This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HwAGIdPuwf-JTHltYkxEyeFWf_w.roa File: HwAGIdPuwf-JTHltYkxEyeFWf_w.roa (raw, json) Hash identifier: F/g0cl9sbL66CtqgxT0w4Wl4AZWV+gSAR2td9GvSMus= Subject key identifier: 1F:00:06:21:D3:EE:C1:FF:89:4C:79:6D:62:4C:44:C9:E1:56:7F:FC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849DFA92E3DEF05DA1C4205CCDDD25 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HwAGIdPuwf-JTHltYkxEyeFWf_w.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207708 IP address blocks: 31.56.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9d:fa:92:e3:de:f0:5d:a1:c4:20:5c:cd:dd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f000621d3eec1ff894c796d624c44c9e1567ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:26:22:c7:06:25:3d:64:4d:9d:81:4c:8e: 06:6d:56:1f:70:ae:71:8d:f9:6b:34:a8:c6:9e:19: 6f:82:51:70:de:3a:17:36:10:63:bb:86:76:77:ed: 03:88:55:ac:c4:0e:cd:14:9a:ea:14:3a:9c:17:f0: 21:3c:2c:23:0b:35:21:9d:0c:68:da:e7:5b:a6:c6: 27:a0:20:0d:de:4b:1d:98:0d:a7:0c:22:de:16:67: a2:50:72:cb:3c:89:af:10:1a:b8:9e:03:5c:c4:01: 12:71:6c:7f:5d:d4:7c:17:e1:ed:96:06:f5:cd:87: 45:61:a5:46:93:21:ea:83:b1:e5:ef:f0:15:b7:96: 5c:11:63:63:03:35:3c:79:90:2f:c2:58:4d:86:e6: e1:9c:ca:c4:66:ea:75:af:59:9c:d9:5c:cb:7b:55: 5d:18:93:b1:47:18:db:05:e4:dc:28:d6:47:97:78: 96:d3:49:f6:8e:fd:7c:3e:2b:d9:c8:c3:78:91:2d: 04:3b:9d:12:e5:5e:2b:bd:30:4e:be:f8:f3:f6:fc: 95:ff:e4:b8:91:5d:8e:87:87:a5:39:eb:e2:5c:d3: a0:18:84:9a:7c:e6:89:d3:4f:ee:12:06:f2:9e:c8: 8d:83:6b:9d:06:52:75:0b:7e:6b:f6:fb:e3:d8:e3: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:06:21:D3:EE:C1:FF:89:4C:79:6D:62:4C:44:C9:E1:56:7F:FC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HwAGIdPuwf-JTHltYkxEyeFWf_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.29.0/24 Signature Algorithm: sha256WithRSAEncryption 62:15:85:d3:2d:db:3d:af:d7:6c:79:8d:20:ea:4c:b9:6d:c4: 7b:5d:2a:7f:30:81:e7:c9:6d:f2:e1:b1:0a:b7:0a:7c:f2:f8: 26:e1:1d:a7:d0:8a:56:10:f4:20:e8:d7:8c:cd:0a:71:99:5b: 2a:ea:7a:54:15:a3:03:cf:be:a3:9d:88:c7:6f:29:cd:31:49: e7:96:1b:52:f8:d6:8a:13:5e:b3:b8:27:66:de:6d:e2:99:43: 67:e7:fe:12:ac:2a:a3:8f:d5:50:f8:4f:15:d4:23:7d:fd:a1: 62:c2:5a:f5:ec:df:62:0c:d0:4d:be:46:26:5a:ea:26:25:18: c3:32:61:35:ec:86:d4:be:6a:03:b9:bb:21:10:50:6d:cf:c0: 1c:a8:10:c6:08:b1:f9:1d:70:b5:e4:f4:f9:d6:3f:65:90:0b: 3e:95:41:c0:b2:bc:e0:8c:5e:31:14:cd:56:b1:86:ed:8f:5e: 5f:a9:c0:2d:c9:ed:d5:c5:3d:7a:9d:db:45:6f:8c:1f:1b:8d: 42:95:fe:6f:e3:2a:69:ab:ca:1b:4e:c5:80:f1:c7:3e:2c:a1: 8c:64:95:39:fb:9f:a0:23:ea:a1:b0:0d:9a:46:7f:13:0b:eb: dc:09:51:4d:02:e4:4f:f4:61:f2:52:7f:af:ae:c9:ac:2e:d3: ba:1d:e9:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJ36kuPe8F2hxCBczd0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjAwMDYyMWQzZWVjMWZmODk0Yzc5NmQ2MjRjNDRjOWUxNTY3ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAsmIscGJT1kTZ2BTI4GbVYfcK5x jflrNKjGnhlvglFw3joXNhBju4Z2d+0DiFWsxA7NFJrqFDqcF/AhPCwjCzUhnQxo 2udbpsYnoCAN3ksdmA2nDCLeFmeiUHLLPImvEBq4ngNcxAEScWx/XdR8F+Htlgb1 zYdFYaVGkyHqg7Hl7/AVt5ZcEWNjAzU8eZAvwlhNhubhnMrEZup1r1mc2VzLe1Vd GJOxRxjbBeTcKNZHl3iW00n2jv18PivZyMN4kS0EO50S5V4rvTBOvvjz9vyV/+S4 kV2Oh4elOeviXNOgGISafOaJ00/uEgbynsiNg2udBlJ1C35r9vvj2ONY9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8ABiHT7sH/iUx5bWJMRMnhVn/8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSHdBR0lkUHV3Zi1KVEhsdFlreEV5ZUZXZl93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgdMA0G CSqGSIb3DQEBCwUAA4IBAQBiFYXTLds9r9dseY0g6ky5bcR7XSp/MIHnyW3y4bEK twp88vgm4R2n0IpWEPQg6NeMzQpxmVsq6npUFaMDz76jnYjHbynNMUnnlhtS+NaK E16zuCdm3m3imUNn5/4SrCqjj9VQ+E8V1CN9/aFiwlr17N9iDNBNvkYmWuomJRjD MmE17IbUvmoDubshEFBtz8AcqBDGCLH5HXC15PT51j9lkAs+lUHAsrzgjF4xFM1W sYbtj15fqcAtye3VxT16ndtFb4wfG41Clf5v4yppq8obTsWA8cc+LKGMZJU5+5+g I+qhsA2aRn8TC+vcCVFNAuRP9GHyUn+vrsmsLtO6Hemn -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:44 2026 by rpki-client