This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4OXMxGV2A-vQ1XUmU57JDBYkUsc.roa File: 4OXMxGV2A-vQ1XUmU57JDBYkUsc.roa (raw, json) Hash identifier: sZ12FfTF1iNw2WN0xIvcm2yhFP4MaUqbrTaZPwk04a0= Subject key identifier: E0:E5:CC:C4:65:76:03:EB:D0:D5:75:26:53:9E:C9:0C:16:24:52:C7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BD2B64A9B1EF3B2AE74A6C95198D0074C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4OXMxGV2A-vQ1XUmU57JDBYkUsc.roa Signing time: Sun 18 Jan 2026 20:05:20 +0000 ROA not before: Sun 18 Jan 2026 20:05:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:b6:4a:9b:1e:f3:b2:ae:74:a6:c9:51:98:d0:07:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 18 20:05:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0e5ccc4657603ebd0d57526539ec90c162452c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:7b:8d:07:30:ac:dd:68:52:11:37:69:5b: d7:56:44:3c:53:ac:b3:15:42:66:c9:c7:5d:1d:50: e8:bc:3c:46:11:bf:11:2a:e1:1a:bc:0d:48:7d:0a: 31:1f:cb:69:15:66:80:3a:b3:be:32:5e:41:6c:79: b6:a9:1d:13:cd:34:de:50:fa:fb:2f:af:1e:85:17: a6:06:a8:18:bb:81:e0:2c:32:f5:75:3d:35:0c:3d: fa:49:a3:1b:46:bf:b1:4e:f2:8e:a1:f9:ed:fe:a1: 6d:d9:9d:09:54:2c:87:34:f6:d5:20:5f:f3:3b:01: f6:e7:c8:0c:82:50:a4:0b:19:c9:cf:ec:eb:9a:7f: 47:92:a8:3d:16:ef:68:df:6b:b1:82:61:47:0f:80: c6:82:da:f0:d4:fb:16:0b:0f:b2:b2:2e:91:0d:16: 7b:dc:34:a3:e4:9d:dc:a9:41:1a:65:72:cc:2d:39: ff:a7:31:e6:36:da:2d:d6:6e:fe:b2:9c:b8:4a:d9: e7:bd:1a:52:a9:53:b4:99:30:a1:77:8f:78:bb:56: 7b:c2:7a:02:d3:ea:29:88:d6:fa:67:2d:d4:cb:f5: 63:49:93:bb:f2:c3:62:c1:53:97:4c:60:59:7f:de: ab:fc:3e:8d:7a:d0:09:18:5c:e6:e3:19:0b:32:d2: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:CC:C4:65:76:03:EB:D0:D5:75:26:53:9E:C9:0C:16:24:52:C7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4OXMxGV2A-vQ1XUmU57JDBYkUsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e1:ad:dd:cb:2a:0a:e6:b8:b2:bc:4c:65:2f:c4:ec:4e:29: 01:77:63:53:77:3f:ef:31:54:3e:7b:95:ea:d6:25:07:87:68: da:09:c8:f9:fd:54:7f:9e:43:5a:57:49:4f:e1:5f:1a:61:d6: 86:83:6f:5b:2a:a5:89:ec:9b:aa:05:46:8c:ff:e8:67:a1:73: ab:ed:7c:1c:0e:d4:29:48:85:87:c9:4b:4a:ec:0e:65:f9:fb: 54:ac:a8:67:b3:54:a1:45:4c:74:5e:4d:43:b8:10:b1:45:6e: 23:2f:5f:60:c4:69:6a:97:5a:d3:fb:0c:86:72:45:24:77:7d: 6f:1e:b5:71:64:48:2f:2b:7f:2b:5e:ab:f1:5f:a8:69:f0:1a: 95:34:63:39:2c:5c:be:c1:9e:d7:76:9e:a4:af:b3:07:48:02: 7e:07:91:03:18:5a:9f:ae:e6:a1:a6:a6:7c:e0:55:a3:3e:79: 32:bd:85:72:05:20:12:f8:2f:ce:85:a7:31:2f:2a:6d:43:26: d1:54:30:c0:94:0b:9c:d1:18:17:a1:00:c2:08:15:0c:51:c7: 9b:e5:3a:0a:2d:aa:61:41:d2:ef:6f:11:34:d4:6b:f3:b5:10: 39:35:c9:df:6e:e4:1f:ad:9f:e3:f3:d0:7c:c5:8e:1c:fd:b7: 69:42:91:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvStkqbHvOyrnSmyVGY0AdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE4MjAwNTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGU1Y2NjNDY1NzYwM2ViZDBkNTc1MjY1MzllYzkwYzE2MjQ1MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIR7jQcwrN1oUhE3aVvXVkQ8U6yz FUJmycddHVDovDxGEb8RKuEavA1IfQoxH8tpFWaAOrO+Ml5BbHm2qR0TzTTeUPr7 L68ehRemBqgYu4HgLDL1dT01DD36SaMbRr+xTvKOofnt/qFt2Z0JVCyHNPbVIF/z OwH258gMglCkCxnJz+zrmn9Hkqg9Fu9o32uxgmFHD4DGgtrw1PsWCw+ysi6RDRZ7 3DSj5J3cqUEaZXLMLTn/pzHmNtot1m7+spy4StnnvRpSqVO0mTChd494u1Z7wnoC 0+opiNb6Zy3Uy/VjSZO78sNiwVOXTGBZf96r/D6NetAJGFzm4xkLMtLeewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODlzMRldgPr0NV1JlOeyQwWJFLHMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNE9YTXhHVjJBLXZRMVhVbVU1N0pEQllrVXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrnMA0G CSqGSIb3DQEBCwUAA4IBAQBn4a3dyyoK5riyvExlL8TsTikBd2NTdz/vMVQ+e5Xq 1iUHh2jaCcj5/VR/nkNaV0lP4V8aYdaGg29bKqWJ7JuqBUaM/+hnoXOr7XwcDtQp SIWHyUtK7A5l+ftUrKhns1ShRUx0Xk1DuBCxRW4jL19gxGlql1rT+wyGckUkd31v HrVxZEgvK38rXqvxX6hp8BqVNGM5LFy+wZ7Xdp6kr7MHSAJ+B5EDGFqfruahpqZ8 4FWjPnkyvYVyBSAS+C/OhacxLyptQybRVDDAlAuc0RgXoQDCCBUMUceb5ToKLaph QdLvbxE01GvztRA5NcnfbuQfrZ/j89B8xY4c/bdpQpFC -----END CERTIFICATE-----Generated at Tue Jan 20 20:32:19 2026 by rpki-client