This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HCoeOFSDuCzbmcLnTQ5eGiZl1oY.roa File: HCoeOFSDuCzbmcLnTQ5eGiZl1oY.roa (raw, json) Hash identifier: TBfqW/wVUx9gbQ5mmaY70zPpbVhdfB5/GpzsfZPg63g= Subject key identifier: 1C:2A:1E:38:54:83:B8:2C:DB:99:C2:E7:4D:0E:5E:1A:26:65:D6:86 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84667C322F50660A4428C48B5C5F82 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HCoeOFSDuCzbmcLnTQ5eGiZl1oY.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44259 IP address blocks: 31.59.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:66:7c:32:2f:50:66:0a:44:28:c4:8b:5c:5f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c2a1e385483b82cdb99c2e74d0e5e1a2665d686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:67:91:c7:66:9c:5e:e5:c5:a6:aa:0c:e3: 79:99:a9:c6:10:50:9f:20:2d:b8:4d:1a:e1:4c:b3: 0d:ea:8d:3a:d1:97:49:65:2d:fd:58:97:7a:b0:7c: 57:f0:ca:23:b6:ea:fd:dc:ad:5a:9e:a2:47:25:c3: b5:e5:ec:f3:21:df:1c:33:57:57:dd:f1:1c:07:9e: 07:29:09:b5:3b:ca:93:f5:55:58:ca:78:b2:02:ae: cc:df:ef:0e:8d:be:fa:27:b6:50:67:df:2d:e7:9f: 2f:fd:09:fb:11:99:c5:ef:05:b7:77:fc:b7:31:14: cc:29:05:ba:84:77:83:33:1d:d9:b3:8e:e6:12:07: 34:b4:d7:2c:af:83:6c:6d:1d:59:00:bd:eb:3b:15: 08:2e:21:96:ac:48:a0:49:71:e0:07:ac:48:b8:23: ed:a9:8f:5c:5a:eb:69:24:f7:31:71:67:00:3e:13: 2d:42:1f:78:6b:1e:32:9c:7b:c6:da:0c:1b:04:a8: 5e:76:97:6b:88:f9:e7:e8:66:27:fb:94:e7:e6:5e: 8e:3a:d2:0c:f2:b8:30:0f:c6:54:90:3f:60:60:35: d7:5b:5d:98:56:76:f6:f9:92:45:c7:e0:e6:4c:c8: 71:09:dd:fa:47:6d:72:76:4e:84:5c:04:12:70:37: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2A:1E:38:54:83:B8:2C:DB:99:C2:E7:4D:0E:5E:1A:26:65:D6:86 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HCoeOFSDuCzbmcLnTQ5eGiZl1oY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.184.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:bc:cd:0d:56:1f:d4:02:67:ce:c6:9a:08:20:29:29:28:c6: 9d:61:f8:ae:f2:6d:f3:fa:ea:34:a1:59:41:e9:71:da:75:cf: 6a:6f:b6:68:81:86:96:fe:35:f5:c0:fd:3f:53:b1:dd:ef:f7: 36:b8:9a:8f:9a:8a:e7:56:65:8e:26:a4:d0:51:76:32:64:3a: 5d:b9:92:90:ad:f8:2f:65:f5:cd:5d:49:52:8e:8e:a8:ab:e2: a4:f7:bf:01:43:f3:db:96:70:dd:4b:c4:e3:fc:8a:88:c3:5c: 77:c1:13:aa:0a:44:0c:b0:2f:63:44:f7:03:99:d4:56:85:a6: 49:6a:bd:99:bf:31:f3:6e:6f:56:60:23:8b:77:64:36:8f:3a: 61:f4:1f:2e:18:8d:2e:2e:a3:81:c8:0f:16:ff:e1:1d:bf:d1: 1f:f4:f1:9a:0f:18:29:22:05:6e:35:ae:40:d9:e0:04:54:aa: e2:ad:ee:bd:57:4e:df:3e:a8:74:cb:db:1f:5f:90:ed:5b:4d: bb:ed:75:dd:80:c9:3b:7e:77:11:c0:cb:f2:28:4f:6e:b4:8e: d5:b7:49:eb:2f:a2:b7:cc:97:9b:91:13:83:78:df:10:fe:7b: 39:85:a7:ad:62:2f:21:c0:ab:64:35:62:5f:54:94:00:57:c4: ed:76:c9:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGZ8Mi9QZgpEKMSLXF+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzJhMWUzODU0ODNiODJjZGI5OWMyZTc0ZDBlNWUxYTI2NjVkNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYhnkcdmnF7lxaaqDON5manGEFCf IC24TRrhTLMN6o060ZdJZS39WJd6sHxX8Mojtur93K1anqJHJcO15ezzId8cM1dX 3fEcB54HKQm1O8qT9VVYyniyAq7M3+8Ojb76J7ZQZ98t558v/Qn7EZnF7wW3d/y3 MRTMKQW6hHeDMx3Zs47mEgc0tNcsr4NsbR1ZAL3rOxUILiGWrEigSXHgB6xIuCPt qY9cWutpJPcxcWcAPhMtQh94ax4ynHvG2gwbBKhedpdriPnn6GYn+5Tn5l6OOtIM 8rgwD8ZUkD9gYDXXW12YVnb2+ZJFx+DmTMhxCd36R21ydk6EXAQScDf7JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBwqHjhUg7gs25nC500OXhomZdaGMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSENvZU9GU0R1Q3pibWNMblRRNWVHaVpsMW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzu4MA0G CSqGSIb3DQEBCwUAA4IBAQAcvM0NVh/UAmfOxpoIICkpKMadYfiu8m3z+uo0oVlB 6XHadc9qb7ZogYaW/jX1wP0/U7Hd7/c2uJqPmornVmWOJqTQUXYyZDpduZKQrfgv ZfXNXUlSjo6oq+Kk978BQ/PblnDdS8Tj/IqIw1x3wROqCkQMsC9jRPcDmdRWhaZJ ar2ZvzHzbm9WYCOLd2Q2jzph9B8uGI0uLqOByA8W/+Edv9Ef9PGaDxgpIgVuNa5A 2eAEVKrire69V07fPqh0y9sfX5DtW0277XXdgMk7fncRwMvyKE9utI7Vt0nrL6K3 zJebkRODeN8Q/ns5haetYi8hwKtkNWJfVJQAV8TtdslS -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:14 2026 by rpki-client