This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4JK47PtUYpsgpIcFQuv1XrqY-pI.roa File: 4JK47PtUYpsgpIcFQuv1XrqY-pI.roa (raw, json) Hash identifier: m97LDhdMP6P9oyKzgWUHFuT5CZ63Y/tBMdjYp6IjKdc= Subject key identifier: E0:92:B8:EC:FB:54:62:9B:20:A4:87:05:42:EB:F5:5E:BA:98:FA:92 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84ACE675B59827E5D8B3FF52D8F096 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4JK47PtUYpsgpIcFQuv1XrqY-pI.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 31.57.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ac:e6:75:b5:98:27:e5:d8:b3:ff:52:d8:f0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e092b8ecfb54629b20a4870542ebf55eba98fa92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:5b:30:f0:8a:19:7d:d4:11:b2:cd:b2:95: bf:e5:86:d0:81:3c:c6:b0:c1:3a:7c:b2:da:7f:73: 0a:92:db:bd:20:ee:77:ac:a6:ef:35:6b:37:89:b6: ac:bf:74:e7:8c:91:dd:d2:a5:65:65:33:b3:8c:ba: cc:3f:53:58:e9:b6:b2:dc:7f:56:27:d7:85:1b:61: 03:a0:c8:5b:6d:6b:c0:4c:94:7f:3c:a7:ff:10:14: b6:a2:98:a4:99:6e:f2:08:fd:66:7d:6d:78:ec:f3: 84:e5:ec:8b:81:ed:12:5e:21:d2:4f:b7:1a:b3:05: b9:91:65:e2:d8:6e:a7:33:6f:2a:6b:49:0f:74:b9: 65:95:9e:a8:08:2f:ba:97:2f:2d:db:da:ad:b9:67: a0:af:a2:7f:09:86:2f:e3:f7:47:70:6c:94:5d:c4: ce:0e:04:cc:fc:78:13:ee:2f:1f:ff:6f:c2:97:1a: ae:0d:1f:f4:35:9b:79:ad:b1:65:dc:8e:9e:c7:53: e0:4f:16:cf:fd:fd:b9:5f:7b:64:e7:41:b5:0b:9c: ab:ea:d0:fe:29:80:c4:b2:16:27:4e:50:33:ce:0d: 67:b2:4b:5d:24:39:18:7f:39:d2:b9:53:1f:ce:7c: 99:19:ac:3c:b5:85:6d:85:51:64:ac:13:c8:17:f7: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:92:B8:EC:FB:54:62:9B:20:A4:87:05:42:EB:F5:5E:BA:98:FA:92 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4JK47PtUYpsgpIcFQuv1XrqY-pI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.173.0/24 Signature Algorithm: sha256WithRSAEncryption 50:01:ab:62:8b:65:6b:ae:5f:26:8d:bf:3e:f8:4b:0b:75:af: 3b:be:37:d5:c8:f6:6c:b8:e3:9c:5b:8e:86:cb:39:9a:8e:26: 23:d3:68:41:4e:d2:27:89:36:1b:43:f3:f2:7f:d9:89:1d:e9: fd:cf:77:3e:52:ae:ee:a8:be:56:5a:29:7e:67:85:31:13:d9: 01:ae:4f:79:00:e1:be:6e:ba:1a:59:34:bf:59:29:be:6c:a2: 28:31:f7:f1:ec:d7:c5:30:12:79:a2:a1:61:46:cd:11:5e:e9: 88:d5:b4:a4:dc:1c:b2:ab:8d:91:41:33:35:ac:18:97:48:db: ec:a0:d5:34:14:ac:ed:3f:f7:76:a8:75:2d:74:75:79:dd:16: cc:06:c3:cf:91:e0:d8:75:be:49:19:f6:2d:1d:65:c3:06:73: e4:7c:53:aa:47:e5:43:37:2a:56:2c:c7:a6:52:19:6f:c4:3a: f5:4f:78:eb:a2:9e:bd:4f:ca:d5:db:c1:ff:6f:f5:60:da:8f: da:d4:5e:bf:51:ae:6e:78:f2:6d:0a:30:98:06:1b:31:c4:3d: a8:8f:37:c4:05:f9:86:35:99:5c:0e:9e:7a:3d:2d:06:19:49: 5e:64:63:7f:80:4b:9a:d3:78:ba:7d:2b:96:f1:91:79:d9:8a: 9a:dc:47:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKzmdbWYJ+XYs/9S2PCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDkyYjhlY2ZiNTQ2MjliMjBhNDg3MDU0MmViZjU1ZWJhOThmYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lxbMPCKGX3UEbLNspW/5YbQgTzG sME6fLLaf3MKktu9IO53rKbvNWs3ibasv3TnjJHd0qVlZTOzjLrMP1NY6bay3H9W J9eFG2EDoMhbbWvATJR/PKf/EBS2opikmW7yCP1mfW147POE5eyLge0SXiHST7ca swW5kWXi2G6nM28qa0kPdLlllZ6oCC+6ly8t29qtuWegr6J/CYYv4/dHcGyUXcTO DgTM/HgT7i8f/2/ClxquDR/0NZt5rbFl3I6ex1PgTxbP/f25X3tk50G1C5yr6tD+ KYDEshYnTlAzzg1nsktdJDkYfznSuVMfznyZGaw8tYVthVFkrBPIF/cQ5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCSuOz7VGKbIKSHBULr9V66mPqSMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNEpLNDdQdFVZcHNncEljRlF1djFYcnFZLXBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmtMA0G CSqGSIb3DQEBCwUAA4IBAQBQAatii2Vrrl8mjb8++EsLda87vjfVyPZsuOOcW46G yzmajiYj02hBTtIniTYbQ/Pyf9mJHen9z3c+Uq7uqL5WWil+Z4UxE9kBrk95AOG+ broaWTS/WSm+bKIoMffx7NfFMBJ5oqFhRs0RXumI1bSk3Byyq42RQTM1rBiXSNvs oNU0FKztP/d2qHUtdHV53RbMBsPPkeDYdb5JGfYtHWXDBnPkfFOqR+VDNypWLMem UhlvxDr1T3jrop69T8rV28H/b/Vg2o/a1F6/Ua5uePJtCjCYBhsxxD2ojzfEBfmG NZlcDp56PS0GGUleZGN/gEua03i6fSuW8ZF52Yqa3Ees -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:33 2026 by rpki-client