This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2LD2RO2fJ9G0k9gCZFg5aOJOEgU.roa File: 2LD2RO2fJ9G0k9gCZFg5aOJOEgU.roa (raw, json) Hash identifier: ZDnZBaua+J14uEyAu/y2VB4pYq9TT4uaxBiqDzLSUug= Subject key identifier: D8:B0:F6:44:ED:9F:27:D1:B4:93:D8:02:64:58:39:68:E2:4E:12:05 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B9F850CC6E2D86A15BE356F316B180B6C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2LD2RO2fJ9G0k9gCZFg5aOJOEgU.roa Signing time: Thu 08 Jan 2026 21:30:55 +0000 ROA not before: Thu 08 Jan 2026 21:30:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 31.56.52.0/22 maxlen: 22 31.56.112.0/24 maxlen: 24 31.56.219.0/24 maxlen: 24 31.57.161.0/24 maxlen: 24 31.57.199.0/24 maxlen: 24 31.58.88.0/24 maxlen: 24 31.59.68.0/24 maxlen: 24 217.60.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:85:0c:c6:e2:d8:6a:15:be:35:6f:31:6b:18:0b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 8 21:30:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8b0f644ed9f27d1b493d80264583968e24e1205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:f9:f7:f4:5c:8b:a5:b7:ee:37:05:4a:5c: 3e:74:57:20:83:20:d9:90:0d:b6:81:98:49:b1:74: b3:e0:3b:d5:87:e3:6f:7f:36:4f:80:45:38:91:bc: 1c:2d:f4:cf:3f:df:e3:55:7a:e9:76:26:b8:c3:7c: f1:d9:45:73:11:a6:28:49:59:45:1b:42:49:01:0f: 93:c6:4d:38:64:dc:f4:19:a7:1c:87:05:09:fe:60: 75:93:a4:9f:94:db:0a:89:82:03:64:43:62:31:d5: 59:7d:1a:41:3c:a6:13:be:8b:cd:c0:c2:f3:52:b6: df:ad:c8:fa:df:5c:65:97:20:b9:70:16:da:e9:cc: dd:8b:8c:22:5d:18:ba:d7:80:1f:3c:05:02:6d:74: 97:69:8d:ea:f1:f3:15:7e:3d:da:75:30:93:4e:1f: 7e:a9:6d:6a:dd:e8:84:f7:e3:69:fa:30:af:46:cc: f2:ab:40:b8:d7:f8:41:3a:44:d5:7d:fe:f2:ad:b4: af:2e:42:5b:53:cc:fb:78:97:2d:40:3a:5b:e4:1f: b3:d0:39:eb:97:8a:f6:8e:cb:ce:4c:14:56:4f:ec: 8b:0c:8b:71:e7:4b:c9:2e:8f:82:9f:43:3b:7b:d6: b3:35:a4:6d:60:1b:8f:af:d0:d7:6c:5d:22:c7:40: c1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B0:F6:44:ED:9F:27:D1:B4:93:D8:02:64:58:39:68:E2:4E:12:05 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2LD2RO2fJ9G0k9gCZFg5aOJOEgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.52.0/22 31.56.112.0/24 31.56.219.0/24 31.57.161.0/24 31.57.199.0/24 31.58.88.0/24 31.59.68.0/24 217.60.199.0/24 Signature Algorithm: sha256WithRSAEncryption 19:36:87:f5:74:5c:1f:0c:98:7b:18:04:e6:3b:1f:86:c3:25: 0d:49:54:75:06:1b:28:54:66:f1:36:83:f2:6f:0e:7e:90:b3: 4d:80:85:75:d4:90:48:50:5f:df:69:e9:24:63:d9:ac:a9:c7: d5:14:af:bb:19:28:1d:9b:10:01:c1:d8:69:fd:e7:77:f3:cb: 4d:6a:62:8d:79:0d:87:fa:4a:69:6f:d0:83:19:e1:75:9b:3e: f2:32:42:2a:95:b1:b5:89:ab:3c:ac:5f:a5:4d:e3:d2:20:0c: a4:d8:ee:ae:2a:f3:2b:db:51:9e:77:0b:53:e9:50:dc:37:af: db:dc:e4:9a:df:d4:ed:35:d7:a2:a4:9d:0d:0b:9e:25:4f:42: 71:5d:92:ee:b6:17:1f:f1:71:c0:cc:66:ef:d8:74:fa:c9:25: af:10:58:8c:85:b5:21:81:50:8d:0c:b7:90:ca:91:0c:ba:37: 50:0a:cb:6b:67:e0:b4:70:6c:5a:15:2e:ba:87:61:25:ad:d4: 7f:6f:bd:b9:54:50:65:11:b9:63:09:24:85:2d:65:54:20:27: fd:de:14:bc:1d:da:49:b7:b1:49:37:86:c9:c5:d7:9d:e6:dc: 5a:0c:a3:19:64:d4:52:6f:61:d5:9b:48:9c:af:14:b3:98:90: df:5a:c3:b5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZufhQzG4thqFb41bzFrGAtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA4MjEzMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGIwZjY0NGVkOWYyN2QxYjQ5M2Q4MDI2NDU4Mzk2OGUyNGUxMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwz59/Rci6W37jcFSlw+dFcggyDZ kA22gZhJsXSz4DvVh+NvfzZPgEU4kbwcLfTPP9/jVXrpdia4w3zx2UVzEaYoSVlF G0JJAQ+Txk04ZNz0GacchwUJ/mB1k6SflNsKiYIDZENiMdVZfRpBPKYTvovNwMLz Urbfrcj631xllyC5cBba6czdi4wiXRi614AfPAUCbXSXaY3q8fMVfj3adTCTTh9+ qW1q3eiE9+Np+jCvRszyq0C41/hBOkTVff7yrbSvLkJbU8z7eJctQDpb5B+z0Dnr l4r2jsvOTBRWT+yLDItx50vJLo+Cn0M7e9azNaRtYBuPr9DXbF0ix0DBswIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNiw9kTtnyfRtJPYAmRYOWjiThIFMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMkxEMlJPMmZKOUcwazlnQ1pGZzVhT0pPRWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCHzg0AwQA HzhwAwQAHzjbAwQAHzmhAwQAHznHAwQAHzpYAwQAHztEAwQA2TzHMA0GCSqGSIb3 DQEBCwUAA4IBAQAZNof1dFwfDJh7GATmOx+GwyUNSVR1BhsoVGbxNoPybw5+kLNN gIV11JBIUF/faekkY9msqcfVFK+7GSgdmxABwdhp/ed388tNamKNeQ2H+kppb9CD GeF1mz7yMkIqlbG1ias8rF+lTePSIAyk2O6uKvMr21GedwtT6VDcN6/b3OSa39Tt NdeipJ0NC54lT0JxXZLuthcf8XHAzGbv2HT6ySWvEFiMhbUhgVCNDLeQypEMujdQ CstrZ+C0cGxaFS66h2ElrdR/b725VFBlEbljCSSFLWVUICf93hS8HdpJt7FJN4bJ xded5txaDKMZZNRSb2HVm0icrxSzmJDfWsO1 -----END CERTIFICATE-----Generated at Sat Jan 10 09:45:18 2026 by rpki-client