This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5pGszhE4fCEoFzABSKiWhrCPJQs.roa File: 5pGszhE4fCEoFzABSKiWhrCPJQs.roa (raw, json) Hash identifier: zOiPmbXXgbN3lMxKGWAFNcO84asGZaz4wh3JKJj03co= Subject key identifier: E6:91:AC:CE:11:38:7C:21:28:17:30:01:48:A8:96:86:B0:8F:25:0B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CFE9E5E1D1AB0CE3E3EC089B4927 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5pGszhE4fCEoFzABSKiWhrCPJQs.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215531 IP address blocks: 31.58.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cf:e9:e5:e1:d1:ab:0c:e3:e3:ec:08:9b:49:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e691acce11387c212817300148a89686b08f250b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:1e:a6:fd:e2:d2:cc:18:cf:84:ce:67:48: 49:64:42:3a:db:c3:f6:90:cd:6b:97:16:a1:19:4b: c8:96:67:6d:1e:a5:c6:3e:3b:e8:4f:d4:46:10:8d: b4:66:2a:fa:92:9b:da:4e:19:c9:47:a3:f7:50:90: 76:b6:0a:72:8e:e3:4e:78:19:f4:d0:f8:95:c7:8e: 9d:6f:56:f1:2b:aa:a0:46:9b:bb:b3:24:8a:25:69: 8e:7c:58:7e:ab:57:bf:6e:b6:b7:9f:cb:29:0d:97: b7:60:bf:04:9c:0b:33:d3:e8:ee:b8:7d:ef:04:e3: bd:89:9e:ac:1a:b4:1a:72:33:e2:b3:b6:ab:f3:0f: ce:52:f6:ec:6b:89:30:da:84:22:d9:10:6b:2c:0b: 47:d9:6c:a7:69:d3:42:62:3a:6b:a8:96:1a:2d:68: 50:7a:50:56:2c:5c:b5:b4:fd:52:8d:83:c1:af:f4: 74:87:8a:b6:ac:bc:9a:e8:b6:7b:01:be:54:34:f0: 7d:bc:c2:fc:77:3e:89:b3:79:cc:b0:a3:57:55:d3: fb:e6:e0:95:78:b4:a2:9a:fe:07:ed:24:75:52:0b: 92:a1:6e:fc:71:d8:15:d9:2e:95:4d:bc:14:e3:2a: 39:2c:93:35:f4:06:90:c5:a9:ad:1a:fd:0c:96:e4: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:91:AC:CE:11:38:7C:21:28:17:30:01:48:A8:96:86:B0:8F:25:0B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5pGszhE4fCEoFzABSKiWhrCPJQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.245.0/24 Signature Algorithm: sha256WithRSAEncryption 03:9a:15:72:30:04:f4:5d:e6:91:6b:fa:0e:23:2d:e5:74:ec: 42:82:36:35:bb:5b:5c:4a:42:22:5b:a7:c3:ba:b1:03:9e:5f: 8e:f4:29:9c:05:ad:41:51:92:e5:25:a4:a4:04:9b:c8:6d:db: 36:1b:b3:58:04:09:64:98:8f:3a:ca:ec:1e:7e:9d:74:b5:eb: fe:4c:84:08:4c:30:73:40:ee:7c:b2:c1:dc:78:b0:89:67:f1: 6a:ab:16:9d:27:44:c1:23:32:fe:ae:d9:5b:7a:e4:ae:7f:5a: a9:18:1f:0e:35:50:e1:25:64:5e:50:86:4c:0f:94:c5:33:1e: 81:50:24:21:0b:6e:aa:a9:cb:92:c3:26:7b:5f:43:de:aa:6e: 45:29:8e:ea:c5:9f:8d:ba:ba:72:76:44:39:77:5c:62:e6:9c: 84:ad:75:db:e1:9d:48:d4:5d:c9:76:86:ac:f5:55:d3:59:12: 4e:0b:38:48:38:9f:42:09:7b:12:57:44:b2:5a:fe:12:8e:14: e8:f1:64:3d:4d:d4:f4:69:48:d6:85:de:75:ea:ae:af:6f:82: de:e8:35:a1:91:3d:67:78:01:53:18:e2:0d:32:7a:56:ac:87: dc:e3:48:e2:df:51:e5:79:ad:b7:26:86:bd:c8:19:99:a0:b5: 92:c2:67:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hM/p5eHRqwzj4+wIm0knMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjkxYWNjZTExMzg3YzIxMjgxNzMwMDE0OGE4OTY4NmIwOGYyNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpgepv3i0swYz4TOZ0hJZEI628P2 kM1rlxahGUvIlmdtHqXGPjvoT9RGEI20Zir6kpvaThnJR6P3UJB2tgpyjuNOeBn0 0PiVx46db1bxK6qgRpu7sySKJWmOfFh+q1e/bra3n8spDZe3YL8EnAsz0+juuH3v BOO9iZ6sGrQacjPis7ar8w/OUvbsa4kw2oQi2RBrLAtH2WynadNCYjprqJYaLWhQ elBWLFy1tP1SjYPBr/R0h4q2rLya6LZ7Ab5UNPB9vML8dz6Js3nMsKNXVdP75uCV eLSimv4H7SR1UguSoW78cdgV2S6VTbwU4yo5LJM19AaQxamtGv0MluQ35wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOaRrM4ROHwhKBcwAUioloawjyULMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNXBHc3poRTRmQ0VvRnpBQlNLaVdockNQSlFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr1MA0G CSqGSIb3DQEBCwUAA4IBAQADmhVyMAT0XeaRa/oOIy3ldOxCgjY1u1tcSkIiW6fD urEDnl+O9CmcBa1BUZLlJaSkBJvIbds2G7NYBAlkmI86yuwefp10tev+TIQITDBz QO58ssHceLCJZ/FqqxadJ0TBIzL+rtlbeuSuf1qpGB8ONVDhJWReUIZMD5TFMx6B UCQhC26qqcuSwyZ7X0Peqm5FKY7qxZ+NurpydkQ5d1xi5pyErXXb4Z1I1F3Jdoas 9VXTWRJOCzhIOJ9CCXsSV0SyWv4SjhTo8WQ9TdT0aUjWhd516q6vb4Le6DWhkT1n eAFTGOINMnpWrIfc40ji31Hlea23Joa9yBmZoLWSwmf9 -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:49 2026 by rpki-client