This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ZSq0dp82eP5hYgXxoEKJ-2mRdA.roa File: 3ZSq0dp82eP5hYgXxoEKJ-2mRdA.roa (raw, json) Hash identifier: nnLfdgDqfA8Jzy9iF9sClgXOqDAPucbqoB9qIKpGf0o= Subject key identifier: DD:94:AA:D1:DA:7C:D9:E3:F9:85:88:17:C6:81:0A:27:ED:A6:45:D0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B976DE553FC329DDFD7FEA6797CA90B82 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ZSq0dp82eP5hYgXxoEKJ-2mRdA.roa Signing time: Wed 07 Jan 2026 07:48:40 +0000 ROA not before: Wed 07 Jan 2026 07:48:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59432 IP address blocks: 31.56.77.0/24 maxlen: 24 31.56.80.0/24 maxlen: 24 31.56.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:6d:e5:53:fc:32:9d:df:d7:fe:a6:79:7c:a9:0b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 7 07:48:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd94aad1da7cd9e3f9858817c6810a27eda645d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:51:0a:fa:c7:0e:67:00:d9:ff:15:99:4f: e0:82:e4:41:6a:d2:65:f7:37:9e:b7:e3:29:4a:04: 2d:70:f4:77:f1:42:22:d4:f2:c8:01:6f:6e:67:f7: 88:bb:56:5b:87:dc:cc:4a:02:49:0a:d9:5b:70:9e: b0:12:82:6e:11:68:b2:b4:8e:0a:cf:65:7e:f9:eb: 20:32:24:eb:e7:e0:c4:ed:8e:cb:95:67:75:a5:0f: d6:9c:31:4e:2b:cf:9d:78:f3:f5:59:ea:a7:72:d3: c1:e2:dd:04:94:43:ba:31:9a:75:c2:7e:ef:1f:9d: 5b:cc:89:0f:4b:a2:46:60:ab:4c:61:3d:fc:14:54: 57:ff:3c:72:28:1b:f7:6c:bf:bd:6c:88:2c:30:62: 4f:57:b4:a8:74:28:30:d3:c0:a4:ba:9f:36:41:e3: 90:20:e6:45:96:02:ec:ec:3b:8e:23:dc:29:77:04: ed:a9:cf:4a:2b:5c:68:f2:86:b6:5d:ce:bd:9e:66: e2:2c:fa:a2:e2:de:c7:98:d5:da:21:c6:9e:83:ba: 85:60:24:5b:60:22:ce:ac:02:b7:0f:56:40:59:45: 06:1f:67:e6:d2:95:7e:e5:1c:db:79:6f:c3:5f:c5: 59:8e:44:c2:58:89:01:94:83:96:ee:80:df:62:25: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:94:AA:D1:DA:7C:D9:E3:F9:85:88:17:C6:81:0A:27:ED:A6:45:D0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3ZSq0dp82eP5hYgXxoEKJ-2mRdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.77.0/24 31.56.80.0/24 31.56.82.0/24 Signature Algorithm: sha256WithRSAEncryption 33:73:b4:c5:13:01:01:14:bc:9b:c4:e8:4b:fe:20:c7:d2:29: b3:6f:8c:2e:94:71:aa:3a:96:fa:69:71:8a:29:7a:58:d3:85: b8:0c:32:e2:eb:2c:02:c8:4d:23:25:35:8c:74:b2:bf:05:a1: b9:d7:a3:81:cb:4d:38:47:a6:2c:4f:5d:c1:5b:06:c9:28:24: 91:3c:6b:5a:2b:22:d9:ff:9d:68:a8:b8:82:33:ea:c2:fc:23: 6f:a5:28:e2:eb:47:87:74:92:33:86:9b:da:c1:52:47:1a:9f: 49:5e:39:20:ec:a0:56:2d:c9:55:04:e7:61:d5:14:f8:9c:4d: 12:22:35:a9:3a:0d:d4:76:80:4e:42:75:11:26:af:dc:70:44: 04:60:d8:47:30:f9:91:c6:64:5a:7f:1c:df:fd:fc:5a:d6:cb: 45:b4:48:3b:5b:14:c2:ad:86:3b:b4:06:eb:1c:b6:24:f1:28: 07:1e:a5:ae:1d:95:70:b8:cf:50:8e:42:ab:02:84:69:f4:48: f6:1e:21:2f:38:57:2c:18:ac:72:72:ac:5e:19:ed:32:73:3e: 01:20:ad:c2:e3:9e:3c:42:78:f8:42:07:ef:fc:33:ec:7c:84: 0d:36:c4:2e:ca:db:75:59:18:e8:a3:6b:1c:a6:bc:02:e6:6e: c5:ad:11:52 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuXbeVT/DKd39f+pnl8qQuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA3MDc0ODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDk0YWFkMWRhN2NkOWUzZjk4NTg4MTdjNjgxMGEyN2VkYTY0NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsBRCvrHDmcA2f8VmU/gguRBatJl 9zeet+MpSgQtcPR38UIi1PLIAW9uZ/eIu1Zbh9zMSgJJCtlbcJ6wEoJuEWiytI4K z2V++esgMiTr5+DE7Y7LlWd1pQ/WnDFOK8+dePP1WeqnctPB4t0ElEO6MZp1wn7v H51bzIkPS6JGYKtMYT38FFRX/zxyKBv3bL+9bIgsMGJPV7SodCgw08Ckup82QeOQ IOZFlgLs7DuOI9wpdwTtqc9KK1xo8oa2Xc69nmbiLPqi4t7HmNXaIcaeg7qFYCRb YCLOrAK3D1ZAWUUGH2fm0pV+5RzbeW/DX8VZjkTCWIkBlIOW7oDfYiV2YQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN2UqtHafNnj+YWIF8aBCiftpkXQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvM1pTcTBkcDgyZVA1aFlnWHhvRUtKLTJtUmRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhNAwQA HzhQAwQAHzhSMA0GCSqGSIb3DQEBCwUAA4IBAQAzc7TFEwEBFLybxOhL/iDH0imz b4wulHGqOpb6aXGKKXpY04W4DDLi6ywCyE0jJTWMdLK/BaG516OBy004R6YsT13B WwbJKCSRPGtaKyLZ/51oqLiCM+rC/CNvpSji60eHdJIzhpvawVJHGp9JXjkg7KBW LclVBOdh1RT4nE0SIjWpOg3UdoBOQnURJq/ccEQEYNhHMPmRxmRafxzf/fxa1stF tEg7WxTCrYY7tAbrHLYk8SgHHqWuHZVwuM9QjkKrAoRp9Ej2HiEvOFcsGKxycqxe Ge0ycz4BIK3C4548Qnj4Qgfv/DPsfIQNNsQuytt1WRjoo2scprwC5m7FrRFS -----END CERTIFICATE-----Generated at Sat Jan 10 09:45:17 2026 by rpki-client