This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3vVhk0cPrsuRmlNfxaoqP70LUGg.roa File: 3vVhk0cPrsuRmlNfxaoqP70LUGg.roa (raw, json) Hash identifier: qnCBE7eszM6m+1UhraSgk35AOYwWlFeQ2h4HAw95vOs= Subject key identifier: DE:F5:61:93:47:0F:AE:CB:91:9A:53:5F:C5:AA:2A:3F:BD:0B:50:68 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BC35CD87FE8DA715E52F89109D058A6A4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3vVhk0cPrsuRmlNfxaoqP70LUGg.roa Signing time: Thu 15 Jan 2026 20:33:20 +0000 ROA not before: Thu 15 Jan 2026 20:33:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57866 IP address blocks: 31.58.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 20:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:5c:d8:7f:e8:da:71:5e:52:f8:91:09:d0:58:a6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 15 20:33:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=def56193470faecb919a535fc5aa2a3fbd0b5068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:ce:dc:e8:b8:af:77:df:d8:2b:06:10:eb: 3d:4c:37:df:01:57:fc:9f:65:ce:59:91:b3:74:90: 16:82:e4:5b:d0:c2:76:46:42:80:ee:c4:29:0e:4d: 51:f7:f4:41:a9:62:16:c9:27:eb:25:8a:87:58:72: 45:aa:11:cc:51:6f:89:79:ee:67:6b:1e:d1:5a:26: a3:a2:82:01:4f:59:d2:ee:20:04:b2:ef:49:fd:64: 01:f1:e7:35:c8:35:6d:75:70:7f:90:5a:76:d9:2f: 04:87:22:8b:3b:30:43:44:61:ae:87:c1:c3:52:b9: 00:23:4c:2f:a2:2e:01:f7:b5:90:8b:f2:86:2b:0c: bf:16:3e:10:f2:a6:0c:0f:22:a7:0d:a0:e3:47:35: 3c:6c:f9:92:b3:a5:2d:ef:92:8b:aa:bd:35:84:b8: 77:82:ea:cf:53:0d:0a:9d:ce:a1:e1:f4:fe:cc:5a: be:86:da:f5:d1:f8:75:b0:9e:9e:6b:89:e9:ab:ea: 27:a4:ef:7e:fa:e5:07:39:d8:20:74:91:62:05:d1: 27:da:57:82:6f:02:1d:cf:0a:58:69:95:d7:85:28: 0f:c9:9b:96:39:bd:8a:d3:f9:47:08:0b:35:45:47: b6:2a:3a:e4:99:6d:ea:07:8c:f4:59:ec:9c:1e:af: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F5:61:93:47:0F:AE:CB:91:9A:53:5F:C5:AA:2A:3F:BD:0B:50:68 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3vVhk0cPrsuRmlNfxaoqP70LUGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.33.0/24 Signature Algorithm: sha256WithRSAEncryption 32:cf:b9:10:bb:c7:f4:c2:9b:0f:4b:c3:0c:ad:f1:d7:53:67: 6b:92:71:bc:b7:9c:65:4d:31:87:2c:6d:dc:62:e7:c5:be:9a: c7:b0:a7:a4:b0:60:af:8e:05:1f:ba:da:96:b5:26:ad:66:c9: 72:cf:56:d3:88:c4:c3:ca:83:42:84:8b:6f:6a:03:1c:c9:b5: 16:bf:3e:c9:6c:84:a7:f2:9e:9d:67:30:48:97:86:34:a7:5c: c9:9b:0c:a8:f0:f0:9b:ae:ed:c3:24:72:41:70:ad:f0:d6:02: 3f:45:ae:bd:b8:8e:50:5d:08:79:30:9b:35:42:47:3f:7e:ba: 37:cb:38:9e:d7:c4:db:37:b7:44:a0:57:98:16:27:d5:8f:e9: 0f:24:68:85:de:f4:e4:2e:16:37:34:f8:f5:90:90:06:cb:a8: 4e:cd:7b:4c:c3:57:79:21:30:7c:a1:f5:37:b1:16:97:84:4b: 63:24:6c:4b:fd:e4:c0:d0:1b:61:b3:02:fb:97:1a:46:e7:8c: b8:55:17:90:3b:2c:5e:6f:be:2c:0b:61:62:2d:e4:9b:de:42: d2:96:54:d9:78:8b:52:53:75:cd:09:e8:ae:54:f7:fc:05:ee: 81:4a:53:e8:32:92:43:94:f7:60:90:81:10:13:a1:64:22:41: 07:2a:eb:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvDXNh/6NpxXlL4kQnQWKakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE1MjAzMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWY1NjE5MzQ3MGZhZWNiOTE5YTUzNWZjNWFhMmEzZmJkMGI1MDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDfO3Oi4r3ff2CsGEOs9TDffAVf8 n2XOWZGzdJAWguRb0MJ2RkKA7sQpDk1R9/RBqWIWySfrJYqHWHJFqhHMUW+Jee5n ax7RWiajooIBT1nS7iAEsu9J/WQB8ec1yDVtdXB/kFp22S8EhyKLOzBDRGGuh8HD UrkAI0wvoi4B97WQi/KGKwy/Fj4Q8qYMDyKnDaDjRzU8bPmSs6Ut75KLqr01hLh3 gurPUw0Knc6h4fT+zFq+htr10fh1sJ6ea4npq+onpO9++uUHOdggdJFiBdEn2leC bwIdzwpYaZXXhSgPyZuWOb2K0/lHCAs1RUe2KjrkmW3qB4z0WeycHq95JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN71YZNHD67LkZpTX8WqKj+9C1BoMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvM3ZWaGswY1Byc3VSbWxOZnhhb3FQNzBMVUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzohMA0G CSqGSIb3DQEBCwUAA4IBAQAyz7kQu8f0wpsPS8MMrfHXU2drknG8t5xlTTGHLG3c YufFvprHsKeksGCvjgUfutqWtSatZslyz1bTiMTDyoNChItvagMcybUWvz7JbISn 8p6dZzBIl4Y0p1zJmwyo8PCbru3DJHJBcK3w1gI/Ra69uI5QXQh5MJs1Qkc/fro3 yzie18TbN7dEoFeYFifVj+kPJGiF3vTkLhY3NPj1kJAGy6hOzXtMw1d5ITB8ofU3 sRaXhEtjJGxL/eTA0BthswL7lxpG54y4VReQOyxeb74sC2FiLeSb3kLSllTZeItS U3XNCeiuVPf8Be6BSlPoMpJDlPdgkIEQE6FkIkEHKus7 -----END CERTIFICATE-----Generated at Fri Jan 16 05:35:57 2026 by rpki-client