This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/06VgFGULzIq8g8S8ycmWj-gJlFU.roa File: 06VgFGULzIq8g8S8ycmWj-gJlFU.roa (raw, json) Hash identifier: OBEJ3T0JNTa4w2qmv0xGpMDc88wS9ErRLmzoetzDa9s= Subject key identifier: D3:A5:60:14:65:0B:CC:8A:BC:83:C4:BC:C9:C9:96:8F:E8:09:94:55 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D22BBA2127E0420083F0FACCA78B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/06VgFGULzIq8g8S8ycmWj-gJlFU.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216022 IP address blocks: 31.56.241.0/24 maxlen: 24 31.57.115.0/24 maxlen: 24 31.57.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d2:2b:ba:21:27:e0:42:00:83:f0:fa:cc:a7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3a56014650bcc8abc83c4bcc9c9968fe8099455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:6d:e7:90:7d:10:de:35:00:63:60:df:1d: 89:bb:5a:13:8c:bf:c9:eb:c9:3a:e6:53:a7:11:29: e6:26:b9:e1:8d:c3:42:ee:99:eb:46:b9:4a:46:f9: 92:41:c2:38:fe:77:fb:80:26:58:b6:c6:c7:33:a6: 2d:bd:22:2b:5d:d8:9d:b6:4f:51:6d:48:f2:91:3f: c6:8f:60:0e:40:1d:1b:d5:d1:52:34:12:db:11:d3: 0f:88:2b:32:14:d6:83:f5:aa:c4:b5:44:37:11:e4: c9:af:c9:0e:90:df:74:e9:0b:0b:61:b4:a9:d7:4d: 83:97:58:83:10:d4:52:5d:36:6b:e1:1d:bd:71:16: 35:b5:38:a8:08:19:e6:dc:1c:af:90:0e:5b:6d:c6: 96:1d:33:94:f7:33:1f:2d:bb:dd:10:d4:18:2a:e9: 13:bf:f2:6d:e1:47:85:a7:c3:31:72:39:21:ab:58: 3a:56:d9:ff:c7:5a:41:06:6d:3f:84:f2:e9:0b:69: 46:5c:da:6a:21:b4:ff:df:15:b0:d8:56:81:5a:70: 7f:da:b4:5c:72:62:d0:bb:a8:e5:9e:05:66:39:55: 89:a0:3a:7f:52:61:94:c6:7f:59:01:dd:c0:f1:2e: fb:ac:a6:ec:dd:4a:66:ec:fb:cd:1a:55:ad:d4:fe: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A5:60:14:65:0B:CC:8A:BC:83:C4:BC:C9:C9:96:8F:E8:09:94:55 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/06VgFGULzIq8g8S8ycmWj-gJlFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.241.0/24 31.57.115.0/24 31.57.244.0/24 Signature Algorithm: sha256WithRSAEncryption 77:f6:ee:bc:03:ab:ac:5c:75:47:16:f9:82:ba:76:8f:ee:b3: 29:a6:1d:e5:8d:cb:96:50:22:43:c6:8c:78:de:c5:18:d4:f5: b2:eb:67:25:a3:74:e6:5e:0a:f0:eb:5c:92:9a:c4:98:77:15: 61:7d:d9:7a:3f:38:b9:f5:82:ae:66:dd:49:a4:03:62:e9:eb: 8d:32:78:05:32:73:58:83:7c:78:53:4c:c5:ab:31:0a:b5:78: 9e:eb:15:62:ed:b6:d3:d0:cf:11:c4:ef:03:ab:62:62:21:d7: 16:23:5c:0c:3c:b4:43:b9:0d:58:42:01:53:5e:20:5f:38:21: d5:3b:4b:07:7c:22:3d:9b:6e:0d:63:82:eb:86:71:ff:3f:7a: 46:4d:10:a2:e6:48:92:1b:05:fa:c3:a9:5e:d5:0b:54:77:e4: 5b:c4:3c:27:2d:d2:69:25:c8:96:12:70:ad:03:58:67:ca:46: a5:f5:fe:c0:27:2e:db:42:bf:67:e4:35:91:83:15:b5:10:60: 3f:61:75:d9:ba:19:b9:aa:c1:e5:64:b8:6f:de:80:5f:2b:f2: ff:0b:cb:e1:ce:95:94:e6:bf:a7:3f:0a:06:6a:47:ed:9d:d8: 96:05:8e:9e:02:e4:db:30:2a:9b:8d:4c:84:09:4e:6f:2e:3a: dc:d0:35:f2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hNIruiEn4EIAg/D6zKeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2E1NjAxNDY1MGJjYzhhYmM4M2M0YmNjOWM5OTY4ZmU4MDk5NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCVt55B9EN41AGNg3x2Ju1oTjL/J 68k65lOnESnmJrnhjcNC7pnrRrlKRvmSQcI4/nf7gCZYtsbHM6YtvSIrXdidtk9R bUjykT/Gj2AOQB0b1dFSNBLbEdMPiCsyFNaD9arEtUQ3EeTJr8kOkN906QsLYbSp 102Dl1iDENRSXTZr4R29cRY1tTioCBnm3ByvkA5bbcaWHTOU9zMfLbvdENQYKukT v/Jt4UeFp8Mxcjkhq1g6Vtn/x1pBBm0/hPLpC2lGXNpqIbT/3xWw2FaBWnB/2rRc cmLQu6jlngVmOVWJoDp/UmGUxn9ZAd3A8S77rKbs3Upm7PvNGlWt1P7xxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNOlYBRlC8yKvIPEvMnJlo/oCZRVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMDZWZ0ZHVUx6SXE4ZzhTOHljbVdqLWdKbEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjxAwQA HzlzAwQAHzn0MA0GCSqGSIb3DQEBCwUAA4IBAQB39u68A6usXHVHFvmCunaP7rMp ph3ljcuWUCJDxox43sUY1PWy62clo3TmXgrw61ySmsSYdxVhfdl6Pzi59YKuZt1J pANi6euNMngFMnNYg3x4U0zFqzEKtXie6xVi7bbT0M8RxO8Dq2JiIdcWI1wMPLRD uQ1YQgFTXiBfOCHVO0sHfCI9m24NY4LrhnH/P3pGTRCi5kiSGwX6w6le1QtUd+Rb xDwnLdJpJciWEnCtA1hnykal9f7AJy7bQr9n5DWRgxW1EGA/YXXZuhm5qsHlZLhv 3oBfK/L/C8vhzpWU5r+nPwoGakftndiWBY6eAuTbMCqbjUyECU5vLjrc0DXy -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:35 2026 by rpki-client