This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6AFMaSYqFn9QAqd9P9AowXfxSTc.roa File: 6AFMaSYqFn9QAqd9P9AowXfxSTc.roa (raw, json) Hash identifier: JAko32sWA/mY1bDjYX4DR61PoFSg3qDbvS+ULAkM224= Subject key identifier: E8:01:4C:69:26:2A:16:7F:50:02:A7:7D:3F:D0:28:C1:77:F1:49:37 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84782D168C2968F245326697C223DB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6AFMaSYqFn9QAqd9P9AowXfxSTc.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63902 IP address blocks: 31.59.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:78:2d:16:8c:29:68:f2:45:32:66:97:c2:23:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8014c69262a167f5002a77d3fd028c177f14937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:79:b5:a5:42:b0:1a:20:58:9a:94:d0:c2: 30:bb:d7:d6:a5:e8:1e:b4:82:e0:58:51:62:5d:ca: 02:bd:0f:ea:50:f6:48:53:fc:7f:34:5b:2c:ed:ed: 27:66:d0:31:38:46:04:ea:22:27:d4:06:da:df:5a: de:8c:55:60:d8:d0:33:bb:10:13:39:0a:db:45:12: 7c:3c:ba:7c:d8:96:81:b9:63:69:03:ce:96:c1:f6: 0c:6e:a1:dc:e6:62:e3:b0:8d:9f:97:d2:ed:36:3b: 1d:46:5e:4a:21:65:2f:74:51:4f:d6:70:d2:e6:f3: 91:62:6f:d2:65:bd:7f:08:2a:35:8b:5e:3c:2c:c9: 5d:65:f0:54:9f:13:22:2a:30:20:98:99:7b:8e:23: 21:c1:ac:e6:00:84:45:36:ca:70:f6:41:61:87:d7: 88:b3:95:4d:52:ba:2b:ae:7a:a3:c9:45:eb:7e:72: d7:1b:40:31:49:35:38:fa:20:ee:45:2c:56:6b:c6: c6:0d:ed:25:c0:1b:b9:13:07:5c:52:a8:74:af:6b: 00:f1:4d:06:ed:3f:06:56:43:18:69:8d:30:9d:d7: a5:c7:dd:27:74:1e:35:b1:45:9b:0b:fd:0a:61:7f: eb:10:d4:23:26:af:68:ae:da:37:ec:f8:15:e6:8f: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:01:4C:69:26:2A:16:7F:50:02:A7:7D:3F:D0:28:C1:77:F1:49:37 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6AFMaSYqFn9QAqd9P9AowXfxSTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.166.0/24 Signature Algorithm: sha256WithRSAEncryption 29:22:68:2d:f5:ca:b3:ff:c2:0c:4d:36:24:1a:a8:90:78:a6: 2b:8f:89:83:fe:da:aa:18:1b:46:aa:10:44:52:e9:08:7d:24: 22:fa:2a:8b:69:af:de:ef:19:0d:14:24:01:4e:01:d9:6c:26: 3f:f7:24:f3:d6:e0:87:98:03:dc:0d:3e:27:ad:d2:99:f6:09: 96:e5:7a:a3:d8:18:df:fc:8d:2d:20:85:3e:1c:9e:a2:62:af: c0:c5:20:af:6a:f3:6c:f9:69:4e:56:c1:f3:e6:be:85:8e:ae: 73:8a:9b:62:32:70:65:f4:43:0e:2b:8e:00:06:79:d6:c1:6e: 74:6e:16:ad:03:e4:23:5e:5d:bb:8f:d9:67:c8:9f:e6:db:b7: ad:02:d5:c1:9f:c9:f1:ab:e4:02:50:1e:6a:42:70:26:e9:89: ee:b7:79:45:41:23:6c:0f:18:ab:79:3c:22:dd:21:58:22:c7: a0:a4:83:ab:e1:fe:31:af:ea:f1:76:17:f7:c4:ff:15:11:ce: 2b:df:ce:13:01:18:a0:00:0b:1e:41:0f:6a:36:bf:66:74:21: 1f:aa:06:c3:39:5d:3d:38:bb:19:dd:f2:c7:6b:22:4b:f0:cb: 30:fc:78:28:57:82:e1:f4:6a:db:83:e7:f4:ad:04:bb:56:05: fc:79:ed:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHgtFowpaPJFMmaXwiPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODAxNGM2OTI2MmExNjdmNTAwMmE3N2QzZmQwMjhjMTc3ZjE0OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU15taVCsBogWJqU0MIwu9fWpege tILgWFFiXcoCvQ/qUPZIU/x/NFss7e0nZtAxOEYE6iIn1Aba31rejFVg2NAzuxAT OQrbRRJ8PLp82JaBuWNpA86WwfYMbqHc5mLjsI2fl9LtNjsdRl5KIWUvdFFP1nDS 5vORYm/SZb1/CCo1i148LMldZfBUnxMiKjAgmJl7jiMhwazmAIRFNspw9kFhh9eI s5VNUrorrnqjyUXrfnLXG0AxSTU4+iDuRSxWa8bGDe0lwBu5EwdcUqh0r2sA8U0G 7T8GVkMYaY0wndelx90ndB41sUWbC/0KYX/rENQjJq9orto37PgV5o8b+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgBTGkmKhZ/UAKnfT/QKMF38Uk3MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNkFGTWFTWXFGbjlRQXFkOVA5QW93WGZ4U1RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzumMA0G CSqGSIb3DQEBCwUAA4IBAQApImgt9cqz/8IMTTYkGqiQeKYrj4mD/tqqGBtGqhBE UukIfSQi+iqLaa/e7xkNFCQBTgHZbCY/9yTz1uCHmAPcDT4nrdKZ9gmW5Xqj2Bjf /I0tIIU+HJ6iYq/AxSCvavNs+WlOVsHz5r6Fjq5ziptiMnBl9EMOK44ABnnWwW50 bhatA+QjXl27j9lnyJ/m27etAtXBn8nxq+QCUB5qQnAm6Ynut3lFQSNsDxireTwi 3SFYIsegpIOr4f4xr+rxdhf3xP8VEc4r384TARigAAseQQ9qNr9mdCEfqgbDOV09 OLsZ3fLHayJL8Msw/HgoV4Lh9Grbg+f0rQS7VgX8ee3M -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:14 2026 by rpki-client