This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3u2VDoIwVSUfTl_vZ5oj5Utsj6Q.roa File: 3u2VDoIwVSUfTl_vZ5oj5Utsj6Q.roa (raw, json) Hash identifier: jO5NsEcugZZxyDM0q7QhY2vulH2YYmu1yfcxfM1jtZQ= Subject key identifier: DE:ED:95:0E:82:30:55:25:1F:4E:5F:EF:67:9A:23:E5:4B:6C:8F:A4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8480F4E752DF3A03DEE5543886D67F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3u2VDoIwVSUfTl_vZ5oj5Utsj6Q.roa Signing time: Fri 02 Jan 2026 16:22:28 +0000 ROA not before: Fri 02 Jan 2026 16:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138415 IP address blocks: 31.57.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:80:f4:e7:52:df:3a:03:de:e5:54:38:86:d6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deed950e823055251f4e5fef679a23e54b6c8fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:02:82:aa:6f:72:5d:bc:4d:df:e5:4b:ba: 75:64:c2:96:1f:7d:53:e6:6a:a6:ab:f8:97:59:95: 79:2a:d0:e5:eb:9b:fb:29:5e:c0:3e:06:c4:05:34: 81:f3:52:a7:a7:0b:0c:0e:60:ad:d1:b4:94:a5:a2: 5e:82:49:66:23:3d:9f:6d:d4:36:6a:0e:9a:58:36: d4:27:0a:db:38:da:ae:bc:5b:81:c9:b0:7b:33:7f: 1c:d2:17:54:b1:eb:4d:df:59:2c:e7:ee:d8:0b:9c: e8:4c:d7:bd:1a:0a:76:0b:f9:a8:e6:62:08:9b:07: 42:48:cc:c3:e6:c2:8e:18:6c:52:25:3f:0f:53:a1: 03:a7:39:13:7e:89:76:cc:8d:9f:1d:5c:cd:f5:39: 8c:c3:89:07:c1:a4:cf:dd:b4:1f:38:08:37:e0:8d: f1:cb:33:70:11:ec:75:f1:2e:c6:33:93:a5:c9:4b: 78:db:4c:cf:a7:d9:c6:8b:90:54:bf:87:7e:bd:32: cb:31:86:54:4e:db:4b:ff:b2:da:aa:8b:3d:97:49: 15:33:b0:cf:b5:57:2c:0c:7a:77:6b:6f:83:2a:26: e7:ca:76:ad:29:9a:4e:91:76:51:d5:28:ac:f6:94: 8c:fe:d1:a2:98:f4:d8:e0:2e:ef:a4:eb:14:3c:fe: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:ED:95:0E:82:30:55:25:1F:4E:5F:EF:67:9A:23:E5:4B:6C:8F:A4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3u2VDoIwVSUfTl_vZ5oj5Utsj6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.51.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:c9:8b:ed:18:fc:2e:0b:ca:7f:b4:c6:93:95:8c:be:97:85: e3:4c:e7:18:99:d8:ce:80:ce:99:8a:e5:32:20:93:68:5c:b4: 5a:67:9c:73:20:4d:82:56:9c:a9:46:0f:bd:b2:91:22:a8:eb: 94:ae:2a:da:92:40:d0:bd:f7:bd:3d:73:38:70:df:90:69:9f: 8e:41:1a:2d:ea:cc:03:70:15:31:ad:d4:f8:e2:7e:e3:46:74: e7:eb:9b:a7:b0:e2:5f:2b:79:0e:de:10:ed:a4:0b:de:53:f4: a6:41:9b:61:a8:ac:05:95:31:9a:07:26:1c:27:c3:4d:4c:5e: b1:d2:23:61:c3:a6:7f:00:c3:53:2f:57:59:36:ae:22:05:ec: 90:44:ba:66:4f:1f:04:29:b7:df:40:42:de:8c:4a:79:7e:ef: 3d:8e:b8:8f:5e:a3:7c:a7:00:d8:0f:99:85:fd:b4:16:ee:64: 1b:47:da:77:e8:6f:c1:bb:5c:92:a6:75:98:c5:14:8e:e8:89: 6f:23:29:eb:90:24:b4:4e:06:ba:01:d1:fc:4e:b3:d9:24:35: 98:70:c5:43:b1:47:a4:56:67:c3:23:94:a7:9d:4d:09:98:e7: c3:ae:7c:df:0d:8a:0f:d0:6b:63:7e:f6:50:58:18:a7:39:d7: 41:bc:4a:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hID051LfOgPe5VQ4htZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWVkOTUwZTgyMzA1NTI1MWY0ZTVmZWY2NzlhMjNlNTRiNmM4ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdkCgqpvcl28Td/lS7p1ZMKWH31T 5mqmq/iXWZV5KtDl65v7KV7APgbEBTSB81KnpwsMDmCt0bSUpaJegklmIz2fbdQ2 ag6aWDbUJwrbONquvFuBybB7M38c0hdUsetN31ks5+7YC5zoTNe9Ggp2C/mo5mII mwdCSMzD5sKOGGxSJT8PU6EDpzkTfol2zI2fHVzN9TmMw4kHwaTP3bQfOAg34I3x yzNwEex18S7GM5OlyUt420zPp9nGi5BUv4d+vTLLMYZUTttL/7Laqos9l0kVM7DP tVcsDHp3a2+DKibnynatKZpOkXZR1Sis9pSM/tGimPTY4C7vpOsUPP7VeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7tlQ6CMFUlH05f72eaI+VLbI+kMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvM3UyVkRvSXdWU1VmVGxfdlo1b2o1VXRzajZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkzMA0G CSqGSIb3DQEBCwUAA4IBAQCLyYvtGPwuC8p/tMaTlYy+l4XjTOcYmdjOgM6ZiuUy IJNoXLRaZ5xzIE2CVpypRg+9spEiqOuUrirakkDQvfe9PXM4cN+QaZ+OQRot6swD cBUxrdT44n7jRnTn65unsOJfK3kO3hDtpAveU/SmQZthqKwFlTGaByYcJ8NNTF6x 0iNhw6Z/AMNTL1dZNq4iBeyQRLpmTx8EKbffQELejEp5fu89jriPXqN8pwDYD5mF /bQW7mQbR9p36G/Bu1ySpnWYxRSO6IlvIynrkCS0Tga6AdH8TrPZJDWYcMVDsUek VmfDI5SnnU0JmOfDrnzfDYoP0GtjfvZQWBinOddBvErB -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:06 2026 by rpki-client