This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/hFJA5_fA_Gp7BCxbMO_bes9nk40.roa File: hFJA5_fA_Gp7BCxbMO_bes9nk40.roa (raw, json) Hash identifier: s64nTqpmoBBkk6Hywj8GwfB0MNxG8qecnHtsYCweNdk= Subject key identifier: 84:52:40:E7:F7:C0:FC:6A:7B:04:2C:5B:30:EF:DB:7A:CF:67:93:8D Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Certificate serial: 019B7B3659E10E5A6F3FFF446D989B259F8A Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/hFJA5_fA_Gp7BCxbMO_bes9nk40.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44789 IP address blocks: 31.24.184.0/21 maxlen: 21 45.10.94.0/23 maxlen: 23 92.63.240.0/20 maxlen: 20 185.143.202.0/23 maxlen: 23 2a00:9860::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:59:e1:0e:5a:6f:3f:ff:44:6d:98:9b:25:9f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=845240e7f7c0fc6a7b042c5b30efdb7acf67938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a6:cf:59:b8:9f:f2:39:95:3f:4e:d5:29:5a: bd:8d:9b:c9:f9:b5:b0:86:fc:b8:2f:0a:e0:79:c9: d8:ab:a2:b5:c0:31:26:ab:ab:2e:f5:1d:35:e3:0e: 9b:4e:06:44:53:9b:90:ab:58:14:a0:d1:33:e1:96: cc:6d:e2:ba:14:50:73:62:3a:9b:31:cc:27:36:93: bd:8d:5c:5e:ac:23:24:26:3f:ef:d6:67:bf:15:77: 93:da:e1:ce:a3:71:32:ef:d0:40:02:b1:85:48:93: c9:ce:d5:71:73:dd:45:50:66:e5:c9:4a:5f:66:db: f8:99:fb:b9:c7:e3:81:6d:b9:e4:29:ba:b3:51:e5: f7:db:e9:bd:55:dc:f0:2b:5d:5d:ae:77:95:e6:24: e3:24:45:c7:16:a7:a6:de:13:26:d9:b8:ba:cc:ce: 96:ac:bd:09:17:94:13:20:02:43:87:85:4d:96:17: e8:e9:96:b9:6e:5e:db:be:5a:5d:2f:79:eb:fa:92: 2b:f8:d5:70:b6:91:36:28:eb:2b:1e:05:6b:83:dd: b3:af:b4:1b:01:61:c1:dd:8a:b7:35:13:1a:c5:58: ea:33:ed:5e:33:82:d1:79:2b:46:41:b3:fc:fe:f2: 77:80:92:98:6b:e5:07:99:17:be:16:64:fc:48:9c: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:52:40:E7:F7:C0:FC:6A:7B:04:2C:5B:30:EF:DB:7A:CF:67:93:8D X509v3 Authority Key Identifier: keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/hFJA5_fA_Gp7BCxbMO_bes9nk40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.184.0/21 45.10.94.0/23 92.63.240.0/20 185.143.202.0/23 IPv6: 2a00:9860::/37 Signature Algorithm: sha256WithRSAEncryption a5:cc:3a:15:27:e0:86:61:c7:a7:6c:e4:30:95:21:12:66:04: e8:14:42:5a:a6:79:a5:76:3f:28:f2:a8:11:50:0d:72:77:9c: c7:15:fd:16:02:d9:2d:29:ec:1d:5b:3f:d2:93:a9:d1:96:ae: 2f:f5:98:15:6f:02:5b:3e:45:c7:0e:95:fe:16:73:7a:de:3d: 8a:a0:93:93:d5:ae:de:7d:f1:66:ec:f9:5b:f5:64:a0:90:76: 19:3a:ca:92:7b:2f:51:42:a2:f6:32:16:19:e9:19:ba:db:1b: a5:80:f1:e1:06:6a:d0:a6:d9:2d:6f:32:2e:b5:3f:92:eb:b0: c4:5d:f4:3d:82:1a:d3:ce:3e:71:e4:71:b8:46:13:6d:be:53: d0:98:f2:34:2d:5d:01:6f:82:69:05:3d:d6:fc:2b:81:72:65: b2:fe:14:64:ba:8a:ae:ed:5a:12:59:a6:ec:6c:33:f9:67:c5: a2:47:0f:47:2d:f6:88:4b:3a:20:60:1b:65:42:52:ee:16:d5: fb:49:3d:dc:b5:cf:09:6c:9c:fc:1e:20:3f:0d:45:65:2d:83: 2b:57:3b:83:69:83:1d:8b:f5:2e:17:1a:0b:fd:c7:6d:1c:da: d9:7b:5c:d5:67:94:75:6f:98:b0:41:83:09:a7:ef:fa:64:f6: f8:52:91:57 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7NlnhDlpvP/9EbZibJZ+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk OGE1NmQwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDUyNDBlN2Y3YzBmYzZhN2IwNDJjNWIzMGVmZGI3YWNmNjc5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzabPWbif8jmVP07VKVq9jZvJ+bWw hvy4LwrgecnYq6K1wDEmq6su9R014w6bTgZEU5uQq1gUoNEz4ZbMbeK6FFBzYjqb McwnNpO9jVxerCMkJj/v1me/FXeT2uHOo3Ey79BAArGFSJPJztVxc91FUGblyUpf Ztv4mfu5x+OBbbnkKbqzUeX32+m9VdzwK11drneV5iTjJEXHFqem3hMm2bi6zM6W rL0JF5QTIAJDh4VNlhfo6Za5bl7bvlpdL3nr+pIr+NVwtpE2KOsrHgVrg92zr7Qb AWHB3Yq3NRMaxVjqM+1eM4LReStGQbP8/vJ3gJKYa+UHmRe+FmT8SJwVYwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFIRSQOf3wPxqewQsWzDv23rPZ5ONMB8GA1UdIwQY MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt NDZlZTBjZDdmY2JhLzEvaEZKQTVfZkFfR3A3QkN4Yk1PX2JlczluazQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQDHxi4AwQB LQpeAwQEXD/wAwQBuY/KMA4EAgACMAgDBgMqAJhgADANBgkqhkiG9w0BAQsFAAOC AQEApcw6FSfghmHHp2zkMJUhEmYE6BRCWqZ5pXY/KPKoEVANcnecxxX9FgLZLSns HVs/0pOp0ZauL/WYFW8CWz5Fxw6V/hZzet49iqCTk9Wu3n3xZuz5W/VkoJB2GTrK knsvUUKi9jIWGekZutsbpYDx4QZq0KbZLW8yLrU/kuuwxF30PYIa084+ceRxuEYT bb5T0JjyNC1dAW+CaQU91vwrgXJlsv4UZLqKru1aElmm7Gwz+WfFokcPRy32iEs6 IGAbZUJS7hbV+0k93LXPCWyc/B4gPw1FZS2DK1c7g2mDHYv1LhcaC/3HbRza2Xtc 1WeUdW+YsEGDCafv+mT2+FKRVw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:32 2026 by rpki-client