This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3-MlnMgGUiyxUL9XXaO--_kHhYQ.roa File: 3-MlnMgGUiyxUL9XXaO--_kHhYQ.roa (raw, json) Hash identifier: DgE4diBMyAnwPo99lC+r2dcsKypUh5Zxw7GgSF9HR5Y= Subject key identifier: DF:E3:25:9C:C8:06:52:2C:B1:50:BF:57:5D:A3:BE:FB:F9:07:85:84 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C50192BBAB13C5336DEE24E89E37 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3-MlnMgGUiyxUL9XXaO--_kHhYQ.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214879 IP address blocks: 31.57.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c5:01:92:bb:ab:13:c5:33:6d:ee:24:e8:9e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfe3259cc806522cb150bf575da3befbf9078584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:ea:8d:8d:b7:f9:6f:5e:d4:5a:b0:db:ae: 25:9a:ab:93:ed:9e:09:99:24:8c:39:40:75:b1:dc: dd:bc:a4:b6:4b:e1:f9:ad:63:cc:0c:89:a5:71:c0: d6:eb:94:f2:3f:94:16:7b:87:0c:f8:26:0f:b6:00: 78:2c:dc:b7:e0:f2:99:b1:d8:1c:54:d6:bd:b7:28: d3:50:4d:78:13:57:10:66:9d:00:7e:44:1c:c4:ce: e7:4c:ce:5a:37:fd:b1:de:5f:1a:19:84:ea:f1:02: 87:17:4d:93:f1:c7:3d:13:44:b3:c2:07:30:3d:52: ad:52:54:05:28:d2:23:15:bf:46:a0:79:58:1c:6b: 4c:78:ad:cf:fc:15:e7:a2:47:a8:bf:2c:4a:34:be: f6:72:55:f9:94:9f:27:e2:aa:ce:6e:61:2f:df:56: 1d:29:75:21:3a:e3:ce:ed:10:1f:b2:5a:76:90:67: 9b:96:8f:a3:c2:b0:4e:d9:4c:22:6e:7c:b8:22:78: 59:c4:2d:76:af:82:30:6a:4d:00:fe:f8:9f:06:65: 11:c7:5d:c4:eb:27:97:5a:c1:ef:e4:3c:ca:00:11: da:89:49:59:ac:cd:0b:26:54:52:8c:93:ec:d4:9b: 61:9b:09:c0:0b:32:50:e2:5c:64:79:9e:03:a4:1b: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:25:9C:C8:06:52:2C:B1:50:BF:57:5D:A3:BE:FB:F9:07:85:84 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3-MlnMgGUiyxUL9XXaO--_kHhYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.128.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:0a:03:de:c3:2e:85:40:9f:f3:24:69:d3:2d:a8:a7:87:49: 9a:e8:7e:c2:82:aa:f8:f2:a0:1a:fd:23:02:ed:9e:14:99:c6: 62:25:0d:85:96:eb:44:e0:eb:36:4f:d2:17:28:94:f9:5b:bc: a1:13:0d:9d:16:05:24:26:d8:3f:d8:d5:39:e2:c3:ac:d0:c5: f3:16:fe:31:80:95:0b:55:e8:5b:d2:22:6f:93:7f:8d:e8:f6: 53:3c:5e:16:c2:bb:16:61:45:79:78:9b:d7:ff:e5:8f:b9:75: d0:f1:a1:1d:53:f3:07:b2:e6:b3:ca:de:a2:ee:b6:15:52:94: cf:d6:7b:28:11:a5:62:34:25:4a:05:3c:b3:a7:a5:e3:d7:3d: 97:58:39:53:be:54:52:ac:83:7c:37:07:30:17:05:64:a9:03: 89:2a:06:13:c2:8d:ea:05:a1:d9:ee:c4:bf:53:1f:e9:ec:5f: 0c:5a:90:8e:e8:9e:22:1b:aa:d4:57:3b:8f:c6:ba:51:d4:ae: 9d:73:2d:29:80:df:33:21:d3:2b:6e:ab:9b:75:c2:bd:7e:e2: 0f:b6:b1:2d:e2:ca:58:67:3c:3c:0d:a6:ea:8d:bb:f2:df:67: 22:b4:53:47:72:ad:f8:29:ef:9a:22:7f:bd:12:a2:b7:90:1f: 49:5d:ee:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMUBkrurE8Uzbe4k6J43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmUzMjU5Y2M4MDY1MjJjYjE1MGJmNTc1ZGEzYmVmYmY5MDc4NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7PqjY23+W9e1Fqw264lmquT7Z4J mSSMOUB1sdzdvKS2S+H5rWPMDImlccDW65TyP5QWe4cM+CYPtgB4LNy34PKZsdgc VNa9tyjTUE14E1cQZp0AfkQcxM7nTM5aN/2x3l8aGYTq8QKHF02T8cc9E0Szwgcw PVKtUlQFKNIjFb9GoHlYHGtMeK3P/BXnokeovyxKNL72clX5lJ8n4qrObmEv31Yd KXUhOuPO7RAfslp2kGeblo+jwrBO2Uwibny4InhZxC12r4Iwak0A/vifBmURx13E 6yeXWsHv5DzKABHaiUlZrM0LJlRSjJPs1JthmwnACzJQ4lxkeZ4DpBtIvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/jJZzIBlIssVC/V12jvvv5B4WEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMy1NbG5NZ0dVaXl4VUw5WFhhTy0tX2tIaFlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmAMA0G CSqGSIb3DQEBCwUAA4IBAQAPCgPewy6FQJ/zJGnTLainh0ma6H7Cgqr48qAa/SMC 7Z4UmcZiJQ2FlutE4Os2T9IXKJT5W7yhEw2dFgUkJtg/2NU54sOs0MXzFv4xgJUL Vehb0iJvk3+N6PZTPF4WwrsWYUV5eJvX/+WPuXXQ8aEdU/MHsuazyt6i7rYVUpTP 1nsoEaViNCVKBTyzp6Xj1z2XWDlTvlRSrIN8NwcwFwVkqQOJKgYTwo3qBaHZ7sS/ Ux/p7F8MWpCO6J4iG6rUVzuPxrpR1K6dcy0pgN8zIdMrbqubdcK9fuIPtrEt4spY Zzw8Dabqjbvy32citFNHcq34Ke+aIn+9EqK3kB9JXe4u -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client