This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2P5_ubdjltVZC0DzSyqfb5IUTVI.roa File: 2P5_ubdjltVZC0DzSyqfb5IUTVI.roa (raw, json) Hash identifier: 8ego68hezxKiZsINbxC9WgZmG2PCDwtWEF1HzHwO9vY= Subject key identifier: D8:FE:7F:B9:B7:63:96:D5:59:0B:40:F3:4B:2A:9F:6F:92:14:4D:52 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A87DD7FE451D54D5217DF5A46E55 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2P5_ubdjltVZC0DzSyqfb5IUTVI.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211215 IP address blocks: 31.58.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a8:7d:d7:fe:45:1d:54:d5:21:7d:f5:a4:6e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8fe7fb9b76396d5590b40f34b2a9f6f92144d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:37:52:86:4c:75:16:c1:58:a1:c5:c0:19:e7: 53:2f:ca:0b:54:1c:a1:16:1d:f9:2b:db:fb:20:0f: ec:0a:1b:40:19:84:16:4f:9f:45:92:9a:51:17:69: fb:8a:e4:9d:e3:ab:9d:69:35:b8:b7:61:65:f5:fa: 57:0e:ae:4a:d4:c2:70:ad:ef:83:ab:1d:90:0c:76: 69:95:29:7a:79:0c:68:93:92:07:e0:0f:7f:00:ed: ba:9d:10:86:1f:73:84:cd:83:a6:48:08:fa:e5:13: 05:6a:fa:8a:f5:9e:fc:96:23:02:ee:4c:99:5b:18: 49:0e:24:95:0b:87:d7:9a:61:be:ae:64:6e:33:d0: 37:cf:3f:52:a3:2d:c9:6d:a1:83:b6:7f:9c:af:3e: 92:75:a6:0e:41:08:b3:5d:5c:03:25:83:3e:3f:51: 5e:2c:1f:f1:d6:62:0e:35:6a:ab:7f:d1:f5:30:50: 29:e9:4b:8f:c2:1e:96:9a:8a:f7:a9:27:5d:7c:e2: ac:67:75:9b:e7:9a:92:51:43:bb:ee:39:51:ac:d4: 68:ea:0f:2f:a3:28:af:dd:ad:52:92:dd:6b:77:4b: a9:70:b6:a2:14:d5:4f:88:ab:8f:d2:40:32:7c:91: 6f:eb:63:15:ab:a5:c0:08:b9:54:84:f1:47:5e:14: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FE:7F:B9:B7:63:96:D5:59:0B:40:F3:4B:2A:9F:6F:92:14:4D:52 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2P5_ubdjltVZC0DzSyqfb5IUTVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:de:00:9e:3a:b7:0c:15:81:d1:84:3e:c6:55:a8:11:e9:0c: 70:b3:90:87:d3:b9:e4:28:43:bc:31:a0:5d:2d:8f:a6:06:4e: f9:81:28:a3:19:e8:b4:9b:ff:c2:fb:4a:38:fb:d6:80:09:7a: da:12:3d:0d:b5:ea:34:40:e0:b4:47:81:e8:1b:24:22:63:9b: 07:db:0d:71:5d:82:38:10:b4:cc:ca:09:0f:57:b8:c2:1b:4b: 69:ec:9c:82:52:bc:97:b2:86:7c:5d:c5:84:ba:0c:1c:01:93: 99:ad:d8:d4:d6:4a:1a:98:cd:f1:0a:1c:9d:47:d5:46:15:6e: 11:a6:e6:0a:58:3d:c0:f2:db:b8:07:99:5c:9d:17:c6:46:1b: 50:41:67:52:4b:a4:9d:d5:9d:d9:08:0e:8c:05:1e:a3:84:6a: 4d:38:fa:c5:12:9c:89:a6:b1:b5:a8:ff:7a:41:b5:8e:c8:9b: bc:d0:0d:cb:f0:5e:a1:f0:b9:d6:64:c2:9f:3e:a9:91:b2:15: a1:96:0a:32:a2:a0:22:4b:09:e2:3a:0d:a0:8e:8c:3e:e0:84: 3e:db:f4:8b:03:7c:7f:ac:a0:4f:b7:17:a0:65:79:78:e8:2b: 3d:a0:b7:76:95:b2:fa:c9:70:8f:6e:f8:2e:87:4b:62:20:4f: 76:2d:4f:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKh91/5FHVTVIX31pG5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGZlN2ZiOWI3NjM5NmQ1NTkwYjQwZjM0YjJhOWY2ZjkyMTQ0ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljdShkx1FsFYocXAGedTL8oLVByh Fh35K9v7IA/sChtAGYQWT59FkppRF2n7iuSd46udaTW4t2Fl9fpXDq5K1MJwre+D qx2QDHZplSl6eQxok5IH4A9/AO26nRCGH3OEzYOmSAj65RMFavqK9Z78liMC7kyZ WxhJDiSVC4fXmmG+rmRuM9A3zz9Soy3JbaGDtn+crz6SdaYOQQizXVwDJYM+P1Fe LB/x1mIONWqrf9H1MFAp6UuPwh6Wmor3qSddfOKsZ3Wb55qSUUO77jlRrNRo6g8v oyiv3a1Skt1rd0upcLaiFNVPiKuP0kAyfJFv62MVq6XACLlUhPFHXhQeKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNj+f7m3Y5bVWQtA80sqn2+SFE1SMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMlA1X3ViZGpsdFZaQzBEelN5cWZiNUlVVFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzr4MA0G CSqGSIb3DQEBCwUAA4IBAQAs3gCeOrcMFYHRhD7GVagR6Qxws5CH07nkKEO8MaBd LY+mBk75gSijGei0m//C+0o4+9aACXraEj0Nteo0QOC0R4HoGyQiY5sH2w1xXYI4 ELTMygkPV7jCG0tp7JyCUryXsoZ8XcWEugwcAZOZrdjU1koamM3xChydR9VGFW4R puYKWD3A8tu4B5lcnRfGRhtQQWdSS6Sd1Z3ZCA6MBR6jhGpNOPrFEpyJprG1qP96 QbWOyJu80A3L8F6h8LnWZMKfPqmRshWhlgoyoqAiSwniOg2gjow+4IQ+2/SLA3x/ rKBPtxegZXl46Cs9oLd2lbL6yXCPbvguh0tiIE92LU/O -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:08 2026 by rpki-client