This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ETpFyVkpmuuQcCNkEXB3hqAoAU.roa File: 3ETpFyVkpmuuQcCNkEXB3hqAoAU.roa (raw, json) Hash identifier: jbQgcDkXMKasYMPJIgD5V1AjHXrBxiW7XqZY3mjh6+o= Subject key identifier: DC:44:E9:17:25:64:A6:6B:AE:41:C0:8D:90:45:C1:DE:1A:80:A0:05 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DBC1EF4BC4F5424595EDF087373E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ETpFyVkpmuuQcCNkEXB3hqAoAU.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393336 IP address blocks: 31.56.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:db:c1:ef:4b:c4:f5:42:45:95:ed:f0:87:37:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc44e9172564a66bae41c08d9045c1de1a80a005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:ee:0e:b0:10:a4:94:4a:81:d1:72:f7:3d: 2d:4c:fc:91:45:88:f7:ee:3f:2f:39:e3:37:08:c2: fc:52:94:6c:d7:a9:24:be:06:dd:e1:28:73:40:6f: fc:9d:54:83:c3:a7:40:d6:e5:9b:9e:d7:eb:1f:ed: 07:83:5b:c7:53:21:0c:3c:9b:7f:59:69:59:b2:46: a9:40:b5:a1:51:7a:c8:2d:3d:2c:23:67:b3:db:aa: d3:27:4b:7b:1f:d9:1c:b2:84:bc:2d:8a:45:1b:7e: b0:90:90:4d:16:4b:5b:9a:f3:57:7f:79:fe:5e:0d: 40:97:eb:bd:71:2a:17:3b:e3:a0:39:ad:2d:3c:69: 60:80:c4:c3:43:5f:13:08:8f:93:7f:5a:75:54:51: 26:4a:cf:1d:75:7b:1f:6a:20:2b:40:73:55:22:f4: 65:99:2e:15:37:eb:f3:0d:da:fb:a0:c6:c3:88:7b: c5:16:e2:70:cb:f9:4a:33:94:05:cb:52:df:41:11: f8:05:c8:8e:1d:16:bd:9f:08:07:b8:08:84:49:df: 1c:8f:7a:04:e7:53:0e:ad:26:04:a2:9f:9c:0f:5b: 99:8a:72:47:bb:fa:e8:f5:12:e4:d7:a1:94:58:fe: 31:8b:32:15:af:78:5a:a8:10:5d:50:b9:84:cf:a3: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:44:E9:17:25:64:A6:6B:AE:41:C0:8D:90:45:C1:DE:1A:80:A0:05 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ETpFyVkpmuuQcCNkEXB3hqAoAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.69.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:0f:49:a0:dc:5e:ba:37:61:2f:52:50:ff:49:ee:0d:fd:e8: 53:2b:38:2e:17:e6:d3:98:2d:e7:67:89:8d:65:bd:08:93:df: 0f:2d:c4:fa:8c:f1:a4:35:b3:b8:0f:29:fa:54:e2:dc:2b:f3: ba:42:b5:1e:eb:15:e0:59:ac:71:fb:ff:be:ad:5c:7e:4a:92: b2:86:f1:fe:52:a7:3a:4c:fe:bf:0a:0f:03:b9:db:a5:5f:6b: dc:e5:22:49:4d:75:2d:db:21:c6:9a:3a:ca:e8:66:49:9f:5c: e4:68:07:f8:29:6e:6d:61:4c:9f:4f:b7:c8:57:82:f7:a5:94: b1:b9:0e:3b:35:8a:ba:e5:d6:a5:c8:eb:e0:47:4a:49:fa:44: c9:f4:6c:df:31:7e:87:91:ac:c7:30:67:43:b9:37:80:46:40: 26:9b:74:0d:b6:56:c6:00:db:06:5f:cf:41:a8:a8:ea:d4:70: 32:fd:ca:78:4e:90:43:c0:4e:7a:69:a4:75:7f:52:6f:7d:0a: 6c:78:fd:15:4b:8f:86:b6:5a:8d:fa:cd:ed:ee:29:ca:e2:ee: 88:48:f4:b7:42:33:15:4d:ce:b0:e0:b3:17:d1:47:88:98:4b: fe:dd:aa:e8:17:e5:06:4b:75:55:3c:77:2d:10:bc:db:95:da: 58:f0:7d:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNvB70vE9UJFle3whzc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzQ0ZTkxNzI1NjRhNjZiYWU0MWMwOGQ5MDQ1YzFkZTFhODBhMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwTuDrAQpJRKgdFy9z0tTPyRRYj3 7j8vOeM3CML8UpRs16kkvgbd4ShzQG/8nVSDw6dA1uWbntfrH+0Hg1vHUyEMPJt/ WWlZskapQLWhUXrILT0sI2ez26rTJ0t7H9kcsoS8LYpFG36wkJBNFktbmvNXf3n+ Xg1Al+u9cSoXO+OgOa0tPGlggMTDQ18TCI+Tf1p1VFEmSs8ddXsfaiArQHNVIvRl mS4VN+vzDdr7oMbDiHvFFuJwy/lKM5QFy1LfQRH4BciOHRa9nwgHuAiESd8cj3oE 51MOrSYEop+cD1uZinJHu/ro9RLk16GUWP4xizIVr3haqBBdULmEz6MU0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxE6RclZKZrrkHAjZBFwd4agKAFMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvM0VUcEZ5VmtwbXV1UWNDTmtFWEIzaHFBb0FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhFMA0G CSqGSIb3DQEBCwUAA4IBAQCdD0mg3F66N2EvUlD/Se4N/ehTKzguF+bTmC3nZ4mN Zb0Ik98PLcT6jPGkNbO4Dyn6VOLcK/O6QrUe6xXgWaxx+/++rVx+SpKyhvH+Uqc6 TP6/Cg8DudulX2vc5SJJTXUt2yHGmjrK6GZJn1zkaAf4KW5tYUyfT7fIV4L3pZSx uQ47NYq65dalyOvgR0pJ+kTJ9GzfMX6HkazHMGdDuTeARkAmm3QNtlbGANsGX89B qKjq1HAy/cp4TpBDwE56aaR1f1JvfQpseP0VS4+GtlqN+s3t7inK4u6ISPS3QjMV Tc6w4LMX0UeImEv+3aroF+UGS3VVPHctELzbldpY8H2B -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:35 2026 by rpki-client