This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1FT66EB3UWjcTPiZXYOXh7Av7x4.roa File: 1FT66EB3UWjcTPiZXYOXh7Av7x4.roa (raw, json) Hash identifier: oNH1KGiE5cb0ZxIxcgZ6zCc44e1NOUoWzsrgFItT16I= Subject key identifier: D4:54:FA:E8:40:77:51:68:DC:4C:F8:99:5D:83:97:87:B0:2F:EF:1E Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7ACDAF2DE8726C74B2BD5367361BBD7F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1FT66EB3UWjcTPiZXYOXh7Av7x4.roa Signing time: Thu 01 Jan 2026 18:24:18 +0000 ROA not before: Thu 01 Jan 2026 18:24:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.58.138.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:cd:af:2d:e8:72:6c:74:b2:bd:53:67:36:1b:bd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 1 18:24:18 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d454fae840775168dc4cf8995d839787b02fef1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:00:eb:ad:b6:d7:86:18:3d:cb:29:04:5a: a8:27:aa:b6:58:6d:d9:e5:e9:b2:b9:2b:db:89:c5: 0b:34:74:55:b2:83:7e:9a:11:45:78:e5:68:22:9f: 60:3f:61:cf:46:16:b3:62:df:51:77:78:ba:5f:30: 27:37:87:c2:63:8f:a0:8f:05:0e:31:bb:64:ac:37: 03:0a:b8:9e:91:1f:38:c8:b6:dd:29:a9:ec:a7:d0: 64:ae:54:32:b7:a3:a7:a3:1e:70:c7:a0:fa:ce:c5: 57:91:e8:6a:bf:8c:f6:09:61:a8:7e:5a:27:3c:4a: ad:de:e0:bc:ee:da:c1:36:85:91:94:5c:30:3c:be: fe:8a:7d:bb:d9:35:6d:6f:a9:c0:6d:48:7b:5d:46: 95:6b:99:a6:85:71:1f:fb:80:15:67:8f:6d:af:a6: ed:d0:30:b6:d1:4f:c5:2c:21:8b:09:e7:ca:13:bc: 6c:60:3e:d0:53:5e:7f:d7:d6:c5:b1:d5:9e:aa:63: 86:ed:19:08:b3:8c:3f:de:e2:b9:18:86:df:34:1e: af:0d:e2:26:bb:11:1f:87:62:fe:13:3a:bd:b7:68: 1a:8b:92:63:54:6e:d5:f6:a8:67:99:31:c3:a5:97: 89:e0:91:90:ed:64:79:d7:06:c2:64:4c:b4:7d:bf: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:54:FA:E8:40:77:51:68:DC:4C:F8:99:5D:83:97:87:B0:2F:EF:1E X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1FT66EB3UWjcTPiZXYOXh7Av7x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.141.0/24 31.57.191.0/24 31.57.221.0/24 31.58.138.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e8:25:b2:d1:67:fe:35:8c:d3:ff:14:3c:fc:10:e4:c5:3c: 73:70:e7:ea:10:26:25:f6:01:c7:d4:5e:15:1d:e5:b6:fd:9b: 11:dc:5c:d4:c7:49:33:05:9f:1f:db:b3:b3:f8:4c:9e:d3:35: fe:12:a5:f5:59:3e:46:a8:50:4d:41:91:fd:b7:24:c7:6e:70: a9:97:16:8c:a6:a4:65:4e:16:77:eb:a7:69:d7:ef:b3:14:8c: 5e:21:57:c2:48:5c:9f:d8:df:00:e0:98:6a:03:b6:be:a3:38: 52:dc:af:9a:67:ae:a0:f0:e6:91:07:44:92:43:76:9b:6e:99: d5:86:f2:01:b1:aa:8e:03:06:a6:2e:08:9a:ed:55:55:be:f9: b5:2c:b8:bb:9a:7f:8c:dc:02:ca:aa:dc:c2:91:17:a1:d3:a5: c0:ac:7d:93:9f:51:26:09:87:8f:5e:70:ec:98:42:e8:e5:a1: 96:ae:f2:67:ca:38:31:05:68:25:c1:9d:68:bb:10:d0:50:1c: 2c:b9:37:b0:60:8b:4c:9f:a1:96:dd:6f:18:be:05:a2:01:e3: d3:99:dc:f3:46:36:27:64:4d:24:b2:e9:9d:e2:7b:97:4f:fd: bc:de:f6:83:88:13:05:7c:44:0a:4d:7f:2f:c0:a5:8a:89:08: c8:c7:8e:94 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6za8t6HJsdLK9U2c2G71/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAxMTgyNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU0ZmFlODQwNzc1MTY4ZGM0Y2Y4OTk1ZDgzOTc4N2IwMmZlZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxIA662214YYPcspBFqoJ6q2WG3Z 5emyuSvbicULNHRVsoN+mhFFeOVoIp9gP2HPRhazYt9Rd3i6XzAnN4fCY4+gjwUO MbtkrDcDCriekR84yLbdKansp9BkrlQyt6Onox5wx6D6zsVXkehqv4z2CWGoflon PEqt3uC87trBNoWRlFwwPL7+in272TVtb6nAbUh7XUaVa5mmhXEf+4AVZ49tr6bt 0DC20U/FLCGLCefKE7xsYD7QU15/19bFsdWeqmOG7RkIs4w/3uK5GIbfNB6vDeIm uxEfh2L+Ezq9t2gai5JjVG7V9qhnmTHDpZeJ4JGQ7WR51wbCZEy0fb/m3wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNRU+uhAd1Fo3Ez4mV2Dl4ewL+8eMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMUZUNjZFQjNVV2pjVFBpWlhZT1hoN0F2N3g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzh9AwQA HziNAwQAHzm/AwQAHzndAwQAHzqKAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQCO 6CWy0Wf+NYzT/xQ8/BDkxTxzcOfqECYl9gHH1F4VHeW2/ZsR3FzUx0kzBZ8f27Oz +Eye0zX+EqX1WT5GqFBNQZH9tyTHbnCplxaMpqRlThZ366dp1++zFIxeIVfCSFyf 2N8A4JhqA7a+ozhS3K+aZ66g8OaRB0SSQ3abbpnVhvIBsaqOAwamLgia7VVVvvm1 LLi7mn+M3ALKqtzCkReh06XArH2Tn1EmCYePXnDsmELo5aGWrvJnyjgxBWglwZ1o uxDQUBwsuTewYItMn6GW3W8YvgWiAePTmdzzRjYnZE0ksumd4nuXT/283vaDiBMF fEQKTX8vwKWKiQjIx46U -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:19 2026 by rpki-client