This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4nvR_5n0VmTECGdsqBZuThRLkos.roa File: 4nvR_5n0VmTECGdsqBZuThRLkos.roa (raw, json) Hash identifier: hl9Ss+LMB4wL0Jj1+dMc1iJialhWe9CrXdBijeZ9LVA= Subject key identifier: E2:7B:D1:FF:99:F4:56:64:C4:08:67:6C:A8:16:6E:4E:14:4B:92:8B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A992A8DB8EA56D6BE3C7304C6D11 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4nvR_5n0VmTECGdsqBZuThRLkos.roa Signing time: Fri 02 Jan 2026 16:22:39 +0000 ROA not before: Fri 02 Jan 2026 16:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211377 IP address blocks: 31.59.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a9:92:a8:db:8e:a5:6d:6b:e3:c7:30:4c:6d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e27bd1ff99f45664c408676ca8166e4e144b928b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:c0:77:e3:85:62:03:81:b4:dc:9e:6d:98: 5d:bd:7a:f1:fd:40:f4:ec:0d:fa:a4:8b:ea:81:b3: 89:d7:39:6a:a1:2b:a2:68:c5:ab:27:43:6a:ce:7c: 08:1f:a4:11:5c:5a:1d:11:2c:4d:fe:6c:dd:6c:b6: ee:97:46:4a:e1:11:06:0a:33:e7:77:e4:46:8f:f3: 56:da:b6:f7:01:54:3d:10:a5:a5:d3:59:70:d9:f2: 4c:84:de:81:ba:5c:34:64:c4:e1:19:fb:73:e2:c0: 61:e6:cf:25:f6:12:b6:f3:ba:77:e7:bc:9b:6e:bf: e3:9f:f7:e4:04:5e:47:e9:a6:b7:8a:30:13:5b:e3: aa:62:df:d2:69:18:87:14:f7:49:a2:a4:6f:f8:9c: da:e2:f2:33:5a:47:56:63:b6:ca:ce:8b:e9:e4:0b: 4a:35:3d:86:4f:de:91:fa:c1:2c:5a:92:5c:ab:14: 42:b9:9f:66:7d:d0:53:c0:d0:3b:a8:16:3c:a6:57: 08:25:a5:24:e9:9b:6a:42:bc:a2:41:7e:a1:2c:61: fd:7b:25:99:00:38:95:3a:da:74:bf:1a:8b:a4:7b: 6c:5f:aa:55:b7:a8:78:11:6a:e7:df:3d:5f:9f:3b: 6d:9d:50:d8:0a:a3:72:c9:24:86:05:38:ff:74:32: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:D1:FF:99:F4:56:64:C4:08:67:6C:A8:16:6E:4E:14:4B:92:8B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4nvR_5n0VmTECGdsqBZuThRLkos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.234.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:73:2b:97:d3:69:e6:6a:87:29:61:1e:d0:70:44:0e:e3:13: 97:0a:07:77:0e:7d:e9:36:aa:0c:4b:1c:29:f6:f6:1b:83:3a: 72:5b:47:2d:eb:cb:f0:70:bd:c7:a2:5c:9e:ca:81:b3:bb:9f: 00:0b:c5:4b:e3:93:f1:a9:c5:15:8c:d8:8e:9d:2a:4b:ec:9a: 07:8c:bf:45:df:11:c5:1f:78:fa:05:c9:0c:7c:5b:fc:2f:7b: 94:4e:a9:97:9b:c6:28:bf:85:d4:c2:b1:48:63:1f:81:58:91: 22:7c:36:48:ed:c5:17:39:e0:6f:46:d5:aa:5a:80:d7:4d:5c: c1:65:59:69:95:9b:f9:58:47:3a:9c:0d:69:30:e8:1b:be:4f: 5a:88:3b:d5:31:b4:ac:c8:53:0d:61:01:5e:3a:10:18:2d:0b: ee:88:7e:f5:61:c8:48:50:e2:c9:ba:9a:22:6d:dd:85:96:a7: af:8b:d9:10:d0:6e:db:54:24:11:f0:e6:09:79:ab:ae:a6:17: 0f:71:17:d4:a4:de:eb:5a:0f:e1:ca:3d:fa:54:77:47:83:e9: 52:95:3c:89:5b:08:51:6d:55:37:60:35:13:39:eb:3e:cd:ce: 38:4a:b7:b5:b5:23:68:63:ff:37:a3:2d:1b:fd:e4:3a:9f:2d: 45:e3:d6:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKmSqNuOpW1r48cwTG0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjdiZDFmZjk5ZjQ1NjY0YzQwODY3NmNhODE2NmU0ZTE0NGI5MjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMbAd+OFYgOBtNyebZhdvXrx/UD0 7A36pIvqgbOJ1zlqoSuiaMWrJ0NqznwIH6QRXFodESxN/mzdbLbul0ZK4REGCjPn d+RGj/NW2rb3AVQ9EKWl01lw2fJMhN6Bulw0ZMThGftz4sBh5s8l9hK287p357yb br/jn/fkBF5H6aa3ijATW+OqYt/SaRiHFPdJoqRv+Jza4vIzWkdWY7bKzovp5AtK NT2GT96R+sEsWpJcqxRCuZ9mfdBTwNA7qBY8plcIJaUk6ZtqQryiQX6hLGH9eyWZ ADiVOtp0vxqLpHtsX6pVt6h4EWrn3z1fnzttnVDYCqNyySSGBTj/dDL//wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJ70f+Z9FZkxAhnbKgWbk4US5KLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNG52Ul81bjBWbVRFQ0dkc3FCWnVUaFJMa29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzvqMA0G CSqGSIb3DQEBCwUAA4IBAQANcyuX02nmaocpYR7QcEQO4xOXCgd3Dn3pNqoMSxwp 9vYbgzpyW0ct68vwcL3HolyeyoGzu58AC8VL45PxqcUVjNiOnSpL7JoHjL9F3xHF H3j6BckMfFv8L3uUTqmXm8Yov4XUwrFIYx+BWJEifDZI7cUXOeBvRtWqWoDXTVzB ZVlplZv5WEc6nA1pMOgbvk9aiDvVMbSsyFMNYQFeOhAYLQvuiH71YchIUOLJupoi bd2Flqevi9kQ0G7bVCQR8OYJeauuphcPcRfUpN7rWg/hyj36VHdHg+lSlTyJWwhR bVU3YDUTOes+zc44Sre1tSNoY/83oy0b/eQ6ny1F49aH -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:38 2026 by rpki-client