This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hrndd5CVotwVJwhJwcVFJlK5qVo.roa File: Hrndd5CVotwVJwhJwcVFJlK5qVo.roa (raw, json) Hash identifier: Y/lx4EdxLFI/BnmUbfoOALuvjrQeereXYcjuu/9TIFc= Subject key identifier: 1E:B9:DD:77:90:95:A2:DC:15:27:08:49:C1:C5:45:26:52:B9:A9:5A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84AB733C3FBF6A737A6658ED878965 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hrndd5CVotwVJwhJwcVFJlK5qVo.roa Signing time: Fri 02 Jan 2026 16:22:39 +0000 ROA not before: Fri 02 Jan 2026 16:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 31.56.198.0/24 maxlen: 24 31.57.123.0/24 maxlen: 24 31.58.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ab:73:3c:3f:bf:6a:73:7a:66:58:ed:87:89:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eb9dd779095a2dc15270849c1c5452652b9a95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:08:41:21:ea:67:10:74:71:ef:87:76:33: 9c:cb:3f:1c:99:1c:3a:c0:85:40:30:68:15:4f:20: 4b:86:f5:10:86:43:bc:4b:92:d1:a3:a5:57:d5:d5: 61:64:a7:77:0e:be:99:dc:9d:e7:d4:15:5b:ae:1d: ed:c4:54:40:38:48:35:e1:69:8f:3b:51:48:af:03: 0a:1e:55:65:3e:b2:e1:27:2a:6c:4a:d9:3f:84:1f: 48:a1:b9:d8:3e:24:83:a1:79:42:33:8f:28:b5:ec: d4:87:f8:a9:d7:6d:a4:d9:46:31:96:ba:7d:89:a2: ca:38:18:df:55:8b:65:3a:ae:a6:28:64:8e:a5:a1: 11:47:62:ef:8b:7e:83:95:2e:d5:9d:96:39:ff:cb: 9f:be:cb:36:79:3d:44:91:5a:cb:96:ba:5d:3f:93: f1:92:a5:13:a9:d5:8a:2f:f6:6d:a1:b0:47:07:97: 54:ca:5e:98:0f:b4:fd:b2:13:17:12:80:85:4f:fd: d5:24:d0:9e:ed:aa:ab:51:80:ca:ed:27:28:1d:17: 2c:e7:43:5d:fd:af:43:fc:5e:45:a6:fd:ec:78:aa: c5:1f:68:bb:3b:9b:6f:74:ba:ca:1c:1b:1a:b6:e2: 63:f9:00:c4:87:84:7d:06:c0:eb:ba:76:08:b4:a7: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B9:DD:77:90:95:A2:DC:15:27:08:49:C1:C5:45:26:52:B9:A9:5A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hrndd5CVotwVJwhJwcVFJlK5qVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.198.0/24 31.57.123.0/24 31.58.64.0/24 Signature Algorithm: sha256WithRSAEncryption 54:fb:3d:3f:8c:2a:d3:33:18:d4:95:cf:42:c6:fc:75:27:1c: 71:e9:40:ae:77:53:1e:c8:b4:41:52:2d:7c:b4:83:db:d5:d5: 25:cd:93:f7:7a:16:11:5a:af:6c:73:78:7e:58:1b:86:30:a5: 91:d2:90:dc:ab:8a:0c:18:36:0f:a0:93:78:72:a1:32:c2:99: ff:80:57:70:c0:9e:62:ad:00:4f:e8:58:be:17:b2:46:25:7f: 57:04:b7:9d:3c:9c:45:96:d6:62:3c:9a:e3:d7:97:04:f8:ed: b0:c0:57:c1:25:63:cb:cf:43:e1:63:ca:48:96:4e:61:9e:2a: 91:a6:f2:d9:5e:af:f9:52:75:09:39:ae:d9:18:fa:6d:63:4b: cd:09:3a:60:74:f9:ee:9a:c8:88:69:02:bd:3e:a0:6a:5e:55: 20:22:2e:7e:69:de:34:ce:fe:f0:52:67:a0:9c:5a:da:dc:9b: 9a:7f:0a:7d:9a:70:7c:a0:1c:24:32:7c:99:5c:47:28:8c:15: a9:f7:d3:aa:66:ac:84:ab:c5:c3:78:dc:9a:dd:6e:ce:73:e5: 84:33:eb:82:44:c4:9b:89:f4:dd:b1:b5:b4:d0:78:b1:3e:d3: 70:75:a6:be:c7:c6:d3:f7:0f:e0:a1:1a:2a:c8:1f:73:37:14: c5:70:10:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hKtzPD+/anN6Zljth4llMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWI5ZGQ3NzkwOTVhMmRjMTUyNzA4NDljMWM1NDUyNjUyYjlhOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKIIQSHqZxB0ce+HdjOcyz8cmRw6 wIVAMGgVTyBLhvUQhkO8S5LRo6VX1dVhZKd3Dr6Z3J3n1BVbrh3txFRAOEg14WmP O1FIrwMKHlVlPrLhJypsStk/hB9IobnYPiSDoXlCM48otezUh/ip122k2UYxlrp9 iaLKOBjfVYtlOq6mKGSOpaERR2Lvi36DlS7VnZY5/8ufvss2eT1EkVrLlrpdP5Px kqUTqdWKL/ZtobBHB5dUyl6YD7T9shMXEoCFT/3VJNCe7aqrUYDK7ScoHRcs50Nd /a9D/F5Fpv3seKrFH2i7O5tvdLrKHBsatuJj+QDEh4R9BsDrunYItKeLOwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB653XeQlaLcFScIScHFRSZSualaMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSHJuZGQ1Q1ZvdHdWSndoSndjVkZKbEs1cVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjGAwQA Hzl7AwQAHzpAMA0GCSqGSIb3DQEBCwUAA4IBAQBU+z0/jCrTMxjUlc9Cxvx1Jxxx 6UCud1MeyLRBUi18tIPb1dUlzZP3ehYRWq9sc3h+WBuGMKWR0pDcq4oMGDYPoJN4 cqEywpn/gFdwwJ5irQBP6Fi+F7JGJX9XBLedPJxFltZiPJrj15cE+O2wwFfBJWPL z0PhY8pIlk5hniqRpvLZXq/5UnUJOa7ZGPptY0vNCTpgdPnumsiIaQK9PqBqXlUg Ii5+ad40zv7wUmegnFra3Juafwp9mnB8oBwkMnyZXEcojBWp99OqZqyEq8XDeNya 3W7Oc+WEM+uCRMSbifTdsbW00HixPtNwdaa+x8bT9w/goRoqyB9zNxTFcBCD -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:42 2026 by rpki-client