This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hcfo-ao-tyuPOF2BTTKnUPBoLeM.roa File: Hcfo-ao-tyuPOF2BTTKnUPBoLeM.roa (raw, json) Hash identifier: gquQQ10cWg3GhGYETeH/ytlhbH3WlPC+l0/hbHJnei8= Subject key identifier: 1D:C7:E8:F9:AA:3E:B7:2B:8F:38:5D:81:4D:32:A7:50:F0:68:2D:E3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B079F7BA4D7E62F62642496A0219D4C0D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hcfo-ao-tyuPOF2BTTKnUPBoLeM.roa Signing time: Wed 10 Dec 2025 09:37:30 +0000 ROA not before: Wed 10 Dec 2025 09:37:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 31.56.160.0/21 maxlen: 24 217.60.128.0/19 maxlen: 24 217.60.128.0/20 maxlen: 24 217.60.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:9f:7b:a4:d7:e6:2f:62:64:24:96:a0:21:9d:4c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 10 09:37:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1dc7e8f9aa3eb72b8f385d814d32a750f0682de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:97:34:fa:a1:e7:b4:8d:3c:84:16:99:24: b2:18:7d:99:72:93:71:e7:ed:40:a8:f5:4f:5c:72: 3e:3a:89:c9:b0:12:44:b6:68:9b:b4:16:7a:1b:97: 96:a1:14:06:27:3d:f2:c9:ae:68:a4:6e:b5:d6:d8: 87:e3:99:a4:33:8f:93:2d:9a:bf:7e:51:a0:25:2c: ac:99:4d:cc:29:6a:50:df:63:b8:12:ba:31:6f:11: 6a:50:2c:81:94:a1:1e:8d:ff:fb:58:88:47:75:18: eb:c4:37:68:39:e8:fb:94:d5:67:14:a0:9a:92:56: a0:6f:f3:ee:14:cb:bf:75:a3:8f:f4:d2:44:f4:95: 98:8c:6a:c2:f4:2c:0d:5e:2e:6a:35:3a:85:c9:f2: 91:dd:12:94:65:2f:21:4b:eb:27:45:a8:ee:f0:87: a7:2b:37:ad:aa:51:e4:b5:6d:d7:d3:e3:c3:86:9e: a4:f3:80:bb:de:47:aa:d1:fb:67:b5:7d:20:22:b3: 2f:b6:ce:9b:f5:32:f2:55:ab:b8:a0:58:0f:1f:fc: a1:27:68:e7:10:f0:e1:6f:79:77:0b:4e:d2:26:2e: 6c:b0:0c:59:fe:38:98:fc:6d:d1:f9:1f:02:1c:ab: e1:a2:6c:14:76:c2:cb:a9:43:db:d1:cc:86:94:00: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C7:E8:F9:AA:3E:B7:2B:8F:38:5D:81:4D:32:A7:50:F0:68:2D:E3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hcfo-ao-tyuPOF2BTTKnUPBoLeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.160.0/21 217.60.128.0/19 Signature Algorithm: sha256WithRSAEncryption 66:5b:e4:d8:99:82:8c:86:9d:e6:6e:01:92:ac:cb:9c:98:18: 0e:2a:0e:f3:73:f5:c1:b3:1e:11:a0:67:b8:db:cb:30:c8:d3: 77:4a:60:80:4f:2b:bd:4c:38:58:29:35:de:87:b2:18:d5:2a: d3:5e:cc:9f:9a:28:60:ee:fd:55:bf:01:3b:94:f3:c6:73:76: 19:61:42:ce:f9:ac:a8:a7:9b:6d:08:2a:5f:e1:e2:9a:cc:ea: 72:ef:9d:90:f9:a2:fe:bc:e9:3c:1f:fe:34:f9:3c:56:8a:c2: a0:dd:b5:40:d4:de:5d:fe:cd:36:53:e0:5f:7f:e4:4b:93:34: a6:81:87:d9:46:69:82:cb:ff:aa:aa:8b:7a:18:16:c5:5c:73: d7:32:fb:d5:91:4f:ca:70:52:42:c6:6f:b2:b8:51:48:0a:23: 26:07:01:27:12:f7:75:b6:79:8a:5e:f7:e9:1b:6a:3c:97:91: cb:3e:28:8a:a0:c6:d0:03:bc:a4:d5:2e:fb:53:e4:25:88:c0: e0:d2:91:61:f0:55:cd:e1:64:f8:81:5f:37:f3:ce:d9:9f:f6: ad:b1:a2:ae:76:b2:9b:7e:f5:75:9a:4d:b5:7e:83:46:75:4f: 9b:b8:d2:08:db:59:4a:ac:95:93:59:34:4d:86:b2:83:48:1c: e2:f9:5e:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsHn3uk1+YvYmQklqAhnUwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjEwMDkzNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGM3ZThmOWFhM2ViNzJiOGYzODVkODE0ZDMyYTc1MGYwNjgyZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeKXNPqh57SNPIQWmSSyGH2ZcpNx 5+1AqPVPXHI+OonJsBJEtmibtBZ6G5eWoRQGJz3yya5opG611tiH45mkM4+TLZq/ flGgJSysmU3MKWpQ32O4EroxbxFqUCyBlKEejf/7WIhHdRjrxDdoOej7lNVnFKCa klagb/PuFMu/daOP9NJE9JWYjGrC9CwNXi5qNTqFyfKR3RKUZS8hS+snRaju8Ien KzetqlHktW3X0+PDhp6k84C73keq0ftntX0gIrMvts6b9TLyVau4oFgPH/yhJ2jn EPDhb3l3C07SJi5ssAxZ/jiY/G3R+R8CHKvhomwUdsLLqUPb0cyGlABNVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB3H6PmqPrcrjzhdgU0yp1DwaC3jMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSGNmby1hby10eXVQT0YyQlRUS25VUEJvTGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDHzigAwQF 2TyAMA0GCSqGSIb3DQEBCwUAA4IBAQBmW+TYmYKMhp3mbgGSrMucmBgOKg7zc/XB sx4RoGe428swyNN3SmCATyu9TDhYKTXeh7IY1SrTXsyfmihg7v1VvwE7lPPGc3YZ YULO+ayop5ttCCpf4eKazOpy752Q+aL+vOk8H/40+TxWisKg3bVA1N5d/s02U+Bf f+RLkzSmgYfZRmmCy/+qqot6GBbFXHPXMvvVkU/KcFJCxm+yuFFICiMmBwEnEvd1 tnmKXvfpG2o8l5HLPiiKoMbQA7yk1S77U+QliMDg0pFh8FXN4WT4gV83887Zn/at saKudrKbfvV1mk21foNGdU+buNII21lKrJWTWTRNhrKDSBzi+V5J -----END CERTIFICATE-----Generated at Tue Dec 16 05:02:31 2025 by rpki-client