This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-eJrL8dmBd5powFqLMnlr6uJ5f0.roa File: 1-eJrL8dmBd5powFqLMnlr6uJ5f0.roa (raw, json) Hash identifier: VfdCKteohh0Qd6fJ1KO9To1nmZY41QW2irCZvwLuUQQ= Subject key identifier: F9:E2:6B:2F:C7:66:05:DE:69:A3:01:6A:2C:C9:E5:AF:AB:89:E5:FD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B834ECF621E73D5858639FB7CEF3DF7A1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-eJrL8dmBd5powFqLMnlr6uJ5f0.roa Signing time: Sat 03 Jan 2026 10:02:18 +0000 ROA not before: Sat 03 Jan 2026 10:02:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.92.0/22 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.199.0/24 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:83:4e:cf:62:1e:73:d5:85:86:39:fb:7c:ef:3d:f7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 3 10:02:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e26b2fc76605de69a3016a2cc9e5afab89e5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:69:99:88:90:7c:3d:47:37:f0:55:87:62: af:2d:ef:05:54:73:bf:ef:6d:16:0f:28:42:44:03: aa:54:41:41:1e:93:54:a1:47:3a:a0:21:39:96:0c: 4c:d2:de:69:7b:88:23:0e:99:fe:c6:68:7e:ba:d1: a4:1d:0c:d2:75:b0:ad:6a:63:6d:d2:37:10:36:d2: f2:67:c8:a2:77:2f:1a:8f:c5:7a:fe:7d:e1:67:a0: d3:a7:2c:3f:a0:ad:57:f3:4d:c8:f8:92:0a:75:b5: 1c:6c:02:90:c5:01:db:ce:4a:5c:b7:ab:ec:17:94: 16:74:d8:9d:cf:2d:db:bc:1c:da:bb:71:58:05:5d: 7f:fb:f5:53:d8:95:fc:5b:61:12:f9:45:dd:ec:9f: 09:e3:da:2e:72:dd:a0:95:60:0f:e4:6d:02:37:cd: d4:6d:1e:13:80:b1:63:d7:0b:df:3f:ce:f0:50:3e: 89:1c:38:5d:ea:04:a6:b9:e5:bb:1f:09:cb:1f:d8: 64:a8:71:85:2a:65:30:11:d3:23:6b:83:c7:9a:65: ef:f6:94:d5:8d:51:56:4a:c6:5a:60:d3:e9:c9:bf: 08:16:2c:01:c1:44:12:33:c1:a8:a0:cf:42:0d:0a: da:aa:b3:f0:be:b8:45:3c:80:33:01:82:e7:ac:57: dd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E2:6B:2F:C7:66:05:DE:69:A3:01:6A:2C:C9:E5:AF:AB:89:E5:FD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-eJrL8dmBd5powFqLMnlr6uJ5f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.96.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.58.239.0/24 31.59.84.0/22 31.59.90.0-31.59.95.255 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.199.0/24 217.60.208.0-217.60.235.255 217.60.237.0/24 Signature Algorithm: sha256WithRSAEncryption 95:f9:af:56:e8:51:2c:e4:79:15:fc:29:22:b3:30:6b:3d:90: 07:1d:83:c2:8c:04:96:b5:72:59:b0:1e:1c:5b:c4:ed:eb:ef: 8f:d3:df:10:4d:f2:97:83:cb:fc:15:18:6d:d9:a0:71:29:0c: ea:dd:45:f8:ab:48:39:41:7f:d5:81:64:30:d1:f3:25:2a:95: 37:3a:7b:f2:32:82:eb:ac:21:eb:00:fa:02:7e:83:25:d4:82: 2f:ef:9a:ff:4b:d1:2c:39:c3:b4:11:68:6d:c7:8a:ea:39:bf: 9e:bc:a0:d8:78:76:0f:9e:8c:b8:02:2d:cd:9a:b1:5f:5a:70: 8b:f9:68:f8:5d:c4:cc:3a:6f:ce:2d:29:4d:18:b5:46:ea:e5: 3b:5e:20:b2:34:fa:b7:d9:13:b4:05:cf:f8:30:70:2a:6e:59: fb:88:e4:89:ee:ab:be:ac:73:fe:d8:d2:59:72:f9:09:3a:07: 70:e2:85:48:56:83:14:40:f1:9f:fd:d3:fb:7d:bd:b3:b4:b1: 36:51:85:fb:7b:e4:d8:9f:7a:e0:7f:24:b2:ad:7c:f0:8f:60: b1:b7:b9:08:bc:3c:7e:10:f0:8f:45:fe:01:95:7b:f7:14:d2: 81:1e:88:60:09:ed:83:7e:7b:2f:32:52:6a:a2:1a:88:53:c6: 09:2d:21:fe -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZuDTs9iHnPVhYY5+3zvPfehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAzMTAwMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWUyNmIyZmM3NjYwNWRlNjlhMzAxNmEyY2M5ZTVhZmFiODllNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YRpmYiQfD1HN/BVh2KvLe8FVHO/ 720WDyhCRAOqVEFBHpNUoUc6oCE5lgxM0t5pe4gjDpn+xmh+utGkHQzSdbCtamNt 0jcQNtLyZ8iidy8aj8V6/n3hZ6DTpyw/oK1X803I+JIKdbUcbAKQxQHbzkpct6vs F5QWdNidzy3bvBzau3FYBV1/+/VT2JX8W2ES+UXd7J8J49ouct2glWAP5G0CN83U bR4TgLFj1wvfP87wUD6JHDhd6gSmueW7HwnLH9hkqHGFKmUwEdMja4PHmmXv9pTV jVFWSsZaYNPpyb8IFiwBwUQSM8GooM9CDQraqrPwvrhFPIAzAYLnrFfdRwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFPniay/HZgXeaaMBaizJ5a+rieX9MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMS1lSnJMOGRtQmQ1cG93RnFMTW5scjZ1SjVmMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBtwYIKwYBBQUHAQcBAf8EgacwgaQwgaEEAgABMIGaAwQA HzjTAwQAHzlgAwQAHznIMAwDBAIfOrQDBAIfOsADBAAfOu8DBAIfO1QwDAMEAR87 WgMEBR87QAMEAF63lwMEAF63ngMEAF63pAMEAF63pjAMAwQBXreuAwQAXrewAwQB Xre0AwQA2TwPMAwDBAXZPKADBAPZPLADBALZPLwDBADZPMcwDAMEBNk80AMEAtk8 6AMEANk87TANBgkqhkiG9w0BAQsFAAOCAQEAlfmvVuhRLOR5FfwpIrMwaz2QBx2D wowElrVyWbAeHFvE7evvj9PfEE3yl4PL/BUYbdmgcSkM6t1F+KtIOUF/1YFkMNHz JSqVNzp78jKC66wh6wD6An6DJdSCL++a/0vRLDnDtBFobceK6jm/nryg2Hh2D56M uAItzZqxX1pwi/lo+F3EzDpvzi0pTRi1RurlO14gsjT6t9kTtAXP+DBwKm5Z+4jk ie6rvqxz/tjSWXL5CToHcOKFSFaDFEDxn/3T+329s7SxNlGF+3vk2J964H8ksq18 8I9gsbe5CLw8fhDwj0X+AZV79xTSgR6IYAntg357LzJSaqIaiFPGCS0h/g== -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:05 2026 by rpki-client