This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7I5y7aqpfeJjlqhCItt2DB9ULog.roa File: 7I5y7aqpfeJjlqhCItt2DB9ULog.roa (raw, json) Hash identifier: OjNL0eCh0KFlzfutbSgjwoVUdBVVG12bQoM43rRUXTw= Subject key identifier: EC:8E:72:ED:AA:A9:7D:E2:63:96:A8:42:22:DB:76:0C:1F:54:2E:88 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84498D47E26CE37D3766F4C1F1B01F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7I5y7aqpfeJjlqhCItt2DB9ULog.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 31.56.154.0/24 maxlen: 24 31.56.158.0/24 maxlen: 24 31.56.159.0/24 maxlen: 24 31.56.168.0/24 maxlen: 24 31.56.169.0/24 maxlen: 24 31.56.170.0/24 maxlen: 24 31.56.171.0/24 maxlen: 24 31.56.174.0/24 maxlen: 24 31.56.175.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:49:8d:47:e2:6c:e3:7d:37:66:f4:c1:f1:b0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec8e72edaaa97de26396a84222db760c1f542e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:b5:26:56:84:54:81:65:48:dd:b2:9e:04: c5:c7:c3:27:17:e5:89:d2:a1:e2:dc:f9:f1:e6:fc: 1e:9d:68:84:ba:79:3b:fb:1e:aa:52:da:53:fc:18: f4:22:63:43:90:59:0f:74:1f:17:c4:fb:28:09:9b: 44:91:ad:a9:3d:54:8a:77:af:8d:82:20:16:d4:6c: 8e:56:96:46:59:37:50:cc:55:d4:62:1b:a1:39:dc: 7f:66:d7:8e:93:7e:73:39:ff:a9:2c:c6:19:e0:fe: a1:b6:6b:cc:3e:9d:e1:43:bc:d1:1c:65:f3:54:55: 26:a6:44:47:97:30:64:3d:aa:46:d7:01:b1:72:ed: 60:32:1c:4f:ec:0a:a5:a2:ea:81:0d:fc:1c:d2:2d: 65:4a:66:19:d5:71:6c:c2:2d:11:b3:ef:a8:45:34: 9b:0e:de:9f:73:01:c2:66:59:7e:84:68:d9:09:57: 45:37:26:6c:e9:3f:b0:51:6a:13:a0:9e:14:37:ae: d9:d6:1a:e4:80:c4:11:34:21:90:32:2e:61:78:16: ca:75:9d:99:1b:27:28:a7:6a:f8:bb:b7:81:b3:c1: 7a:24:ab:b8:4f:02:ea:da:f3:c4:33:bb:34:3b:d0: ac:70:53:0d:42:48:0b:87:5a:34:2d:62:8f:04:1c: dc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8E:72:ED:AA:A9:7D:E2:63:96:A8:42:22:DB:76:0C:1F:54:2E:88 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7I5y7aqpfeJjlqhCItt2DB9ULog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.154.0/24 31.56.158.0/23 31.56.168.0/22 31.56.174.0/23 31.58.34.0/23 Signature Algorithm: sha256WithRSAEncryption 58:c1:c8:c3:f7:5c:16:f5:73:e6:79:f4:f0:99:00:8e:a5:38: 7e:c2:d8:3b:a7:52:5d:eb:e0:ff:35:0b:4b:2e:38:e9:09:0d: a4:70:ed:f7:e4:8b:f1:23:04:56:0f:f1:f6:f6:5e:9d:10:48: 62:43:b7:cb:74:7e:12:7e:c5:f3:b2:26:63:a4:fa:d8:b2:87: 2d:a1:f7:de:f9:a8:82:ee:96:70:dc:79:96:57:3e:bc:da:b6: 74:cc:79:8e:f9:eb:7a:b3:ae:8f:8c:b3:b3:bc:69:09:b5:ae: d9:59:cc:d6:b7:4e:3c:df:55:9a:6c:39:60:7d:ce:5b:db:3b: 7f:d3:70:5c:83:92:79:0e:41:ef:3c:55:53:1e:56:2d:94:62: 15:d1:d4:94:50:49:92:29:6d:f9:c3:bf:75:7b:2c:be:dd:1e: c5:19:a2:2b:40:4c:22:6d:1b:cb:45:bf:48:41:0d:52:8a:3a: 59:b4:eb:ef:89:5b:e8:49:cb:25:06:4f:d1:68:9b:9a:f2:aa: 1e:b5:a0:66:fb:26:ea:13:7e:34:0f:8d:4d:70:f3:59:55:b3: 8c:2e:de:fd:c6:6e:a3:d4:f9:94:06:a5:f8:e0:90:02:60:3e: 27:a6:65:b6:6e:26:6c:03:5c:72:93:53:86:14:d8:e3:fa:4e: b8:b8:10:de -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hEmNR+Js4303ZvTB8bAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzhlNzJlZGFhYTk3ZGUyNjM5NmE4NDIyMmRiNzYwYzFmNTQyZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pe1JlaEVIFlSN2yngTFx8MnF+WJ 0qHi3Pnx5vwenWiEunk7+x6qUtpT/Bj0ImNDkFkPdB8XxPsoCZtEka2pPVSKd6+N giAW1GyOVpZGWTdQzFXUYhuhOdx/ZteOk35zOf+pLMYZ4P6htmvMPp3hQ7zRHGXz VFUmpkRHlzBkPapG1wGxcu1gMhxP7AqlouqBDfwc0i1lSmYZ1XFswi0Rs++oRTSb Dt6fcwHCZll+hGjZCVdFNyZs6T+wUWoToJ4UN67Z1hrkgMQRNCGQMi5heBbKdZ2Z Gycop2r4u7eBs8F6JKu4TwLq2vPEM7s0O9CscFMNQkgLh1o0LWKPBBzc0QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOyOcu2qqX3iY5aoQiLbdgwfVC6IMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvN0k1eTdhcXBmZUpqbHFoQ0l0dDJEQjlVTG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHziaAwQB HzieAwQCHzioAwQBHziuAwQBHzoiMA0GCSqGSIb3DQEBCwUAA4IBAQBYwcjD91wW 9XPmefTwmQCOpTh+wtg7p1Jd6+D/NQtLLjjpCQ2kcO335IvxIwRWD/H29l6dEEhi Q7fLdH4SfsXzsiZjpPrYsoctoffe+aiC7pZw3HmWVz682rZ0zHmO+et6s66PjLOz vGkJta7ZWczWt04831WabDlgfc5b2zt/03Bcg5J5DkHvPFVTHlYtlGIV0dSUUEmS KW35w791eyy+3R7FGaIrQEwibRvLRb9IQQ1SijpZtOvviVvoScslBk/RaJua8qoe taBm+ybqE340D41NcPNZVbOMLt79xm6j1PmUBqX44JACYD4npmW2biZsA1xyk1OG FNjj+k64uBDe -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:26 2026 by rpki-client