This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0-bXZuoc-w0rO1E-7jOc5i5tI7c.roa File: 0-bXZuoc-w0rO1E-7jOc5i5tI7c.roa (raw, json) Hash identifier: a4E7dvbKwhaZ84k1LYFxJq8iTuZpc3W62vGOx/KWtgU= Subject key identifier: D3:E6:D7:66:EA:1C:FB:0D:2B:3B:51:3E:EE:33:9C:E6:2E:6D:23:B7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A20C36495C07074A4D85AC5A099E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0-bXZuoc-w0rO1E-7jOc5i5tI7c.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209279 IP address blocks: 31.59.169.0/24 maxlen: 24 94.183.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a2:0c:36:49:5c:07:07:4a:4d:85:ac:5a:09:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3e6d766ea1cfb0d2b3b513eee339ce62e6d23b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:94:26:79:bd:c6:ae:e0:cf:e1:f8:61:91: dd:f5:b5:26:e9:b6:d2:5b:2e:6f:d1:35:91:3b:5d: be:a7:11:28:70:40:59:36:24:a0:02:c9:92:2c:ff: 2a:88:ab:13:a2:dd:a8:cd:84:67:18:ce:9d:9e:11: 7a:e1:e1:c9:5e:4e:88:05:a5:6e:a9:5d:de:4c:a7: 79:f3:17:06:b2:21:ec:13:5b:20:b7:13:fe:15:14: cc:68:ae:e4:c6:57:41:d7:a9:82:b1:a4:eb:6f:66: bb:6b:6e:4b:10:4d:d5:d7:57:c3:62:83:92:d5:e8: 20:5c:c1:20:ca:a6:76:8f:b0:71:55:9a:8e:87:84: fc:43:96:1d:79:c1:bf:f3:92:66:45:9e:ff:c4:b5: d5:cf:85:ad:33:ba:6f:35:ed:7c:7a:d0:fa:1e:57: e2:fa:9b:3e:5e:29:f0:d4:f1:16:e4:aa:79:61:30: dd:2b:0c:93:1e:54:61:b3:69:56:1b:c1:32:62:9a: 17:64:36:af:04:f2:dc:c5:0f:ed:5c:90:42:57:5a: 59:06:55:67:c9:b0:ae:b0:65:d8:f4:7f:db:48:68: c1:b9:6d:5d:c2:e9:bf:8c:7b:c8:ea:15:84:61:0b: 1d:05:a5:9c:6d:9f:62:3f:cb:c8:97:36:b1:17:46: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E6:D7:66:EA:1C:FB:0D:2B:3B:51:3E:EE:33:9C:E6:2E:6D:23:B7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0-bXZuoc-w0rO1E-7jOc5i5tI7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.169.0/24 94.183.161.0/24 Signature Algorithm: sha256WithRSAEncryption c0:c0:0a:51:b2:15:2f:5f:43:76:36:cf:a3:37:36:52:04:b1: 39:cc:d5:ae:6d:1a:a7:57:cc:9a:a4:5f:4d:68:44:e3:60:66: 23:52:cb:28:a2:b7:2d:d1:9c:bc:ca:4c:59:a2:e8:8b:ad:22: a2:7f:6b:42:79:55:69:21:35:31:04:b6:ce:e6:92:fa:94:06: 59:81:e9:a1:d2:43:55:6c:db:ab:28:c3:2d:30:3b:bc:52:e4: 23:24:71:28:7c:22:06:15:b9:67:4c:63:42:77:fb:e7:39:78: b3:26:05:fd:3f:c5:9e:6e:f6:d8:18:73:53:32:e4:5f:dc:7f: b2:cd:18:b9:76:57:3e:ed:20:b0:b5:fd:78:83:2d:c0:98:12: 98:ff:9e:c5:65:4a:f3:ef:0f:6e:e2:d7:f2:ce:73:f6:de:18: dc:97:51:ee:a4:0b:da:d6:79:df:6a:a7:5d:eb:cc:52:8f:66: 97:35:9b:c9:36:6d:d8:42:08:d4:67:47:a0:21:21:91:c3:a8: b3:0c:7a:ea:ef:e2:6e:5f:e9:70:7a:87:ca:15:02:e4:de:fe: 3e:91:cf:1c:31:4d:cc:3a:35:eb:7a:1a:45:b5:b0:97:8c:06: e2:a9:eb:1f:1d:45:94:1b:c0:1a:72:81:a9:b8:d6:25:8a:78: 42:29:7d:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hKIMNklcBwdKTYWsWgmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2U2ZDc2NmVhMWNmYjBkMmIzYjUxM2VlZTMzOWNlNjJlNmQyM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5KUJnm9xq7gz+H4YZHd9bUm6bbS Wy5v0TWRO12+pxEocEBZNiSgAsmSLP8qiKsTot2ozYRnGM6dnhF64eHJXk6IBaVu qV3eTKd58xcGsiHsE1sgtxP+FRTMaK7kxldB16mCsaTrb2a7a25LEE3V11fDYoOS 1eggXMEgyqZ2j7BxVZqOh4T8Q5YdecG/85JmRZ7/xLXVz4WtM7pvNe18etD6Hlfi +ps+Xinw1PEW5Kp5YTDdKwyTHlRhs2lWG8EyYpoXZDavBPLcxQ/tXJBCV1pZBlVn ybCusGXY9H/bSGjBuW1dwum/jHvI6hWEYQsdBaWcbZ9iP8vIlzaxF0aabwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNPm12bqHPsNKztRPu4znOYubSO3MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMC1iWFp1b2MtdzByTzFFLTdqT2M1aTV0STdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzupAwQA XrehMA0GCSqGSIb3DQEBCwUAA4IBAQDAwApRshUvX0N2Ns+jNzZSBLE5zNWubRqn V8yapF9NaETjYGYjUssoorct0Zy8ykxZouiLrSKif2tCeVVpITUxBLbO5pL6lAZZ gemh0kNVbNurKMMtMDu8UuQjJHEofCIGFblnTGNCd/vnOXizJgX9P8WebvbYGHNT MuRf3H+yzRi5dlc+7SCwtf14gy3AmBKY/57FZUrz7w9u4tfyznP23hjcl1HupAva 1nnfaqdd68xSj2aXNZvJNm3YQgjUZ0egISGRw6izDHrq7+JuX+lweofKFQLk3v4+ kc8cMU3MOjXrehpFtbCXjAbiqesfHUWUG8AacoGpuNYlinhCKX26 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:40 2026 by rpki-client