This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1f4aNxwAaiTaxJAS7WyC3IPBfv8.roa File: 1f4aNxwAaiTaxJAS7WyC3IPBfv8.roa (raw, json) Hash identifier: 81aGtebnLX+vPUnGH528pvzuMsjC+71LNDodMQ6m+TE= Subject key identifier: D5:FE:1A:37:1C:00:6A:24:DA:C4:90:12:ED:6C:82:DC:83:C1:7E:FF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84BDCDCB7D4CB24D90A869622D717F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1f4aNxwAaiTaxJAS7WyC3IPBfv8.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214138 IP address blocks: 31.56.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bd:cd:cb:7d:4c:b2:4d:90:a8:69:62:2d:71:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5fe1a371c006a24dac49012ed6c82dc83c17eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:4c:da:5c:3c:3c:34:82:76:24:f8:d3:53: 3f:66:25:ef:c2:45:2f:80:4d:c7:e6:1d:8f:59:6f: 06:54:e4:bd:a4:44:3e:9c:f0:b3:9d:a3:03:36:45: 2c:9c:25:04:97:69:cb:7d:b9:56:6d:32:f2:1c:2c: d7:af:b5:6d:3a:c0:0a:48:d1:5f:a1:82:9e:3a:45: 90:42:9f:5b:d0:b0:52:e9:80:20:2a:06:fb:85:06: e7:0b:de:8a:31:15:e9:15:da:aa:57:ac:12:98:65: 00:63:7f:f4:aa:43:0b:28:c8:8b:34:a4:c1:0d:36: d3:d1:51:13:3a:fe:4f:e7:ed:39:16:e1:89:6c:25: b8:f6:55:ee:04:e1:a2:af:56:21:3c:ad:92:67:23: 25:a9:b7:f3:cd:d9:8e:08:e9:96:f7:7e:8b:28:cc: 99:54:ce:1f:4d:21:67:ff:9e:a8:ba:c2:49:d3:b9: d4:03:39:61:b2:0a:4e:95:69:98:aa:d6:53:60:a9: 90:6b:9e:13:20:22:69:0a:8b:9a:a1:e1:e0:40:e4: 2c:77:0a:16:7a:00:f6:fa:2d:20:75:27:28:66:21: a1:ce:3c:e6:cf:eb:a1:fb:cd:f6:5c:4a:2d:f4:09: 21:0b:74:e8:b2:8e:21:78:ff:d4:57:2d:d0:a3:1c: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FE:1A:37:1C:00:6A:24:DA:C4:90:12:ED:6C:82:DC:83:C1:7E:FF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1f4aNxwAaiTaxJAS7WyC3IPBfv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.45.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:29:de:84:59:03:a8:24:8f:52:1f:98:71:bc:a3:13:43:8b: 02:d0:4c:e3:b3:8d:83:5c:6f:81:d8:63:53:f2:10:d5:e2:b5: 10:da:c3:31:33:43:45:a6:30:0b:a1:36:a1:56:a1:b4:a4:d7: 7f:53:92:96:da:36:76:d5:03:88:38:24:19:9b:63:0d:8b:f3: 36:1f:96:b8:2f:71:24:ab:d7:c7:13:90:70:b9:8b:66:fc:67: c4:c7:a1:05:af:f1:89:81:e2:de:28:47:92:64:0a:95:c0:1e: fa:0d:ff:e4:35:57:b2:2d:ee:ff:6d:94:92:6f:94:63:35:d7: a3:7d:53:d4:25:f4:6d:80:68:bd:a9:0e:42:72:0a:8f:bd:f9: ab:ab:c1:cd:27:3a:2a:4c:6f:90:b0:9f:95:44:fd:57:90:cd: ea:dd:07:9e:35:6a:23:01:7f:2c:8b:09:e6:0e:99:71:94:21: 41:11:a2:50:cd:4e:99:aa:14:97:14:f4:80:b7:ad:05:0d:57: 94:42:f2:a8:13:6e:d3:cf:8a:7d:d6:55:ba:6d:2f:63:a3:74: cc:6e:42:64:6c:2d:d8:ef:e1:de:13:62:96:3d:d9:67:25:47: 51:2f:5e:9c:c7:f4:04:2f:1a:48:8b:5d:85:59:25:95:a5:42: 20:7b:5a:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hL3Ny31Msk2QqGliLXF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWZlMWEzNzFjMDA2YTI0ZGFjNDkwMTJlZDZjODJkYzgzYzE3ZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN9M2lw8PDSCdiT401M/ZiXvwkUv gE3H5h2PWW8GVOS9pEQ+nPCznaMDNkUsnCUEl2nLfblWbTLyHCzXr7VtOsAKSNFf oYKeOkWQQp9b0LBS6YAgKgb7hQbnC96KMRXpFdqqV6wSmGUAY3/0qkMLKMiLNKTB DTbT0VETOv5P5+05FuGJbCW49lXuBOGir1YhPK2SZyMlqbfzzdmOCOmW936LKMyZ VM4fTSFn/56ousJJ07nUAzlhsgpOlWmYqtZTYKmQa54TICJpCouaoeHgQOQsdwoW egD2+i0gdScoZiGhzjzmz+uh+832XEot9AkhC3Toso4heP/UVy3Qoxwe8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNX+GjccAGok2sSQEu1sgtyDwX7/MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMWY0YU54d0FhaVRheEpBUzdXeUMzSVBCZnY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgtMA0G CSqGSIb3DQEBCwUAA4IBAQBtKd6EWQOoJI9SH5hxvKMTQ4sC0Ezjs42DXG+B2GNT 8hDV4rUQ2sMxM0NFpjALoTahVqG0pNd/U5KW2jZ21QOIOCQZm2MNi/M2H5a4L3Ek q9fHE5BwuYtm/GfEx6EFr/GJgeLeKEeSZAqVwB76Df/kNVeyLe7/bZSSb5RjNdej fVPUJfRtgGi9qQ5CcgqPvfmrq8HNJzoqTG+QsJ+VRP1XkM3q3QeeNWojAX8siwnm DplxlCFBEaJQzU6ZqhSXFPSAt60FDVeUQvKoE27Tz4p91lW6bS9jo3TMbkJkbC3Y 7+HeE2KWPdlnJUdRL16cx/QELxpIi12FWSWVpUIge1rE -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:55 2026 by rpki-client