This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/HRwCntz8pHEtM7UJXh-KwEbXi3w.roa File: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (raw, json) Hash identifier: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ= Subject key identifier: 1D:1C:02:9E:DC:FC:A4:71:2D:33:B5:09:5E:1F:8A:C0:46:D7:8B:7C Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C388228C70D9CA6577F8186EFBA24 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/HRwCntz8pHEtM7UJXh-KwEbXi3w.roa Signing time: Fri 02 Jan 2026 06:19:14 +0000 ROA not before: Fri 02 Jan 2026 06:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212968 IP address blocks: 2a06:1e00:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:38:82:28:c7:0d:9c:a6:57:7f:81:86:ef:ba:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d1c029edcfca4712d33b5095e1f8ac046d78b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:39:2f:7a:08:97:df:a8:d8:89:ad:e3:27: 51:f5:34:78:46:34:67:cf:3e:dc:40:f7:d8:ab:df: ee:65:94:cb:06:32:fb:a2:d4:c8:13:4c:bd:46:66: da:36:86:1d:82:16:1a:82:8c:85:21:7e:f9:50:18: ba:71:81:30:5b:e6:00:56:92:ba:64:2a:d2:e7:78: 29:c2:9a:78:17:ba:c2:0e:e3:22:c1:a0:cc:41:9c: 4a:cc:7b:c0:e7:20:ac:ab:10:70:45:9e:b4:8a:98: fb:f9:08:98:db:2c:2b:4b:75:ba:02:8a:fb:a0:5c: b5:72:b3:52:c6:41:67:39:12:cf:ff:69:a1:51:2a: 2f:39:e0:8c:d5:d7:4d:78:c0:0f:6f:a9:49:3f:f4: 5b:e4:9f:ca:d4:fe:4c:17:a2:40:c1:ad:73:df:f4: ee:3c:d4:ab:23:71:01:30:70:8c:b2:58:85:cd:a6: 62:2c:08:07:72:1d:1f:61:63:ae:89:cf:48:c1:4e: da:23:12:b9:f6:eb:8f:a1:8e:eb:70:16:3e:05:83: bb:72:21:20:57:b3:bb:79:06:83:2f:2f:b7:0d:1f: 9c:b3:eb:86:a9:dc:6f:8f:b4:a6:df:57:ed:56:f3: 2e:31:e5:66:5f:2f:4b:24:74:5d:4d:e2:8c:8d:1c: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1C:02:9E:DC:FC:A4:71:2D:33:B5:09:5E:1F:8A:C0:46:D7:8B:7C X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/HRwCntz8pHEtM7UJXh-KwEbXi3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1e00:2d::/48 Signature Algorithm: sha256WithRSAEncryption 51:12:7b:a2:85:8a:8b:48:67:f9:3e:d0:8b:23:ae:ea:0c:89: a8:5b:85:f2:3d:8e:0e:c4:5b:e6:58:87:73:af:3f:05:9f:05: 01:63:a0:ce:af:94:13:04:6d:fb:92:b1:15:fa:c1:da:2d:48: a7:75:00:39:82:94:10:86:f9:7c:78:dc:df:86:dc:3f:ed:1a: 9e:cd:a5:1f:ab:0d:81:9a:2d:8e:eb:07:4b:12:ab:d6:26:be: 7a:14:a9:14:70:88:fc:42:83:80:ea:b1:34:d3:57:fd:ff:1e: ca:21:c6:f6:30:99:a6:d2:50:6a:f0:f6:e2:a0:35:e0:a9:64: 7b:0a:79:52:b6:c2:4a:69:d6:72:17:15:d6:ea:40:a9:3c:e5: fe:1c:34:e9:38:af:bc:71:ce:d3:ea:7a:d2:77:70:8f:45:88: 69:de:ec:98:87:fc:f8:e2:46:f9:97:54:1e:3f:a2:3d:47:8c: 93:74:b4:bc:18:b1:b5:57:24:7a:e5:8a:6e:20:94:ed:25:7b: ee:1c:9a:ea:71:3c:d3:26:c9:c5:23:f9:04:10:f5:2b:33:54: 7a:3f:23:3d:91:c5:f2:eb:b2:9c:81:64:08:94:9d:4e:2f:bf: 91:58:77:c4:29:43:a5:d4:25:c2:74:c9:72:a1:13:e5:e4:b0: 07:4d:8e:7a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XDiCKMcNnKZXf4GG77okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFjMDI5ZWRjZmNhNDcxMmQzM2I1MDk1ZTFmOGFjMDQ2ZDc4YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKs5L3oIl9+o2Imt4ydR9TR4RjRn zz7cQPfYq9/uZZTLBjL7otTIE0y9RmbaNoYdghYagoyFIX75UBi6cYEwW+YAVpK6 ZCrS53gpwpp4F7rCDuMiwaDMQZxKzHvA5yCsqxBwRZ60ipj7+QiY2ywrS3W6Aor7 oFy1crNSxkFnORLP/2mhUSovOeCM1ddNeMAPb6lJP/Rb5J/K1P5MF6JAwa1z3/Tu PNSrI3EBMHCMsliFzaZiLAgHch0fYWOuic9IwU7aIxK59uuPoY7rcBY+BYO7ciEg V7O7eQaDLy+3DR+cs+uGqdxvj7Sm31ftVvMuMeVmXy9LJHRdTeKMjRzdVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFB0cAp7c/KRxLTO1CV4fisBG14t8MB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvSFJ3Q250ejhwSEV0TTdVSlhoLUt3RWJYaTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgYeAAAt MA0GCSqGSIb3DQEBCwUAA4IBAQBREnuihYqLSGf5PtCLI67qDImoW4XyPY4OxFvm WIdzrz8FnwUBY6DOr5QTBG37krEV+sHaLUindQA5gpQQhvl8eNzfhtw/7RqezaUf qw2Bmi2O6wdLEqvWJr56FKkUcIj8QoOA6rE001f9/x7KIcb2MJmm0lBq8PbioDXg qWR7CnlStsJKadZyFxXW6kCpPOX+HDTpOK+8cc7T6nrSd3CPRYhp3uyYh/z44kb5 l1QeP6I9R4yTdLS8GLG1VyR65YpuIJTtJXvuHJrqcTzTJsnFI/kEEPUrM1R6PyM9 kcXy67KcgWQIlJ1OL7+RWHfEKUOl1CXCdMlyoRPl5LAHTY56 -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:50 2026 by rpki-client