This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1dLaRDZPD6x3XWvhZ5ODIRV-2-Q.roa File: 1dLaRDZPD6x3XWvhZ5ODIRV-2-Q.roa (raw, json) Hash identifier: elzFrpx8zD3lCyZAqsX8SyKg783Pny2EwSzzcLtSt9k= Subject key identifier: D5:D2:DA:44:36:4F:0F:AC:77:5D:6B:E1:67:93:83:21:15:7E:DB:E4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CB5025EB9D06DD963AEA28096D81 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1dLaRDZPD6x3XWvhZ5ODIRV-2-Q.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215238 IP address blocks: 31.56.214.0/24 maxlen: 24 31.59.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cb:50:25:eb:9d:06:dd:96:3a:ea:28:09:6d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5d2da44364f0fac775d6be167938321157edbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:12:e4:bc:bf:7f:f5:bb:68:d0:a6:90:df: e6:04:da:3e:e5:44:a7:d2:8c:ca:cc:2d:e4:a9:30: e7:39:6f:fd:f3:b9:5c:b2:49:81:07:28:8e:ad:a2: ce:18:de:a3:64:02:90:a6:e1:6f:ec:12:34:80:b5: b5:71:a9:40:aa:b6:72:78:fa:ab:1d:8a:19:83:32: 1a:08:08:fe:c8:09:42:08:85:51:d0:fc:a8:0d:dc: 2c:5d:16:ce:dd:ad:e3:e0:bc:34:26:d4:ea:00:dc: 90:88:51:d4:02:27:38:27:33:dd:a8:25:25:6a:9d: d9:1d:52:16:62:97:37:e9:e1:fc:69:ce:16:55:c6: e3:16:cf:50:e7:66:52:1f:d8:d1:4f:d0:97:f3:f6: 44:f6:30:a0:05:72:b5:26:18:b3:47:35:b3:41:e8: 33:6e:f7:f3:1b:d9:a3:d1:62:04:c2:31:cd:be:8d: 09:c1:e9:4f:9a:7e:bf:19:25:2b:41:90:84:75:aa: 1c:7e:d3:3e:c9:67:72:02:b6:a5:55:f7:fd:49:c4: ec:46:db:2a:4a:44:62:6c:3d:c5:a3:a9:9f:67:09: 97:d4:62:82:56:e8:87:b6:f8:2d:8e:e4:52:b8:ef: 81:4a:98:e7:07:0b:4b:01:70:58:2a:80:f2:8c:04: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D2:DA:44:36:4F:0F:AC:77:5D:6B:E1:67:93:83:21:15:7E:DB:E4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1dLaRDZPD6x3XWvhZ5ODIRV-2-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.214.0/24 31.59.131.0/24 Signature Algorithm: sha256WithRSAEncryption ab:bc:10:6d:9d:cf:aa:cd:a4:bb:17:28:4d:09:3a:e7:88:b7: f9:a9:28:ee:38:d4:f2:04:d6:35:57:c1:71:8f:66:79:6c:8f: 04:74:03:4c:94:76:95:a1:4b:59:d1:28:e2:e6:5b:e1:a8:19: c3:93:a4:b4:b3:b9:58:f0:55:b8:dd:59:32:34:dc:a9:a5:9c: bd:63:54:f5:c3:0f:b8:b7:77:46:4a:f1:0e:69:06:b0:90:0b: 01:8d:06:9a:fa:86:9a:d7:bf:91:d0:36:66:6f:ed:f0:fe:e3: 7e:0d:53:b3:12:3f:ac:92:83:81:3d:e0:09:16:2b:0f:8f:ed: 2f:a3:cb:2a:0f:ce:6e:e4:f0:a1:6b:27:77:bd:c1:65:f7:b6: d4:47:c0:ad:c8:2b:4d:09:92:e3:8d:c8:38:7c:2c:36:3a:dd: 6d:57:ac:85:2c:cc:46:ec:5b:b3:f2:d9:d9:9c:53:f8:24:36: 91:3f:0a:0d:f3:96:e1:70:ff:52:e5:98:f0:34:02:f1:43:20: 86:35:f6:8a:8d:aa:e4:8f:94:2e:4e:98:49:4e:55:19:fe:81: cd:07:6c:61:40:5e:0b:88:70:10:85:24:5f:9c:9c:e2:43:e7: 4c:62:0d:59:b4:c3:c7:d0:ec:d4:b3:25:12:a1:1b:9a:80:23: 02:c8:6f:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMtQJeudBt2WOuooCW2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWQyZGE0NDM2NGYwZmFjNzc1ZDZiZTE2NzkzODMyMTE1N2VkYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNcS5Ly/f/W7aNCmkN/mBNo+5USn 0ozKzC3kqTDnOW/987lcskmBByiOraLOGN6jZAKQpuFv7BI0gLW1calAqrZyePqr HYoZgzIaCAj+yAlCCIVR0PyoDdwsXRbO3a3j4Lw0JtTqANyQiFHUAic4JzPdqCUl ap3ZHVIWYpc36eH8ac4WVcbjFs9Q52ZSH9jRT9CX8/ZE9jCgBXK1JhizRzWzQegz bvfzG9mj0WIEwjHNvo0JwelPmn6/GSUrQZCEdaocftM+yWdyAralVff9ScTsRtsq SkRibD3Fo6mfZwmX1GKCVuiHtvgtjuRSuO+BSpjnBwtLAXBYKoDyjAQefQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNXS2kQ2Tw+sd11r4WeTgyEVftvkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMWRMYVJEWlBENngzWFd2aFo1T0RJUlYtMi1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjWAwQA HzuDMA0GCSqGSIb3DQEBCwUAA4IBAQCrvBBtnc+qzaS7FyhNCTrniLf5qSjuONTy BNY1V8Fxj2Z5bI8EdANMlHaVoUtZ0Sji5lvhqBnDk6S0s7lY8FW43VkyNNyppZy9 Y1T1ww+4t3dGSvEOaQawkAsBjQaa+oaa17+R0DZmb+3w/uN+DVOzEj+skoOBPeAJ FisPj+0vo8sqD85u5PChayd3vcFl97bUR8CtyCtNCZLjjcg4fCw2Ot1tV6yFLMxG 7Fuz8tnZnFP4JDaRPwoN85bhcP9S5ZjwNALxQyCGNfaKjarkj5QuTphJTlUZ/oHN B2xhQF4LiHAQhSRfnJziQ+dMYg1ZtMPH0OzUsyUSoRuagCMCyG8s -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:54 2026 by rpki-client