This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa File: hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa (raw, json) Hash identifier: Wa5Ke4FZahcAqtbVLwkcn3uM1gDF8FKkh2X50wELyTM= Subject key identifier: 84:F7:FA:12:25:9A:6E:7A:0C:27:AB:42:13:74:D8:6E:71:D1:F5:04 Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019B7A5B1C319198AE0C6719AC3ED8B14830 Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 31.14.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1c:31:91:98:ae:0c:67:19:ac:3e:d8:b1:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84f7fa12259a6e7a0c27ab421374d86e71d1f504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:f7:c7:fd:ab:c7:84:92:7e:6f:c5:0d:87: bb:d6:1b:b0:f6:92:03:36:ad:57:57:a9:48:33:9d: 72:6c:95:19:70:cf:4d:d0:ab:73:0a:d0:2b:60:24: b3:b1:c7:67:4e:3c:30:22:2f:41:ef:82:f3:84:89: 7b:50:3d:87:9d:08:59:3e:45:7b:82:f4:2e:ce:f8: 6f:ac:2a:74:c5:07:22:5f:b5:8f:37:69:de:1a:34: 1e:a5:06:eb:d3:0b:60:3b:72:a8:45:73:70:31:58: 0a:d0:ea:55:ba:87:89:cd:1c:f5:88:62:be:b7:09: 51:f7:7f:d9:89:14:24:d0:8f:97:2a:1d:69:a6:12: f8:31:e0:65:8e:04:86:77:0c:da:d6:f0:5a:bc:c3: 67:36:f1:92:97:77:47:dd:07:65:25:d5:4b:55:0a: cd:a5:90:05:f7:58:35:32:72:4f:65:34:71:00:9b: 53:9c:5d:d3:2b:13:6f:80:e4:4b:35:0b:4b:2d:33: a7:b1:9c:d0:a8:14:57:a8:0f:8f:4a:f4:75:c4:11: 90:a8:1d:11:aa:58:d3:4e:45:0c:70:06:58:da:76: 4b:29:eb:55:eb:83:df:82:31:d1:a8:22:d2:1a:8e: 6c:0d:16:b7:96:40:43:ad:59:a8:8c:ee:f7:77:dd: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F7:FA:12:25:9A:6E:7A:0C:27:AB:42:13:74:D8:6E:71:D1:F5:04 X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.36.0/24 Signature Algorithm: sha256WithRSAEncryption 40:4f:e8:3a:c7:5f:3e:af:01:b0:51:31:29:4e:a5:d8:95:eb: f5:07:0c:dc:cc:ed:6c:31:f2:81:86:a8:8a:13:29:15:e9:24: b4:d1:84:e1:b9:d3:0e:33:b4:ed:6c:4c:20:a4:9a:c0:d3:d7: 5f:3f:54:a2:9f:f6:e1:e7:dd:17:41:7a:1a:75:19:e9:39:7b: 6c:bd:b4:78:d8:61:4e:8c:47:63:f3:6a:c8:27:7f:cb:8a:76: fb:c0:be:de:9e:2e:09:8d:9c:c1:63:cc:6f:90:a5:9e:b3:4a: 57:66:98:ab:84:a1:67:fa:27:16:2c:f0:11:66:d7:34:3f:ee: 7f:76:6f:52:6c:38:fe:f5:74:08:7f:7f:1f:53:e3:ec:50:1a: 03:10:62:4f:0f:65:c1:b6:c0:83:ce:6b:97:22:d9:d7:d7:cb: 6c:83:d4:8b:fa:2f:97:ae:e7:07:2e:40:d1:8c:7d:f4:dd:fe: 53:43:43:9d:07:70:86:91:fe:d0:38:ef:c8:1c:ce:37:bd:eb: aa:22:ca:3e:26:3e:30:da:8a:86:bd:0b:b4:c2:a8:74:0b:be: 58:3d:f7:6c:66:36:53:7f:3f:81:ad:bd:16:2c:31:af:62:d5: 3f:f4:bf:90:eb:41:8c:6d:29:72:18:e0:ad:ad:4f:63:7a:bd: 0b:2c:f6:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxwxkZiuDGcZrD7YsUgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGY3ZmExMjI1OWE2ZTdhMGMyN2FiNDIxMzc0ZDg2ZTcxZDFmNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBj3x/2rx4SSfm/FDYe71huw9pID Nq1XV6lIM51ybJUZcM9N0KtzCtArYCSzscdnTjwwIi9B74LzhIl7UD2HnQhZPkV7 gvQuzvhvrCp0xQciX7WPN2neGjQepQbr0wtgO3KoRXNwMVgK0OpVuoeJzRz1iGK+ twlR93/ZiRQk0I+XKh1pphL4MeBljgSGdwza1vBavMNnNvGSl3dH3QdlJdVLVQrN pZAF91g1MnJPZTRxAJtTnF3TKxNvgORLNQtLLTOnsZzQqBRXqA+PSvR1xBGQqB0R qljTTkUMcAZY2nZLKetV64PfgjHRqCLSGo5sDRa3lkBDrVmojO73d91r1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIT3+hIlmm56DCerQhN02G5x0fUEMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvaFBmNkVpV2Fibm9NSjZ0Q0UzVFlibkhSOVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4kMA0G CSqGSIb3DQEBCwUAA4IBAQBAT+g6x18+rwGwUTEpTqXYlev1BwzczO1sMfKBhqiK EykV6SS00YThudMOM7TtbEwgpJrA09dfP1Sin/bh590XQXoadRnpOXtsvbR42GFO jEdj82rIJ3/Linb7wL7eni4JjZzBY8xvkKWes0pXZpirhKFn+icWLPARZtc0P+5/ dm9SbDj+9XQIf38fU+PsUBoDEGJPD2XBtsCDzmuXItnX18tsg9SL+i+XrucHLkDR jH303f5TQ0OdB3CGkf7QOO/IHM43veuqIso+Jj4w2oqGvQu0wqh0C75YPfdsZjZT fz+Brb0WLDGvYtU/9L+Q60GMbSlyGOCtrU9jer0LLPb9 -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:30 2026 by rpki-client