This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hu3RBK1jpjIw364Zmn3JHN0LNno.roa File: hu3RBK1jpjIw364Zmn3JHN0LNno.roa (raw, json) Hash identifier: J0apbCq3Rar117yNl6upHSWS9FQEtrRXdE90q1zVNb0= Subject key identifier: 86:ED:D1:04:AD:63:A6:32:30:DF:AE:19:9A:7D:C9:1C:DD:0B:36:7A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C2619D9C8C3C20159BCBCE13F834 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hu3RBK1jpjIw364Zmn3JHN0LNno.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51685 IP address blocks: 31.148.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c2:61:9d:9c:8c:3c:20:15:9b:cb:ce:13:f8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86edd104ad63a63230dfae199a7dc91cdd0b367a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:26:98:a6:48:90:33:fd:84:a7:e9:be:0a:98: 1a:07:26:e8:49:cb:7b:79:43:45:b4:a3:54:51:05: 7d:9b:f1:f4:56:00:fc:a3:4e:9d:a8:de:b2:ca:c3: 07:f5:a5:1a:25:d2:09:84:95:03:7b:78:23:29:e3: f0:e7:45:73:f9:38:af:ba:38:b2:84:eb:bd:d0:0c: a6:e8:38:78:02:35:05:4e:42:b1:e3:88:2e:b7:7a: f1:79:d5:66:8b:68:90:a9:ae:56:b9:d8:4d:93:a5: 45:cb:2b:98:96:21:a9:e9:2c:11:fa:01:31:a3:47: 43:09:54:5a:cd:01:29:21:29:86:34:b9:5c:30:9c: 46:b2:0c:54:11:36:4a:3a:b2:3e:47:ac:77:25:a8: b1:89:79:d4:70:ed:7e:19:0f:86:65:6b:a4:84:a1: 3b:70:4f:77:32:b4:7c:1d:ed:79:ca:b5:d2:52:c5: 83:04:6d:1b:c5:e0:4a:73:55:e7:36:c7:3b:56:69: cf:a4:82:2b:ec:d0:68:76:49:46:24:a3:71:74:cf: 46:e0:1a:9b:2f:52:c9:25:b5:e5:31:1b:64:c8:7e: 01:45:70:82:e0:9b:d4:3b:6a:21:71:88:4c:09:65: a4:0c:70:2b:5b:e3:59:20:2e:a1:82:84:c0:03:74: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:ED:D1:04:AD:63:A6:32:30:DF:AE:19:9A:7D:C9:1C:DD:0B:36:7A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hu3RBK1jpjIw364Zmn3JHN0LNno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.136.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:f1:4d:3d:a7:27:f5:95:ad:d7:e4:40:fd:af:2e:8e:1a:82: 13:ec:9c:51:7b:f1:37:0b:74:b2:4b:6a:d1:f9:cd:01:ff:20: 59:88:2d:4e:66:00:49:ff:0b:eb:fc:e7:54:1d:e2:97:7d:a4: ac:89:9c:5a:5c:33:81:c2:a6:02:5e:ef:ea:0b:52:00:97:c9: 6d:4e:97:fa:d8:7e:b3:6c:1f:39:84:77:5f:f2:4b:cf:b2:c8: cb:5c:11:9f:4f:da:3b:6a:46:b0:fd:57:fb:31:c1:2e:5c:2b: 04:65:c5:f6:fc:b9:88:f1:33:0d:e7:5d:2c:c9:a1:ab:fc:8a: a5:8a:99:3f:82:cb:47:84:fa:ce:d1:39:65:c4:c1:ea:79:42: c5:69:19:b4:cf:f2:ae:4d:73:68:86:c7:08:5c:cc:67:1c:0e: c0:67:63:66:c8:32:67:d6:ba:ce:30:b2:a2:91:4c:e4:9d:da: 67:7a:dc:00:05:0a:6e:dd:59:e3:2f:4b:03:d0:f5:b8:52:b3: ac:63:98:72:de:4f:82:18:4c:84:44:c9:bc:ed:2a:ec:9e:2c: ee:07:15:c8:6e:60:47:6e:da:bb:18:32:a1:83:20:d2:8d:18: 92:a7:0b:2a:4c:37:ff:97:84:b4:b7:b3:c1:08:79:2e:51:d0: ca:88:4d:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMJhnZyMPCAVm8vOE/g0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmVkZDEwNGFkNjNhNjMyMzBkZmFlMTk5YTdkYzkxY2RkMGIzNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSaYpkiQM/2Ep+m+CpgaByboSct7 eUNFtKNUUQV9m/H0VgD8o06dqN6yysMH9aUaJdIJhJUDe3gjKePw50Vz+Tivujiy hOu90Aym6Dh4AjUFTkKx44gut3rxedVmi2iQqa5WudhNk6VFyyuYliGp6SwR+gEx o0dDCVRazQEpISmGNLlcMJxGsgxUETZKOrI+R6x3JaixiXnUcO1+GQ+GZWukhKE7 cE93MrR8He15yrXSUsWDBG0bxeBKc1XnNsc7VmnPpIIr7NBodklGJKNxdM9G4Bqb L1LJJbXlMRtkyH4BRXCC4JvUO2ohcYhMCWWkDHArW+NZIC6hgoTAA3RdpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbt0QStY6YyMN+uGZp9yRzdCzZ6MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvaHUzUkJLMWpwakl3MzY0Wm1uM0pITjBMTm5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH5SIMA0G CSqGSIb3DQEBCwUAA4IBAQBe8U09pyf1la3X5ED9ry6OGoIT7JxRe/E3C3SyS2rR +c0B/yBZiC1OZgBJ/wvr/OdUHeKXfaSsiZxaXDOBwqYCXu/qC1IAl8ltTpf62H6z bB85hHdf8kvPssjLXBGfT9o7akaw/Vf7McEuXCsEZcX2/LmI8TMN510syaGr/Iql ipk/gstHhPrO0TllxMHqeULFaRm0z/KuTXNohscIXMxnHA7AZ2NmyDJn1rrOMLKi kUzkndpnetwABQpu3VnjL0sD0PW4UrOsY5hy3k+CGEyERMm87SrsnizuBxXIbmBH btq7GDKhgyDSjRiSpwsqTDf/l4S0t7PBCHkuUdDKiE17 -----END CERTIFICATE-----Generated at Mon Jan 26 08:04:25 2026 by rpki-client