This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0HLCjETUtb4DmiZKwPUmkpyso_Y.roa File: 0HLCjETUtb4DmiZKwPUmkpyso_Y.roa (raw, json) Hash identifier: ByDr4030UApnsUQjvgi4zoXNV+jjtD3j54Z04DScHbo= Subject key identifier: D0:72:C2:8C:44:D4:B5:BE:03:9A:26:4A:C0:F5:26:92:9C:AC:A3:F6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849976E6785025D6252CF82F9A02A6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0HLCjETUtb4DmiZKwPUmkpyso_Y.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205733 IP address blocks: 31.56.213.0/24 maxlen: 24 31.57.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:99:76:e6:78:50:25:d6:25:2c:f8:2f:9a:02:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d072c28c44d4b5be039a264ac0f526929caca3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d1:68:ba:f0:18:f6:ee:55:ba:3d:82:45:c9: bb:39:5c:f6:4a:14:05:aa:03:59:eb:53:09:2f:e5: 08:e4:03:ba:cb:8f:80:3c:35:4c:26:db:12:0c:a9: 24:82:68:1e:ab:be:0e:8d:96:ca:1e:bf:24:5b:f4: d1:62:fd:a0:7c:1e:e3:5c:89:5c:97:dc:b1:6d:b0: a8:2d:62:aa:c6:8f:7b:98:fe:25:31:3d:9d:97:2b: f2:33:fe:3b:60:22:9d:2d:ce:d0:8e:bd:e1:c1:8b: 81:87:2f:33:fa:ea:ef:9a:ff:36:7b:65:38:96:40: 44:c0:51:c0:5f:ed:ad:be:d9:b4:59:6e:c2:76:0e: 70:a2:18:f7:85:fa:a7:d9:30:56:74:f6:af:e2:dd: bf:32:b2:22:60:b0:18:57:89:0b:2f:bd:82:b9:38: 46:69:ae:88:27:45:59:e0:08:0d:b2:a3:f0:12:8f: 86:d0:dd:fa:82:87:e7:af:a4:f1:a7:8b:09:aa:c4: 75:53:3a:1f:e5:eb:56:35:a4:36:14:30:b8:e2:5c: b8:44:8e:e0:5e:78:21:aa:bc:7a:ba:a1:eb:e6:80: d8:9d:65:eb:75:c5:48:58:ec:a5:22:c1:02:5c:be: 5a:b2:a6:b8:c6:3b:88:64:23:c0:fb:a8:66:f8:8a: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:C2:8C:44:D4:B5:BE:03:9A:26:4A:C0:F5:26:92:9C:AC:A3:F6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0HLCjETUtb4DmiZKwPUmkpyso_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.213.0/24 31.57.134.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:6f:d5:f6:82:20:05:32:18:4c:4e:f3:80:91:a7:7c:81:51: c0:66:68:4a:71:f6:85:d7:a5:b0:34:21:6e:a9:35:96:fc:a6: 53:21:ad:20:a3:b8:95:8c:13:96:45:70:46:bb:76:d4:b0:49: f0:03:a6:73:cf:51:67:77:81:91:07:c1:cd:10:72:8c:f4:9b: 5c:61:be:cf:24:cd:65:b3:c7:7e:9d:fc:87:6e:96:57:65:d3: 75:49:fc:1e:28:48:b8:24:54:36:08:45:31:da:b3:1b:55:fa: af:e8:70:ff:28:70:62:e6:1e:f7:56:aa:4c:e5:0c:ff:73:69: 2a:9e:9c:99:7f:32:79:77:92:d3:51:16:c7:a7:ab:4a:a9:59: b4:67:7d:5e:9f:1a:05:8e:5e:9e:18:b2:6a:4e:a5:a8:cc:b1: 51:5e:99:e5:87:05:d2:ed:93:04:e2:8e:68:58:0e:66:77:31: d5:8c:8c:98:c0:fc:09:39:ab:54:8e:3e:bf:25:e5:5b:2a:0e: d0:60:42:47:14:cd:d0:c3:06:54:96:3b:9a:fa:14:80:99:9c: cd:5d:3d:8d:cb:60:f7:c3:77:d4:f7:a3:ac:8a:89:31:85:5d: 06:19:9e:69:7a:77:ae:d7:92:ba:cd:1b:a8:00:00:6b:8b:05: a4:46:9a:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hJl25nhQJdYlLPgvmgKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDcyYzI4YzQ0ZDRiNWJlMDM5YTI2NGFjMGY1MjY5MjljYWNhM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59FouvAY9u5Vuj2CRcm7OVz2ShQF qgNZ61MJL+UI5AO6y4+APDVMJtsSDKkkgmgeq74OjZbKHr8kW/TRYv2gfB7jXIlc l9yxbbCoLWKqxo97mP4lMT2dlyvyM/47YCKdLc7Qjr3hwYuBhy8z+urvmv82e2U4 lkBEwFHAX+2tvtm0WW7Cdg5wohj3hfqn2TBWdPav4t2/MrIiYLAYV4kLL72CuThG aa6IJ0VZ4AgNsqPwEo+G0N36gofnr6Txp4sJqsR1Uzof5etWNaQ2FDC44ly4RI7g Xnghqrx6uqHr5oDYnWXrdcVIWOylIsECXL5asqa4xjuIZCPA+6hm+IpoFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNBywoxE1LW+A5omSsD1JpKcrKP2MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMEhMQ2pFVFV0YjREbWlaS3dQVW1rcHlzb19ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjVAwQA HzmGMA0GCSqGSIb3DQEBCwUAA4IBAQArb9X2giAFMhhMTvOAkad8gVHAZmhKcfaF 16WwNCFuqTWW/KZTIa0go7iVjBOWRXBGu3bUsEnwA6Zzz1Fnd4GRB8HNEHKM9Jtc Yb7PJM1ls8d+nfyHbpZXZdN1SfweKEi4JFQ2CEUx2rMbVfqv6HD/KHBi5h73VqpM 5Qz/c2kqnpyZfzJ5d5LTURbHp6tKqVm0Z31enxoFjl6eGLJqTqWozLFRXpnlhwXS 7ZME4o5oWA5mdzHVjIyYwPwJOatUjj6/JeVbKg7QYEJHFM3QwwZUljua+hSAmZzN XT2Ny2D3w3fU96OsiokxhV0GGZ5peneu15K6zRuoAABriwWkRppM -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:48 2026 by rpki-client