This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5quT5q5UrIlGxAt1gmjMCD_Q5zs.roa File: 5quT5q5UrIlGxAt1gmjMCD_Q5zs.roa (raw, json) Hash identifier: 1j+ZlROH8QonkrbJEqvbsWVU/QKwtJqC8FXQtF1g6VQ= Subject key identifier: E6:AB:93:E6:AE:54:AC:89:46:C4:0B:75:82:68:CC:08:3F:D0:E7:3B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84617808087DF1DFA0459C5EAB7A9E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5quT5q5UrIlGxAt1gmjMCD_Q5zs.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31715 IP address blocks: 31.58.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:61:78:08:08:7d:f1:df:a0:45:9c:5e:ab:7a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ab93e6ae54ac8946c40b758268cc083fd0e73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:0c:75:b1:60:57:48:a9:91:fd:a2:cb:f9: 72:8f:97:44:a4:d0:43:28:a8:76:e8:d3:64:be:db: 80:3b:42:77:86:b8:dc:62:0c:95:c4:35:16:d8:01: e2:a2:cc:9c:b5:71:52:b9:a0:60:f7:b8:d9:37:a3: b0:35:16:e3:8e:2a:33:f0:5c:70:d8:b0:00:f3:c4: 0b:58:c2:91:f0:18:e9:24:c9:a0:e6:37:27:e2:55: 7b:f6:67:6a:5d:38:33:e8:27:e7:ab:44:20:58:0b: b3:b0:f0:11:cc:d0:79:3f:8c:ab:6b:76:6c:c1:ea: 84:02:c5:c3:d9:5a:82:df:43:0d:c1:e0:01:a6:d0: ac:f5:c2:e0:d4:46:28:1f:01:1d:62:84:78:7e:a5: 39:60:e4:75:11:a4:83:3a:1c:a3:8a:0a:93:40:0f: 19:6f:2c:87:40:5c:90:af:74:6d:0a:e2:01:b6:6c: 41:4b:0d:3e:fa:1d:80:51:29:a3:36:59:d1:9f:af: 2f:5c:c6:8e:18:0a:c6:b3:ac:cd:85:ec:7e:19:73: 54:61:f4:21:df:fe:78:14:c6:89:c5:9f:8c:09:ec: 5e:a8:29:56:a3:6a:e7:77:78:b2:44:c0:40:80:5a: 0a:87:8b:c9:17:90:44:e3:46:5e:9c:d9:f4:c7:a7: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:93:E6:AE:54:AC:89:46:C4:0B:75:82:68:CC:08:3F:D0:E7:3B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5quT5q5UrIlGxAt1gmjMCD_Q5zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.153.0/24 Signature Algorithm: sha256WithRSAEncryption b4:5f:78:2e:3c:f1:0d:d5:13:50:71:e3:2f:db:9d:9f:a8:9b: 79:49:79:7a:02:8c:12:b5:b0:51:56:7e:16:c2:3a:98:1c:eb: a2:d6:7f:7c:de:e5:fe:f9:d9:fd:75:12:7c:1b:2d:97:6d:f1: 77:30:02:7d:d5:e1:9f:61:1d:b7:85:b1:20:32:91:0e:e2:f1: ab:91:e9:bf:5f:63:8c:a0:18:c9:31:c5:5c:b0:9c:95:18:1b: eb:cd:34:20:6c:d5:3f:53:c6:ba:9d:9c:3c:73:a3:82:34:c9: 4d:6b:bd:ed:86:ac:b7:05:12:5c:65:13:2b:0d:5c:47:86:b5: 37:1e:a3:4d:8f:a5:dd:df:5f:2a:4d:2f:18:e9:71:04:fd:84: 75:b7:f4:34:1f:44:8e:ef:93:f4:85:80:dd:69:59:b5:ac:2b: 76:21:a3:27:0b:f1:a7:3d:3d:6c:bf:49:fe:2e:eb:05:3a:ed: e8:ac:6b:15:e9:49:cc:5f:a2:e3:01:15:f2:94:f5:3f:1d:c7: ef:e7:68:c9:76:96:b6:af:70:70:79:c5:ad:90:28:49:09:81: 1a:88:fd:a1:e8:d9:13:0e:85:46:57:bb:0b:44:42:b9:f5:65: a7:30:c3:9d:b7:10:ec:6f:c1:95:ee:01:a8:08:8a:c4:6f:f1: 4f:0e:64:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGF4CAh98d+gRZxeq3qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmFiOTNlNmFlNTRhYzg5NDZjNDBiNzU4MjY4Y2MwODNmZDBlNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv4MdbFgV0ipkf2iy/lyj5dEpNBD KKh26NNkvtuAO0J3hrjcYgyVxDUW2AHiosyctXFSuaBg97jZN6OwNRbjjioz8Fxw 2LAA88QLWMKR8BjpJMmg5jcn4lV79mdqXTgz6Cfnq0QgWAuzsPARzNB5P4yra3Zs weqEAsXD2VqC30MNweABptCs9cLg1EYoHwEdYoR4fqU5YOR1EaSDOhyjigqTQA8Z byyHQFyQr3RtCuIBtmxBSw0++h2AUSmjNlnRn68vXMaOGArGs6zNhex+GXNUYfQh 3/54FMaJxZ+MCexeqClWo2rnd3iyRMBAgFoKh4vJF5BE40ZenNn0x6cOqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOark+auVKyJRsQLdYJozAg/0Oc7MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNXF1VDVxNVVySWxHeEF0MWdtak1DRF9RNXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqZMA0G CSqGSIb3DQEBCwUAA4IBAQC0X3guPPEN1RNQceMv252fqJt5SXl6AowStbBRVn4W wjqYHOui1n983uX++dn9dRJ8Gy2XbfF3MAJ91eGfYR23hbEgMpEO4vGrkem/X2OM oBjJMcVcsJyVGBvrzTQgbNU/U8a6nZw8c6OCNMlNa73thqy3BRJcZRMrDVxHhrU3 HqNNj6Xd318qTS8Y6XEE/YR1t/Q0H0SO75P0hYDdaVm1rCt2IaMnC/GnPT1sv0n+ LusFOu3orGsV6UnMX6LjARXylPU/Hcfv52jJdpa2r3BwecWtkChJCYEaiP2h6NkT DoVGV7sLREK59WWnMMOdtxDsb8GV7gGoCIrEb/FPDmTO -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:22 2026 by rpki-client