This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Hj_mmo61QsrEMQiPHQYBMuYjE6w.roa File: Hj_mmo61QsrEMQiPHQYBMuYjE6w.roa (raw, json) Hash identifier: Reda9sErRoqbpcnicQ2yubSQNsSrqp+w7a1z0FKPwrg= Subject key identifier: 1E:3F:E6:9A:8E:B5:42:CA:C4:31:08:8F:1D:06:01:32:E6:23:13:AC Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38 Certificate serial: 019B7AC8FBAF373804D9BD8C1EA14071ACDE Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Hj_mmo61QsrEMQiPHQYBMuYjE6w.roa Signing time: Thu 01 Jan 2026 18:19:10 +0000 ROA not before: Thu 01 Jan 2026 18:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 202.22.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:fb:af:37:38:04:d9:bd:8c:1e:a1:40:71:ac:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38 Validity Not Before: Jan 1 18:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e3fe69a8eb542cac431088f1d060132e62313ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b7:e7:64:9c:05:dd:33:04:47:3d:8f:68:a9: be:f1:8d:ba:9f:b8:24:49:3e:b4:5d:4c:e4:2c:c8: 9e:3e:7f:be:f6:b3:d4:3f:39:17:91:f2:1d:e7:32: 59:b7:59:42:c3:eb:69:f3:36:35:0b:1b:bc:00:68: c5:53:9c:e8:b8:f6:3d:01:55:88:b4:90:a4:b7:6d: ac:95:e1:5e:85:d7:cc:3e:c5:c3:b7:d9:73:35:31: 6a:49:ec:3e:be:16:48:f3:e9:44:81:6f:b5:e2:31: d3:5e:3e:cd:e4:fe:cd:03:cd:27:7c:49:54:07:f6: 86:fe:5a:6f:e5:8a:24:88:66:4b:79:78:60:8f:24: bb:14:b6:02:de:68:5d:45:a5:2d:78:97:82:b2:9a: 6e:f1:ca:cd:6e:ae:e9:cc:71:27:64:49:1d:d3:55: c9:f1:b1:f4:3b:14:31:63:22:75:69:66:8b:97:f6: 67:2f:44:dc:26:1d:f5:d0:6d:2d:24:7e:63:d5:7b: db:e3:d2:be:b0:99:8e:33:f9:76:80:9f:b9:bc:c8: cd:68:2a:97:25:03:2e:73:b3:84:89:1a:c4:d5:4b: 22:2d:87:f2:ed:9a:fc:0c:d3:07:31:ae:32:f1:d9: 96:d0:38:08:44:2d:6a:28:e5:d7:74:9c:16:b0:d7: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3F:E6:9A:8E:B5:42:CA:C4:31:08:8F:1D:06:01:32:E6:23:13:AC X509v3 Authority Key Identifier: keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Hj_mmo61QsrEMQiPHQYBMuYjE6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.22.173.0/24 Signature Algorithm: sha256WithRSAEncryption 17:e6:10:90:b5:62:70:91:04:04:7e:52:6d:02:07:da:ac:5a: c5:e1:38:81:42:43:38:23:26:2b:5d:b2:cd:7f:e2:92:96:51: 0b:b2:59:e6:0c:32:8f:82:c3:77:9b:e9:26:44:70:02:e4:0b: d5:9d:af:58:66:1b:de:89:8c:8a:4d:e9:ff:e6:d5:cc:6e:6e: b8:f2:f8:62:8e:37:59:0e:24:86:45:c5:cf:dc:18:96:c1:84: 6d:29:e8:d7:7c:37:c9:fb:05:aa:e0:c4:64:38:ed:3e:3f:c8: b7:34:27:13:59:e2:6f:96:09:60:d2:57:a3:08:b5:9d:e8:f8: 8f:db:d6:e8:90:54:96:5b:88:1c:63:c3:26:09:24:c5:12:f8: 46:32:ae:b7:1e:6c:92:fa:68:18:3e:0c:2d:e2:a5:68:25:7e: bd:90:26:2d:51:09:ab:7b:75:56:28:44:bf:8c:2d:11:ee:ba: 3e:ba:ec:75:58:86:48:cc:fb:1d:b6:2b:45:55:a1:7b:83:f3: 9b:21:32:8e:76:69:01:8e:b9:60:7f:2b:42:e2:78:c0:ad:a3: 41:dd:83:d7:23:e6:3e:22:87:aa:31:7c:73:33:ab:1c:0e:e6: 3e:71:14:5e:ac:6c:c8:78:34:1a:60:26:2c:c2:8a:fd:af:87: 74:85:96:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yPuvNzgE2b2MHqFAcazeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZWI5YjJkYjRhM2JkZGY4YzkyZmM1MGI5NzEzMDQzZGQ1 NmRjMzgwHhcNMjYwMTAxMTgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTNmZTY5YThlYjU0MmNhYzQzMTA4OGYxZDA2MDEzMmU2MjMxM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rfnZJwF3TMERz2PaKm+8Y26n7gk ST60XUzkLMiePn++9rPUPzkXkfId5zJZt1lCw+tp8zY1Cxu8AGjFU5zouPY9AVWI tJCkt22sleFehdfMPsXDt9lzNTFqSew+vhZI8+lEgW+14jHTXj7N5P7NA80nfElU B/aG/lpv5YokiGZLeXhgjyS7FLYC3mhdRaUteJeCsppu8crNbq7pzHEnZEkd01XJ 8bH0OxQxYyJ1aWaLl/ZnL0TcJh310G0tJH5j1Xvb49K+sJmOM/l2gJ+5vMjNaCqX JQMuc7OEiRrE1UsiLYfy7Zr8DNMHMa4y8dmW0DgIRC1qKOXXdJwWsNfsNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4/5pqOtULKxDEIjx0GATLmIxOsMB8GA1UdIwQY MBaAFDHrmy20o73fjJL8ULlxMEPdVtw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgt YmQyNGYwMDM1NzhmLzEvSGpfbW1vNjFRc3JFTVFpUEhRWUJNdVlqRTZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgtYmQyNGYwMDM1Nzhm LzEvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyhatMA0G CSqGSIb3DQEBCwUAA4IBAQAX5hCQtWJwkQQEflJtAgfarFrF4TiBQkM4IyYrXbLN f+KSllELslnmDDKPgsN3m+kmRHAC5AvVna9YZhveiYyKTen/5tXMbm648vhijjdZ DiSGRcXP3BiWwYRtKejXfDfJ+wWq4MRkOO0+P8i3NCcTWeJvlglg0lejCLWd6PiP 29bokFSWW4gcY8MmCSTFEvhGMq63HmyS+mgYPgwt4qVoJX69kCYtUQmre3VWKES/ jC0R7ro+uux1WIZIzPsdtitFVaF7g/ObITKOdmkBjrlgfytC4njAraNB3YPXI+Y+ IoeqMXxzM6scDuY+cRRerGzIeDQaYCYswor9r4d0hZaH -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:28 2026 by rpki-client