This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/39f04M1H9aJvZBKDHa-N8O0Ia7c.roa File: 39f04M1H9aJvZBKDHa-N8O0Ia7c.roa (raw, json) Hash identifier: Me2ZT6fqGE6TPSh1p7IBxz1t6WMJxAHdHNpFte3wC3U= Subject key identifier: DF:D7:F4:E0:CD:47:F5:A2:6F:64:12:83:1D:AF:8D:F0:ED:08:6B:B7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8482C9876EEF57BF47828E86324545 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/39f04M1H9aJvZBKDHa-N8O0Ia7c.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140224 IP address blocks: 31.56.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:82:c9:87:6e:ef:57:bf:47:82:8e:86:32:45:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd7f4e0cd47f5a26f6412831daf8df0ed086bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:84:ee:61:b4:bb:f7:c8:f8:0a:2c:8f:85: af:23:1b:18:08:fc:2f:8e:19:09:a2:dc:32:7e:1e: 6d:13:18:97:68:e5:8c:ba:e5:b4:40:48:8e:eb:db: b3:0d:29:62:53:68:26:c1:2b:e3:58:27:93:66:44: 0e:20:cb:76:94:29:9d:36:dc:19:4c:4a:d5:87:14: e8:f7:fa:a5:10:38:eb:79:f1:fc:dc:89:54:3d:9c: 20:53:ec:55:0d:3a:e6:8a:95:48:8e:e9:7f:14:7c: 8d:76:3b:16:eb:84:d0:06:c6:12:be:77:0d:02:eb: 2b:6a:bd:d4:1f:99:b0:65:8f:48:b1:71:cc:fc:33: 1c:95:b4:ba:e6:fa:3b:ed:06:a0:a9:45:bb:6b:5f: 15:d5:b3:3a:61:51:d3:c6:5a:70:2e:b2:c7:eb:9e: ee:e5:1b:b8:09:e9:9d:20:d7:22:16:2c:a0:82:08: ef:d9:9b:ca:9b:bc:05:3f:82:5f:8e:93:da:7a:3a: f8:bb:13:29:d2:25:34:e9:e4:c3:3d:52:fb:d3:00: a4:64:7e:02:77:23:c7:a7:bf:db:a1:b6:40:e0:7e: 42:55:04:c0:14:43:89:e3:0e:62:4d:41:af:b2:4f: 5c:90:d9:cf:b3:3e:ab:b0:1f:1c:cd:9f:ad:7a:0a: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D7:F4:E0:CD:47:F5:A2:6F:64:12:83:1D:AF:8D:F0:ED:08:6B:B7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/39f04M1H9aJvZBKDHa-N8O0Ia7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.37.0/24 Signature Algorithm: sha256WithRSAEncryption c2:17:f9:58:28:b2:6d:c7:03:33:7d:26:8c:7e:91:d4:fc:26: 6b:92:a3:fd:6c:7c:47:14:fc:68:6e:84:bf:e4:a6:01:21:d1: 6a:ef:c5:26:84:bd:05:ab:bd:91:41:67:33:a3:14:59:53:a6: 0a:68:07:5e:2f:49:1b:cb:dd:b5:13:3d:fe:d6:c9:7c:60:4e: fa:e8:04:8e:8a:85:dc:93:20:aa:e1:6a:ff:dd:a2:a2:30:ca: be:f0:1b:6f:f9:5b:e8:84:e9:18:93:c6:0a:4a:95:56:2d:b7: 1b:9e:43:9a:65:c3:4f:ff:21:19:f9:84:b9:8b:83:e1:6b:f3: 1b:85:bc:3b:b7:f0:b2:5a:53:5e:df:bc:d0:9a:fe:db:1c:4c: 36:8e:74:ee:5c:a5:37:35:98:76:5e:ad:66:cf:76:0c:f8:9b: ce:87:60:ef:6b:72:73:c3:30:bf:8c:83:31:1e:ba:52:71:44: 36:5c:c0:51:53:6f:74:db:c6:de:16:23:6c:c6:5e:5b:f1:fe: fd:7b:cd:f0:1e:0c:c3:2e:f2:7e:9a:2c:4d:8a:7f:1f:a1:fa: 95:ec:18:ae:3f:3b:3e:6b:78:20:92:64:ff:dc:40:3f:15:e6: a5:cf:5e:fd:b4:fc:ed:b2:99:1c:b9:0b:da:d9:bb:52:b0:5d: a6:9c:58:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hILJh27vV79Hgo6GMkVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQ3ZjRlMGNkNDdmNWEyNmY2NDEyODMxZGFmOGRmMGVkMDg2YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+KE7mG0u/fI+Aosj4WvIxsYCPwv jhkJotwyfh5tExiXaOWMuuW0QEiO69uzDSliU2gmwSvjWCeTZkQOIMt2lCmdNtwZ TErVhxTo9/qlEDjrefH83IlUPZwgU+xVDTrmipVIjul/FHyNdjsW64TQBsYSvncN Ausrar3UH5mwZY9IsXHM/DMclbS65vo77QagqUW7a18V1bM6YVHTxlpwLrLH657u 5Ru4CemdINciFiygggjv2ZvKm7wFP4JfjpPaejr4uxMp0iU06eTDPVL70wCkZH4C dyPHp7/bobZA4H5CVQTAFEOJ4w5iTUGvsk9ckNnPsz6rsB8czZ+tegqEzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/X9ODNR/Wib2QSgx2vjfDtCGu3MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMzlmMDRNMUg5YUp2WkJLREhhLU44TzBJYTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzglMA0G CSqGSIb3DQEBCwUAA4IBAQDCF/lYKLJtxwMzfSaMfpHU/CZrkqP9bHxHFPxoboS/ 5KYBIdFq78UmhL0Fq72RQWczoxRZU6YKaAdeL0kby921Ez3+1sl8YE766ASOioXc kyCq4Wr/3aKiMMq+8Btv+VvohOkYk8YKSpVWLbcbnkOaZcNP/yEZ+YS5i4Pha/Mb hbw7t/CyWlNe37zQmv7bHEw2jnTuXKU3NZh2Xq1mz3YM+JvOh2Dva3JzwzC/jIMx HrpScUQ2XMBRU29028beFiNsxl5b8f79e83wHgzDLvJ+mixNin8fofqV7BiuPzs+ a3ggkmT/3EA/Fealz179tPztspkcuQva2btSsF2mnFhk -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:10 2026 by rpki-client