This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5UCb7wdru85djlZ11GDJG4xa7cA.roa File: 5UCb7wdru85djlZ11GDJG4xa7cA.roa (raw, json) Hash identifier: 8G0pzMRjwAlpRIPA/+tqQq+tAFOBTy+rUP0PDVm7pM4= Subject key identifier: E5:40:9B:EF:07:6B:BB:CE:5D:8E:56:75:D4:60:C9:1B:8C:5A:ED:C0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84553AB2A44C77C55F90D5DCA75154 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5UCb7wdru85djlZ11GDJG4xa7cA.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18526 IP address blocks: 31.56.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:55:3a:b2:a4:4c:77:c5:5f:90:d5:dc:a7:51:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5409bef076bbbce5d8e5675d460c91b8c5aedc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:7f:1b:81:cd:aa:d9:e7:db:0e:f5:30:8e: 6a:4b:17:b4:7e:98:ce:e4:93:f4:6c:f7:5a:dd:6e: f8:7b:fc:c2:3c:12:3f:77:08:fc:16:15:7c:56:2c: 17:b7:e5:c7:62:65:67:17:45:26:ca:af:ce:da:8a: c5:59:07:3a:d9:c4:6d:e3:6c:c5:7a:c2:31:19:1d: 21:d0:f3:53:6a:fb:9c:73:27:d7:46:f7:45:1c:80: 31:be:03:91:d4:87:d6:6d:d9:30:7e:bb:c1:ab:da: 42:db:bb:70:34:ba:ee:a5:ec:1e:f2:0e:88:80:f9: e6:fa:0e:8c:53:b0:37:a3:38:02:a0:e8:3c:a1:ac: 8a:b0:05:13:b8:d7:69:88:2e:c3:63:07:9a:17:41: ef:2d:97:de:b6:11:88:e3:8d:6e:53:f6:42:aa:6e: 50:26:0b:c9:4a:1d:f2:28:79:87:40:ca:ba:e6:20: a4:68:bd:bf:3a:62:b8:f4:03:19:41:58:18:df:75: 95:a9:35:34:9d:6b:4b:5d:6e:d2:02:df:fc:2a:97: eb:24:85:06:3f:fc:7e:1d:3f:d4:86:e3:09:26:dd: 3e:e5:dd:8e:61:9b:fa:bd:dd:5b:ef:e3:bd:64:1f: 8b:25:1a:48:83:ff:aa:6f:53:b3:fc:52:2f:6e:45: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:9B:EF:07:6B:BB:CE:5D:8E:56:75:D4:60:C9:1B:8C:5A:ED:C0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5UCb7wdru85djlZ11GDJG4xa7cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.63.0/24 Signature Algorithm: sha256WithRSAEncryption 45:b8:6e:89:70:7e:60:88:0b:eb:28:6a:36:d9:d3:9b:2b:ff: f0:df:ae:8c:34:f0:5f:fc:d3:d4:c7:7a:e1:bd:03:19:c3:30: 32:14:e6:d9:32:10:cc:3a:72:1b:67:2c:7b:13:5e:4a:73:6d: 65:43:4b:57:2d:67:c4:f5:5c:32:1f:c2:63:1a:6d:15:63:37: db:a4:86:84:35:48:11:cc:d4:30:9d:02:9a:30:81:1a:88:79: c4:0f:04:98:dd:e1:04:e0:97:07:f3:2a:ad:74:32:08:c2:c9: dc:49:67:bb:be:ed:e3:43:48:8b:31:77:72:0b:12:a8:42:ac: 2f:fe:c0:c7:44:19:57:92:9c:e0:3e:b0:29:23:13:cd:97:31: 78:9a:e7:c0:38:a7:39:b5:ee:0b:e1:6f:e4:a6:94:c2:c4:c4: 4f:59:bd:d0:6a:a9:f2:c5:82:8e:81:bc:b3:0e:bd:fa:74:84: 5a:ae:29:3e:49:5f:a9:8a:4d:85:09:d2:56:c6:e3:a3:6e:e4: 77:4b:49:b4:0f:6c:0f:62:38:58:9e:05:cb:e7:d2:2e:6b:ae: 72:81:76:6b:3e:21:f5:6c:4b:49:c9:f6:19:b6:81:82:87:de: b7:3b:07:eb:05:ae:2b:30:ac:8f:1f:92:7a:81:ce:49:75:5b: ea:36:a7:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFU6sqRMd8VfkNXcp1FUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTQwOWJlZjA3NmJiYmNlNWQ4ZTU2NzVkNDYwYzkxYjhjNWFlZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNR/G4HNqtnn2w71MI5qSxe0fpjO 5JP0bPda3W74e/zCPBI/dwj8FhV8ViwXt+XHYmVnF0Umyq/O2orFWQc62cRt42zF esIxGR0h0PNTavuccyfXRvdFHIAxvgOR1IfWbdkwfrvBq9pC27twNLrupewe8g6I gPnm+g6MU7A3ozgCoOg8oayKsAUTuNdpiC7DYweaF0HvLZfethGI441uU/ZCqm5Q JgvJSh3yKHmHQMq65iCkaL2/OmK49AMZQVgY33WVqTU0nWtLXW7SAt/8KpfrJIUG P/x+HT/UhuMJJt0+5d2OYZv6vd1b7+O9ZB+LJRpIg/+qb1Oz/FIvbkWoZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVAm+8Ha7vOXY5WddRgyRuMWu3AMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNVVDYjd3ZHJ1ODVkamxaMTFHREpHNHhhN2NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg/MA0G CSqGSIb3DQEBCwUAA4IBAQBFuG6JcH5giAvrKGo22dObK//w366MNPBf/NPUx3rh vQMZwzAyFObZMhDMOnIbZyx7E15Kc21lQ0tXLWfE9VwyH8JjGm0VYzfbpIaENUgR zNQwnQKaMIEaiHnEDwSY3eEE4JcH8yqtdDIIwsncSWe7vu3jQ0iLMXdyCxKoQqwv /sDHRBlXkpzgPrApIxPNlzF4mufAOKc5te4L4W/kppTCxMRPWb3QaqnyxYKOgbyz Dr36dIRarik+SV+pik2FCdJWxuOjbuR3S0m0D2wPYjhYngXL59Iua65ygXZrPiH1 bEtJyfYZtoGCh963OwfrBa4rMKyPH5J6gc5JdVvqNqc/ -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:50 2026 by rpki-client