This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3mpuuiJju0e0NMOHrguopQFcw8I.roa File: 3mpuuiJju0e0NMOHrguopQFcw8I.roa (raw, json) Hash identifier: gVkTW/13d7p0Gam4/vJm1ZZspFaFSPKz1qiNs0Q+XMk= Subject key identifier: DE:6A:6E:BA:22:63:BB:47:B4:34:C3:87:AE:0B:A8:A5:01:5C:C3:C2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7ACE9A207CC08AF28650C3EF7A29AA65 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3mpuuiJju0e0NMOHrguopQFcw8I.roa Signing time: Thu 01 Jan 2026 18:25:18 +0000 ROA not before: Thu 01 Jan 2026 18:25:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 31.57.191.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:ce:9a:20:7c:c0:8a:f2:86:50:c3:ef:7a:29:aa:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 1 18:25:18 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de6a6eba2263bb47b434c387ae0ba8a5015cc3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:16:e7:e6:ad:96:20:a6:d0:5e:f8:48:ea: 0a:e1:15:f4:88:11:b9:89:4e:1b:5b:00:5a:a9:7f: 1b:3a:37:48:89:ac:11:72:53:18:16:63:33:13:62: 40:91:a1:ce:f8:5a:3a:54:64:7d:59:5e:e7:d5:45: 7f:f1:1d:29:02:16:16:29:b9:80:00:55:16:79:4b: 61:e3:89:1d:fe:98:25:6c:da:5e:30:1a:9f:38:f0: 89:1d:08:5e:ca:79:c5:2f:7a:0f:e6:83:0d:35:b0: 2b:be:1a:80:8c:d9:05:21:a2:dc:81:f5:3e:68:26: f8:ea:1c:ce:98:22:9a:a6:50:19:1c:8f:4f:43:bf: 3a:44:71:d4:68:28:f1:8d:7b:38:42:5c:d0:37:15: 28:13:7d:22:1a:12:12:13:2f:4d:fc:c2:15:1f:13: a5:e0:43:94:41:b4:70:fc:e2:96:fe:83:4c:87:77: 30:e6:5d:6a:de:b1:cc:d1:4f:31:0b:d0:de:15:47: 92:a3:7d:ae:27:8f:94:16:17:3b:73:c0:c0:26:fe: b2:2b:16:4b:0a:67:6b:c1:2a:c0:cd:8c:f8:90:ea: 4d:61:b2:8e:e6:72:87:75:a9:78:99:f8:1a:2c:d0: ab:b4:c2:a0:52:52:ed:c8:20:67:84:a3:54:8d:08: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6A:6E:BA:22:63:BB:47:B4:34:C3:87:AE:0B:A8:A5:01:5C:C3:C2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3mpuuiJju0e0NMOHrguopQFcw8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.191.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 43:de:73:bf:b2:5c:c0:37:d2:ed:90:82:0e:5d:fa:5c:08:26: 16:60:bc:5b:7a:d5:73:2e:31:82:c1:ed:10:b0:ec:76:c5:91: c0:46:db:f2:bc:72:ea:33:cf:0f:30:36:d2:67:d4:29:c2:89: d7:21:64:49:b9:47:e8:df:b3:55:c0:cb:5a:50:a8:3f:ff:4d: 3d:4a:a0:14:e6:85:ea:e0:ad:e3:79:4b:d1:c6:b6:21:c9:05: 98:37:4c:aa:e9:1f:fd:ed:7b:cd:8d:e0:0d:c6:2d:f0:a4:e3: 84:72:ac:ee:3d:52:b5:a2:f9:18:6c:e7:00:d2:0e:7a:ce:77: af:f5:f7:9a:b1:14:f0:74:2a:5b:3b:e1:11:99:25:8e:51:55: 18:92:f3:28:e6:63:c5:1d:5b:01:20:1b:b3:3d:db:90:0e:43: 39:1e:04:8e:6b:51:84:71:d9:07:73:5d:20:47:80:52:24:60: 3b:3e:86:93:af:6c:fd:01:27:9b:77:f6:c7:56:25:18:9d:b3: 72:34:9c:2e:61:06:e5:11:6f:ed:b2:a7:15:9a:c2:98:32:6e: 86:4c:5c:5f:34:0e:b1:6c:45:c5:2c:81:66:57:4b:d1:f5:ee: a2:06:6d:0e:22:4d:00:4a:c9:d7:ed:ad:8e:6c:8d:2d:26:f7: e8:5f:98:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6zpogfMCK8oZQw+96KaplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAxMTgyNTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTZhNmViYTIyNjNiYjQ3YjQzNGMzODdhZTBiYThhNTAxNWNjM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgwW5+atliCm0F74SOoK4RX0iBG5 iU4bWwBaqX8bOjdIiawRclMYFmMzE2JAkaHO+Fo6VGR9WV7n1UV/8R0pAhYWKbmA AFUWeUth44kd/pglbNpeMBqfOPCJHQheynnFL3oP5oMNNbArvhqAjNkFIaLcgfU+ aCb46hzOmCKaplAZHI9PQ786RHHUaCjxjXs4QlzQNxUoE30iGhISEy9N/MIVHxOl 4EOUQbRw/OKW/oNMh3cw5l1q3rHM0U8xC9DeFUeSo32uJ4+UFhc7c8DAJv6yKxZL CmdrwSrAzYz4kOpNYbKO5nKHdal4mfgaLNCrtMKgUlLtyCBnhKNUjQiibwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN5qbroiY7tHtDTDh64LqKUBXMPCMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvM21wdXVpSmp1MGUwTk1PSHJndW9wUUZjdzhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzm/AwQA HzrnMA0GCSqGSIb3DQEBCwUAA4IBAQBD3nO/slzAN9LtkIIOXfpcCCYWYLxbetVz LjGCwe0QsOx2xZHARtvyvHLqM88PMDbSZ9QpwonXIWRJuUfo37NVwMtaUKg//009 SqAU5oXq4K3jeUvRxrYhyQWYN0yq6R/97XvNjeANxi3wpOOEcqzuPVK1ovkYbOcA 0g56znev9feasRTwdCpbO+ERmSWOUVUYkvMo5mPFHVsBIBuzPduQDkM5HgSOa1GE cdkHc10gR4BSJGA7PoaTr2z9ASebd/bHViUYnbNyNJwuYQblEW/tsqcVmsKYMm6G TFxfNA6xbEXFLIFmV0vR9e6iBm0OIk0ASsnX7a2ObI0tJvfoX5jr -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:43 2026 by rpki-client