This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4GA5xWFIJsfUj74tfEj7aDNo2uA.roa File: 4GA5xWFIJsfUj74tfEj7aDNo2uA.roa (raw, json) Hash identifier: NewJg+D4Cq5cpw756u4Cx58lFVWX9YRhiFzAni2K+4E= Subject key identifier: E0:60:39:C5:61:48:26:C7:D4:8F:BE:2D:7C:48:FB:68:33:68:DA:E0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D4D7AFF53468B227974D7A2AEFA7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4GA5xWFIJsfUj74tfEj7aDNo2uA.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216324 IP address blocks: 31.58.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d4:d7:af:f5:34:68:b2:27:97:4d:7a:2a:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e06039c5614826c7d48fbe2d7c48fb683368dae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:3e:a1:ef:ee:1e:66:13:13:5f:5b:13:c4: 0f:56:3f:31:66:b2:b8:8c:de:96:ac:36:4f:b1:96: 1a:a9:e7:ba:5a:fa:97:c2:2f:93:4e:e4:be:59:5e: d5:82:04:04:39:bd:b2:16:f9:6b:fc:60:ec:26:fa: f7:49:85:01:c2:3b:f3:94:d1:f4:36:22:64:29:09: b0:4a:86:28:20:d0:f6:e6:92:43:5f:77:2c:c2:50: 73:81:67:7e:60:bd:2f:34:10:5b:52:55:fa:7e:53: 2d:bc:6b:8c:22:05:45:97:5d:18:9d:91:cf:76:46: 45:40:70:45:2b:fe:e3:25:6e:db:a3:ba:74:ee:8c: 11:05:2a:07:8c:8f:5b:00:c6:fb:00:93:3c:b5:0d: 37:43:26:e3:df:fd:fe:6b:6c:01:a3:7f:50:11:f2: 18:58:32:73:43:b3:a5:0f:e5:da:d5:8e:f0:34:5e: 19:9f:6b:3d:23:4d:c4:76:d9:d8:e0:d2:fa:a1:04: 0f:9a:5d:f5:2a:4a:58:2a:10:5b:92:69:ed:c6:65: f2:3a:6b:4b:57:01:51:1e:0f:6e:23:33:01:02:4b: 32:e2:d1:e3:d0:63:24:7f:ff:77:37:0c:50:68:a9: a0:c7:5e:3f:f2:c8:25:41:4a:3c:39:a9:29:76:7b: 34:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:60:39:C5:61:48:26:C7:D4:8F:BE:2D:7C:48:FB:68:33:68:DA:E0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4GA5xWFIJsfUj74tfEj7aDNo2uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.86.0/24 Signature Algorithm: sha256WithRSAEncryption bb:9f:8c:1f:92:20:bd:a3:3b:6c:85:d2:c1:a7:fa:d2:c8:40: 69:21:5c:5f:05:0c:5e:ea:de:aa:8c:e7:09:a7:b0:eb:81:fd: dc:dd:6f:f8:d9:db:54:9f:29:66:e8:4a:a5:31:5e:84:4b:49: fc:82:8a:66:02:99:cb:73:57:d2:87:5a:e3:4c:e1:95:db:29: 4d:cb:93:7f:1f:66:f9:a5:da:75:72:b6:1d:e5:42:e1:cf:ac: 48:2b:7c:4e:b5:c9:ae:8e:59:00:eb:a1:21:9b:c2:b9:7f:3c: 8d:21:ee:28:9e:ed:db:45:06:35:a7:e8:64:2d:ca:ac:20:f4: 9c:0e:63:21:14:23:b5:89:4e:79:a7:7a:2b:09:92:31:fa:00: 25:0d:ae:45:19:55:99:8e:ed:bc:f8:56:bc:9d:e3:4b:ae:7b: fb:e9:99:80:3b:95:3d:24:a8:53:c9:6e:d5:b5:16:bd:50:14: c5:a5:c8:de:2a:0e:81:6b:15:59:92:8d:5d:a4:ca:55:11:18: d7:e8:7f:54:4b:a2:48:68:d2:1b:46:d3:e7:7e:11:05:0a:28: 79:bb:d3:d4:ac:4e:9f:f2:48:35:46:9c:dc:3a:a9:ec:16:02: 68:d2:3a:e0:50:7f:f7:52:b2:d3:ee:44:a1:db:99:5d:63:04: 57:4e:88:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNTXr/U0aLInl016Ku+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDYwMzljNTYxNDgyNmM3ZDQ4ZmJlMmQ3YzQ4ZmI2ODMzNjhkYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNA+oe/uHmYTE19bE8QPVj8xZrK4 jN6WrDZPsZYaqee6WvqXwi+TTuS+WV7VggQEOb2yFvlr/GDsJvr3SYUBwjvzlNH0 NiJkKQmwSoYoIND25pJDX3cswlBzgWd+YL0vNBBbUlX6flMtvGuMIgVFl10YnZHP dkZFQHBFK/7jJW7bo7p07owRBSoHjI9bAMb7AJM8tQ03Qybj3/3+a2wBo39QEfIY WDJzQ7OlD+Xa1Y7wNF4Zn2s9I03EdtnY4NL6oQQPml31KkpYKhBbkmntxmXyOmtL VwFRHg9uIzMBAksy4tHj0GMkf/93NwxQaKmgx14/8sglQUo8Oakpdns0rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBgOcVhSCbH1I++LXxI+2gzaNrgMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNEdBNXhXRklKc2ZVajc0dGZFajdhRE5vMnVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpWMA0G CSqGSIb3DQEBCwUAA4IBAQC7n4wfkiC9oztshdLBp/rSyEBpIVxfBQxe6t6qjOcJ p7Drgf3c3W/42dtUnylm6EqlMV6ES0n8gopmApnLc1fSh1rjTOGV2ylNy5N/H2b5 pdp1crYd5ULhz6xIK3xOtcmujlkA66Ehm8K5fzyNIe4onu3bRQY1p+hkLcqsIPSc DmMhFCO1iU55p3orCZIx+gAlDa5FGVWZju28+Fa8neNLrnv76ZmAO5U9JKhTyW7V tRa9UBTFpcjeKg6BaxVZko1dpMpVERjX6H9US6JIaNIbRtPnfhEFCih5u9PUrE6f 8kg1RpzcOqnsFgJo0jrgUH/3UrLT7kSh25ldYwRXToik -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:32 2026 by rpki-client