This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/HrcUui0miVrUYtzzMrX-U9gOlCo.roa File: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (raw, json) Hash identifier: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0= Subject key identifier: 1E:B7:14:BA:2D:26:89:5A:D4:62:DC:F3:32:B5:FE:53:D8:0E:94:2A Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Certificate serial: 019B7C7F116F87CB3C27DA97EF2C7F8A72FF Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/HrcUui0miVrUYtzzMrX-U9gOlCo.roa Signing time: Fri 02 Jan 2026 02:17:40 +0000 ROA not before: Fri 02 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56547 IP address blocks: 31.24.232.0/21 maxlen: 21 31.24.232.0/22 maxlen: 22 31.24.232.0/24 maxlen: 24 31.24.233.0/24 maxlen: 24 31.24.234.0/24 maxlen: 24 31.24.235.0/24 maxlen: 24 31.24.236.0/22 maxlen: 22 31.24.236.0/24 maxlen: 24 31.24.237.0/24 maxlen: 24 31.24.238.0/24 maxlen: 24 31.24.239.0/24 maxlen: 24 185.69.108.0/22 maxlen: 22 185.69.108.0/23 maxlen: 23 185.69.108.0/24 maxlen: 24 185.69.109.0/24 maxlen: 24 185.69.110.0/23 maxlen: 23 185.69.110.0/24 maxlen: 24 185.69.111.0/24 maxlen: 24 185.76.248.0/22 maxlen: 22 185.76.248.0/23 maxlen: 23 185.76.248.0/24 maxlen: 24 185.76.249.0/24 maxlen: 24 185.76.250.0/23 maxlen: 23 185.76.250.0/24 maxlen: 24 185.76.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:11:6f:87:cb:3c:27:da:97:ef:2c:7f:8a:72:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eb714ba2d26895ad462dcf332b5fe53d80e942a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:92:22:85:01:48:cc:bf:8d:e9:fd:bf:fb: 29:0d:37:e8:cd:69:3a:95:f5:0f:8e:81:f3:96:40: ca:9c:51:99:39:48:60:a1:4e:81:4e:59:c1:51:fb: e5:da:1d:d6:71:05:7a:30:ed:ad:5e:25:1b:b8:e7: a2:36:25:ca:99:c2:a6:f9:7f:b5:70:be:ff:50:76: 38:22:7e:26:1a:89:a8:90:61:ff:04:2a:a8:3a:8d: 70:89:e5:d1:3b:ad:41:74:52:69:e8:cb:0e:60:f4: 86:79:58:69:94:f1:4a:fc:3d:2d:32:53:4c:ac:7b: fe:1a:bd:4a:d9:20:58:2c:16:c5:9d:e1:8e:11:7d: d6:c6:8b:d6:82:b6:08:51:1f:c7:61:2a:6f:5a:8a: 53:cb:bf:76:9f:d8:e6:11:6f:e4:86:a4:b2:9c:b6: 89:95:8e:5b:43:ca:f5:de:60:99:dd:88:9c:7d:d0: 84:68:ab:01:f0:18:b5:72:62:bc:c8:c8:55:13:8e: 46:89:2e:3c:bb:bb:2d:bf:9a:a6:c6:45:66:0c:6e: 30:52:1f:21:ea:e1:2e:7d:e8:b7:c3:76:c9:1a:2c: 46:dc:96:a2:d7:a1:a5:3b:04:b8:eb:de:d7:31:e9: be:97:61:65:c4:1e:13:cd:e0:0a:71:71:92:05:b8: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B7:14:BA:2D:26:89:5A:D4:62:DC:F3:32:B5:FE:53:D8:0E:94:2A X509v3 Authority Key Identifier: keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/HrcUui0miVrUYtzzMrX-U9gOlCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.232.0/21 185.69.108.0/22 185.76.248.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:da:6f:31:c2:a3:63:a0:52:cb:59:33:9e:da:f4:00:35:80: 03:69:ae:fa:80:ea:2d:c7:62:5b:89:69:47:de:24:3a:e1:28: f7:b8:2a:f8:70:fa:50:c3:50:4a:dd:ec:29:f1:ac:c3:9f:81: 45:8c:a4:eb:b2:8a:5a:c6:0c:87:97:88:c4:b7:9e:63:da:04: f6:c8:b6:83:af:05:ba:c7:99:28:c4:a1:6e:af:4d:d8:95:3b: 76:db:63:e7:f6:08:a5:73:6e:97:ae:e9:99:68:31:13:4f:a9: 6e:c8:d2:23:45:a2:30:28:27:f1:6a:4b:d7:68:2d:68:d5:41: 7c:6d:ac:6a:85:62:41:1f:32:6a:0c:a6:5a:04:fe:fa:81:ce: 8c:48:15:c7:8c:30:3f:cb:fb:18:41:2a:e6:ca:eb:96:aa:01: 4e:32:3c:39:f0:91:e2:37:7d:1c:d9:e6:20:7c:6c:d3:f5:7f: 5b:a5:c0:0c:f5:e2:41:43:ae:19:29:82:73:77:43:d1:60:26: f1:4e:ea:7f:a2:f2:ed:7a:bd:98:1f:4b:c4:df:ac:05:ee:cc: ab:cc:b1:76:00:8a:35:8b:3d:42:4e:8b:5e:2c:84:70:ac:ae: f3:8e:a6:17:89:13:ab:62:f2:6f:b5:e5:c8:fc:8f:46:15:7d: 93:da:39:2d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8fxFvh8s8J9qX7yx/inL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj NjI3MTUwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWI3MTRiYTJkMjY4OTVhZDQ2MmRjZjMzMmI1ZmU1M2Q4MGU5NDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnKSIoUBSMy/jen9v/spDTfozWk6 lfUPjoHzlkDKnFGZOUhgoU6BTlnBUfvl2h3WcQV6MO2tXiUbuOeiNiXKmcKm+X+1 cL7/UHY4In4mGomokGH/BCqoOo1wieXRO61BdFJp6MsOYPSGeVhplPFK/D0tMlNM rHv+Gr1K2SBYLBbFneGOEX3WxovWgrYIUR/HYSpvWopTy792n9jmEW/khqSynLaJ lY5bQ8r13mCZ3YicfdCEaKsB8Bi1cmK8yMhVE45GiS48u7stv5qmxkVmDG4wUh8h 6uEufei3w3bJGixG3Jai16GlOwS4697XMem+l2FlxB4TzeAKcXGSBbhYjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB63FLotJola1GLc8zK1/lPYDpQqMB8GA1UdIwQY MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt MWI5YTMyM2M1NzBiLzEvSHJjVXVpMG1pVnJVWXR6ek1yWC1VOWdPbENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDHxjoAwQC uUVsAwQCuUz4MA0GCSqGSIb3DQEBCwUAA4IBAQBP2m8xwqNjoFLLWTOe2vQANYAD aa76gOotx2JbiWlH3iQ64Sj3uCr4cPpQw1BK3ewp8azDn4FFjKTrsopaxgyHl4jE t55j2gT2yLaDrwW6x5koxKFur03YlTt222Pn9gilc26XrumZaDETT6luyNIjRaIw KCfxakvXaC1o1UF8baxqhWJBHzJqDKZaBP76gc6MSBXHjDA/y/sYQSrmyuuWqgFO Mjw58JHiN30c2eYgfGzT9X9bpcAM9eJBQ64ZKYJzd0PRYCbxTup/ovLter2YH0vE 36wF7syrzLF2AIo1iz1CToteLIRwrK7zjqYXiROrYvJvteXI/I9GFX2T2jkt -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:53 2026 by rpki-client