This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/hpJdcso_n4malOGRsLM9jlcq2PA.roa File: hpJdcso_n4malOGRsLM9jlcq2PA.roa (raw, json) Hash identifier: fdvBY/m75V1oPyWW90Ox8zMppAT8R3oNsWGUpS0XZeM= Subject key identifier: 86:92:5D:72:CA:3F:9F:89:9A:94:E1:91:B0:B3:3D:8E:57:2A:D8:F0 Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc Certificate serial: 019B7FF21B3CB02CA02CD912BB1F4C209FCF Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/hpJdcso_n4malOGRsLM9jlcq2PA.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197784 IP address blocks: 31.13.8.0/21 maxlen: 21 77.243.152.0/22 maxlen: 22 77.243.152.0/24 maxlen: 24 77.243.153.0/24 maxlen: 24 77.243.154.0/24 maxlen: 24 77.243.155.0/24 maxlen: 24 185.152.228.0/22 maxlen: 22 2a03:ef00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1b:3c:b0:2c:a0:2c:d9:12:bb:1f:4c:20:9f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86925d72ca3f9f899a94e191b0b33d8e572ad8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:6e:5a:59:88:79:7e:5e:cb:9c:97:23:98: 54:2a:3d:53:2a:8c:a7:8d:83:9d:ef:7f:71:31:3c: 2c:a1:70:32:27:ae:0c:4c:b1:46:fd:a1:8a:81:77: 4e:c6:c7:1e:11:62:66:4f:b1:0f:2e:8d:2e:3f:0d: 27:97:48:26:e8:01:76:96:8d:10:31:13:9d:1a:b8: 31:e6:c9:72:28:c2:93:f5:32:11:c8:d3:de:2c:b5: 12:b4:7e:b5:8b:ce:c1:c3:06:b6:ac:f1:50:0d:28: 87:5c:56:e5:ac:53:19:40:9b:a2:b9:8f:0b:2f:94: be:07:35:7b:6d:1d:60:87:2b:ef:6e:fe:0c:ca:05: 31:9b:89:f5:63:80:12:81:42:b6:9b:36:2e:af:2d: f6:0e:3c:d8:18:f5:ae:31:6e:2b:d2:7d:cc:e7:cb: dc:52:01:68:ed:4d:63:a3:ae:ba:d0:c2:9e:e9:c1: 6b:ab:a2:cb:0f:71:84:4a:b7:e8:1d:a2:5a:17:99: 7d:c5:d9:24:00:0d:c5:0c:a8:8b:2b:be:d1:6e:eb: 34:6f:20:67:3d:20:66:5f:c4:5e:80:31:48:ae:75: cc:99:8f:46:4b:ed:26:6b:e0:a8:6a:62:5f:c8:44: e8:56:d6:dd:9a:b5:54:72:17:68:3d:2e:50:3d:cf: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:92:5D:72:CA:3F:9F:89:9A:94:E1:91:B0:B3:3D:8E:57:2A:D8:F0 X509v3 Authority Key Identifier: keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/hpJdcso_n4malOGRsLM9jlcq2PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.8.0/21 77.243.152.0/22 185.152.228.0/22 IPv6: 2a03:ef00::/32 Signature Algorithm: sha256WithRSAEncryption 07:38:0f:23:b8:be:2b:21:cd:4a:ee:f6:29:63:b4:7e:fb:9f: 7a:75:4f:4d:95:12:44:92:5f:ff:f2:c3:69:b8:e3:4e:a4:4e: cd:11:3c:6c:b5:09:e2:f7:5d:54:82:a9:1a:1c:10:ad:57:d9: 9b:e6:a0:5e:be:5b:6d:18:df:6e:3a:ba:5d:ab:aa:aa:ea:78: 85:11:f7:61:96:b1:2a:19:09:59:97:f0:2a:62:f0:5c:ea:c5: 4c:37:98:53:d1:30:e3:6b:46:b9:0b:9a:7b:37:7b:36:0b:84: 42:ea:8f:eb:5c:74:6e:e9:6d:09:5a:c5:b6:48:ed:7f:39:5a: 6e:59:9b:69:2e:be:54:b2:6b:9d:9e:dd:41:b5:6e:ea:41:b0: 97:95:d8:60:27:98:67:e6:5b:37:f1:04:33:6a:74:21:8b:0b: a9:b1:8c:3f:b6:ea:11:bb:93:cd:53:05:ab:92:86:02:11:1f: 4d:e6:29:e8:36:1f:e3:a8:5f:19:42:94:88:e1:d3:f3:da:a3: 39:f8:53:84:f6:1b:3f:c8:ac:3c:98:86:df:e9:2a:f0:4e:9e: 4b:87:81:73:3b:d6:ad:7a:f9:36:be:8f:02:d1:cb:a1:5b:ab: be:45:13:94:ee:8a:50:59:17:be:04:02:22:a7:d2:ca:98:1c: a0:45:84:4a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/8hs8sCygLNkSux9MIJ/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTg1MDA0MDJjODIxNWNmNTcxMDczYTQ5NWNkYzgwYzc0 MmYyY2MwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjkyNWQ3MmNhM2Y5Zjg5OWE5NGUxOTFiMGIzM2Q4ZTU3MmFkOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquduWlmIeX5ey5yXI5hUKj1TKoyn jYOd739xMTwsoXAyJ64MTLFG/aGKgXdOxsceEWJmT7EPLo0uPw0nl0gm6AF2lo0Q MROdGrgx5slyKMKT9TIRyNPeLLUStH61i87Bwwa2rPFQDSiHXFblrFMZQJuiuY8L L5S+BzV7bR1ghyvvbv4MygUxm4n1Y4ASgUK2mzYury32DjzYGPWuMW4r0n3M58vc UgFo7U1jo6660MKe6cFrq6LLD3GESrfoHaJaF5l9xdkkAA3FDKiLK77Rbus0byBn PSBmX8RegDFIrnXMmY9GS+0ma+CoamJfyEToVtbdmrVUchdoPS5QPc8BvQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIaSXXLKP5+JmpThkbCzPY5XKtjwMB8GA1UdIwQY MBaAFGmYUAQCyCFc9XEHOklc3IDHQvLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWIt MTg5MDI4ZjMzOTZjLzEvaHBKZGNzb19uNG1hbE9HUnNMTTlqbGNxMlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWItMTg5MDI4ZjMzOTZj LzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDHw0IAwQC TfOYAwQCuZjkMA0EAgACMAcDBQAqA+8AMA0GCSqGSIb3DQEBCwUAA4IBAQAHOA8j uL4rIc1K7vYpY7R++596dU9NlRJEkl//8sNpuONOpE7NETxstQni911UgqkaHBCt V9mb5qBevlttGN9uOrpdq6qq6niFEfdhlrEqGQlZl/AqYvBc6sVMN5hT0TDja0a5 C5p7N3s2C4RC6o/rXHRu6W0JWsW2SO1/OVpuWZtpLr5Usmudnt1BtW7qQbCXldhg J5hn5ls38QQzanQhiwupsYw/tuoRu5PNUwWrkoYCER9N5inoNh/jqF8ZQpSI4dPz 2qM5+FOE9hs/yKw8mIbf6SrwTp5Lh4FzO9atevk2vo8C0cuhW6u+RROU7opQWRe+ BAIip9LKmBygRYRK -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:26 2026 by rpki-client