1b:0d:e3:09:6b:fc:96:48:6d:2d:80:7f:1b: 36:37:8a:98:43:8e:0f:a0:82:00:67:be:0d:62:0e: 37:e4:41:83:62:4e:82:15:b6:d8:d3:37:28:bc:85: 4d:c5:35:c7:d0:1c:9d:ae:98:b0:2e:c5:2d:d0:57: 70:2b:5e:38:a7:fb:f3:f6:5c:56:b6:95:0d:41:f8: 6a:e6:cd:4a:09:67:9f:07:ce:fc:69:eb:56:9f:f3: 81:b5:68:c9:48:85:6d:dc:26:31:ab:47:53:32:3a: 40:a8:5b:7a:05:40:69:ef:ec:00:19:d4:73:96:7a: 77:77:70:34:54:3b:04:32:50:34:47:5d:4f:64:67: ab:2a:9f:32:d3:31:ec:d6:40:06:2f:c5:e5:74:17: d2:e8:77:df:0d:c1:c4:8a:54:45:0f:58:ea:64:64: 33:bf:46:db:39:55:bb:b5:47:c1:80:fa:f1:b0:be: cf:2e:32:65:e7:ab:3f:83:d6:4b:dc:ba:e7:5f:99: ae:ed:2b:62:1d:9f:f1:f0:80:31:68:62:f8:04:fb: 65:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:D3:0C:E8:D9:95:0D:95:1B:E0:6D:78:3E:08:D6:74:D1:9F:89 X509v3 Authority Key Identifier: keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.148.0/22 Signature Algorithm: sha256WithRSAEncryption 54:a9:74:49:1d:3f:36:66:35:bb:bf:2a:e6:05:a9:88:c1:e3: 62:b2:01:8f:12:39:cb:93:ad:9f:0a:55:05:16:19:52:9b:51: 84:c9:3a:ce:4f:4f:00:ae:92:05:f8:20:28:78:00:4e:32:34: 71:d5:35:2d:75:25:7c:c1:2a:27:b3:4b:b7:67:5e:9c:0e:95: 92:2e:a9:8c:1c:88:d3:1b:c4:e6:9e:ce:07:1b:b7:0b:1d:0d: 72:ab:37:bf:a9:04:a6:f9:e5:13:ea:3f:ab:5d:f9:6e:99:ef: 1f:29:f6:b2:48:28:13:6e:c3:d9:9b:60:85:a3:dc:84:45:19: eb:df:f3:1d:1a:ca:ac:d0:85:79:98:bf:55:0a:f8:83:ab:66: 24:eb:0c:01:c9:ae:00:96:3d:87:89:f4:5b:32:87:2b:c2:4a: 57:fb:2d:fc:a9:85:88:68:99:3e:d3:50:af:92:95:e4:f8:ff: ee:45:7b:45:81:57:08:da:e9:ed:eb:f1:41:ef:c2:f2:a1:30: e0:85:4a:f9:85:5b:ea:14:b3:8e:33:d4:55:90:6a:8f:a9:31: 2a:3f:6a:57:6b:09:73:51:30:32:b8:32:2b:5b:98:5c:6c:66: e1:82:f9:74:b6:50:28:a8:7d:3f:6a:42:86:74:a0:64:4f:5e: 41:e6:bc:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTbtbGVc9nk3L/Fwo6McMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx ZTFiODkwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmExZDMwY2U4ZDk5NTBkOTUxYmUwNmQ3ODNlMDhkNjc0ZDE5Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnKCC/NImXgoq5W4jt0O+1B4RTK9 tk/qp7KlcYn0c0gZkcp6RP+oxmciDfixvxsN4wlr/JZIbS2Afxs2N4qYQ44PoIIA Z74NYg435EGDYk6CFbbY0zcovIVNxTXH0BydrpiwLsUt0FdwK144p/vz9lxWtpUN Qfhq5s1KCWefB878aetWn/OBtWjJSIVt3CYxq0dTMjpAqFt6BUBp7+wAGdRzlnp3 d3A0VDsEMlA0R11PZGerKp8y0zHs1kAGL8XldBfS6HffDcHEilRFD1jqZGQzv0bb OVW7tUfBgPrxsL7PLjJl56s/g9ZL3LrnX5mu7StiHZ/x8IAxaGL4BPtlHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+h0wzo2ZUNlRvgbXg+CNZ00Z+JMB8GA1UdIwQY MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt NjhhYmU1MmQzMDM0LzEvSDZIVERPalpsUTJWRy1CdGVENEkxblRSbjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0 LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUOUMA0G CSqGSIb3DQEBCwUAA4IBAQBUqXRJHT82ZjW7vyrmBamIweNisgGPEjnLk62fClUF FhlSm1GEyTrOT08ArpIF+CAoeABOMjRx1TUtdSV8wSons0u3Z16cDpWSLqmMHIjT G8Tmns4HG7cLHQ1yqze/qQSm+eUT6j+rXflume8fKfaySCgTbsPZm2CFo9yERRnr 3/MdGsqs0IV5mL9VCviDq2Yk6wwBya4Alj2HifRbMocrwkpX+y38qYWIaJk+01Cv kpXk+P/uRXtFgVcI2unt6/FB78LyoTDghUr5hVvqFLOOM9RVkGqPqTEqP2pXawlz UTAyuDIrW5hcbGbhgvl0tlAoqH0/akKGdKBkT15B5rxO -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:42 2026 by rpki-client