This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/haUw2s86OsBk3ey5B6mJ2zLpzL8.roa File: haUw2s86OsBk3ey5B6mJ2zLpzL8.roa (raw, json) Hash identifier: WPfF6KK+mdP1pSraVFwNTBBnpWT9qzmaabobVzlHCVo= Subject key identifier: 85:A5:30:DA:CF:3A:3A:C0:64:DD:EC:B9:07:A9:89:DB:32:E9:CC:BF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8474398D6DB55CA68EE08FD953CF76 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/haUw2s86OsBk3ey5B6mJ2zLpzL8.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62390 IP address blocks: 31.56.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:74:39:8d:6d:b5:5c:a6:8e:e0:8f:d9:53:cf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85a530dacf3a3ac064ddecb907a989db32e9ccbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:37:5b:a1:d5:a6:4b:fb:05:18:0a:ba:22: 68:16:83:94:77:90:c2:e1:8f:01:8d:cc:2e:1d:db: e7:2e:6d:95:f3:be:b6:25:29:c1:df:d0:b8:b5:cc: 0f:28:29:28:c0:49:8a:ac:b0:7a:4f:20:7f:fd:ce: fa:cb:1f:08:a7:42:d5:31:c3:46:5b:f5:f1:a3:d6: f0:c4:38:30:75:6c:da:4a:b4:ba:8f:45:95:07:e1: e5:56:81:cc:35:26:24:e8:c5:14:b1:38:c9:1d:d4: 94:d8:6f:7c:10:82:1f:a5:96:d7:6e:31:b0:79:96: 59:e7:7d:62:b8:f4:24:20:0a:c4:e1:5d:d9:72:51: ad:65:91:fa:92:2b:2e:19:dd:f0:a8:16:74:2e:55: 83:0f:6a:61:c7:db:88:3d:82:c2:ec:29:2d:dc:7b: eb:72:e0:28:95:78:db:76:82:3a:75:73:d4:30:68: ef:61:c2:74:73:0f:bd:78:6e:27:e1:60:3a:99:0c: 6a:02:59:18:28:4e:4b:03:49:86:55:90:b0:d7:0b: 83:96:42:7e:12:82:e3:be:ca:b8:47:49:ed:32:79: 72:ce:40:83:4a:c9:53:bc:30:e5:c1:cf:a6:3e:3b: c8:91:72:8a:6a:9f:0f:a8:f0:68:0e:24:1b:9c:f7: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A5:30:DA:CF:3A:3A:C0:64:DD:EC:B9:07:A9:89:DB:32:E9:CC:BF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/haUw2s86OsBk3ey5B6mJ2zLpzL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.41.0/24 Signature Algorithm: sha256WithRSAEncryption 58:fc:68:18:7f:25:6b:a2:ac:b9:0b:43:45:89:0c:3c:14:91: e7:15:fb:b3:6d:c9:b9:23:89:8c:91:f0:6a:e2:a7:e8:ab:b3: 81:f3:16:04:66:85:e9:ab:54:38:56:c8:21:fc:1c:63:90:f9: 46:94:2c:17:c3:ee:d2:6a:24:bd:d7:94:81:88:5b:66:c5:a2: 09:be:90:6e:47:a9:a3:e7:c1:e0:6a:ef:08:08:28:ea:da:b2: 6d:4d:30:64:a4:85:4c:95:e2:bb:a9:7b:b5:6e:54:8d:13:a5: 64:b8:de:dc:21:cb:1c:81:9f:e6:70:7e:cd:70:3b:80:f9:dc: 07:58:d9:21:1f:39:cf:33:f1:95:57:f7:28:7a:4c:00:44:7e: 5a:53:d7:0f:e4:ae:ec:3e:92:07:a3:54:b8:df:ea:9e:4d:0e: f6:ed:89:c8:a4:d1:5c:a1:ea:ab:e9:b8:cc:5b:8a:fd:6e:f8: 36:67:38:f1:c4:52:32:50:73:85:2d:50:10:b5:48:71:81:76: 47:76:73:94:3d:f6:d8:26:b9:cd:ec:2d:bc:69:bf:78:5e:7e: a2:94:0b:c7:43:80:8c:7e:f3:40:be:5d:59:c3:c2:3c:ae:49: 53:fa:95:5a:4e:78:70:69:15:60:16:a9:d4:42:b2:f7:e6:95: b1:bd:eb:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHQ5jW21XKaO4I/ZU892MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWE1MzBkYWNmM2EzYWMwNjRkZGVjYjkwN2E5ODlkYjMyZTljY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uo3W6HVpkv7BRgKuiJoFoOUd5DC 4Y8BjcwuHdvnLm2V8762JSnB39C4tcwPKCkowEmKrLB6TyB//c76yx8Ip0LVMcNG W/Xxo9bwxDgwdWzaSrS6j0WVB+HlVoHMNSYk6MUUsTjJHdSU2G98EIIfpZbXbjGw eZZZ531iuPQkIArE4V3ZclGtZZH6kisuGd3wqBZ0LlWDD2phx9uIPYLC7Ckt3Hvr cuAolXjbdoI6dXPUMGjvYcJ0cw+9eG4n4WA6mQxqAlkYKE5LA0mGVZCw1wuDlkJ+ EoLjvsq4R0ntMnlyzkCDSslTvDDlwc+mPjvIkXKKap8PqPBoDiQbnPeXawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWlMNrPOjrAZN3suQepidsy6cy/MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaGFVdzJzODZPc0JrM2V5NUI2bUoyekxwekw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgpMA0G CSqGSIb3DQEBCwUAA4IBAQBY/GgYfyVroqy5C0NFiQw8FJHnFfuzbcm5I4mMkfBq 4qfoq7OB8xYEZoXpq1Q4Vsgh/BxjkPlGlCwXw+7SaiS915SBiFtmxaIJvpBuR6mj 58Hgau8ICCjq2rJtTTBkpIVMleK7qXu1blSNE6VkuN7cIcscgZ/mcH7NcDuA+dwH WNkhHznPM/GVV/coekwARH5aU9cP5K7sPpIHo1S43+qeTQ727YnIpNFcoeqr6bjM W4r9bvg2ZzjxxFIyUHOFLVAQtUhxgXZHdnOUPfbYJrnN7C28ab94Xn6ilAvHQ4CM fvNAvl1Zw8I8rklT+pVaTnhwaRVgFqnUQrL35pWxveuj -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:42 2026 by rpki-client