This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-a3xchTNELVPBjD7dB2rRhRKGjw.roa File: 1-a3xchTNELVPBjD7dB2rRhRKGjw.roa (raw, json) Hash identifier: l7cS6QBUAM1z0oIr31zvn8tD9hDxS4YXr1NL2aqZ+Xg= Subject key identifier: F9:AD:F1:72:14:CD:10:B5:4F:06:30:FB:74:1D:AB:46:14:4A:1A:3C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B18B02CB75E86E5BD256121B3752 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-a3xchTNELVPBjD7dB2rRhRKGjw.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212633 IP address blocks: 31.57.64.0/24 maxlen: 24 31.57.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b1:8b:02:cb:75:e8:6e:5b:d2:56:12:1b:37:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9adf17214cd10b54f0630fb741dab46144a1a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:7d:63:a9:ed:2c:41:5f:36:5c:c2:f6:42: 94:fe:32:a4:4d:aa:9c:0e:c6:52:31:8c:6b:34:3f: d8:13:7b:cd:43:f5:75:c4:45:fd:a1:33:8a:d0:1b: 3a:e7:e3:57:d5:ab:79:b3:b9:3f:59:8e:9b:58:97: fd:89:8e:56:20:60:2e:33:9d:0d:26:ca:c3:e0:23: c8:f1:28:63:82:6d:37:2b:b7:e9:01:57:f5:b9:25: d5:16:05:36:6d:e4:9c:32:73:81:46:71:2f:ad:86: 32:61:95:dc:f7:64:1d:47:1c:77:fd:16:b1:c3:3b: b2:d0:e2:db:61:ee:8f:12:ad:03:23:42:c1:ed:42: 56:dd:45:16:fe:0f:78:9a:ed:f6:47:01:95:37:55: b5:65:86:05:e7:0f:4e:a9:77:d0:3f:97:00:b6:9c: 37:da:4c:1c:62:cc:4d:1d:f6:7e:d4:a2:04:32:84: f6:d0:e1:77:42:c6:ea:ad:85:ac:09:f8:35:fc:8e: 8e:0a:b9:c3:b7:cf:7b:ee:ef:1e:f5:12:e0:f7:fc: 3d:6a:73:01:8a:83:ad:e3:ea:36:f5:b9:02:2f:f3: 5e:2d:8b:ca:3f:5b:8c:fe:19:7c:6a:62:49:8e:ca: 4c:78:95:dd:73:36:28:e1:87:6d:66:67:6e:f8:44: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AD:F1:72:14:CD:10:B5:4F:06:30:FB:74:1D:AB:46:14:4A:1A:3C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-a3xchTNELVPBjD7dB2rRhRKGjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.64.0/24 31.57.139.0/24 Signature Algorithm: sha256WithRSAEncryption 69:4c:cc:2b:51:5f:78:fc:e6:ed:31:b6:91:94:e7:33:e5:9d: b2:0d:28:3f:4e:23:fa:81:df:f1:8a:3b:12:df:4e:00:4d:68: 1a:15:f1:eb:08:0b:08:61:76:b0:f9:d3:14:61:ca:a2:86:8b: 38:dd:6a:c4:aa:f3:0c:12:02:69:e0:b9:b9:ad:02:6d:aa:a6: 65:ce:37:99:b3:0b:01:f5:d5:a8:11:80:6b:2a:77:11:30:09: 2f:f3:28:1a:12:1c:f8:3a:71:32:95:67:e5:03:8a:fe:92:ac: a6:09:ba:03:fe:1f:cc:50:61:eb:8f:b1:b6:f5:52:7c:bb:95: 5c:2c:b7:b6:a7:2d:71:2e:07:e4:a1:e1:48:14:d4:78:d1:5f: 42:af:25:07:ed:4c:7d:c3:4e:a4:2b:d0:4b:d9:ea:d5:36:19: ed:76:d5:57:0a:53:5c:a3:3f:7a:2f:72:ed:19:d9:1a:52:45: 1b:b5:3c:0d:9d:16:d7:f7:57:24:a2:d7:ac:0c:f5:0c:bb:f7: 61:2d:9a:f5:70:93:30:6f:32:af:b7:88:13:0d:c4:e4:ac:35: 8d:f8:ad:89:c6:fb:34:30:96:11:e4:c5:dd:bc:f4:76:94:44: 1d:cf:84:7d:64:9c:51:f8:92:f7:9a:b8:4e:65:19:25:0c:99: 20:a4:ef:95 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/hLGLAst16G5b0lYSGzdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWFkZjE3MjE0Y2QxMGI1NGYwNjMwZmI3NDFkYWI0NjE0NGExYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE99Y6ntLEFfNlzC9kKU/jKkTaqc DsZSMYxrND/YE3vNQ/V1xEX9oTOK0Bs65+NX1at5s7k/WY6bWJf9iY5WIGAuM50N JsrD4CPI8Shjgm03K7fpAVf1uSXVFgU2beScMnOBRnEvrYYyYZXc92QdRxx3/Rax wzuy0OLbYe6PEq0DI0LB7UJW3UUW/g94mu32RwGVN1W1ZYYF5w9OqXfQP5cAtpw3 2kwcYsxNHfZ+1KIEMoT20OF3QsbqrYWsCfg1/I6OCrnDt8977u8e9RLg9/w9anMB ioOt4+o29bkCL/NeLYvKP1uM/hl8amJJjspMeJXdczYo4YdtZmdu+EQcXwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPmt8XIUzRC1TwYw+3Qdq0YUSho8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMS1hM3hjaFRORUxWUEJqRDdkQjJyUmhSS0dqdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAB85QAME AB85izANBgkqhkiG9w0BAQsFAAOCAQEAaUzMK1FfePzm7TG2kZTnM+Wdsg0oP04j +oHf8Yo7Et9OAE1oGhXx6wgLCGF2sPnTFGHKooaLON1qxKrzDBICaeC5ua0Cbaqm Zc43mbMLAfXVqBGAayp3ETAJL/MoGhIc+DpxMpVn5QOK/pKspgm6A/4fzFBh64+x tvVSfLuVXCy3tqctcS4H5KHhSBTUeNFfQq8lB+1MfcNOpCvQS9nq1TYZ7XbVVwpT XKM/ei9y7RnZGlJFG7U8DZ0W1/dXJKLXrAz1DLv3YS2a9XCTMG8yr7eIEw3E5Kw1 jfiticb7NDCWEeTF3bz0dpREHc+EfWScUfiS95q4TmUZJQyZIKTvlQ== -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:45 2026 by rpki-client