This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MXjrkSXhj2YhkO7shNEN1NHyFo.roa File: 5MXjrkSXhj2YhkO7shNEN1NHyFo.roa (raw, json) Hash identifier: FfLNyKR7aRKSF9e4S2g6W4BcYNx2PD4corfiYUUluT0= Subject key identifier: E4:C5:E3:AE:44:97:86:3D:98:86:43:BB:B2:13:44:37:53:47:C8:5A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F848CBF3F2764D6CBCD3ABA468DFE82 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MXjrkSXhj2YhkO7shNEN1NHyFo.roa Signing time: Fri 02 Jan 2026 16:22:31 +0000 ROA not before: Fri 02 Jan 2026 16:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197071 IP address blocks: 31.56.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8c:bf:3f:27:64:d6:cb:cd:3a:ba:46:8d:fe:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4c5e3ae4497863d988643bbb21344375347c85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:c3:80:9f:26:0c:18:48:b0:50:9a:9c:e0: b8:a1:bc:a4:f2:a1:a8:2a:66:3a:a9:2e:1a:67:05: ef:d1:e3:b8:62:45:38:f9:35:57:f9:dc:24:69:81: d6:c1:4b:f2:11:64:ae:3b:2c:bd:83:ed:52:79:d7: a2:04:6e:da:77:27:e1:1e:55:b4:aa:a5:0d:c7:fd: e3:d8:c7:ff:55:a5:8c:24:2c:55:65:7f:81:34:29: 3d:fe:55:6c:7b:2e:77:06:f2:7a:bb:72:10:c4:a6: 3b:99:3a:0f:d6:87:8d:69:19:8f:21:4c:8b:e9:40: 81:1f:6f:70:de:a0:3d:13:01:d3:2e:2b:a0:6b:30: f5:63:48:38:67:a4:10:05:5f:66:4f:82:9c:26:ba: 78:78:f4:29:1a:7f:7f:ce:a7:e1:e4:7e:cc:0b:00: 47:5a:23:ac:1b:35:f1:44:b9:50:f0:05:ce:f6:7a: a2:bd:da:63:c7:c5:35:95:0c:68:8f:e2:8d:78:d9: 16:08:53:b6:71:6e:f7:4e:6f:ad:28:66:c9:09:9e: 1f:87:8d:5a:c6:e6:43:6c:20:f1:74:47:c5:91:92: 4d:69:3f:89:94:63:7b:4a:7a:80:b3:10:6c:df:c7: 73:4f:0b:59:f8:81:4d:c2:8d:bf:79:6d:ea:6c:b1: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:E3:AE:44:97:86:3D:98:86:43:BB:B2:13:44:37:53:47:C8:5A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5MXjrkSXhj2YhkO7shNEN1NHyFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.7.0/24 Signature Algorithm: sha256WithRSAEncryption c1:3c:75:71:f6:62:18:c9:37:a7:3c:56:53:5d:fb:32:a3:d6: 0b:9e:44:26:d4:ee:65:da:71:b7:70:78:1d:c8:fb:57:bb:53: 70:76:7f:d6:13:cd:8a:eb:a7:99:93:af:46:3b:6a:8a:62:89: bf:7b:fc:08:e2:9b:2e:0a:15:24:84:b8:b7:9c:a3:6f:7f:88: c8:c9:28:47:02:0a:2f:5a:8b:3e:b3:54:a1:a8:d8:ae:f9:7d: f4:ea:8b:a5:d3:ec:98:34:4a:2b:01:60:f3:f0:8d:a2:d1:32: d8:aa:2e:c7:81:ec:75:3c:b4:cb:96:ba:70:3a:d9:2e:6a:3f: 47:5e:d1:ac:61:41:cc:55:95:a9:45:af:46:9e:1c:6a:40:27: 2f:53:46:97:26:bd:6e:ad:1a:fb:ab:09:76:92:98:12:2f:5c: 0d:50:18:81:65:32:ef:84:98:0a:aa:86:32:1a:a3:4a:6a:08: 99:e5:0c:1f:2f:57:a3:26:77:92:c3:90:eb:20:29:9f:6b:e9: 1f:da:81:74:b1:33:54:32:82:84:27:84:9a:ff:2c:45:81:a3: a6:94:74:cf:fb:7d:2d:e5:13:23:1a:dd:64:67:6e:b6:46:b6: 56:3b:91:f4:4f:46:1b:ec:66:9b:23:a3:0b:01:d1:60:bd:f2: ce:8d:96:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIy/Pydk1svNOrpGjf6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGM1ZTNhZTQ0OTc4NjNkOTg4NjQzYmJiMjEzNDQzNzUzNDdjODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPfDgJ8mDBhIsFCanOC4obyk8qGo KmY6qS4aZwXv0eO4YkU4+TVX+dwkaYHWwUvyEWSuOyy9g+1SedeiBG7adyfhHlW0 qqUNx/3j2Mf/VaWMJCxVZX+BNCk9/lVsey53BvJ6u3IQxKY7mToP1oeNaRmPIUyL 6UCBH29w3qA9EwHTLiugazD1Y0g4Z6QQBV9mT4KcJrp4ePQpGn9/zqfh5H7MCwBH WiOsGzXxRLlQ8AXO9nqivdpjx8U1lQxoj+KNeNkWCFO2cW73Tm+tKGbJCZ4fh41a xuZDbCDxdEfFkZJNaT+JlGN7SnqAsxBs38dzTwtZ+IFNwo2/eW3qbLHGMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTF465El4Y9mIZDu7ITRDdTR8haMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNU1YanJrU1hoajJZaGtPN3NoTkVOMU5IeUZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgHMA0G CSqGSIb3DQEBCwUAA4IBAQDBPHVx9mIYyTenPFZTXfsyo9YLnkQm1O5l2nG3cHgd yPtXu1Nwdn/WE82K66eZk69GO2qKYom/e/wI4psuChUkhLi3nKNvf4jIyShHAgov Wos+s1ShqNiu+X306oul0+yYNEorAWDz8I2i0TLYqi7Hgex1PLTLlrpwOtkuaj9H XtGsYUHMVZWpRa9GnhxqQCcvU0aXJr1urRr7qwl2kpgSL1wNUBiBZTLvhJgKqoYy GqNKagiZ5QwfL1ejJneSw5DrICmfa+kf2oF0sTNUMoKEJ4Sa/yxFgaOmlHTP+30t 5RMjGt1kZ262RrZWO5H0T0Yb7GabI6MLAdFgvfLOjZbA -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:59 2026 by rpki-client