This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1EZGQhMK22IVMCsa0w4H5wBtTbQ.roa File: 1EZGQhMK22IVMCsa0w4H5wBtTbQ.roa (raw, json) Hash identifier: s+oqtm3PhhzO+nfmScTnjZGawOIsUlORO1q7YjXS/4s= Subject key identifier: D4:46:46:42:13:0A:DB:62:15:30:2B:1A:D3:0E:07:E7:00:6D:4D:B4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845B01CEB433271266FC2256DD896C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1EZGQhMK22IVMCsa0w4H5wBtTbQ.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22427 IP address blocks: 31.57.14.0/24 maxlen: 24 31.57.99.0/24 maxlen: 24 31.58.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5b:01:ce:b4:33:27:12:66:fc:22:56:dd:89:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4464642130adb6215302b1ad30e07e7006d4db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:66:4b:08:7c:34:36:a1:28:0d:8a:a8:c2: f7:1f:61:cd:07:19:c2:5a:06:e8:04:02:e0:8b:0e: 0d:6c:01:f3:f0:2b:39:34:a4:86:cf:f9:83:79:89: bb:b0:99:12:4f:d6:50:96:9c:bb:60:39:98:3e:22: c6:f2:8f:07:55:d3:ca:6c:6c:a1:c3:5b:e5:ae:a9: 55:1b:bc:4a:9a:9a:f5:87:54:53:19:f0:7e:be:4d: e9:67:56:11:a5:0f:d2:73:a2:6a:ff:06:42:a2:92: 51:af:ac:c5:f0:73:80:94:a8:70:d8:21:bf:b8:f0: 68:69:8f:20:39:d3:f4:c0:3d:69:e5:6d:ed:a4:0e: de:c6:a1:c1:25:89:70:63:b5:66:36:8d:c5:5f:00: b2:b8:79:a9:c8:61:bf:59:bc:10:8a:ef:02:d4:b4: 47:79:d1:14:87:9a:bd:1f:ad:ea:16:e1:c5:fe:f2: 0d:c6:33:e4:0c:9a:13:61:40:08:97:b8:bf:72:27: 4f:32:4c:78:7a:b0:f4:da:57:8c:2a:14:25:79:56: a1:6c:c6:fd:b8:0c:72:ce:2e:b0:b3:47:c2:11:05: 74:03:50:63:80:b0:b1:8d:93:ca:d9:7f:cb:4b:3e: 76:95:1a:e2:1a:23:59:b6:cc:57:e2:22:e2:e6:6f: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:46:46:42:13:0A:DB:62:15:30:2B:1A:D3:0E:07:E7:00:6D:4D:B4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1EZGQhMK22IVMCsa0w4H5wBtTbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.14.0/24 31.57.99.0/24 31.58.84.0/24 Signature Algorithm: sha256WithRSAEncryption 85:43:68:ec:9d:fd:a6:eb:2e:d8:a5:52:b1:41:f3:13:11:e2: 9c:8e:f7:23:84:a0:26:d4:79:d6:aa:ac:53:25:70:4e:72:b2: c3:14:ff:00:f1:ae:f0:2c:64:73:a8:96:bc:2f:c1:9d:a7:28: 0b:e1:bb:aa:bf:f0:38:11:50:6b:08:25:ef:ca:76:1f:99:d9: 85:b7:db:3a:3b:d0:1c:cb:cc:d4:e8:d7:5c:a4:96:d9:31:a0: b2:41:28:b2:33:a3:d4:13:b2:3a:28:66:b8:f7:ca:ef:39:de: f3:1b:35:4b:5e:3f:91:ce:36:e1:d3:9f:56:c3:96:30:2d:2f: f1:c9:b6:eb:8c:03:d3:80:1c:60:bf:76:8c:a8:4d:9a:00:69: 78:9b:de:c6:8b:f5:fb:c2:be:42:44:b9:e2:c3:6e:d2:56:24: e0:36:37:1d:82:65:8d:03:d8:4c:91:76:95:6f:e8:49:78:06: be:29:cc:47:5b:20:10:07:96:5a:55:7d:36:a3:0f:b3:42:8c: 44:26:9a:24:37:61:01:0c:ca:5c:eb:2f:d2:58:19:c0:e6:93: 97:9d:15:b5:69:70:98:a2:a1:35:95:fc:26:30:d8:cf:2c:0b: f6:0b:df:7d:b2:22:13:5a:81:f0:5d:27:2a:f5:5b:be:e4:71: 77:10:be:d0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hFsBzrQzJxJm/CJW3YlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDQ2NDY0MjEzMGFkYjYyMTUzMDJiMWFkMzBlMDdlNzAwNmQ0ZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh9mSwh8NDahKA2KqML3H2HNBxnC WgboBALgiw4NbAHz8Cs5NKSGz/mDeYm7sJkST9ZQlpy7YDmYPiLG8o8HVdPKbGyh w1vlrqlVG7xKmpr1h1RTGfB+vk3pZ1YRpQ/Sc6Jq/wZCopJRr6zF8HOAlKhw2CG/ uPBoaY8gOdP0wD1p5W3tpA7exqHBJYlwY7VmNo3FXwCyuHmpyGG/WbwQiu8C1LRH edEUh5q9H63qFuHF/vINxjPkDJoTYUAIl7i/cidPMkx4erD02leMKhQleVahbMb9 uAxyzi6ws0fCEQV0A1BjgLCxjZPK2X/LSz52lRriGiNZtsxX4iLi5m994QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNRGRkITCttiFTArGtMOB+cAbU20MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMUVaR1FoTUsyMklWTUNzYTB3NEg1d0J0VGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzkOAwQA HzljAwQAHzpUMA0GCSqGSIb3DQEBCwUAA4IBAQCFQ2jsnf2m6y7YpVKxQfMTEeKc jvcjhKAm1HnWqqxTJXBOcrLDFP8A8a7wLGRzqJa8L8GdpygL4buqv/A4EVBrCCXv ynYfmdmFt9s6O9Acy8zU6NdcpJbZMaCyQSiyM6PUE7I6KGa498rvOd7zGzVLXj+R zjbh059Ww5YwLS/xybbrjAPTgBxgv3aMqE2aAGl4m97Gi/X7wr5CRLniw27SViTg NjcdgmWNA9hMkXaVb+hJeAa+KcxHWyAQB5ZaVX02ow+zQoxEJpokN2EBDMpc6y/S WBnA5pOXnRW1aXCYoqE1lfwmMNjPLAv2C999siITWoHwXScq9Vu+5HF3EL7Q -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client