This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/nhHCyeQqh6mJ2bYlu-BdXtbSr2g.roa File: nhHCyeQqh6mJ2bYlu-BdXtbSr2g.roa (raw, json) Hash identifier: 6UCtegtaLhqm785oV+vRV6CeZ4+1/GyKLgr46mrjl8k= Subject key identifier: 9E:11:C2:C9:E4:2A:87:A9:89:D9:B6:25:BB:E0:5D:5E:D6:D2:AF:68 Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2 Certificate serial: 019B7E3816B42C093104DAA3AA1C6C291D3C Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/nhHCyeQqh6mJ2bYlu-BdXtbSr2g.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56703 IP address blocks: 31.40.0.0/23 maxlen: 23 31.40.2.0/24 maxlen: 24 31.40.3.0/24 maxlen: 24 31.40.4.0/24 maxlen: 24 31.40.5.0/24 maxlen: 24 31.40.6.0/24 maxlen: 24 194.26.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:16:b4:2c:09:31:04:da:a3:aa:1c:6c:29:1d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e11c2c9e42a87a989d9b625bbe05d5ed6d2af68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:4d:89:4e:b6:11:f3:2b:da:eb:96:ac:2a: 40:61:d3:5a:e3:d5:75:07:b8:a7:4e:4f:55:28:09: 6f:66:27:93:94:5a:cf:62:80:b2:1e:1c:9e:4c:2a: 3c:93:d8:33:ba:4e:ce:e9:04:85:05:32:75:c5:67: 4f:fc:bc:b7:ed:9a:19:b9:dc:a9:3e:b0:74:f0:5f: d1:69:36:76:52:69:e4:9f:0a:55:82:48:dd:10:96: 72:eb:62:05:bc:6c:df:92:fe:14:d3:71:ed:b9:da: cc:b0:52:9a:8a:5d:17:53:ca:eb:fa:b5:28:32:9a: 36:a2:8e:50:cb:01:53:05:39:2f:e9:a4:40:53:7e: 5f:dc:cf:ac:c0:db:6d:35:b1:b7:61:ec:b1:c9:da: 1f:19:8a:9e:79:f8:63:ef:c1:4c:ab:ee:64:e6:e2: 0e:3d:c2:83:14:c3:3c:97:e8:50:66:e9:00:3b:35: ca:41:bd:0e:cd:70:3d:e0:c3:de:c5:03:cc:c6:a8: 54:6e:08:a9:dd:30:f6:c6:00:e4:e5:97:90:58:53: 62:fc:3a:cb:88:c7:2c:33:d7:4e:94:a6:3e:6b:b4: d3:de:56:b8:35:15:1d:ee:f9:73:74:80:61:58:94: e4:04:5a:f2:26:01:87:fd:98:97:d2:5d:b5:24:e3: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:11:C2:C9:E4:2A:87:A9:89:D9:B6:25:BB:E0:5D:5E:D6:D2:AF:68 X509v3 Authority Key Identifier: keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/nhHCyeQqh6mJ2bYlu-BdXtbSr2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.0.0-31.40.6.255 194.26.117.0/24 Signature Algorithm: sha256WithRSAEncryption a7:c2:c1:86:cb:d3:73:da:41:c0:7d:ad:3e:2b:57:d1:b0:a0: 63:a9:50:29:57:56:89:60:5f:7c:e6:cc:8a:76:cf:4d:f2:f5: b0:15:e9:27:d5:b0:86:66:48:f9:31:c3:10:e2:ba:f4:a2:8a: 3d:28:83:3c:7b:eb:db:70:bc:c5:72:69:bc:6c:9c:b8:ed:66: 6a:14:c8:12:3f:8d:ef:54:2e:b6:73:96:12:55:2a:e3:1e:c7: 21:17:e5:84:fb:50:a3:e3:29:0c:21:19:c7:a0:15:1c:e4:46: bc:6b:c4:68:c1:c0:e5:7d:1f:4c:13:46:f3:b0:66:78:0f:77: 45:20:ec:19:94:70:58:d3:6d:14:13:83:72:b8:42:3c:6b:0c: 50:26:56:92:6c:79:a0:6b:e9:57:68:ac:39:c4:67:9c:83:ef: 85:50:ca:4a:51:b3:c7:b3:a3:21:9a:ab:9b:ec:6a:47:62:86: 71:f1:75:b3:4a:bb:4a:db:67:e5:95:1d:87:bc:4d:55:0c:5f: ba:33:08:93:6c:88:6f:d4:99:0e:9f:00:71:91:c2:40:f7:89: f7:c3:f1:02:3c:be:24:d7:7f:4b:db:aa:25:1e:27:1e:47:4d: 2d:3d:e7:cc:cd:79:4e:4e:38:f5:29:98:b8:75:8d:24:f7:b1: 6e:db:cb:4a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt+OBa0LAkxBNqjqhxsKR08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5 YWQxZTIwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTExYzJjOWU0MmE4N2E5ODlkOWI2MjViYmUwNWQ1ZWQ2ZDJhZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpVNiU62EfMr2uuWrCpAYdNa49V1 B7inTk9VKAlvZieTlFrPYoCyHhyeTCo8k9gzuk7O6QSFBTJ1xWdP/Ly37ZoZudyp PrB08F/RaTZ2UmnknwpVgkjdEJZy62IFvGzfkv4U03HtudrMsFKail0XU8rr+rUo Mpo2oo5QywFTBTkv6aRAU35f3M+swNttNbG3YeyxydofGYqeefhj78FMq+5k5uIO PcKDFMM8l+hQZukAOzXKQb0OzXA94MPexQPMxqhUbgip3TD2xgDk5ZeQWFNi/DrL iMcsM9dOlKY+a7TT3la4NRUd7vlzdIBhWJTkBFryJgGH/ZiX0l21JOMvmwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFJ4RwsnkKoepidm2JbvgXV7W0q9oMB8GA1UdIwQY MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt NTE0NmYxM2I3MWExLzEvbmhIQ3llUXFoNm1KMmJZbHUtQmRYdGJTcjJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwMfKAME AB8oBgMEAMIadTANBgkqhkiG9w0BAQsFAAOCAQEAp8LBhsvTc9pBwH2tPitX0bCg Y6lQKVdWiWBffObMinbPTfL1sBXpJ9WwhmZI+THDEOK69KKKPSiDPHvr23C8xXJp vGycuO1mahTIEj+N71QutnOWElUq4x7HIRflhPtQo+MpDCEZx6AVHORGvGvEaMHA 5X0fTBNG87BmeA93RSDsGZRwWNNtFBODcrhCPGsMUCZWkmx5oGvpV2isOcRnnIPv hVDKSlGzx7OjIZqrm+xqR2KGcfF1s0q7Sttn5ZUdh7xNVQxfujMIk2yIb9SZDp8A cZHCQPeJ98PxAjy+JNd/S9uqJR4nHkdNLT3nzM15Tk449SmYuHWNJPexbtvLSg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:35:13 2026 by rpki-client