This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2NdKfKFCe_VhSb66KTP6807NANY.roa File: 2NdKfKFCe_VhSb66KTP6807NANY.roa (raw, json) Hash identifier: 5qF7kZc9w23H4soKuxTnWFX9xA28nUk5VDftFQ1Vn2E= Subject key identifier: D8:D7:4A:7C:A1:42:7B:F5:61:49:BE:BA:29:33:FA:F3:4E:CD:00:D6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E08E3CE846E7D74071413FAFF89C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2NdKfKFCe_VhSb66KTP6807NANY.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 31.56.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e0:8e:3c:e8:46:e7:d7:40:71:41:3f:af:f8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8d74a7ca1427bf56149beba2933faf34ecd00d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:fa:2c:69:0e:e8:84:79:b5:e1:4c:57:ba: a9:d0:b3:37:10:08:32:7b:55:29:68:4c:33:5a:6c: ef:9c:43:2f:b0:e0:30:4d:42:e1:e1:a1:19:61:97: 7a:45:af:3e:3c:84:3d:1f:f6:8d:63:0f:d5:2b:7b: e5:ab:c9:55:ae:de:3b:5c:fb:3d:63:13:84:1b:1e: f1:72:6a:fb:51:b4:cf:14:ec:cc:ba:4c:a4:ad:da: dc:82:ce:3b:3a:d1:70:7d:83:a2:4a:64:ae:a7:b7: 58:ee:71:c4:d2:74:8c:ee:d8:60:1e:11:7e:4a:f0: 4b:73:bc:6e:9e:f0:dc:53:d5:cd:97:d2:53:6e:8a: bc:c7:8a:27:90:84:7f:87:82:f8:63:5f:d9:8e:27: c2:e8:23:be:e6:32:92:df:25:3c:46:06:77:62:e6: 66:26:3c:e7:be:18:6f:f1:1b:e5:cd:24:46:a3:9d: ab:26:ea:f5:65:b7:ba:b1:fd:c3:4b:e8:49:bd:ad: 0a:39:12:df:d9:2e:34:db:89:d6:10:0b:1a:ab:3a: c4:32:aa:e1:02:3e:da:22:bb:63:2a:6d:4f:99:f3: 1b:54:aa:dd:9a:12:3b:19:cc:34:49:c8:f9:d4:50: 90:23:df:c1:3d:65:d8:b9:19:98:88:69:91:74:89: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:4A:7C:A1:42:7B:F5:61:49:BE:BA:29:33:FA:F3:4E:CD:00:D6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2NdKfKFCe_VhSb66KTP6807NANY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.92.0/22 Signature Algorithm: sha256WithRSAEncryption 61:77:30:a7:51:ee:35:ad:cb:7c:4f:45:12:56:6d:26:15:88: 46:54:50:a4:c3:57:b7:ff:7e:a9:db:db:00:82:0a:73:b5:97: 17:47:4a:80:1f:8c:df:c7:08:90:e5:a1:3c:2c:7c:4a:a1:ef: 6d:87:c5:07:50:06:09:64:ec:cf:82:e1:c1:2f:43:14:76:ac: 4c:a8:b4:e9:a1:98:70:6e:24:68:7a:c1:b1:e3:af:33:8a:df: 99:0c:0f:2f:3f:b0:e8:ab:d3:35:9a:bf:f4:79:39:4a:a7:74: 20:ee:cb:d2:52:cb:06:09:30:22:40:ed:59:18:ac:f1:70:35: a7:3f:f6:6c:c2:e9:04:64:30:7b:9d:ed:e5:1d:ea:a5:9f:5a: 88:43:c7:1a:f9:10:f4:65:b8:15:38:b3:e1:10:d2:6c:bd:23: b9:74:37:29:25:1f:f6:70:ae:ee:84:47:6a:9b:61:14:91:92: 16:f5:ea:cc:25:bd:95:96:c0:fe:35:98:10:78:28:6a:7c:23: 9a:a2:b8:e1:01:98:41:56:57:fb:6f:e6:6d:93:d4:48:27:de: 69:44:52:ca:27:c5:f0:d3:8b:93:e9:15:7b:d4:94:88:e7:79: f9:c1:79:45:48:67:27:c3:4d:be:f6:77:02:63:05:95:10:f3: 34:f0:b8:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOCOPOhG59dAcUE/r/icMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGQ3NGE3Y2ExNDI3YmY1NjE0OWJlYmEyOTMzZmFmMzRlY2QwMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl/6LGkO6IR5teFMV7qp0LM3EAgy e1UpaEwzWmzvnEMvsOAwTULh4aEZYZd6Ra8+PIQ9H/aNYw/VK3vlq8lVrt47XPs9 YxOEGx7xcmr7UbTPFOzMukykrdrcgs47OtFwfYOiSmSup7dY7nHE0nSM7thgHhF+ SvBLc7xunvDcU9XNl9JTboq8x4onkIR/h4L4Y1/ZjifC6CO+5jKS3yU8RgZ3YuZm Jjznvhhv8RvlzSRGo52rJur1Zbe6sf3DS+hJva0KORLf2S4024nWEAsaqzrEMqrh Aj7aIrtjKm1PmfMbVKrdmhI7Gcw0Scj51FCQI9/BPWXYuRmYiGmRdIknHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjXSnyhQnv1YUm+uikz+vNOzQDWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMk5kS2ZLRkNlX1ZoU2I2NktUUDY4MDdOQU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzhcMA0G CSqGSIb3DQEBCwUAA4IBAQBhdzCnUe41rct8T0USVm0mFYhGVFCkw1e3/36p29sA ggpztZcXR0qAH4zfxwiQ5aE8LHxKoe9th8UHUAYJZOzPguHBL0MUdqxMqLTpoZhw biRoesGx468zit+ZDA8vP7Doq9M1mr/0eTlKp3Qg7svSUssGCTAiQO1ZGKzxcDWn P/ZswukEZDB7ne3lHeqln1qIQ8ca+RD0ZbgVOLPhENJsvSO5dDcpJR/2cK7uhEdq m2EUkZIW9erMJb2VlsD+NZgQeChqfCOaorjhAZhBVlf7b+Ztk9RIJ95pRFLKJ8Xw 04uT6RV71JSI53n5wXlFSGcnw02+9ncCYwWVEPM08LiJ -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:07 2026 by rpki-client