This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0bGtqBy_NMAYbdOo5jeFocxOLMg.roa File: 0bGtqBy_NMAYbdOo5jeFocxOLMg.roa (raw, json) Hash identifier: hbAd2ExVBaOyXBP+b+I82jVJAkSL6++vQcwZ3qc+ut0= Subject key identifier: D1:B1:AD:A8:1C:BF:34:C0:18:6D:D3:A8:E6:37:85:A1:CC:4E:2C:C8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8492043E6F16CB40A0D08073F750CD Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0bGtqBy_NMAYbdOo5jeFocxOLMg.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 31.58.229.0/24 maxlen: 24 31.59.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:92:04:3e:6f:16:cb:40:a0:d0:80:73:f7:50:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1b1ada81cbf34c0186dd3a8e63785a1cc4e2cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:79:e0:d3:ff:9b:5c:8a:03:b7:3b:f4:0e: 9d:18:57:64:04:7c:00:e6:c5:2a:79:4e:e3:41:3b: ae:f2:c7:06:52:53:82:5e:9d:cf:a6:33:a7:7c:ea: 35:e3:dd:cf:c2:bf:17:81:a2:6d:b6:59:4a:6c:ef: 40:a0:22:e7:1b:51:fa:a7:8c:2b:b8:25:18:cb:49: 35:1f:f3:2b:a6:61:b4:e8:79:44:62:90:28:19:28: 42:81:3b:92:27:a7:6a:82:79:f3:25:6b:58:87:ab: 55:98:df:f1:34:d7:bc:08:ba:4d:6a:d2:81:13:b8: ea:11:5a:19:14:eb:76:96:9c:fc:be:cf:ec:1a:6e: 27:7b:34:6d:e3:57:e4:c9:a8:66:10:66:54:d9:72: 06:f5:43:a5:12:1b:5a:e1:1c:3f:57:ff:95:4b:cb: 2a:e8:53:28:26:b7:aa:b0:24:22:ec:7a:6d:eb:89: 0d:66:85:84:6a:c0:86:b7:d6:a5:64:a8:5b:37:1c: 4d:67:e4:d2:12:f5:af:6f:b4:4f:58:e6:0a:55:0b: 77:25:22:19:e8:50:8c:ae:36:a3:c4:dd:81:52:e4: 5f:65:e3:c9:b9:70:f3:0a:67:ab:1d:ff:57:4f:b2: f9:f3:13:29:51:45:24:da:47:77:cd:de:30:6c:e1: 44:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:AD:A8:1C:BF:34:C0:18:6D:D3:A8:E6:37:85:A1:CC:4E:2C:C8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0bGtqBy_NMAYbdOo5jeFocxOLMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.229.0/24 31.59.35.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:01:84:da:ab:cc:16:ff:b9:d7:5c:28:11:82:75:32:43:26: 2e:f1:ef:d8:3f:d2:14:f1:f6:68:14:9e:d2:d3:b8:d6:62:a7: 7a:c7:a3:b0:52:b7:35:0c:24:0b:39:d8:b4:62:95:95:c8:b6: 11:70:e2:09:4a:c0:77:c6:9a:15:97:f8:af:ca:08:ed:39:06: fc:54:37:25:64:fe:ec:6c:ac:6b:2e:7c:4e:09:13:f1:82:22: d7:35:26:49:3b:10:b1:b1:bf:a4:6b:97:8a:a9:cf:c5:93:73: c3:6f:2a:be:fc:ad:89:3a:93:8a:4e:54:83:87:19:04:4e:7a: 96:69:de:19:6f:ad:0a:bb:48:5e:6c:d4:ee:8c:f0:ce:95:a1: dc:65:d2:e2:bb:21:c5:e2:ff:c1:3b:c2:9b:f8:73:26:b4:3c: b2:25:37:50:25:0b:98:b2:f3:ba:11:39:b7:1a:48:3f:de:f2: 22:41:89:00:cf:32:a7:dc:df:16:85:19:6a:42:32:6a:59:e3: 26:2f:f0:fb:c9:b0:ec:c2:b8:23:75:e0:62:7e:bd:d1:5e:4c: 2a:b5:d1:0d:dd:61:3a:d9:6f:44:ff:6e:bc:b3:3c:79:bb:6b: 1e:6a:41:77:ec:4a:ed:d6:8c:1e:2f:f2:3a:a2:17:15:a0:c1: b7:5f:df:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hJIEPm8Wy0Cg0IBz91DNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWIxYWRhODFjYmYzNGMwMTg2ZGQzYThlNjM3ODVhMWNjNGUyY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp154NP/m1yKA7c79A6dGFdkBHwA 5sUqeU7jQTuu8scGUlOCXp3PpjOnfOo1493Pwr8XgaJttllKbO9AoCLnG1H6p4wr uCUYy0k1H/MrpmG06HlEYpAoGShCgTuSJ6dqgnnzJWtYh6tVmN/xNNe8CLpNatKB E7jqEVoZFOt2lpz8vs/sGm4nezRt41fkyahmEGZU2XIG9UOlEhta4Rw/V/+VS8sq 6FMoJreqsCQi7Hpt64kNZoWEasCGt9alZKhbNxxNZ+TSEvWvb7RPWOYKVQt3JSIZ 6FCMrjajxN2BUuRfZePJuXDzCmerHf9XT7L58xMpUUUk2kd3zd4wbOFEyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNGxragcvzTAGG3TqOY3haHMTizIMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMGJHdHFCeV9OTUFZYmRPbzVqZUZvY3hPTE1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzrlAwQA HzsjMA0GCSqGSIb3DQEBCwUAA4IBAQBOAYTaq8wW/7nXXCgRgnUyQyYu8e/YP9IU 8fZoFJ7S07jWYqd6x6OwUrc1DCQLOdi0YpWVyLYRcOIJSsB3xpoVl/ivygjtOQb8 VDclZP7sbKxrLnxOCRPxgiLXNSZJOxCxsb+ka5eKqc/Fk3PDbyq+/K2JOpOKTlSD hxkETnqWad4Zb60Ku0hebNTujPDOlaHcZdLiuyHF4v/BO8Kb+HMmtDyyJTdQJQuY svO6ETm3Gkg/3vIiQYkAzzKn3N8WhRlqQjJqWeMmL/D7ybDswrgjdeBifr3RXkwq tdEN3WE62W9E/268szx5u2seakF37Ert1oweL/I6ohcVoMG3X98B -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:32 2026 by rpki-client