This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/HlDH52s4uBY0o3RXjaTnpkpnjvE.roa File: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (raw, json) Hash identifier: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI= Subject key identifier: 1E:50:C7:E7:6B:38:B8:16:34:A3:74:57:8D:A4:E7:A6:4A:67:8E:F1 Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b Certificate serial: 019B7C800FFDB512D52BEA4F6D4DE6D32415 Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/HlDH52s4uBY0o3RXjaTnpkpnjvE.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5619 IP address blocks: 2a00:97c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0f:fd:b5:12:d5:2b:ea:4f:6d:4d:e6:d3:24:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e50c7e76b38b81634a374578da4e7a64a678ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:af:60:83:af:09:33:81:69:08:6a:17:99: fb:58:01:03:2c:98:04:fe:d3:9e:8b:b8:27:3f:db: 4c:26:e8:b1:49:11:e4:27:70:e8:69:14:f0:66:26: cc:03:a6:fd:64:19:e4:bd:58:6e:6c:72:24:de:6e: 40:7f:31:5d:94:12:f5:4b:58:b5:df:01:c1:a5:35: 2f:41:9f:e4:10:a3:27:c6:58:29:38:50:13:3c:39: e0:08:1c:38:11:7b:9b:c8:34:2f:19:11:09:e1:ff: 2a:d9:5f:b5:31:db:6c:dc:22:9a:b4:9c:18:fa:5d: 86:ed:6e:8a:93:95:da:d3:75:80:09:b8:95:d0:e2: 7f:28:3a:eb:db:9c:f7:0d:31:a1:66:9d:e8:d9:a6: b4:d4:a5:2a:64:22:b2:11:e0:ad:05:c8:ee:26:8a: 61:fa:82:8d:27:0a:2d:e7:1c:c2:06:57:1d:fa:7c: 59:68:a7:37:cc:97:15:1b:a7:d9:60:0b:d9:28:1b: b1:15:05:08:ab:fd:51:98:c2:08:a7:f6:b8:3d:62: 1e:ce:77:1f:b5:5d:f0:68:36:bd:96:40:c6:e9:c7: 6a:53:6f:13:47:62:77:83:4e:af:17:c5:7c:f7:11: 62:43:ec:97:69:e8:31:62:48:05:28:7c:3f:04:ea: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:C7:E7:6B:38:B8:16:34:A3:74:57:8D:A4:E7:A6:4A:67:8E:F1 X509v3 Authority Key Identifier: keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/HlDH52s4uBY0o3RXjaTnpkpnjvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:26:4a:c2:c3:59:73:3d:53:49:51:1b:d3:95:2b:09:14:a3: 68:b9:d6:75:63:1e:12:28:cf:6e:0e:48:0b:a9:60:1e:8b:29: 8f:15:a8:f1:6f:a0:cd:cf:ed:07:1d:56:3c:01:3f:52:4f:34: 6c:f1:12:9e:4b:6a:76:32:75:da:b3:d6:13:d9:a9:11:b1:89: 59:09:99:86:87:d5:1f:1a:97:e5:5b:d8:1c:7d:22:96:85:b7: 2a:f2:92:79:6d:23:9f:81:97:d5:5c:19:92:a3:f8:32:63:aa: a4:94:f2:4a:29:ea:61:0a:f1:5a:ad:25:a0:27:a0:dd:e7:63: df:dd:02:08:12:2d:47:09:d6:62:28:b0:82:18:cd:74:4d:7c: c0:ce:ac:1a:f9:d6:30:21:a8:1c:07:9d:1e:57:14:66:b1:38: 53:15:69:d8:29:7a:72:a7:00:06:ab:9b:6d:40:cd:59:52:6a: 51:19:fa:6f:e2:53:30:07:31:39:91:f8:84:ce:51:0a:55:51: 27:fb:4c:78:1c:fc:0f:48:5f:49:a4:fb:c7:2f:1a:b5:26:8d: f8:88:b4:fa:68:80:f0:8e:00:3d:7a:0a:3c:d7:94:1a:82:7a: 4f:84:5c:69:b6:14:8c:87:53:7a:89:67:b5:9b:d5:92:e2:7c: f0:13:98:79 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gA/9tRLVK+pPbU3m0yQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj MzYyMmIwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUwYzdlNzZiMzhiODE2MzRhMzc0NTc4ZGE0ZTdhNjRhNjc4ZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaWvYIOvCTOBaQhqF5n7WAEDLJgE /tOei7gnP9tMJuixSRHkJ3DoaRTwZibMA6b9ZBnkvVhubHIk3m5AfzFdlBL1S1i1 3wHBpTUvQZ/kEKMnxlgpOFATPDngCBw4EXubyDQvGREJ4f8q2V+1Mdts3CKatJwY +l2G7W6Kk5Xa03WACbiV0OJ/KDrr25z3DTGhZp3o2aa01KUqZCKyEeCtBcjuJoph +oKNJwot5xzCBlcd+nxZaKc3zJcVG6fZYAvZKBuxFQUIq/1RmMIIp/a4PWIezncf tV3waDa9lkDG6cdqU28TR2J3g06vF8V89xFiQ+yXaegxYkgFKHw/BOpaSQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFB5Qx+drOLgWNKN0V42k56ZKZ47xMB8GA1UdIwQY MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt ZWYwNjNlNzg2ZTU0LzEvSGxESDUyczR1QlkwbzNSWGphVG5wa3BuanZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0 LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCXwDAN BgkqhkiG9w0BAQsFAAOCAQEAXiZKwsNZcz1TSVEb05UrCRSjaLnWdWMeEijPbg5I C6lgHospjxWo8W+gzc/tBx1WPAE/Uk80bPESnktqdjJ12rPWE9mpEbGJWQmZhofV HxqX5VvYHH0iloW3KvKSeW0jn4GX1VwZkqP4MmOqpJTySinqYQrxWq0loCeg3edj 390CCBItRwnWYiiwghjNdE18wM6sGvnWMCGoHAedHlcUZrE4UxVp2Cl6cqcABqub bUDNWVJqURn6b+JTMAcxOZH4hM5RClVRJ/tMeBz8D0hfSaT7xy8atSaN+Ii0+miA 8I4APXoKPNeUGoJ6T4RcabYUjIdTeolntZvVkuJ88BOYeQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:56 2026 by rpki-client