This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HQctEsF6tA7F9lywMnvGaPqqzNc.roa File: HQctEsF6tA7F9lywMnvGaPqqzNc.roa (raw, json) Hash identifier: BsvoYrDcDArTsEBhiBzibamy99fLXbP467JhsWx35UY= Subject key identifier: 1D:07:2D:12:C1:7A:B4:0E:C5:F6:5C:B0:32:7B:C6:68:FA:AA:CC:D7 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F85191F42D57724CBB7DEB733C0875A Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HQctEsF6tA7F9lywMnvGaPqqzNc.roa Signing time: Fri 02 Jan 2026 16:23:07 +0000 ROA not before: Fri 02 Jan 2026 16:23:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213841 IP address blocks: 31.148.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:19:1f:42:d5:77:24:cb:b7:de:b7:33:c0:87:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d072d12c17ab40ec5f65cb0327bc668faaaccd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:80:5e:17:27:35:8d:ea:a0:e8:72:87:e0: 98:0c:e2:f2:1c:17:ca:6a:f9:75:f1:57:99:89:a1: 0b:a9:ec:04:3d:d3:57:90:09:5b:c3:bf:a1:33:a5: 1c:11:a7:60:b4:c1:34:8a:62:48:b2:a7:4a:4c:d1: 99:b5:40:53:4d:4b:55:3c:98:d9:74:2e:6a:e6:70: f6:0b:0e:9d:be:5f:a6:ce:b4:3c:8f:a7:75:64:d7: 9f:72:19:b5:c4:bc:15:dd:f3:30:77:08:0e:36:74: 32:91:dd:03:93:e5:55:e3:28:c6:6b:3e:8f:61:c8: 07:60:b8:ce:f6:38:33:eb:d2:55:5a:90:cf:71:81: 7d:dd:8d:d0:f0:f3:17:5d:1c:0b:19:cb:8c:65:e6: bf:d8:21:de:bd:f6:8d:e1:4d:89:de:9a:dd:e6:67: cf:aa:5b:da:36:4f:a7:b3:8a:6f:e8:09:9b:e7:0d: c0:12:3e:43:31:ee:ed:6c:71:94:8a:03:85:be:ff: 78:cf:4e:f9:34:b9:3c:90:2e:9d:75:ef:26:18:ff: 31:e4:c3:84:b4:c1:94:8d:08:dc:c7:17:aa:26:65: dd:b4:de:1e:9b:fc:e8:04:75:15:f6:c5:c5:9f:70: c6:21:3c:1c:c4:72:9c:40:a0:17:05:a5:b8:2f:3a: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:07:2D:12:C1:7A:B4:0E:C5:F6:5C:B0:32:7B:C6:68:FA:AA:CC:D7 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HQctEsF6tA7F9lywMnvGaPqqzNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.140.0/22 Signature Algorithm: sha256WithRSAEncryption a8:0d:24:6a:c2:aa:0c:cd:62:ce:02:59:b4:36:5a:aa:54:47: 54:73:42:98:97:6b:75:54:9c:d5:4b:bc:b4:13:d0:03:79:d2: 20:26:c5:13:f7:2b:c0:0e:98:9b:17:ca:ee:c4:29:be:b9:47: f0:2e:c2:4b:05:89:d2:58:d2:68:a1:b3:33:63:a1:b1:d5:fc: c5:02:8a:36:b5:85:4a:d0:a0:3f:39:33:5a:af:96:89:77:5d: ea:91:f6:bb:40:0d:96:78:2c:6f:85:42:93:6c:04:b2:bf:f3: 39:6d:9c:8c:40:95:3f:55:49:b4:7a:86:6e:10:1c:0f:ff:95: e0:10:91:f3:6d:85:0b:9c:b0:3e:5a:54:c3:4d:f2:0b:02:ac: e0:c1:87:5d:bc:6c:f6:8b:11:4a:4b:cb:29:83:18:84:09:4e: c8:bf:30:3d:cb:3c:7c:77:45:f8:5c:1c:1b:84:d1:fd:4f:a8: a0:46:09:d7:16:86:82:bc:a0:36:cb:3e:03:71:bd:59:fd:e6: a0:f1:f9:40:18:95:b5:0f:bc:f3:cb:39:33:f5:97:40:60:6c: b6:0c:13:6c:30:67:7d:e6:95:11:78:58:46:e5:cd:49:59:dc: 29:a1:f6:23:9f:4d:f5:17:6d:5d:78:dc:09:a2:b4:2a:4c:5b: a6:4f:8d:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRkfQtV3JMu33rczwIdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDA3MmQxMmMxN2FiNDBlYzVmNjVjYjAzMjdiYzY2OGZhYWFjY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2+AXhcnNY3qoOhyh+CYDOLyHBfK avl18VeZiaELqewEPdNXkAlbw7+hM6UcEadgtME0imJIsqdKTNGZtUBTTUtVPJjZ dC5q5nD2Cw6dvl+mzrQ8j6d1ZNefchm1xLwV3fMwdwgONnQykd0Dk+VV4yjGaz6P YcgHYLjO9jgz69JVWpDPcYF93Y3Q8PMXXRwLGcuMZea/2CHevfaN4U2J3prd5mfP qlvaNk+ns4pv6Amb5w3AEj5DMe7tbHGUigOFvv94z075NLk8kC6dde8mGP8x5MOE tMGUjQjcxxeqJmXdtN4em/zoBHUV9sXFn3DGITwcxHKcQKAXBaW4Lzrr+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0HLRLBerQOxfZcsDJ7xmj6qszXMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvSFFjdEVzRjZ0QTdGOWx5d01udkdhUHFxek5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH5SMMA0G CSqGSIb3DQEBCwUAA4IBAQCoDSRqwqoMzWLOAlm0NlqqVEdUc0KYl2t1VJzVS7y0 E9ADedIgJsUT9yvADpibF8ruxCm+uUfwLsJLBYnSWNJoobMzY6Gx1fzFAoo2tYVK 0KA/OTNar5aJd13qkfa7QA2WeCxvhUKTbASyv/M5bZyMQJU/VUm0eoZuEBwP/5Xg EJHzbYULnLA+WlTDTfILAqzgwYddvGz2ixFKS8spgxiECU7IvzA9yzx8d0X4XBwb hNH9T6igRgnXFoaCvKA2yz4Dcb1Z/eag8flAGJW1D7zzyzkz9ZdAYGy2DBNsMGd9 5pUReFhG5c1JWdwpofYjn031F21deNwJorQqTFumT41w -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:04 2026 by rpki-client