This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/JHZzuCbY7H0te7-M11FOsaEJkB4.roa File: JHZzuCbY7H0te7-M11FOsaEJkB4.roa (raw, json) Hash identifier: KwT//EDVtL7MXcat5zcL7S0XiNpCz55laXIuKNdqZ68= Subject key identifier: 24:76:73:B8:26:D8:EC:7D:2D:7B:BF:8C:D7:51:4E:B1:A1:09:90:1E Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Certificate serial: 019B7FF11778A1A98AE481E0A6BDF0DA16F5 Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/JHZzuCbY7H0te7-M11FOsaEJkB4.roa Signing time: Fri 02 Jan 2026 18:21:05 +0000 ROA not before: Fri 02 Jan 2026 18:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204122 IP address blocks: 31.170.96.0/24 maxlen: 24 31.170.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:17:78:a1:a9:8a:e4:81:e0:a6:bd:f0:da:16:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Validity Not Before: Jan 2 18:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=247673b826d8ec7d2d7bbf8cd7514eb1a109901e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:df:b0:e0:a2:44:a0:19:d2:53:8c:64:73: 04:ab:4a:b0:50:9f:ef:85:af:80:ad:5e:77:19:36: cc:d1:42:3f:b1:7b:0d:e6:c4:b8:d8:d1:2e:e7:d7: 10:45:94:e6:2b:01:7f:8a:02:84:01:ec:bf:96:0d: 98:2c:0e:3b:d0:7b:7d:60:5d:48:6d:29:e9:b5:15: da:de:78:6d:8b:ff:ed:91:ed:1a:5c:54:c9:1e:53: 06:71:80:86:0d:fc:1e:d5:67:99:ed:46:ad:84:97: 42:0c:1a:d8:f8:85:0a:ed:03:3c:f3:3a:40:ef:9d: 86:48:ff:ff:dd:8d:4a:56:3e:46:ec:fe:da:e1:90: 9c:78:3a:9e:1f:6d:15:b1:8a:c4:96:18:5c:b6:28: 28:fc:20:41:44:07:b9:4e:fe:8a:bb:06:1b:93:52: 29:97:92:01:e2:35:cd:a3:c2:7b:ae:68:a3:e4:8b: ee:1e:fc:07:77:67:61:6c:08:b0:08:b7:85:a2:3c: b1:d7:77:57:d6:e8:a2:34:67:5d:78:5a:3a:41:53: 8c:f9:64:85:fa:ea:8f:8a:02:b8:55:2f:d0:fc:c1: 3e:cf:5d:26:66:c6:37:ed:1c:5b:fa:30:6c:80:6a: a1:51:3f:d4:20:c5:d8:f3:83:16:28:85:8b:54:54: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:76:73:B8:26:D8:EC:7D:2D:7B:BF:8C:D7:51:4E:B1:A1:09:90:1E X509v3 Authority Key Identifier: keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/JHZzuCbY7H0te7-M11FOsaEJkB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.96.0/23 Signature Algorithm: sha256WithRSAEncryption 79:67:58:63:97:9c:9e:8f:78:ba:80:dd:cf:8e:8c:1c:25:aa: 03:3d:14:12:b9:cc:e1:76:52:17:74:31:63:fc:67:00:b9:a0: 8b:a8:47:97:f3:ea:ca:27:17:e1:e0:42:55:f6:a7:67:13:35: ff:42:84:f7:de:13:9a:5c:78:6e:91:46:87:a6:3b:0c:7a:1a: 86:75:3e:a8:b1:28:6e:cd:24:1c:a9:29:0e:7c:8a:b7:77:95: 02:35:81:43:55:dc:3f:b0:c6:d6:dd:3f:0a:12:76:f8:1e:27: 16:ee:e8:8a:a1:15:82:c7:d9:ef:75:8d:25:da:d3:05:0f:da: c1:b7:26:b4:11:ef:35:75:9c:28:70:e6:6f:44:ae:1b:29:e5: 99:d7:a7:22:3f:52:4c:61:89:aa:82:0c:ee:ef:c9:24:ee:76: d8:23:ef:af:83:bb:af:ca:bd:3d:4e:02:5f:17:2c:43:bc:db: 07:b4:62:a4:37:8f:27:9c:c3:57:86:c8:c8:60:c5:23:82:de: aa:b7:65:6f:24:2f:7d:da:57:31:37:3d:d5:8b:e2:41:be:bf: c8:06:61:4b:4b:58:ee:55:83:07:fd:de:a2:bc:52:cf:5e:a0: 99:9b:3c:0b:08:b4:9d:2a:e8:de:1f:aa:00:af:89:75:c2:53: fc:77:7a:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Rd4oamK5IHgpr3w2hb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh MDVkZDAwHhcNMjYwMTAyMTgyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDc2NzNiODI2ZDhlYzdkMmQ3YmJmOGNkNzUxNGViMWExMDk5MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQTfsOCiRKAZ0lOMZHMEq0qwUJ/v ha+ArV53GTbM0UI/sXsN5sS42NEu59cQRZTmKwF/igKEAey/lg2YLA470Ht9YF1I bSnptRXa3nhti//tke0aXFTJHlMGcYCGDfwe1WeZ7UathJdCDBrY+IUK7QM88zpA 752GSP//3Y1KVj5G7P7a4ZCceDqeH20VsYrElhhctigo/CBBRAe5Tv6KuwYbk1Ip l5IB4jXNo8J7rmij5IvuHvwHd2dhbAiwCLeFojyx13dX1uiiNGddeFo6QVOM+WSF +uqPigK4VS/Q/ME+z10mZsY37Rxb+jBsgGqhUT/UIMXY84MWKIWLVFQSDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCR2c7gm2Ox9LXu/jNdRTrGhCZAeMB8GA1UdIwQY MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt MGYzYjljMDVkZTQ1LzEvSkhaenVDYlk3SDB0ZTctTTExRk9zYUVKa0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1 LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH6pgMA0G CSqGSIb3DQEBCwUAA4IBAQB5Z1hjl5yej3i6gN3PjowcJaoDPRQSuczhdlIXdDFj /GcAuaCLqEeX8+rKJxfh4EJV9qdnEzX/QoT33hOaXHhukUaHpjsMehqGdT6osShu zSQcqSkOfIq3d5UCNYFDVdw/sMbW3T8KEnb4HicW7uiKoRWCx9nvdY0l2tMFD9rB tya0Ee81dZwocOZvRK4bKeWZ16ciP1JMYYmqggzu78kk7nbYI++vg7uvyr09TgJf FyxDvNsHtGKkN48nnMNXhsjIYMUjgt6qt2VvJC992lcxNz3Vi+JBvr/IBmFLS1ju VYMH/d6ivFLPXqCZmzwLCLSdKujeH6oAr4l1wlP8d3om -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:58 2026 by rpki-client