This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/H7NifDoSU6PPqAYGiGzy4_-XfNw.roa File: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (raw, json) Hash identifier: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw= Subject key identifier: 1F:B3:62:7C:3A:12:53:A3:CF:A8:06:06:88:6C:F2:E3:FF:97:7C:DC Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Certificate serial: 019B7CEE1CE0875B68E8AA74B6C2216C7643 Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/H7NifDoSU6PPqAYGiGzy4_-XfNw.roa Signing time: Fri 02 Jan 2026 04:18:58 +0000 ROA not before: Fri 02 Jan 2026 04:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209279 IP address blocks: 31.41.35.0/24 maxlen: 24 195.182.38.0/24 maxlen: 24 2a12:3ec0::/48 maxlen: 48 2a12:3ec0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1c:e0:87:5b:68:e8:aa:74:b6:c2:21:6c:76:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fb3627c3a1253a3cfa80606886cf2e3ff977cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:2f:0f:46:dd:2a:a8:50:6e:48:8c:3e:7d: fd:a9:53:d4:e3:3b:e2:bb:74:2d:d5:81:99:47:7f: 62:d4:03:8b:31:21:71:93:bd:35:ae:58:c6:67:88: 62:6e:80:4a:b3:ac:bf:21:d7:a7:5c:d9:9c:78:4e: ea:02:26:7f:d9:e9:5b:8d:74:37:73:96:64:42:a8: ba:0f:7b:0a:8b:1d:32:a9:8c:e5:c3:c9:ec:9d:f0: 18:f7:8e:88:c3:e4:46:01:c2:ae:64:78:59:21:a8: f2:b4:e7:01:6f:90:bf:f4:a0:56:85:21:1d:fe:83: 46:eb:bb:24:6a:2e:79:08:18:52:ed:bc:96:b2:5d: d2:1c:c1:cf:ca:f1:f8:80:72:84:9c:38:4b:60:a0: 67:0a:ae:ee:5a:9a:0f:e4:34:3a:63:ac:57:67:f1: 33:76:20:81:f4:83:1e:09:96:77:1d:0e:49:2b:ff: 8f:38:3c:43:8f:d1:65:f3:36:75:04:96:0e:e7:28: 41:d9:8b:dd:62:a4:dd:63:a5:30:9e:1f:c7:bc:02: a6:61:a0:86:e0:56:e2:a3:0e:56:95:88:6c:28:87: 49:f3:67:75:c4:49:bc:d1:a4:81:d1:0c:05:6e:9b: 31:f2:92:ce:ac:04:b3:b8:17:9b:1e:d3:6e:16:dc: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B3:62:7C:3A:12:53:A3:CF:A8:06:06:88:6C:F2:E3:FF:97:7C:DC X509v3 Authority Key Identifier: keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/H7NifDoSU6PPqAYGiGzy4_-XfNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.35.0/24 195.182.38.0/24 IPv6: 2a12:3ec0::/47 Signature Algorithm: sha256WithRSAEncryption a9:87:86:fc:c6:b4:90:ff:83:4a:19:b3:9b:0f:7f:8c:be:68: 38:b9:7b:55:c5:de:2e:da:28:17:aa:66:11:db:e3:67:55:07: de:28:2e:56:a6:a9:4c:1f:a8:bf:0d:e6:89:bd:c0:4e:86:76: ce:b9:ea:a5:63:f6:ce:a2:dd:16:61:c5:fc:f0:8d:1a:8c:81: 5c:de:89:94:9f:d8:53:25:1c:cb:72:79:c9:e2:3f:f9:0e:36: 6e:80:04:2c:c5:b4:f2:62:c2:91:9f:23:6a:bc:88:83:98:ee: 70:a3:f1:e5:a0:41:21:24:07:58:0d:57:13:b7:69:98:24:5e: 78:98:df:d5:db:de:39:f5:31:0c:11:5c:a8:55:88:20:8a:7c: 3d:da:3c:aa:42:3b:32:d9:91:50:5f:6e:82:4d:d3:44:06:39: 53:80:34:55:d6:bf:9e:00:24:f1:9c:6b:49:d3:a0:8f:42:18: ec:37:bc:d2:11:ff:cc:9f:21:3d:38:ec:89:3d:4e:32:91:b8: 8d:12:04:ea:b9:e3:0f:54:d1:f3:06:3d:39:d0:57:97:1d:23: 05:f3:06:a1:9f:8e:5f:b0:1c:91:b3:c8:59:0c:e0:6d:76:c7: 84:17:ee:8f:64:58:27:a9:63:d5:91:9b:fd:c5:b7:0d:78:6e: 80:d6:3f:f9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87hzgh1to6Kp0tsIhbHZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTg5ZDJlMTUyMDFiMjBlMzQwODhkZDFjMDQ1NWIyNTQ0 NGY4ZmMwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmIzNjI3YzNhMTI1M2EzY2ZhODA2MDY4ODZjZjJlM2ZmOTc3Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8UvD0bdKqhQbkiMPn39qVPU4zvi u3Qt1YGZR39i1AOLMSFxk701rljGZ4hiboBKs6y/IdenXNmceE7qAiZ/2elbjXQ3 c5ZkQqi6D3sKix0yqYzlw8nsnfAY946Iw+RGAcKuZHhZIajytOcBb5C/9KBWhSEd /oNG67skai55CBhS7byWsl3SHMHPyvH4gHKEnDhLYKBnCq7uWpoP5DQ6Y6xXZ/Ez diCB9IMeCZZ3HQ5JK/+PODxDj9Fl8zZ1BJYO5yhB2YvdYqTdY6Uwnh/HvAKmYaCG 4Fbiow5WlYhsKIdJ82d1xEm80aSB0QwFbpsx8pLOrASzuBebHtNuFtwbZQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFB+zYnw6ElOjz6gGBohs8uP/l3zcMB8GA1UdIwQY MBaAFMuYnS4VIBsg40CI3RwEVbJURPj8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEt MzY5MjYzNDQzMDI1LzEvSDdOaWZEb1NVNlBQcUFZR2lHenk0Xy1YZk53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEtMzY5MjYzNDQzMDI1 LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAHykjAwQA w7YmMA8EAgACMAkDBwEqEj7AAAAwDQYJKoZIhvcNAQELBQADggEBAKmHhvzGtJD/ g0oZs5sPf4y+aDi5e1XF3i7aKBeqZhHb42dVB94oLlamqUwfqL8N5om9wE6Gds65 6qVj9s6i3RZhxfzwjRqMgVzeiZSf2FMlHMtyecniP/kONm6ABCzFtPJiwpGfI2q8 iIOY7nCj8eWgQSEkB1gNVxO3aZgkXniY39Xb3jn1MQwRXKhViCCKfD3aPKpCOzLZ kVBfboJN00QGOVOANFXWv54AJPGca0nToI9CGOw3vNIR/8yfIT047Ik9TjKRuI0S BOq54w9U0fMGPTnQV5cdIwXzBqGfjl+wHJGzyFkM4G12x4QX7o9kWCepY9WRm/3F tw14boDWP/k= -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:21 2026 by rpki-client