This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1A-6jWoZoWZje8A_gd2mmTjPnNM.roa File: 1A-6jWoZoWZje8A_gd2mmTjPnNM.roa (raw, json) Hash identifier: beJm7XExiyGjefX7yvZxAPQB1taGWkNZQivR2VHXHM4= Subject key identifier: D4:0F:BA:8D:6A:19:A1:66:63:7B:C0:3F:81:DD:A6:99:38:CF:9C:D3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C31E9287D35FAA9C4CBACF59B273 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1A-6jWoZoWZje8A_gd2mmTjPnNM.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214618 IP address blocks: 31.56.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c3:1e:92:87:d3:5f:aa:9c:4c:ba:cf:59:b2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d40fba8d6a19a166637bc03f81dda69938cf9cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:8c:7f:c3:2c:b0:0e:52:57:fb:71:04:90: 3d:13:b3:23:27:f3:20:a3:35:90:63:d7:40:90:fc: e8:9a:d4:76:ad:ca:a2:40:9a:9b:80:27:60:fb:c9: f4:10:4d:d3:a5:be:10:96:cb:a7:92:c7:c8:30:b9: 93:a9:47:a6:e4:5f:60:3e:24:49:2f:dc:69:c9:90: 31:bf:d5:7b:5d:8a:53:21:10:e4:8f:46:d7:db:f6: 79:e3:e9:27:e0:e1:b8:80:cd:f0:7e:70:9c:a1:78: e9:f7:13:d6:77:8f:c9:4d:31:93:ee:1b:c3:3a:71: 60:54:e1:6f:ca:0a:42:1d:f0:ad:58:e9:22:d9:dc: 5d:73:27:c3:bd:17:df:45:a7:e8:f4:97:ba:d9:f9: e8:7e:0f:f2:d7:04:43:d9:f2:b7:35:b4:aa:20:c3: 0f:e2:c6:02:d6:fd:40:ed:5b:7d:76:cf:1d:6b:3c: d2:a6:31:85:e1:bd:d5:22:9a:74:02:17:39:6f:cf: 3a:94:4c:14:07:cd:51:6e:1a:35:67:ac:11:92:df: 9c:85:5c:ea:5b:94:17:a3:52:3e:23:6e:4f:49:99: a6:18:4a:94:61:52:a0:d7:d2:fc:26:af:1b:c4:89: 07:5b:05:2d:89:12:95:54:ee:06:9f:2b:96:d8:d1: b6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:BA:8D:6A:19:A1:66:63:7B:C0:3F:81:DD:A6:99:38:CF:9C:D3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1A-6jWoZoWZje8A_gd2mmTjPnNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.181.0/24 Signature Algorithm: sha256WithRSAEncryption b8:09:d0:08:ae:df:86:65:c2:bb:20:31:6f:b0:4e:70:d4:16: f9:a2:db:d2:17:40:c7:f8:3d:74:61:5f:f0:c3:00:ee:17:58: 65:6f:95:0b:ac:e0:35:a3:e5:82:31:3b:bb:aa:8b:44:4f:da: ad:63:e4:fe:f2:5b:94:78:00:45:da:f8:a8:79:37:6f:b7:d5: 74:4e:1b:3f:ea:54:37:ee:95:64:dc:32:b4:3d:94:1c:3d:0e: 23:0e:fe:48:3e:5e:2e:99:27:90:e9:b2:ae:72:ec:c1:9e:fa: d3:09:f5:54:78:a1:80:9a:dc:e3:f0:36:95:4d:73:4e:05:2d: cb:9f:b8:28:f6:55:96:95:fb:f3:43:b4:98:b3:a7:1e:ea:e1: 96:45:c6:85:44:3a:48:06:2d:07:43:6b:9a:6f:a4:a8:2c:d5: 2a:09:d9:f8:42:54:50:1c:e9:11:02:2b:d8:b1:32:d0:7b:39: ae:2d:66:9e:d2:46:a7:67:75:48:c6:22:01:d6:eb:cb:45:17: 8c:78:65:a5:32:d8:3f:87:45:75:81:a4:18:79:b7:b5:c5:ef: 67:9b:43:ba:e8:03:1b:0a:f7:41:36:27:10:12:89:98:7b:49: 01:ff:07:bc:c0:ec:77:30:8a:2c:8c:20:64:71:c9:b5:1e:c6: 43:a6:bb:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMMekofTX6qcTLrPWbJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDBmYmE4ZDZhMTlhMTY2NjM3YmMwM2Y4MWRkYTY5OTM4Y2Y5Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHmMf8MssA5SV/txBJA9E7MjJ/Mg ozWQY9dAkPzomtR2rcqiQJqbgCdg+8n0EE3Tpb4QlsunksfIMLmTqUem5F9gPiRJ L9xpyZAxv9V7XYpTIRDkj0bX2/Z54+kn4OG4gM3wfnCcoXjp9xPWd4/JTTGT7hvD OnFgVOFvygpCHfCtWOki2dxdcyfDvRffRafo9Je62fnofg/y1wRD2fK3NbSqIMMP 4sYC1v1A7Vt9ds8dazzSpjGF4b3VIpp0Ahc5b886lEwUB81Rbho1Z6wRkt+chVzq W5QXo1I+I25PSZmmGEqUYVKg19L8Jq8bxIkHWwUtiRKVVO4GnyuW2NG21QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQPuo1qGaFmY3vAP4Hdppk4z5zTMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMUEtNmpXb1pvV1pqZThBX2dkMm1tVGpQbk5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzi1MA0G CSqGSIb3DQEBCwUAA4IBAQC4CdAIrt+GZcK7IDFvsE5w1Bb5otvSF0DH+D10YV/w wwDuF1hlb5ULrOA1o+WCMTu7qotET9qtY+T+8luUeABF2vioeTdvt9V0Ths/6lQ3 7pVk3DK0PZQcPQ4jDv5IPl4umSeQ6bKucuzBnvrTCfVUeKGAmtzj8DaVTXNOBS3L n7go9lWWlfvzQ7SYs6ce6uGWRcaFRDpIBi0HQ2uab6SoLNUqCdn4QlRQHOkRAivY sTLQezmuLWae0kanZ3VIxiIB1uvLRReMeGWlMtg/h0V1gaQYebe1xe9nm0O66AMb CvdBNicQEomYe0kB/we8wOx3MIosjCBkccm1HsZDprve -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:36 2026 by rpki-client