This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa File: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (raw, json) Hash identifier: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg= Subject key identifier: 84:A9:C7:E3:F3:C1:5D:5D:D4:17:E5:C6:67:BA:0E:37:B4:E9:A8:6D Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018 Certificate serial: 019B7B362CF0DF7A9BC8F69835506E62F81C Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa Signing time: Thu 01 Jan 2026 20:18:26 +0000 ROA not before: Thu 01 Jan 2026 20:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209711 IP address blocks: 31.14.52.0/24 maxlen: 24 31.214.129.0/24 maxlen: 24 31.214.152.0/24 maxlen: 24 37.156.246.0/24 maxlen: 24 45.139.222.0/24 maxlen: 24 45.145.20.0/24 maxlen: 24 89.45.94.0/24 maxlen: 24 93.113.96.0/24 maxlen: 24 109.230.196.0/24 maxlen: 24 185.111.244.0/24 maxlen: 24 185.111.245.0/24 maxlen: 24 185.111.246.0/24 maxlen: 24 185.111.247.0/24 maxlen: 24 193.53.87.0/24 maxlen: 24 193.53.98.0/24 maxlen: 24 193.53.103.0/24 maxlen: 24 193.53.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2c:f0:df:7a:9b:c8:f6:98:35:50:6e:62:f8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018 Validity Not Before: Jan 1 20:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a9c7e3f3c15d5dd417e5c667ba0e37b4e9a86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:f4:8e:eb:46:cf:8a:a3:e7:12:a6:3a:cb: 52:e2:d1:7c:28:97:b1:42:31:41:a6:d6:57:56:1b: bb:07:e4:37:ed:ff:a0:c4:7b:f0:54:83:bd:52:0b: 71:6c:87:e1:93:cb:60:76:07:17:52:57:08:a3:cf: a7:f7:9d:5b:67:d7:9b:02:ab:2f:e9:fe:97:6d:37: 2c:a9:85:7b:42:ab:ba:40:2e:54:89:aa:be:38:a5: b5:a3:38:7e:a2:5d:dc:5a:fc:e1:5e:a8:b8:da:6c: cf:41:9c:f2:f0:7b:5c:84:37:8a:e7:80:74:1d:94: 49:4a:73:0c:d8:54:da:6a:51:42:2a:70:f3:91:a5: 85:c6:40:5c:72:66:e3:62:c8:41:f9:4f:a7:f1:92: 3d:9f:8f:6e:23:39:1d:b7:3c:1b:f3:c3:78:97:cb: 04:fd:ec:3b:21:da:33:d6:fe:f7:8c:ee:5b:ea:eb: bf:75:fb:3a:72:66:5c:01:79:1b:90:31:ec:39:10: 4e:bf:f2:da:b9:bb:c8:1a:6d:67:eb:f6:f0:8e:e9: 7b:78:5c:b4:ca:87:12:d6:b2:cd:79:f9:e7:f8:4e: 2d:f7:d5:cd:d1:b3:47:04:9e:6c:ad:00:d1:bb:ff: 20:75:3c:80:3c:13:4c:2c:30:95:1a:7c:13:57:22: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A9:C7:E3:F3:C1:5D:5D:D4:17:E5:C6:67:BA:0E:37:B4:E9:A8:6D X509v3 Authority Key Identifier: keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.52.0/24 31.214.129.0/24 31.214.152.0/24 37.156.246.0/24 45.139.222.0/24 45.145.20.0/24 89.45.94.0/24 93.113.96.0/24 109.230.196.0/24 185.111.244.0/22 193.53.87.0/24 193.53.98.0/24 193.53.103.0/24 193.53.245.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ad:9b:68:73:e9:cd:17:08:f9:8b:33:b0:df:4e:31:93:f9: 05:9c:83:a4:ac:8b:9a:c6:25:6b:73:dc:cd:bf:0d:0f:d7:d7: bf:00:9f:48:db:c4:7f:1e:ff:42:26:09:7b:ea:bc:30:af:f3: 66:b4:5b:12:56:79:fe:09:88:88:7b:cb:dd:88:ec:b6:e0:f2: a4:0d:4a:36:c6:09:28:a6:45:04:0b:ed:d4:89:13:1b:2e:0e: 66:4a:20:e4:90:b9:58:ed:46:21:28:29:40:df:98:70:84:c0: 3a:b2:cb:d2:92:18:10:73:8d:8c:df:4c:e0:e0:e3:b7:34:7d: de:43:42:27:32:06:04:d6:e0:48:dd:8e:36:da:65:a7:89:c8: 16:67:d1:ee:9e:91:8d:b7:40:4f:8a:35:e6:ef:61:ff:1f:32: 06:05:23:a2:ad:00:55:2b:04:50:f9:16:b7:aa:73:c1:a7:4c: a0:83:44:a4:1e:5c:4d:2f:3b:53:fa:b6:6f:bb:68:b1:53:12: 3a:45:38:40:8d:92:7c:26:47:90:d8:37:60:c4:98:63:08:d4: d1:a6:41:74:b6:05:06:ab:38:17:e5:c1:2b:d7:d3:aa:1f:a9: b3:96:1d:d1:6b:5a:d3:4f:79:ea:f6:f8:ec:89:5b:47:b9:82: 60:5f:63:41 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt7Nizw33qbyPaYNVBuYvgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZDA3NTg4MjVkZDg5Y2ZlZTVmZGVjYzdkY2I2NTFmMGE1 ZDEwMTgwHhcNMjYwMTAxMjAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGE5YzdlM2YzYzE1ZDVkZDQxN2U1YzY2N2JhMGUzN2I0ZTlhODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWv0jutGz4qj5xKmOstS4tF8KJex QjFBptZXVhu7B+Q37f+gxHvwVIO9UgtxbIfhk8tgdgcXUlcIo8+n951bZ9ebAqsv 6f6XbTcsqYV7Qqu6QC5Uiaq+OKW1ozh+ol3cWvzhXqi42mzPQZzy8HtchDeK54B0 HZRJSnMM2FTaalFCKnDzkaWFxkBccmbjYshB+U+n8ZI9n49uIzkdtzwb88N4l8sE /ew7Idoz1v73jO5b6uu/dfs6cmZcAXkbkDHsORBOv/LaubvIGm1n6/bwjul7eFy0 yocS1rLNefnn+E4t99XN0bNHBJ5srQDRu/8gdTyAPBNMLDCVGnwTVyK5iQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFISpx+PzwV1d1Bflxme6Dje06ahtMB8GA1UdIwQY MBaAFJzQdYgl3YnP7l/ezH3LZR8KXRAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3Yjkt YTU0ZjhlNDgxM2U3LzEvaEtuSDRfUEJYVjNVRi1YR1o3b09ON1RwcUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3YjktYTU0ZjhlNDgxM2U3 LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAHw40AwQA H9aBAwQAH9aYAwQAJZz2AwQALYveAwQALZEUAwQAWS1eAwQAXXFgAwQAbebEAwQC uW/0AwQAwTVXAwQAwTViAwQAwTVnAwQAwTX1MA0GCSqGSIb3DQEBCwUAA4IBAQB+ rZtoc+nNFwj5izOw304xk/kFnIOkrIuaxiVrc9zNvw0P19e/AJ9I28R/Hv9CJgl7 6rwwr/NmtFsSVnn+CYiIe8vdiOy24PKkDUo2xgkopkUEC+3UiRMbLg5mSiDkkLlY 7UYhKClA35hwhMA6ssvSkhgQc42M30zg4OO3NH3eQ0InMgYE1uBI3Y422mWnicgW Z9HunpGNt0BPijXm72H/HzIGBSOirQBVKwRQ+Ra3qnPBp0ygg0SkHlxNLztT+rZv u2ixUxI6RThAjZJ8JkeQ2DdgxJhjCNTRpkF0tgUGqzgX5cEr19OqH6mzlh3Ra1rT T3nq9vjsiVtHuYJgX2NB -----END CERTIFICATE-----Generated at Mon Jan 19 19:36:37 2026 by rpki-client