This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/HB0FIxc95bfbXI-7nw5kY1VNoMs.roa File: HB0FIxc95bfbXI-7nw5kY1VNoMs.roa (raw, json) Hash identifier: 236zwT5kbl7DOv0ChJB+B8PFAcfi388Ks1QJGiJxQlM= Subject key identifier: 1C:1D:05:23:17:3D:E5:B7:DB:5C:8F:BB:9F:0E:64:63:55:4D:A0:CB Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B7F848B6047A574765D95D0D6E3C5CAB5 Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/HB0FIxc95bfbXI-7nw5kY1VNoMs.roa Signing time: Fri 02 Jan 2026 16:22:31 +0000 ROA not before: Fri 02 Jan 2026 16:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215246 IP address blocks: 2a0c:e304:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8b:60:47:a5:74:76:5d:95:d0:d6:e3:c5:ca:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 2 16:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c1d0523173de5b7db5c8fbb9f0e6463554da0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:24:10:ce:1e:d4:38:c4:ca:13:db:62:fe: 29:85:ad:35:fc:ff:83:3a:7d:40:0b:3e:91:89:04: c4:29:ef:2d:49:33:7e:92:87:48:70:60:e2:a6:86: b0:c2:aa:d4:a4:df:54:7e:40:fb:fc:44:e8:bd:d1: b2:24:9b:84:5d:df:7e:1d:2e:f6:6f:39:1b:ac:b2: a8:38:3e:c7:9d:7a:b7:74:b6:f2:4e:fe:e2:20:89: 1a:2d:f7:ae:80:9b:b5:33:9c:1f:fc:6c:cb:4f:fe: bb:71:c1:ee:64:87:3c:a8:37:cb:a5:3c:48:86:5f: d4:b5:c4:7f:de:54:b0:85:32:69:18:b8:83:a8:ba: 36:82:b3:f9:4e:38:b6:9c:82:11:64:00:1d:8a:41: a8:1a:4f:55:b9:43:12:bd:4f:65:41:96:22:07:36: 77:2c:b6:58:da:d5:0e:2f:ac:da:35:39:2c:11:89: a6:cb:fd:0b:02:20:a6:68:1b:b4:af:87:1c:cb:a2: 83:4b:07:a4:16:bc:63:02:7f:e6:05:2f:df:f0:04: af:d5:d9:e6:9c:17:42:e3:01:91:c2:7f:86:cc:e7: 23:13:d9:ba:a6:06:e5:19:37:0f:6f:86:b1:f1:cc: 04:a7:35:8a:85:f0:f6:c6:fe:91:75:62:ad:1d:b7: 8e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1D:05:23:17:3D:E5:B7:DB:5C:8F:BB:9F:0E:64:63:55:4D:A0:CB X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/HB0FIxc95bfbXI-7nw5kY1VNoMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:e304:2::/48 Signature Algorithm: sha256WithRSAEncryption 1c:ed:7a:e6:7c:b5:74:95:63:1b:0e:d4:2d:ed:62:f8:09:78: 04:21:30:de:45:5e:92:af:87:ae:47:59:aa:0d:cc:fa:22:79: dd:f2:b7:64:2f:9c:f8:1d:fa:02:04:80:19:c9:de:09:65:6e: 0d:2f:9a:79:a9:81:2e:d2:b4:06:7c:c9:da:bd:69:3c:a8:56: 72:0b:8f:0d:8d:28:e0:81:a6:ef:8d:a9:80:bb:d9:6b:9b:a5: ed:3c:57:e4:fd:fe:7a:65:3e:e7:05:62:ed:aa:23:d9:06:05: 67:bd:f5:ae:35:68:c3:2a:00:96:d2:7f:af:d2:3a:ce:ec:6d: e5:9c:2d:1e:c4:33:be:99:4b:f3:be:99:8f:a7:1b:65:58:cf: 16:e5:6b:a8:b8:d9:48:26:3d:7c:68:7b:07:fe:2d:dc:55:df: eb:9c:e8:ac:6f:1d:dd:56:52:51:e8:c1:cb:41:6c:96:96:b1: eb:ba:f3:11:3d:99:63:a9:42:e6:b2:ae:fe:8d:b8:5e:72:5c: a9:0e:ae:7f:8c:13:b4:66:f1:5a:8f:87:02:d3:79:f0:d2:c1: 30:e9:19:05:5a:e8:61:43:1b:b2:53:7f:7b:f8:30:8f:c9:50: ac:42:4b:9f:72:0f:d0:74:c2:d5:8f:ad:c4:38:41:a3:06:30: 38:fd:cd:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hItgR6V0dl2V0Nbjxcq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTAyMTYyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzFkMDUyMzE3M2RlNWI3ZGI1YzhmYmI5ZjBlNjQ2MzU1NGRhMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqgkEM4e1DjEyhPbYv4pha01/P+D On1ACz6RiQTEKe8tSTN+kodIcGDipoawwqrUpN9UfkD7/ETovdGyJJuEXd9+HS72 bzkbrLKoOD7HnXq3dLbyTv7iIIkaLfeugJu1M5wf/GzLT/67ccHuZIc8qDfLpTxI hl/UtcR/3lSwhTJpGLiDqLo2grP5Tji2nIIRZAAdikGoGk9VuUMSvU9lQZYiBzZ3 LLZY2tUOL6zaNTksEYmmy/0LAiCmaBu0r4ccy6KDSwekFrxjAn/mBS/f8ASv1dnm nBdC4wGRwn+GzOcjE9m6pgblGTcPb4ax8cwEpzWKhfD2xv6RdWKtHbeOhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBwdBSMXPeW321yPu58OZGNVTaDLMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvSEIwRkl4Yzk1YmZiWEktN253NWtZMVZOb01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgzjBAAC MA0GCSqGSIb3DQEBCwUAA4IBAQAc7XrmfLV0lWMbDtQt7WL4CXgEITDeRV6Sr4eu R1mqDcz6Innd8rdkL5z4HfoCBIAZyd4JZW4NL5p5qYEu0rQGfMnavWk8qFZyC48N jSjggabvjamAu9lrm6XtPFfk/f56ZT7nBWLtqiPZBgVnvfWuNWjDKgCW0n+v0jrO 7G3lnC0exDO+mUvzvpmPpxtlWM8W5WuouNlIJj18aHsH/i3cVd/rnOisbx3dVlJR 6MHLQWyWlrHruvMRPZljqULmsq7+jbheclypDq5/jBO0ZvFaj4cC03nw0sEw6RkF WuhhQxuyU397+DCPyVCsQkufcg/QdMLVj63EOEGjBjA4/c3Q -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:22 2026 by rpki-client