This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa File: HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa (raw, json) Hash identifier: h5J4pV3iFw9aHd46YGtejZF/piq/CX6ObP5wMogmeI8= Subject key identifier: 1C:FE:21:F3:FF:A2:8F:56:C0:61:D5:DB:5F:76:75:47:B4:DD:27:D8 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F836E8CE8C49DAEA96054E752840602 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa Signing time: Fri 02 Jan 2026 16:21:18 +0000 ROA not before: Fri 02 Jan 2026 16:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211867 IP address blocks: 31.40.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6e:8c:e8:c4:9d:ae:a9:60:54:e7:52:84:06:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cfe21f3ffa28f56c061d5db5f767547b4dd27d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:05:dc:b9:61:5b:50:2d:99:9a:59:7a:b5: 3b:31:52:19:50:26:3c:42:40:fc:e7:7c:82:4e:b9: b3:dc:0f:a3:ca:f1:20:4a:26:b1:03:b4:f7:49:5b: a3:67:c0:75:07:b0:d9:93:4f:dc:b7:96:10:83:58: f6:58:95:80:7d:79:13:68:37:12:6d:af:65:9c:31: ed:a7:fb:51:1b:33:a3:54:b8:17:b2:ac:40:be:01: ce:c2:11:6f:aa:30:c1:cb:3d:33:95:8d:49:79:a7: b7:be:de:2f:93:8f:88:fe:c6:06:d8:b3:1f:28:2b: 4a:fe:9c:93:e4:fe:cf:09:c5:bb:92:34:05:f9:57: 7c:f9:e8:78:f8:35:91:c5:2a:e6:cc:75:a2:ff:03: 5e:43:54:01:43:c0:49:f9:43:59:44:11:2b:9e:7d: 90:c5:dd:9f:ed:bc:8e:51:aa:02:d4:63:d4:cd:3f: 8f:46:7e:ce:91:9d:c9:27:82:2e:61:45:04:92:24: 01:4e:90:b5:f4:3a:1e:41:30:dd:a9:92:04:21:3c: ba:9e:95:26:a1:d4:a7:57:83:e1:5f:1b:e6:35:ee: 58:f4:32:c2:bb:33:a8:af:61:61:69:cc:9c:14:08: a2:a5:27:14:85:5a:bb:75:3d:0e:12:b2:d6:4b:f7: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:21:F3:FF:A2:8F:56:C0:61:D5:DB:5F:76:75:47:B4:DD:27:D8 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.142.0/24 Signature Algorithm: sha256WithRSAEncryption 36:3b:9b:44:c4:25:6b:c4:0a:1a:3a:0e:77:fa:1b:aa:87:24: 32:4d:6f:8c:11:f2:f4:f9:6d:8e:6c:34:f0:59:ac:38:e3:c9: ed:04:6c:e2:a8:97:a0:43:6a:b2:bc:e6:ea:e0:ef:a4:e0:c5: 4b:c6:98:4c:d6:76:91:c3:a4:ba:01:99:db:5f:e8:b8:d9:93: 52:80:14:d7:12:3c:8f:55:5b:f4:e0:17:f4:15:df:62:21:90: f3:e4:f9:81:c8:14:b5:7e:fe:5c:72:7e:87:ca:e7:30:1e:b8: d5:3f:68:ea:dc:c5:d0:d3:d5:e5:10:f5:18:04:5d:bb:3e:61: 5d:df:25:23:a2:c8:55:23:f7:20:3c:52:e4:e5:0e:fb:91:7a: 7a:bd:c8:e2:af:0d:78:0d:38:83:a9:91:76:fd:a7:a4:0a:04: 2a:1e:6d:a4:c1:f6:de:5f:c1:31:48:d2:ce:8f:44:55:8a:a3: 4e:ba:83:a2:dc:3b:a3:7d:e6:0d:e7:58:a7:f6:2e:a0:fe:96: 16:84:2a:9f:84:3d:43:4e:f0:fa:6d:af:dc:1a:90:c1:ab:65: be:7a:08:1b:4b:90:d9:e7:ee:a6:ca:87:7b:1a:67:9e:6e:95: 6d:8f:3d:2b:d9:68:74:ae:1e:5c:83:9f:2b:11:35:73:9d:56: f8:7a:ec:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g26M6MSdrqlgVOdShAYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2ZlMjFmM2ZmYTI4ZjU2YzA2MWQ1ZGI1Zjc2NzU0N2I0ZGQyN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs8F3LlhW1AtmZpZerU7MVIZUCY8 QkD853yCTrmz3A+jyvEgSiaxA7T3SVujZ8B1B7DZk0/ct5YQg1j2WJWAfXkTaDcS ba9lnDHtp/tRGzOjVLgXsqxAvgHOwhFvqjDByz0zlY1Jeae3vt4vk4+I/sYG2LMf KCtK/pyT5P7PCcW7kjQF+Vd8+eh4+DWRxSrmzHWi/wNeQ1QBQ8BJ+UNZRBErnn2Q xd2f7byOUaoC1GPUzT+PRn7OkZ3JJ4IuYUUEkiQBTpC19DoeQTDdqZIEITy6npUm odSnV4PhXxvmNe5Y9DLCuzOor2FhacycFAiipScUhVq7dT0OErLWS/e/1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBz+IfP/oo9WwGHV2192dUe03SfYMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSFA0aDhfLWlqMWJBWWRYYlgzWjFSN1RkSjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyiOMA0G CSqGSIb3DQEBCwUAA4IBAQA2O5tExCVrxAoaOg53+huqhyQyTW+MEfL0+W2ObDTw Waw448ntBGziqJegQ2qyvObq4O+k4MVLxphM1naRw6S6AZnbX+i42ZNSgBTXEjyP VVv04Bf0Fd9iIZDz5PmByBS1fv5ccn6HyucwHrjVP2jq3MXQ09XlEPUYBF27PmFd 3yUjoshVI/cgPFLk5Q77kXp6vcjirw14DTiDqZF2/aekCgQqHm2kwfbeX8ExSNLO j0RViqNOuoOi3DujfeYN51in9i6g/pYWhCqfhD1DTvD6ba/cGpDBq2W+eggbS5DZ 5+6myod7GmeebpVtjz0r2Wh0rh5cg58rETVznVb4euwJ -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:39 2026 by rpki-client