This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3hhk72UVHi6PzATIM-P0Ztz7pws.roa File: 3hhk72UVHi6PzATIM-P0Ztz7pws.roa (raw, json) Hash identifier: vJrZ7wzRUvNGF2xEJSHx7nR6PDN3rZwiqRfa1Mm3/gM= Subject key identifier: DE:18:64:EF:65:15:1E:2E:8F:CC:04:C8:33:E3:F4:66:DC:FB:A7:0B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BCB4B7A8053A3F2130B0A35D41BDEE790 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3hhk72UVHi6PzATIM-P0Ztz7pws.roa Signing time: Sat 17 Jan 2026 09:31:19 +0000 ROA not before: Sat 17 Jan 2026 09:31:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.57.190.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 31.58.138.0/24 maxlen: 24 31.59.59.0/24 maxlen: 24 31.59.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:4b:7a:80:53:a3:f2:13:0b:0a:35:d4:1b:de:e7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 17 09:31:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de1864ef65151e2e8fcc04c833e3f466dcfba70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:76:0c:be:2f:1a:82:b5:e7:34:24:2a:66: 75:5d:54:57:72:ef:f5:55:1d:82:e5:bd:7b:b5:f3: d8:16:84:dc:a0:45:3d:6a:cc:9b:04:98:04:d5:e2: 84:20:7a:ea:4f:c2:34:8d:8d:f9:58:49:46:e8:eb: eb:2d:d6:32:50:5b:97:e8:eb:48:ab:a7:04:ea:77: f0:aa:50:78:75:67:e7:de:41:cc:45:5a:8a:d2:a3: 2a:52:6c:bc:03:b3:81:59:b8:09:46:8c:12:89:0c: 47:14:c7:5e:5b:d7:ba:ef:90:87:d9:57:bc:51:ba: a3:4c:9b:75:f7:61:b3:ab:d0:5f:26:e7:77:c3:5f: a6:22:98:c9:72:0e:98:1b:3c:03:c6:2a:0b:cd:36: 9c:41:f9:6e:43:e3:3a:be:c8:6b:cf:50:06:95:21: 66:82:2d:b8:f7:3d:5e:93:f6:47:57:66:20:9e:be: c4:67:56:c8:8d:07:c1:62:14:a6:89:1b:5f:f2:52: 1f:6b:7e:ff:79:a7:f0:94:2b:6c:66:5c:1b:62:7b: 3f:37:4c:d3:21:a6:4c:38:ee:2c:e8:08:e2:1c:fc: 85:19:c4:ac:d0:fb:bf:1b:02:0d:8b:87:46:1d:f5: b5:34:c5:1e:45:bd:ea:2f:4d:a2:d4:d3:c5:1b:ee: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:18:64:EF:65:15:1E:2E:8F:CC:04:C8:33:E3:F4:66:DC:FB:A7:0B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3hhk72UVHi6PzATIM-P0Ztz7pws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.57.190.0/23 31.57.221.0/24 31.58.131.0/24 31.58.138.0/24 31.59.59.0/24 31.59.208.0/24 Signature Algorithm: sha256WithRSAEncryption 85:3e:87:03:f7:da:82:d9:08:7b:13:4c:56:11:d4:6b:38:b9: c3:3b:52:c1:81:7c:89:91:40:0f:96:7e:74:51:66:6e:95:fb: f4:f0:b8:b4:a6:31:ba:ad:9a:06:63:23:58:4c:53:74:7d:1e: e9:27:db:ce:23:53:41:ee:95:d9:c2:9b:09:4d:e4:01:11:37: ea:bd:d5:82:46:1d:a1:f0:f2:3e:6c:eb:0b:90:9a:c7:75:63: f5:06:87:c2:64:2d:01:af:6e:d3:01:c0:1b:29:0d:8d:eb:6c: e1:42:ee:95:02:d8:13:e8:e5:5d:11:29:0c:4a:52:85:84:2e: 60:27:ee:28:a7:ba:a2:8d:af:d2:50:17:24:fa:a6:23:c9:20: f5:22:cb:83:0a:61:e4:1c:9c:b7:15:08:d4:10:88:8b:84:0f: 6f:29:55:09:58:cf:cc:12:f4:e0:2a:73:03:0a:3d:3e:bc:a6: 13:af:d3:bb:92:8a:92:75:5c:ec:c9:4a:a7:19:20:97:b0:1e: a4:2a:fd:de:b2:84:0f:97:df:1f:26:31:f2:eb:d6:20:9e:9e: 6a:26:3c:38:43:aa:70:eb:c3:39:3b:80:8b:ca:ba:42:c0:9a: 1a:36:6d:c6:4f:2a:8f:6f:c0:3f:f2:39:2d:62:b5:a5:9a:14: 5c:6e:70:f0 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZvLS3qAU6PyEwsKNdQb3ueQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE3MDkzMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTE4NjRlZjY1MTUxZTJlOGZjYzA0YzgzM2UzZjQ2NmRjZmJhNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCt2DL4vGoK15zQkKmZ1XVRXcu/1 VR2C5b17tfPYFoTcoEU9asybBJgE1eKEIHrqT8I0jY35WElG6OvrLdYyUFuX6OtI q6cE6nfwqlB4dWfn3kHMRVqK0qMqUmy8A7OBWbgJRowSiQxHFMdeW9e675CH2Ve8 UbqjTJt192Gzq9BfJud3w1+mIpjJcg6YGzwDxioLzTacQfluQ+M6vshrz1AGlSFm gi249z1ek/ZHV2Ygnr7EZ1bIjQfBYhSmiRtf8lIfa37/eafwlCtsZlwbYns/N0zT IaZMOO4s6AjiHPyFGcSs0Pu/GwINi4dGHfW1NMUeRb3qL02i1NPFG+439QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFN4YZO9lFR4uj8wEyDPj9Gbc+6cLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvM2hoazcyVVZIaTZQekFUSU0tUDBadHo3cHdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHzh9AwQB Hzm+AwQAHzndAwQAHzqDAwQAHzqKAwQAHzs7AwQAHzvQMA0GCSqGSIb3DQEBCwUA A4IBAQCFPocD99qC2Qh7E0xWEdRrOLnDO1LBgXyJkUAPln50UWZulfv08Li0pjG6 rZoGYyNYTFN0fR7pJ9vOI1NB7pXZwpsJTeQBETfqvdWCRh2h8PI+bOsLkJrHdWP1 BofCZC0Br27TAcAbKQ2N62zhQu6VAtgT6OVdESkMSlKFhC5gJ+4op7qija/SUBck +qYjySD1IsuDCmHkHJy3FQjUEIiLhA9vKVUJWM/MEvTgKnMDCj0+vKYTr9O7koqS dVzsyUqnGSCXsB6kKv3esoQPl98fJjHy69Ygnp5qJjw4Q6pw68M5O4CLyrpCwJoa Nm3GTyqPb8A/8jktYrWlmhRcbnDw -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:34 2026 by rpki-client