This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5kHp7DHqsYHdNc7aEjzPcM4VSq8.roa File: 5kHp7DHqsYHdNc7aEjzPcM4VSq8.roa (raw, json) Hash identifier: P6JSD3Fv01nxdA/4hIOQb+PWiOYs3PxSTW20+C1QeBQ= Subject key identifier: E6:41:E9:EC:31:EA:B1:81:DD:35:CE:DA:12:3C:CF:70:CE:15:4A:AF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BCB4A904E1C933B23DECDE9E849FAAE8E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5kHp7DHqsYHdNc7aEjzPcM4VSq8.roa Signing time: Sat 17 Jan 2026 09:30:19 +0000 ROA not before: Sat 17 Jan 2026 09:30:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 31.57.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:4a:90:4e:1c:93:3b:23:de:cd:e9:e8:49:fa:ae:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 17 09:30:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e641e9ec31eab181dd35ceda123ccf70ce154aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:e4:e3:4d:74:a5:fe:30:a2:ec:c3:3b:42: 87:27:2f:b5:9d:60:20:26:43:ea:08:dd:f5:8a:34: cc:4e:cd:2f:4e:c8:43:f0:d6:a4:05:21:a2:92:a5: 09:9a:4c:33:9e:67:21:ae:15:e6:2a:e8:41:df:48: 5d:cb:5a:eb:7d:45:27:ff:f3:4b:8b:28:86:08:6a: 5a:2b:e9:cb:d8:4e:35:45:08:8d:6e:88:32:97:36: 12:59:e6:d6:0a:59:a4:e8:74:ea:b5:6c:42:70:d6: 4f:fd:24:5f:47:84:ed:66:0d:98:19:43:86:1a:12: 3b:ee:fc:1a:e5:d2:79:e2:e3:ad:23:7e:e2:ed:37: 39:5c:2f:e1:65:27:27:b3:d7:c3:34:35:ba:ee:6c: 6f:36:77:26:1d:33:bd:69:55:65:3d:6c:a6:54:8e: 42:f7:02:d1:6e:81:74:34:a1:75:2f:f1:12:4c:93: 56:fa:2c:a7:1c:15:d5:66:6e:72:37:eb:12:5a:d2: 63:33:26:f4:a8:20:2f:c0:50:b8:4e:b2:45:db:d5: 52:90:88:9f:6d:8e:8d:f4:b0:6c:5f:44:60:07:92: 9e:0a:72:c1:56:17:39:c2:12:51:75:74:54:14:0c: 02:c5:b4:7e:e3:dc:20:0a:48:75:77:e0:83:28:46: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:41:E9:EC:31:EA:B1:81:DD:35:CE:DA:12:3C:CF:70:CE:15:4A:AF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5kHp7DHqsYHdNc7aEjzPcM4VSq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.12.0/24 Signature Algorithm: sha256WithRSAEncryption be:a7:a9:e5:b5:41:24:8e:ef:a4:da:12:1d:fa:a6:70:32:c5: 37:da:43:42:8e:3e:f5:ad:ef:46:1a:45:60:9c:f2:3a:69:51: 33:5c:f0:14:dc:85:8e:29:68:65:c2:7e:40:0e:b1:a6:e3:15: ca:69:47:4d:e0:19:0b:2b:2a:64:23:bc:43:05:fd:f0:d7:91: 66:9d:42:bb:de:c6:6d:bf:40:51:18:e3:76:dd:6f:8f:d6:90: b7:4a:88:a2:c6:ed:9a:41:1d:92:cd:89:89:39:55:28:ab:54: d5:19:b0:69:e5:a5:f7:21:fd:44:28:62:d4:01:14:5b:90:4a: 84:16:60:99:0a:05:95:db:58:dd:f7:23:f6:b1:d3:c0:d2:5f: 6e:29:49:bb:3d:bd:2c:02:ac:49:46:2a:c2:63:d5:c0:c4:bc: 58:ec:53:11:54:2a:8a:cc:c1:be:6f:e2:92:90:1e:25:53:55: e6:99:ba:11:b4:d7:db:5c:cf:c4:93:bf:3a:9c:f9:c6:34:54: 89:d0:63:5d:4a:c0:7a:37:b0:25:88:2a:1b:e8:ae:c8:6a:a7: 6a:9b:c6:de:74:77:06:c4:d7:fd:5c:2c:6d:93:c0:56:74:2b: 17:8d:e7:af:02:07:fb:bd:c1:a0:e4:ac:bc:38:13:15:76:ca: 54:2b:67:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvLSpBOHJM7I97N6ehJ+q6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE3MDkzMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjQxZTllYzMxZWFiMTgxZGQzNWNlZGExMjNjY2Y3MGNlMTU0YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Hk4010pf4wouzDO0KHJy+1nWAg JkPqCN31ijTMTs0vTshD8NakBSGikqUJmkwznmchrhXmKuhB30hdy1rrfUUn//NL iyiGCGpaK+nL2E41RQiNbogylzYSWebWClmk6HTqtWxCcNZP/SRfR4TtZg2YGUOG GhI77vwa5dJ54uOtI37i7Tc5XC/hZScns9fDNDW67mxvNncmHTO9aVVlPWymVI5C 9wLRboF0NKF1L/ESTJNW+iynHBXVZm5yN+sSWtJjMyb0qCAvwFC4TrJF29VSkIif bY6N9LBsX0RgB5KeCnLBVhc5whJRdXRUFAwCxbR+49wgCkh1d+CDKEYPUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZB6ewx6rGB3TXO2hI8z3DOFUqvMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNWtIcDdESHFzWUhkTmM3YUVqelBjTTRWU3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkMMA0G CSqGSIb3DQEBCwUAA4IBAQC+p6nltUEkju+k2hId+qZwMsU32kNCjj71re9GGkVg nPI6aVEzXPAU3IWOKWhlwn5ADrGm4xXKaUdN4BkLKypkI7xDBf3w15FmnUK73sZt v0BRGON23W+P1pC3Soiixu2aQR2SzYmJOVUoq1TVGbBp5aX3If1EKGLUARRbkEqE FmCZCgWV21jd9yP2sdPA0l9uKUm7Pb0sAqxJRirCY9XAxLxY7FMRVCqKzMG+b+KS kB4lU1XmmboRtNfbXM/Ek786nPnGNFSJ0GNdSsB6N7AliCob6K7Iaqdqm8bedHcG xNf9XCxtk8BWdCsXjeevAgf7vcGg5Ky8OBMVdspUK2dO -----END CERTIFICATE-----Generated at Tue Jan 20 20:33:05 2026 by rpki-client