This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0pb9GYRdxl0SpFaCAwQW1eKoqvI.roa File: 0pb9GYRdxl0SpFaCAwQW1eKoqvI.roa (raw, json) Hash identifier: TyiFlIydsBusou9RzIASEgBSzujcX6GRH519Ik25G4Y= Subject key identifier: D2:96:FD:19:84:5D:C6:5D:12:A4:56:82:03:04:16:D5:E2:A8:AA:F2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BC35BEBA8DAEAEFCCEC355445300E1A97 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0pb9GYRdxl0SpFaCAwQW1eKoqvI.roa Signing time: Thu 15 Jan 2026 20:32:19 +0000 ROA not before: Thu 15 Jan 2026 20:32:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 31.57.132.0/24 maxlen: 24 31.58.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 20:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:5b:eb:a8:da:ea:ef:cc:ec:35:54:45:30:0e:1a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 15 20:32:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d296fd19845dc65d12a45682030416d5e2a8aaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:c2:b4:38:68:cc:92:f2:7a:7d:a8:c7:f0: 5c:25:de:7a:8f:d3:37:dc:dc:16:c1:17:b2:a3:83: 75:71:fa:4d:2a:4f:d0:b9:21:7b:fe:48:a7:38:cc: 60:aa:27:84:f0:e3:0a:8a:0d:f9:96:a4:28:32:6b: 18:e2:80:c7:3b:6b:5d:d8:44:08:ac:e1:26:0d:65: 5d:f5:25:c1:8e:cb:a6:28:f3:c8:73:de:a6:6e:ca: b9:35:b4:77:8d:5c:2d:e3:2a:06:cd:35:b5:3e:10: ca:dd:65:72:54:90:be:31:ff:9f:ea:38:18:e9:79: 54:29:82:f6:9c:ba:39:9c:e7:c6:31:27:a5:a4:5b: dc:c3:5e:31:0a:2e:f0:72:d9:ca:03:fc:40:b6:ec: fa:67:e0:9b:3a:10:62:ab:71:7d:da:46:64:e0:3c: 0e:c6:24:f3:4b:4c:ca:4e:2f:35:e0:26:1f:c6:56: 08:8c:75:c6:de:45:f4:8a:0e:93:de:6b:bd:c6:bb: 53:2a:49:2d:c6:da:67:02:ce:18:27:ba:78:52:0c: 5b:aa:a3:89:3b:20:74:89:3a:31:2b:da:37:17:f4: fc:b0:30:06:52:5c:93:11:56:37:b9:27:bf:5e:c1: 61:a1:89:57:fc:8f:75:ca:0f:aa:2d:87:59:6e:12: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:96:FD:19:84:5D:C6:5D:12:A4:56:82:03:04:16:D5:E2:A8:AA:F2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0pb9GYRdxl0SpFaCAwQW1eKoqvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.132.0/24 31.58.41.0/24 Signature Algorithm: sha256WithRSAEncryption 54:e2:ae:73:22:2e:65:58:57:f1:4c:b9:7e:08:20:f2:23:2f: 3c:94:42:da:96:bd:f2:f9:5b:96:09:e3:dd:ce:a5:7e:ad:62: 84:20:24:11:ae:17:ec:c1:98:9a:31:60:c0:5c:74:75:d9:e2: 86:2e:c4:94:d3:14:ef:72:bd:64:fd:8d:b8:e3:d0:e1:4e:48: 33:3a:2a:3d:55:6e:39:2c:9f:e7:cd:20:8b:34:17:7a:9c:0a: e1:cf:bd:76:98:95:5d:79:a5:54:d0:d4:e7:67:ab:22:16:89: 01:e4:36:1a:aa:05:97:2b:81:46:71:df:3b:f9:da:f8:23:26: d7:89:f6:2c:66:4e:69:25:13:ca:72:b9:fa:81:26:6f:9a:ee: 77:2c:7e:3c:5f:18:5d:95:19:d1:ec:7f:8a:c4:85:50:e4:e1: cc:bb:74:02:7b:52:63:9d:26:dd:a4:42:29:d6:98:b3:0a:32: bb:9c:82:6a:90:96:11:2f:5a:93:ff:b2:ca:1c:e2:fc:c6:98: 34:b4:ef:8c:ca:92:15:cc:78:2d:97:ea:8b:24:ac:79:b7:8b: c4:0d:4f:51:1d:d6:2d:18:6f:d1:a1:54:d6:6c:2a:1e:d3:55: 56:fa:50:30:6e:4d:eb:71:3d:17:cf:5f:c9:97:97:f8:79:54: 38:0b:89:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvDW+uo2urvzOw1VEUwDhqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE1MjAzMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjk2ZmQxOTg0NWRjNjVkMTJhNDU2ODIwMzA0MTZkNWUyYThhYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXfCtDhozJLyen2ox/BcJd56j9M3 3NwWwReyo4N1cfpNKk/QuSF7/kinOMxgqieE8OMKig35lqQoMmsY4oDHO2td2EQI rOEmDWVd9SXBjsumKPPIc96mbsq5NbR3jVwt4yoGzTW1PhDK3WVyVJC+Mf+f6jgY 6XlUKYL2nLo5nOfGMSelpFvcw14xCi7wctnKA/xAtuz6Z+CbOhBiq3F92kZk4DwO xiTzS0zKTi814CYfxlYIjHXG3kX0ig6T3mu9xrtTKkktxtpnAs4YJ7p4UgxbqqOJ OyB0iToxK9o3F/T8sDAGUlyTEVY3uSe/XsFhoYlX/I91yg+qLYdZbhIoiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNKW/RmEXcZdEqRWggMEFtXiqKryMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMHBiOUdZUmR4bDBTcEZhQ0F3UVcxZUtvcXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmEAwQA HzopMA0GCSqGSIb3DQEBCwUAA4IBAQBU4q5zIi5lWFfxTLl+CCDyIy88lELalr3y +VuWCePdzqV+rWKEICQRrhfswZiaMWDAXHR12eKGLsSU0xTvcr1k/Y2449DhTkgz Oio9VW45LJ/nzSCLNBd6nArhz712mJVdeaVU0NTnZ6siFokB5DYaqgWXK4FGcd87 +dr4IybXifYsZk5pJRPKcrn6gSZvmu53LH48XxhdlRnR7H+KxIVQ5OHMu3QCe1Jj nSbdpEIp1pizCjK7nIJqkJYRL1qT/7LKHOL8xpg0tO+MypIVzHgtl+qLJKx5t4vE DU9RHdYtGG/RoVTWbCoe01VW+lAwbk3rcT0Xz1/Jl5f4eVQ4C4l+ -----END CERTIFICATE-----Generated at Fri Jan 16 05:34:27 2026 by rpki-client