This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HvmXJ_vL5p0lMK-BUco8dgIeAKk.roa File: HvmXJ_vL5p0lMK-BUco8dgIeAKk.roa (raw, json) Hash identifier: C1nmsi5LPcy4bMBs69151sarNSeL1u6X0Hr0t/dWONk= Subject key identifier: 1E:F9:97:27:FB:CB:E6:9D:25:30:AF:81:51:CA:3C:76:02:1E:00:A9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8468B5CB23DD8FFE0622E0B38DEB6D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HvmXJ_vL5p0lMK-BUco8dgIeAKk.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46475 IP address blocks: 31.58.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:68:b5:cb:23:dd:8f:fe:06:22:e0:b3:8d:eb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ef99727fbcbe69d2530af8151ca3c76021e00a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:15:68:7f:c0:11:66:6f:b4:53:af:49:73: 52:b2:3a:ef:7b:69:ec:1e:89:27:0e:4c:bd:48:c1: 2d:51:b5:e2:49:07:f8:cd:08:fb:50:fe:28:d0:5e: cc:e8:57:80:64:bc:d7:1f:68:59:49:fb:c6:b5:8b: 47:69:89:7d:4a:08:73:d5:05:f9:c9:c4:92:fc:c3: 50:5b:66:ac:ec:6a:ae:cb:51:35:f0:95:ff:5a:a1: c7:10:98:a9:88:d3:1e:4a:74:d9:80:b3:dd:fc:56: 56:af:02:4c:ff:27:37:87:94:28:65:42:8c:48:df: db:35:40:07:53:03:70:28:79:02:f3:a3:2a:7c:22: 63:be:54:51:46:80:34:4b:45:ac:e9:7c:1b:61:fe: 90:b6:49:3c:52:1e:a0:21:e2:f9:66:ff:50:4e:4e: ca:e7:49:3d:2c:01:8c:b9:38:48:12:0d:c4:1c:a8: 74:02:77:fa:f7:00:c6:3a:b4:d4:af:61:34:ce:9c: 7c:33:e6:d3:b4:6c:60:fb:57:a2:cd:67:5a:86:49: dc:22:8d:6a:9f:0f:da:ac:f6:26:bb:15:6a:16:44: 4f:9d:92:6c:c0:a8:e7:94:fd:de:ac:03:d7:86:a5: 82:34:8b:59:66:76:70:fd:6c:24:ba:10:90:72:7c: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F9:97:27:FB:CB:E6:9D:25:30:AF:81:51:CA:3C:76:02:1E:00:A9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HvmXJ_vL5p0lMK-BUco8dgIeAKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.102.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8a:e8:8f:b2:c8:dc:29:e4:6b:ee:a7:b0:be:1e:cb:84:e5: fc:9f:c3:9f:11:4e:0c:a8:f2:37:ba:dc:03:9c:b0:b5:e1:01: c4:ab:89:09:40:e7:32:c6:34:31:98:e5:ba:38:51:2d:84:2c: f2:47:3e:77:0d:51:6d:70:16:6a:7a:de:6b:42:c7:3a:dc:f5: 8d:80:74:85:14:91:7f:3b:e3:f5:9c:e7:f8:c8:0c:53:a2:32: 96:69:bf:fc:ed:a9:e5:55:22:9f:8d:30:b2:49:55:15:4f:a2: b3:e2:55:f3:51:87:ec:c1:38:e2:c5:ad:c2:6e:d1:b6:fa:42: 23:fb:a0:ba:7e:19:10:60:b2:a2:a2:22:e9:63:24:ba:86:69: 1a:f7:e6:4d:c2:0f:d4:b7:b7:b7:1f:71:a0:30:6f:ba:58:61: 62:e5:de:3b:58:7c:df:d7:1c:ed:81:c2:22:47:d6:16:a6:cf: 0b:c8:a8:b0:ea:bf:37:f4:6c:75:9a:2b:13:7d:ad:23:e0:32: e1:8e:2c:fe:06:65:b0:45:b3:80:92:b4:c4:ca:2b:13:74:36: 4a:f4:30:ff:67:35:22:52:59:4a:16:fd:b6:b1:9e:a7:9c:43: 03:80:1c:5e:cf:08:d5:3a:f7:91:7a:9f:86:9f:11:07:0a:53: 6f:66:36:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGi1yyPdj/4GIuCzjettMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWY5OTcyN2ZiY2JlNjlkMjUzMGFmODE1MWNhM2M3NjAyMWUwMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhIVaH/AEWZvtFOvSXNSsjrve2ns HoknDky9SMEtUbXiSQf4zQj7UP4o0F7M6FeAZLzXH2hZSfvGtYtHaYl9Sghz1QX5 ycSS/MNQW2as7Gquy1E18JX/WqHHEJipiNMeSnTZgLPd/FZWrwJM/yc3h5QoZUKM SN/bNUAHUwNwKHkC86MqfCJjvlRRRoA0S0Ws6XwbYf6Qtkk8Uh6gIeL5Zv9QTk7K 50k9LAGMuThIEg3EHKh0Anf69wDGOrTUr2E0zpx8M+bTtGxg+1eizWdahkncIo1q nw/arPYmuxVqFkRPnZJswKjnlP3erAPXhqWCNItZZnZw/WwkuhCQcnwZnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB75lyf7y+adJTCvgVHKPHYCHgCpMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSHZtWEpfdkw1cDBsTUstQlVjbzhkZ0llQUtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpmMA0G CSqGSIb3DQEBCwUAA4IBAQAdiuiPssjcKeRr7qewvh7LhOX8n8OfEU4MqPI3utwD nLC14QHEq4kJQOcyxjQxmOW6OFEthCzyRz53DVFtcBZqet5rQsc63PWNgHSFFJF/ O+P1nOf4yAxTojKWab/87anlVSKfjTCySVUVT6Kz4lXzUYfswTjixa3CbtG2+kIj +6C6fhkQYLKioiLpYyS6hmka9+ZNwg/Ut7e3H3GgMG+6WGFi5d47WHzf1xztgcIi R9YWps8LyKiw6r839Gx1misTfa0j4DLhjiz+BmWwRbOAkrTEyisTdDZK9DD/ZzUi UllKFv22sZ6nnEMDgBxezwjVOveRep+GnxEHClNvZjYv -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:46 2026 by rpki-client