This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/hnX6AgrOaoGB1pS6d2IohDyU9YY.roa File: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (raw, json) Hash identifier: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc= Subject key identifier: 86:75:FA:02:0A:CE:6A:81:81:D6:94:BA:77:62:28:84:3C:94:F5:86 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019B7AC8632754BFA7928D24084CAADD6297 Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/hnX6AgrOaoGB1pS6d2IohDyU9YY.roa Signing time: Thu 01 Jan 2026 18:18:31 +0000 ROA not before: Thu 01 Jan 2026 18:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 81.31.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:63:27:54:bf:a7:92:8d:24:08:4c:aa:dd:62:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8675fa020ace6a8181d694ba776228843c94f586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:9e:d9:77:6a:e2:73:a6:42:2d:a9:35:32: d1:dd:dd:b2:df:c9:3e:5f:2b:02:89:cf:cd:c3:82: 1e:7f:f6:61:34:bd:b3:3a:a3:ea:86:f6:52:ca:ca: 86:59:62:69:91:6c:58:3b:0c:94:14:19:24:cf:18: 86:0b:fe:14:33:d6:7d:c8:1b:27:48:58:e3:62:44: a8:88:a8:08:6e:2d:f8:03:3b:d8:4d:02:27:aa:04: ec:a0:68:ec:71:99:f5:ad:91:79:b5:c9:ac:0a:97: 5d:46:cf:6a:3f:00:d6:44:40:41:3d:00:6a:af:f0: e8:05:7d:4f:06:20:63:c2:3b:6f:31:c2:df:5c:7c: f7:81:8b:dc:1c:85:64:ca:80:94:84:22:b6:a1:03: 5e:be:11:a5:8c:13:15:cd:5f:27:b5:6a:c8:6b:00: 12:df:78:05:1f:dc:fe:ae:e7:44:99:28:27:0d:69: 01:1e:c1:cb:88:72:bf:2c:ec:ac:f7:09:93:1f:60: 6b:e2:01:c6:c4:70:7a:31:65:ae:db:65:e0:de:19: e4:34:74:66:60:93:f2:e9:cc:59:20:71:e4:23:13: 65:fe:ca:88:a7:48:14:fb:47:41:ad:2c:6b:cd:b8: 57:b3:d9:e1:49:ec:80:93:ae:8f:94:62:0d:22:0b: 9f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:FA:02:0A:CE:6A:81:81:D6:94:BA:77:62:28:84:3C:94:F5:86 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/hnX6AgrOaoGB1pS6d2IohDyU9YY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 50:4a:1d:ec:56:2e:40:cc:48:51:8a:6b:5b:2f:5d:45:37:14: 18:c0:bb:cc:aa:a8:f5:6b:eb:4e:50:da:2a:6e:d5:d7:d8:c7: 84:84:24:d2:55:13:e5:e0:cb:ab:4c:95:f6:25:f5:e4:85:2a: 00:4b:58:d2:b9:9c:3e:4b:d6:bb:10:ba:8d:bb:a3:11:dc:58: 1c:e4:ad:ee:20:74:2b:7f:22:be:d4:4e:67:1c:99:40:17:73: 05:0a:10:07:0a:4d:de:cb:cc:8e:c8:41:77:79:d1:d5:45:46: 46:ed:a0:a5:e7:5a:c0:92:7f:83:65:b1:9b:06:4b:03:65:16: 00:1a:de:76:66:09:7f:da:f8:9d:ed:07:f1:dc:4d:fd:16:66: a9:09:d3:5d:66:8d:2e:28:94:b8:91:ab:df:f2:36:f2:ef:7c: 53:e5:19:1f:bb:13:55:73:67:43:fa:4a:d7:ec:7a:85:42:f4: e6:ba:09:ad:49:fb:30:38:91:83:94:70:7e:e8:bf:be:ea:6e: 94:dc:90:98:59:92:51:9c:0a:2d:c5:9f:45:dc:c2:ff:01:eb: ab:05:34:3d:59:d3:db:f9:05:f8:3f:db:34:48:a1:c8:65:a1: 9b:8b:35:19:b9:5c:51:f2:4e:51:83:b9:a1:a5:a5:e5:2e:96: 55:b3:99:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGMnVL+nko0kCEyq3WKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njc1ZmEwMjBhY2U2YTgxODFkNjk0YmE3NzYyMjg4NDNjOTRmNTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Aee2Xdq4nOmQi2pNTLR3d2y38k+ XysCic/Nw4Ief/ZhNL2zOqPqhvZSysqGWWJpkWxYOwyUFBkkzxiGC/4UM9Z9yBsn SFjjYkSoiKgIbi34AzvYTQInqgTsoGjscZn1rZF5tcmsCpddRs9qPwDWREBBPQBq r/DoBX1PBiBjwjtvMcLfXHz3gYvcHIVkyoCUhCK2oQNevhGljBMVzV8ntWrIawAS 33gFH9z+rudEmSgnDWkBHsHLiHK/LOys9wmTH2Br4gHGxHB6MWWu22Xg3hnkNHRm YJPy6cxZIHHkIxNl/sqIp0gU+0dBrSxrzbhXs9nhSeyAk66PlGINIgufZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIZ1+gIKzmqBgdaUundiKIQ8lPWGMB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvaG5YNkFnck9hb0dCMXBTNmQySW9oRHlVOVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUR+AMA0G CSqGSIb3DQEBCwUAA4IBAQBQSh3sVi5AzEhRimtbL11FNxQYwLvMqqj1a+tOUNoq btXX2MeEhCTSVRPl4MurTJX2JfXkhSoAS1jSuZw+S9a7ELqNu6MR3Fgc5K3uIHQr fyK+1E5nHJlAF3MFChAHCk3ey8yOyEF3edHVRUZG7aCl51rAkn+DZbGbBksDZRYA Gt52Zgl/2vid7Qfx3E39FmapCdNdZo0uKJS4kavf8jby73xT5RkfuxNVc2dD+krX 7HqFQvTmugmtSfswOJGDlHB+6L++6m6U3JCYWZJRnAotxZ9F3ML/AeurBTQ9WdPb +QX4P9s0SKHIZaGbizUZuVxR8k5Rg7mhpaXlLpZVs5lz -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:26 2026 by rpki-client