This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hg-VzRfWzeLJ4OOOH8ucVFA-Xss.roa File: Hg-VzRfWzeLJ4OOOH8ucVFA-Xss.roa (raw, json) Hash identifier: /Ao2dz25bvbaSESHGTAT/sVIkoRtaPx2dS9AVs8Yl8E= Subject key identifier: 1E:0F:95:CD:17:D6:CD:E2:C9:E0:E3:8E:1F:CB:9C:54:50:3E:5E:CB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019C00D9AC8327E16DDB36143DEAF03CDB4A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hg-VzRfWzeLJ4OOOH8ucVFA-Xss.roa Signing time: Tue 27 Jan 2026 19:06:31 +0000 ROA not before: Tue 27 Jan 2026 19:06:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50338 IP address blocks: 31.58.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:d9:ac:83:27:e1:6d:db:36:14:3d:ea:f0:3c:db:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 27 19:06:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e0f95cd17d6cde2c9e0e38e1fcb9c54503e5ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:c9:0a:4f:47:12:60:da:f9:77:b4:1d:9f: 62:a7:32:a3:48:82:0f:b0:bb:01:a5:b7:e1:b9:46: b5:66:59:59:51:99:66:fc:e2:ef:89:78:57:9e:b1: 4e:2e:ff:8b:40:76:a0:6f:03:3c:e9:d3:0a:4f:4e: 0d:7c:a3:79:55:41:03:d3:8c:30:21:91:3d:7f:e7: 37:4b:1d:15:e1:7a:14:30:3f:76:39:74:82:d2:db: 91:38:9b:20:ac:1d:9f:44:d5:da:e5:08:b4:f5:09: c9:4e:d2:05:13:ed:70:45:e4:92:f9:d7:25:22:c2: 63:bc:6b:ac:9a:a8:bb:15:04:56:78:49:57:b6:58: 1f:e1:a5:cf:c5:83:c8:50:6a:87:e9:b9:d5:a1:01: 7e:7d:dc:bd:01:89:66:23:e4:18:a2:04:01:38:6c: 0c:b8:8f:68:84:d1:82:25:bb:70:fd:74:ee:23:d4: 44:95:d3:a7:73:11:94:5d:26:cf:7b:88:70:ff:f5: b9:84:18:4d:71:4a:56:8f:b7:9d:57:5b:04:92:bb: 81:9e:91:70:c2:1a:d6:d9:09:c2:3f:a5:5b:46:16: 9d:b8:ca:36:7c:b9:c6:ec:ac:21:d4:34:84:d3:6f: b3:ec:5b:a6:df:2f:78:9b:cf:e9:a1:e6:d6:1a:43: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0F:95:CD:17:D6:CD:E2:C9:E0:E3:8E:1F:CB:9C:54:50:3E:5E:CB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hg-VzRfWzeLJ4OOOH8ucVFA-Xss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.55.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:f6:ee:a3:c2:1b:bd:20:0a:ec:97:95:a9:c8:e6:43:3d:68: 76:bd:bc:a9:1b:b1:75:9e:4f:77:5d:7e:14:bd:29:fb:05:0c: 64:50:9e:94:30:ff:c1:fc:76:7a:bc:22:f4:ed:a2:7b:22:02: e0:87:58:0a:82:3c:ea:00:1f:21:1c:2e:50:0f:6c:30:1c:57: 4d:34:7d:29:a7:48:b4:5b:40:9e:78:97:d0:24:50:e7:b1:7a: 8d:e3:2a:6f:9e:cd:cb:14:a2:ca:16:1c:df:cd:5e:f6:c2:6e: 37:52:55:f7:35:96:85:56:c2:4e:6f:51:5d:85:fd:b4:75:08: 8a:dd:ca:38:c9:a8:0a:80:ab:9d:a7:eb:6e:ba:01:99:f8:2a: 89:3a:3f:07:1a:8c:e2:af:5f:39:9d:e9:82:0a:9e:4d:20:b6: 4d:85:2a:df:aa:cc:59:92:63:20:f7:58:a3:51:db:2b:c4:2b: 40:67:9e:78:4c:01:2c:f4:2c:bb:14:88:c6:da:30:92:1e:15: 5b:e6:f5:ec:f5:4f:8d:06:1e:70:2c:57:16:0e:1f:af:f2:32: 4c:5f:34:ca:d9:a0:9e:19:92:7e:9a:c6:a4:07:4f:bd:05:f5: e6:e4:dd:e5:1f:2f:33:09:5f:43:16:7c:95:54:3a:33:9e:21: ff:51:89:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwA2ayDJ+Ft2zYUPerwPNtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI3MTkwNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTBmOTVjZDE3ZDZjZGUyYzllMGUzOGUxZmNiOWM1NDUwM2U1ZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr7JCk9HEmDa+Xe0HZ9ipzKjSIIP sLsBpbfhuUa1ZllZUZlm/OLviXhXnrFOLv+LQHagbwM86dMKT04NfKN5VUED04ww IZE9f+c3Sx0V4XoUMD92OXSC0tuROJsgrB2fRNXa5Qi09QnJTtIFE+1wReSS+dcl IsJjvGusmqi7FQRWeElXtlgf4aXPxYPIUGqH6bnVoQF+fdy9AYlmI+QYogQBOGwM uI9ohNGCJbtw/XTuI9REldOncxGUXSbPe4hw//W5hBhNcUpWj7edV1sEkruBnpFw whrW2QnCP6VbRhaduMo2fLnG7Kwh1DSE02+z7Fum3y94m8/poebWGkM5bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4Plc0X1s3iyeDjjh/LnFRQPl7LMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSGctVnpSZld6ZUxKNE9PT0g4dWNWRkEtWHNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzo3MA0G CSqGSIb3DQEBCwUAA4IBAQA99u6jwhu9IArsl5WpyOZDPWh2vbypG7F1nk93XX4U vSn7BQxkUJ6UMP/B/HZ6vCL07aJ7IgLgh1gKgjzqAB8hHC5QD2wwHFdNNH0pp0i0 W0CeeJfQJFDnsXqN4ypvns3LFKLKFhzfzV72wm43UlX3NZaFVsJOb1Fdhf20dQiK 3co4yagKgKudp+tuugGZ+CqJOj8HGozir185nemCCp5NILZNhSrfqsxZkmMg91ij UdsrxCtAZ554TAEs9Cy7FIjG2jCSHhVb5vXs9U+NBh5wLFcWDh+v8jJMXzTK2aCe GZJ+msakB0+9BfXm5N3lHy8zCV9DFnyVVDozniH/UYn8 -----END CERTIFICATE-----Generated at Mon Feb 2 07:55:39 2026 by rpki-client