This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/13CjRVlVG-JwMCTBDZ_zUYck-1w.roa File: 13CjRVlVG-JwMCTBDZ_zUYck-1w.roa (raw, json) Hash identifier: VPpA3MvGVcWbjoldMKXxWVygZBs3Jy6IPvJb4Rcs/bU= Subject key identifier: D7:70:A3:45:59:55:1B:E2:70:30:24:C1:0D:9F:F3:51:87:24:FB:5C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844F5B7473BF24EF29AA7EA7B97ADE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/13CjRVlVG-JwMCTBDZ_zUYck-1w.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 31.56.160.0/21 maxlen: 24 217.60.128.0/19 maxlen: 24 217.60.128.0/20 maxlen: 24 217.60.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4f:5b:74:73:bf:24:ef:29:aa:7e:a7:b9:7a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d770a34559551be2703024c10d9ff3518724fb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0e:6b:b1:c2:93:66:50:ca:54:a6:92:71:51: 83:67:4f:8e:ba:0a:ef:db:94:8a:aa:47:2d:1e:7a: 83:f1:bf:26:bd:7c:7f:f9:63:f5:16:74:24:b2:1f: d2:41:15:42:b8:45:d4:6b:a2:06:ae:86:69:3b:4f: c5:b1:aa:4f:39:8e:26:49:99:e4:6b:38:a3:e9:aa: ca:47:71:4d:ef:5d:89:97:76:45:30:0d:da:f2:23: fc:80:9d:bc:2e:9e:07:7b:cb:96:23:49:00:58:22: 81:1a:48:91:b1:4a:6c:91:24:28:d9:9a:f7:fb:60: f9:44:cd:f8:37:8f:9f:84:c8:13:78:7b:1c:80:5f: 62:e9:60:50:b0:0b:f1:2e:72:43:20:bb:c3:df:52: 3e:c1:95:49:50:0a:ec:65:ed:2d:ae:16:b3:01:65: a5:06:a6:c3:25:8a:b8:67:4a:50:b7:80:bc:f1:cd: 8f:d6:32:51:96:1f:d2:f6:65:3d:1d:2a:e2:f1:cc: 96:fc:92:b8:c1:6a:93:6b:c9:88:f1:dc:62:b1:09: c2:dd:d9:b3:82:84:57:96:ac:d8:ed:59:b9:dd:83: fa:83:33:21:73:35:b4:1c:c0:8b:bf:20:b8:16:eb: fd:ae:3b:d8:89:28:62:5c:68:56:37:12:c9:43:51: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:70:A3:45:59:55:1B:E2:70:30:24:C1:0D:9F:F3:51:87:24:FB:5C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/13CjRVlVG-JwMCTBDZ_zUYck-1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.160.0/21 217.60.128.0/19 Signature Algorithm: sha256WithRSAEncryption b3:de:32:9c:7b:19:47:30:8e:d4:dd:43:29:91:df:85:0f:36: cf:66:0d:f2:2a:bf:a1:2f:ce:2b:30:10:9b:bd:71:85:6a:b3: 05:38:01:6e:e0:67:99:ce:75:da:eb:c8:bf:4c:c8:cd:64:b9: 17:1e:65:fc:42:2c:8e:54:3f:e7:c1:9b:6c:d3:0e:04:ee:82: d9:ff:4b:2b:fd:1d:fc:be:08:44:8d:2e:33:36:5c:eb:8b:d5: fd:0a:1a:6a:44:9d:f3:9f:d5:ef:44:9f:39:74:f3:98:74:1f: ed:4b:17:87:ba:36:3c:05:45:75:72:a6:5e:86:fe:bd:a1:fc: 62:25:27:3c:97:75:35:2b:ac:97:08:5d:cc:60:f8:ba:f4:77: b8:e9:a0:cd:8c:1a:a5:7a:51:1d:b8:4d:cd:b8:97:3a:c4:61: fb:d5:b9:c7:6c:84:69:f1:f8:d2:dd:74:e1:44:15:26:9d:47: 3c:82:dc:fa:91:71:bc:e3:e1:b5:19:27:9b:0f:e9:92:23:a3: c7:ed:f7:8d:a1:5a:e7:df:04:09:29:f8:bb:4c:b9:99:0f:7c: f6:a9:b3:c1:5c:7f:72:f8:73:5c:03:6d:06:cc:94:ee:13:6a: 7a:9a:2c:e7:ba:47:d0:5a:45:20:69:13:56:f1:9d:3f:d6:35: 60:bc:21:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hE9bdHO/JO8pqn6nuXreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzcwYTM0NTU5NTUxYmUyNzAzMDI0YzEwZDlmZjM1MTg3MjRmYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g5rscKTZlDKVKaScVGDZ0+Ougrv 25SKqkctHnqD8b8mvXx/+WP1FnQksh/SQRVCuEXUa6IGroZpO0/FsapPOY4mSZnk azij6arKR3FN712Jl3ZFMA3a8iP8gJ28Lp4He8uWI0kAWCKBGkiRsUpskSQo2Zr3 +2D5RM34N4+fhMgTeHscgF9i6WBQsAvxLnJDILvD31I+wZVJUArsZe0trhazAWWl BqbDJYq4Z0pQt4C88c2P1jJRlh/S9mU9HSri8cyW/JK4wWqTa8mI8dxisQnC3dmz goRXlqzY7Vm53YP6gzMhczW0HMCLvyC4Fuv9rjvYiShiXGhWNxLJQ1HRzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNdwo0VZVRvicDAkwQ2f81GHJPtcMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMTNDalJWbFZHLUp3TUNUQkRaX3pVWWNrLTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDHzigAwQF 2TyAMA0GCSqGSIb3DQEBCwUAA4IBAQCz3jKcexlHMI7U3UMpkd+FDzbPZg3yKr+h L84rMBCbvXGFarMFOAFu4GeZznXa68i/TMjNZLkXHmX8QiyOVD/nwZts0w4E7oLZ /0sr/R38vghEjS4zNlzri9X9ChpqRJ3zn9XvRJ85dPOYdB/tSxeHujY8BUV1cqZe hv69ofxiJSc8l3U1K6yXCF3MYPi69He46aDNjBqlelEduE3NuJc6xGH71bnHbIRp 8fjS3XThRBUmnUc8gtz6kXG84+G1GSebD+mSI6PH7feNoVrn3wQJKfi7TLmZD3z2 qbPBXH9y+HNcA20GzJTuE2p6miznukfQWkUgaRNW8Z0/1jVgvCE+ -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:36 2026 by rpki-client