This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/03cBOhrxGxnHTxz5O2LacAbT7-M.roa File: 03cBOhrxGxnHTxz5O2LacAbT7-M.roa (raw, json) Hash identifier: /FJBK5Dg73nuDNQKOf4lhR1a2Jxw+PYc8xrh+Z0BiH0= Subject key identifier: D3:77:01:3A:1A:F1:1B:19:C7:4F:1C:F9:3B:62:DA:70:06:D3:EF:E3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B6515D9C8EC5BDAE90DFEB7CC00A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/03cBOhrxGxnHTxz5O2LacAbT7-M.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213654 IP address blocks: 31.58.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b6:51:5d:9c:8e:c5:bd:ae:90:df:eb:7c:c0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d377013a1af11b19c74f1cf93b62da7006d3efe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:aa:fc:ba:12:16:10:3a:dd:43:92:fc:95: 76:fd:94:2b:2f:34:ac:dc:aa:29:90:f5:5f:59:e3: 76:0a:fe:75:c3:39:7c:33:ab:41:a9:c1:66:28:24: 2b:fc:5e:88:39:50:72:f3:77:6a:64:a8:20:86:71: b3:10:86:8c:40:75:82:b0:7d:9a:6a:5d:07:16:44: ed:fd:f7:41:93:4d:bb:12:9d:5e:7e:a2:3a:2e:86: 0d:33:9f:a4:3c:b5:7d:0a:72:1c:07:b6:ee:d9:16: b5:51:72:26:4d:e1:60:d4:7a:02:50:ac:1f:45:4f: f4:ca:39:81:23:b9:80:93:99:11:9e:eb:c3:67:b3: ea:b7:6f:60:49:92:d3:cc:2c:3f:58:5a:49:06:13: 24:4d:17:41:e1:59:1c:e2:60:90:71:e5:4a:87:3b: 9f:cf:e0:8d:91:d0:da:01:ee:00:b8:3a:2f:45:bf: 7d:15:77:32:04:35:dc:d9:d7:1f:23:f8:9a:9d:ec: fa:22:29:8d:07:aa:7f:fa:98:e9:f2:3f:a9:d9:80: 3b:37:b9:4c:17:c4:c1:b6:a2:e9:3c:17:91:dd:10: 67:fc:85:31:29:27:18:8e:ff:38:38:b4:84:6a:3d: 81:c8:d9:8d:f4:c9:6c:df:dd:f1:20:55:e8:13:19: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:77:01:3A:1A:F1:1B:19:C7:4F:1C:F9:3B:62:DA:70:06:D3:EF:E3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/03cBOhrxGxnHTxz5O2LacAbT7-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.248.0/24 Signature Algorithm: sha256WithRSAEncryption 70:da:d3:e1:84:5b:af:c2:9a:18:51:f4:bf:f4:e7:1a:30:fc: c0:df:74:df:13:0f:c2:cd:5b:c5:c3:45:29:2d:c2:7c:70:bc: 2b:c0:34:41:7d:3f:aa:32:d4:03:e9:ed:aa:8a:98:92:2e:11: 8d:99:10:30:16:85:87:31:92:22:38:a0:00:8a:38:d9:21:a5: 5d:ef:78:8f:54:cd:77:42:b1:8d:44:98:1c:40:71:5a:b7:e1: 0f:b6:02:b1:37:8a:76:35:5d:d0:8e:f8:62:54:02:42:ba:2d: 6c:22:16:08:e9:bb:b5:ae:e0:29:8b:25:72:f6:9e:de:7e:63: 87:d6:1f:8c:eb:19:15:42:62:ce:16:bc:84:0b:e6:f0:75:a3: 40:64:73:37:bc:c7:3c:f9:1e:5e:3a:27:15:f0:74:f2:71:e1: b5:2f:ea:2b:fb:47:ef:f4:1b:ee:fa:01:7c:c6:34:c4:73:83: 75:f7:bc:2b:15:ac:9d:49:7f:ae:4d:2a:62:6b:bf:f9:0e:6f: 27:dd:0a:8d:8e:fd:bb:43:3c:e3:2f:ef:18:4a:c5:71:32:2c: 34:47:0b:8f:57:f2:22:6c:a4:fb:25:bc:91:d5:69:af:28:b5: 9d:9e:e4:e9:2f:34:a4:c7:4e:26:f9:f4:e3:93:26:05:ad:0d: a0:07:a8:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLZRXZyOxb2ukN/rfMAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzc3MDEzYTFhZjExYjE5Yzc0ZjFjZjkzYjYyZGE3MDA2ZDNlZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnOq/LoSFhA63UOS/JV2/ZQrLzSs 3KopkPVfWeN2Cv51wzl8M6tBqcFmKCQr/F6IOVBy83dqZKgghnGzEIaMQHWCsH2a al0HFkTt/fdBk027Ep1efqI6LoYNM5+kPLV9CnIcB7bu2Ra1UXImTeFg1HoCUKwf RU/0yjmBI7mAk5kRnuvDZ7Pqt29gSZLTzCw/WFpJBhMkTRdB4Vkc4mCQceVKhzuf z+CNkdDaAe4AuDovRb99FXcyBDXc2dcfI/ianez6IimNB6p/+pjp8j+p2YA7N7lM F8TBtqLpPBeR3RBn/IUxKScYjv84OLSEaj2ByNmN9Mls393xIFXoExkDpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNN3AToa8RsZx08c+Tti2nAG0+/jMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMDNjQk9ocnhHeG5IVHh6NU8yTGFjQWJUNy1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr4MA0G CSqGSIb3DQEBCwUAA4IBAQBw2tPhhFuvwpoYUfS/9OcaMPzA33TfEw/CzVvFw0Up LcJ8cLwrwDRBfT+qMtQD6e2qipiSLhGNmRAwFoWHMZIiOKAAijjZIaVd73iPVM13 QrGNRJgcQHFat+EPtgKxN4p2NV3QjvhiVAJCui1sIhYI6bu1ruApiyVy9p7efmOH 1h+M6xkVQmLOFryEC+bwdaNAZHM3vMc8+R5eOicV8HTyceG1L+or+0fv9Bvu+gF8 xjTEc4N197wrFaydSX+uTSpia7/5Dm8n3QqNjv27QzzjL+8YSsVxMiw0RwuPV/Ii bKT7JbyR1WmvKLWdnuTpLzSkx04m+fTjkyYFrQ2gB6iF -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:54 2026 by rpki-client