This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4iGXczS7G3_-TD45oK_Cv_Dm4Tk.roa File: 4iGXczS7G3_-TD45oK_Cv_Dm4Tk.roa (raw, json) Hash identifier: 42Z1Y/1kRSBd6S91Dr5z9soGfCj76ZUBgtcX0MT8jkQ= Subject key identifier: E2:21:97:73:34:BB:1B:7F:FE:4C:3E:39:A0:AF:C2:BF:F0:E6:E1:39 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F848172F05B8179EE3BEE127AF0D6D1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4iGXczS7G3_-TD45oK_Cv_Dm4Tk.roa Signing time: Fri 02 Jan 2026 16:22:28 +0000 ROA not before: Fri 02 Jan 2026 16:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138648 IP address blocks: 31.57.48.0/22 maxlen: 24 31.57.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:81:72:f0:5b:81:79:ee:3b:ee:12:7a:f0:d6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e221977334bb1b7ffe4c3e39a0afc2bff0e6e139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:97:e7:75:b0:67:55:f9:50:51:ba:e4:d1: b3:04:9b:52:50:c0:2b:8a:58:d2:22:55:3d:54:3c: e7:2c:ab:62:ef:00:24:2e:cd:60:6a:af:7d:74:32: 0a:a0:8e:a3:a2:e6:00:fe:dc:97:fa:fb:f5:90:40: 74:f3:91:9e:d0:af:94:12:b3:b3:41:ac:d7:fa:54: 69:e0:92:ce:29:d3:3d:ac:05:4e:d2:fc:8f:3a:0f: 38:f4:11:b5:54:3a:81:ef:e3:76:f6:fa:48:46:cb: 61:4f:8a:72:eb:d7:03:ea:1f:67:ef:68:e2:7c:7a: 35:db:3a:59:08:3d:15:ad:53:1a:d4:34:69:1c:ac: 00:4d:48:fe:f0:02:2d:31:e3:40:e3:a0:82:66:22: 3d:c3:34:f7:5e:02:e5:b8:78:32:94:1c:1f:e8:51: c9:e3:d7:15:2b:28:c7:40:07:da:fa:04:79:3e:cd: 97:4f:b2:7a:d0:0b:2a:a8:fa:c2:f4:20:f3:92:5d: d6:58:69:15:e0:ca:70:9e:ff:e1:ac:e6:7a:8b:f3: 85:8f:cb:d3:b7:a8:56:82:88:af:64:1c:2f:31:de: 27:63:f9:b1:83:b0:ae:64:33:25:82:7d:f4:09:e2: ba:3a:6c:be:f7:81:c9:30:e2:1a:db:32:d4:b7:37: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:97:73:34:BB:1B:7F:FE:4C:3E:39:A0:AF:C2:BF:F0:E6:E1:39 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4iGXczS7G3_-TD45oK_Cv_Dm4Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.48.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:e8:5d:b0:b9:8f:1b:5f:c9:22:0a:6b:7b:07:73:ff:58:7b: 89:e9:17:ac:6b:7c:23:c2:b0:2c:48:b1:92:f7:1d:6d:31:a7: 6f:05:67:8b:5b:ab:ac:04:31:95:5a:6c:dc:57:f6:0d:0b:f2: 31:9b:88:58:f2:ac:6d:e5:b2:28:70:e3:b5:50:39:0c:1e:bb: 63:85:be:ed:b7:8a:91:a9:95:29:ab:7a:e3:ef:70:a2:8e:05: 54:86:bc:d2:90:39:7a:96:77:84:72:9c:68:5e:99:83:b3:e6: 3f:ee:cf:e3:fd:27:47:2d:03:b2:cd:9c:02:81:91:8e:b5:1b: 1a:73:0c:ca:0c:55:70:6c:a0:3a:09:0a:ea:f8:bb:58:64:3d: 2d:fd:ab:39:23:9a:7a:8f:ac:50:bc:83:30:b6:23:75:72:8f: 1b:e1:1a:89:42:ee:23:11:6a:ed:d0:29:1e:73:e3:0a:1f:05: 37:e6:ea:5c:67:14:cf:1a:6d:2b:4e:49:f3:f1:34:b7:1b:a2: 45:ab:21:46:f6:c3:04:4e:ac:16:9b:99:2c:b8:a3:d1:e8:90: bf:af:79:70:70:2d:5c:5f:64:73:f2:b7:e9:f3:10:0a:e6:ff: b1:e0:80:c0:2e:c3:6b:d4:8a:1c:cb:a1:50:76:9f:1d:cb:58: 4b:80:be:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIFy8FuBee477hJ68NbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjIxOTc3MzM0YmIxYjdmZmU0YzNlMzlhMGFmYzJiZmYwZTZlMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspCX53WwZ1X5UFG65NGzBJtSUMAr iljSIlU9VDznLKti7wAkLs1gaq99dDIKoI6jouYA/tyX+vv1kEB085Ge0K+UErOz QazX+lRp4JLOKdM9rAVO0vyPOg849BG1VDqB7+N29vpIRsthT4py69cD6h9n72ji fHo12zpZCD0VrVMa1DRpHKwATUj+8AItMeNA46CCZiI9wzT3XgLluHgylBwf6FHJ 49cVKyjHQAfa+gR5Ps2XT7J60AsqqPrC9CDzkl3WWGkV4Mpwnv/hrOZ6i/OFj8vT t6hWgoivZBwvMd4nY/mxg7CuZDMlgn30CeK6Omy+94HJMOIa2zLUtzdHYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOIhl3M0uxt//kw+OaCvwr/w5uE5MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNGlHWGN6UzdHM18tVEQ0NW9LX0N2X0RtNFRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzkwMA0G CSqGSIb3DQEBCwUAA4IBAQA/6F2wuY8bX8kiCmt7B3P/WHuJ6Resa3wjwrAsSLGS 9x1tMadvBWeLW6usBDGVWmzcV/YNC/Ixm4hY8qxt5bIocOO1UDkMHrtjhb7tt4qR qZUpq3rj73CijgVUhrzSkDl6lneEcpxoXpmDs+Y/7s/j/SdHLQOyzZwCgZGOtRsa cwzKDFVwbKA6CQrq+LtYZD0t/as5I5p6j6xQvIMwtiN1co8b4RqJQu4jEWrt0Cke c+MKHwU35upcZxTPGm0rTknz8TS3G6JFqyFG9sMETqwWm5ksuKPR6JC/r3lwcC1c X2Rz8rfp8xAK5v+x4IDALsNr1Iocy6FQdp8dy1hLgL4u -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:43 2026 by rpki-client