This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HnWPnpTSWE2-MkdYn3lvmO6f1jg.roa File: HnWPnpTSWE2-MkdYn3lvmO6f1jg.roa (raw, json) Hash identifier: hMDnptNDtNMG9jnUs9G8GaTkKyTNr07HZ3AbeaSwxTQ= Subject key identifier: 1E:75:8F:9E:94:D2:58:4D:BE:32:47:58:9F:79:6F:98:EE:9F:D6:38 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A9C13D9364A9CDDD14D4E2AA0A7224ECC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HnWPnpTSWE2-MkdYn3lvmO6f1jg.roa Signing time: Wed 19 Nov 2025 12:25:37 +0000 ROA not before: Wed 19 Nov 2025 12:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213799 IP address blocks: 31.58.247.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:13:d9:36:4a:9c:dd:d1:4d:4e:2a:a0:a7:22:4e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 19 12:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1e758f9e94d2584dbe3247589f796f98ee9fd638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:b9:ee:4d:48:7d:30:34:30:4b:73:d7:75: 2c:a5:cf:8a:91:2f:b7:ea:fc:3b:28:f8:d7:2f:13: fd:2e:61:88:d1:ab:f6:bb:24:04:d0:1d:30:f9:54: f0:63:69:0a:c0:e6:04:c0:1c:56:cc:2f:ed:55:a0: c8:5d:7d:88:a0:fe:08:5a:6a:da:ca:71:7f:15:6a: 19:39:c1:af:ee:2c:5f:77:1a:88:74:e0:7d:9e:2d: 11:6f:67:c4:ee:6c:60:c0:50:01:c6:2e:90:61:82: a2:75:42:67:16:96:9b:14:fa:f4:39:bd:35:49:9c: ba:a6:d5:86:48:cf:89:c0:d2:b1:b5:68:ea:26:70: 8f:e6:48:0a:46:61:53:d2:33:45:36:a8:bd:da:c5: 25:d3:9b:2b:3d:5b:19:ad:f5:6f:33:8f:fb:3a:7a: 92:85:66:db:78:99:de:c6:41:7b:52:25:70:4e:f9: 81:86:9b:cd:54:a0:d4:81:3e:ec:68:a6:53:95:d8: 1b:fa:0b:8e:a9:ee:07:a5:b1:a7:f1:91:41:e5:4e: 69:4a:10:50:46:dc:98:ad:b7:cc:17:13:ee:e8:1d: 06:8a:53:6a:c5:33:ec:25:8a:0c:ec:51:d4:a9:58: 49:d4:e4:54:90:ae:56:d2:0d:6d:6a:8a:1c:79:ff: f7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:75:8F:9E:94:D2:58:4D:BE:32:47:58:9F:79:6F:98:EE:9F:D6:38 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HnWPnpTSWE2-MkdYn3lvmO6f1jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.247.0/24 31.58.249.0-31.58.250.255 Signature Algorithm: sha256WithRSAEncryption a9:e0:df:6b:a8:0a:44:63:55:06:0e:e1:fb:f8:23:b1:1a:60: 2d:11:40:7f:37:5a:6a:52:2d:f0:3d:84:15:7c:f5:21:f1:2d: fd:df:f4:72:35:f5:64:d6:0b:1c:36:2f:1a:af:7b:71:7b:17: 60:46:0d:01:dd:24:ab:83:52:8e:73:46:21:4f:7e:5c:b9:67: 99:c4:12:cc:25:31:6f:34:4c:37:33:d9:0d:2a:d6:83:2f:2f: da:c8:bd:9e:95:5f:6d:13:75:fe:ab:35:00:10:b2:73:4e:33: 1b:2c:ac:e0:12:47:8a:b0:3d:bf:86:f2:5c:72:4d:08:b0:06: 05:56:1a:3c:2b:1f:28:45:fd:9c:da:f7:12:34:a1:01:51:a9: 80:44:25:eb:6c:19:27:c5:48:ab:2d:9b:ee:bb:d5:6a:71:59: 88:7a:99:24:61:19:b0:8f:34:13:07:31:d7:fa:a4:bc:e9:8e: d0:3d:f8:b7:8b:69:ea:d2:aa:13:02:0b:35:96:d6:b6:4f:45: 63:50:1e:a9:b7:d7:d2:11:c8:95:de:f1:74:ea:d9:48:fa:da: d4:36:60:34:40:f3:8a:49:8f:17:af:1b:34:0f:90:e2:00:40: 6a:c4:47:36:00:8b:ad:49:e9:ab:00:17:18:92:2d:8b:75:ae: 1a:41:f5:15 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZqcE9k2Spzd0U1OKqCnIk7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE5MTIyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTc1OGY5ZTk0ZDI1ODRkYmUzMjQ3NTg5Zjc5NmY5OGVlOWZkNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oO57k1IfTA0MEtz13Uspc+KkS+3 6vw7KPjXLxP9LmGI0av2uyQE0B0w+VTwY2kKwOYEwBxWzC/tVaDIXX2IoP4IWmra ynF/FWoZOcGv7ixfdxqIdOB9ni0Rb2fE7mxgwFABxi6QYYKidUJnFpabFPr0Ob01 SZy6ptWGSM+JwNKxtWjqJnCP5kgKRmFT0jNFNqi92sUl05srPVsZrfVvM4/7OnqS hWbbeJnexkF7UiVwTvmBhpvNVKDUgT7saKZTldgb+guOqe4HpbGn8ZFB5U5pShBQ RtyYrbfMFxPu6B0GilNqxTPsJYoM7FHUqVhJ1ORUkK5W0g1taoocef/3iwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFB51j56U0lhNvjJHWJ95b5jun9Y4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSG5XUG5wVFNXRTItTWtkWW4zbHZtTzZmMWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAHzr3MAwD BAAfOvkDBAAfOvowDQYJKoZIhvcNAQELBQADggEBAKng32uoCkRjVQYO4fv4I7Ea YC0RQH83WmpSLfA9hBV89SHxLf3f9HI19WTWCxw2Lxqve3F7F2BGDQHdJKuDUo5z RiFPfly5Z5nEEswlMW80TDcz2Q0q1oMvL9rIvZ6VX20Tdf6rNQAQsnNOMxssrOAS R4qwPb+G8lxyTQiwBgVWGjwrHyhF/Zza9xI0oQFRqYBEJetsGSfFSKstm+671Wpx WYh6mSRhGbCPNBMHMdf6pLzpjtA9+LeLaerSqhMCCzWW1rZPRWNQHqm319IRyJXe 8XTq2Uj62tQ2YDRA84pJjxevGzQPkOIAQGrERzYAi61J6asAFxiSLYt1rhpB9RU= -----END CERTIFICATE-----Generated at Fri Nov 21 07:29:28 2025 by rpki-client