This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hUQZaEQKQyjswbaF74vd0_2OxwM.roa File: hUQZaEQKQyjswbaF74vd0_2OxwM.roa (raw, json) Hash identifier: S3W/UumohEym2Q32+0d1p9xtkKY5TrFnOeHA2vNRaT8= Subject key identifier: 85:44:19:68:44:0A:43:28:EC:C1:B6:85:EF:8B:DD:D3:FD:8E:C7:03 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F847B3B43F9D06A144E2FE9A2C7B3DA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hUQZaEQKQyjswbaF74vd0_2OxwM.roa Signing time: Fri 02 Jan 2026 16:22:27 +0000 ROA not before: Fri 02 Jan 2026 16:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134677 IP address blocks: 31.58.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7b:3b:43:f9:d0:6a:14:4e:2f:e9:a2:c7:b3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85441968440a4328ecc1b685ef8bddd3fd8ec703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:2e:8d:cc:23:ca:a8:b3:8d:29:6b:eb:6c: 8c:64:76:e6:b1:5f:fb:b3:65:cd:df:aa:ee:ad:7f: 6c:87:65:69:75:49:77:da:32:3b:69:73:9c:62:1a: 26:ac:15:65:38:e2:ed:f5:ba:e1:d0:7a:91:59:83: 5e:a0:ad:b2:4b:d2:6d:c9:47:64:76:d3:26:9b:7e: 6f:62:05:0f:81:89:52:da:0d:c8:d6:71:b5:cc:02: 07:02:fd:bf:29:55:0a:27:4c:8c:8c:6f:53:67:d9: e8:5d:8b:23:a5:83:af:f4:a5:47:ff:4d:09:44:e0: c9:43:35:00:4d:bd:07:f0:ef:d2:d0:9e:63:23:8b: 54:6c:ab:c8:29:85:fd:fa:b0:29:27:a3:2b:01:35: 48:fd:9a:ad:50:11:16:b9:b0:5d:01:f1:bc:ee:84: 80:9b:29:12:3c:1e:55:af:5f:14:f5:6d:18:20:27: 78:b1:71:19:7b:f3:ab:28:25:3b:a6:55:d6:c5:fc: 68:18:7d:e4:7f:f6:31:b8:73:80:af:05:d6:16:25: f8:d1:46:19:9c:9a:bd:38:3f:f9:6c:68:a8:ae:3b: 42:cc:19:b1:85:7f:7f:8d:c8:a0:98:46:16:e1:99: 9c:23:fc:ee:22:0b:18:c5:36:e4:d6:25:77:02:47: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:44:19:68:44:0A:43:28:EC:C1:B6:85:EF:8B:DD:D3:FD:8E:C7:03 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hUQZaEQKQyjswbaF74vd0_2OxwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.152.0/24 Signature Algorithm: sha256WithRSAEncryption 09:0b:9e:33:0e:5f:2e:fc:30:03:68:d5:58:8a:cc:14:34:11: 37:f7:c5:bb:82:37:39:1e:17:b9:a8:d9:6f:c9:40:5a:88:f2: 51:25:62:ad:13:3e:be:2a:07:76:fb:e3:66:39:33:54:37:dc: 11:0d:61:4f:c6:31:57:97:cb:65:b9:88:d8:9f:96:ef:05:0d: 75:78:d1:d2:12:93:dd:36:be:37:ee:8b:3e:f4:22:de:7a:bc: 51:8e:fb:d3:72:08:7a:56:f5:92:f4:7a:91:04:f5:ba:e6:05: 95:60:8c:02:d7:cd:03:27:68:d7:be:d8:11:36:20:c9:9b:32: 9b:9d:0c:4c:ce:72:26:0f:1b:ec:18:ab:38:19:b5:8b:db:6f: eb:a7:ae:3a:41:c2:03:06:55:11:09:1c:9f:9e:11:70:62:fa: 88:80:f9:e7:0e:4e:c9:e2:15:34:de:a9:2c:0e:03:98:dd:29: 6e:9f:78:e0:07:ba:ab:1d:1d:0f:91:fb:dc:e4:de:86:e7:eb: ae:90:74:0e:60:46:c0:25:a8:3f:4e:d6:84:90:4a:54:c5:8b: dd:81:3a:ce:5c:fb:d1:32:3a:b6:f4:22:6a:be:1b:ab:ca:e8: 42:ee:ca:32:94:ec:3a:2c:4d:a5:e5:0a:8a:8b:37:c5:7a:67: fe:3c:ea:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHs7Q/nQahROL+mix7PaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTQ0MTk2ODQ0MGE0MzI4ZWNjMWI2ODVlZjhiZGRkM2ZkOGVjNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YwujcwjyqizjSlr62yMZHbmsV/7 s2XN36rurX9sh2VpdUl32jI7aXOcYhomrBVlOOLt9brh0HqRWYNeoK2yS9JtyUdk dtMmm35vYgUPgYlS2g3I1nG1zAIHAv2/KVUKJ0yMjG9TZ9noXYsjpYOv9KVH/00J RODJQzUATb0H8O/S0J5jI4tUbKvIKYX9+rApJ6MrATVI/ZqtUBEWubBdAfG87oSA mykSPB5Vr18U9W0YICd4sXEZe/OrKCU7plXWxfxoGH3kf/YxuHOArwXWFiX40UYZ nJq9OD/5bGiorjtCzBmxhX9/jcigmEYW4ZmcI/zuIgsYxTbk1iV3Akd8NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIVEGWhECkMo7MG2he+L3dP9jscDMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaFVRWmFFUUtReWpzd2JhRjc0dmQwXzJPeHdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqYMA0G CSqGSIb3DQEBCwUAA4IBAQAJC54zDl8u/DADaNVYiswUNBE398W7gjc5Hhe5qNlv yUBaiPJRJWKtEz6+Kgd2++NmOTNUN9wRDWFPxjFXl8tluYjYn5bvBQ11eNHSEpPd Nr437os+9CLeerxRjvvTcgh6VvWS9HqRBPW65gWVYIwC180DJ2jXvtgRNiDJmzKb nQxMznImDxvsGKs4GbWL22/rp646QcIDBlURCRyfnhFwYvqIgPnnDk7J4hU03qks DgOY3Slun3jgB7qrHR0Pkfvc5N6G5+uukHQOYEbAJag/TtaEkEpUxYvdgTrOXPvR Mjq29CJqvhuryuhC7soylOw6LE2l5QqKizfFemf+POpF -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client