This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ZbkuxTP0XO81RLMbgGU80qMfpU.roa File: 8ZbkuxTP0XO81RLMbgGU80qMfpU.roa (raw, json) Hash identifier: I7Qu3gpmdsOypGvodjp6snn/hvxbGj2Pedf7ypttaT4= Subject key identifier: F1:96:E4:BB:14:CF:D1:73:BC:D5:12:CC:6E:01:94:F3:4A:8C:7E:95 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846A4FCE08486B67853079FA94AB4D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ZbkuxTP0XO81RLMbgGU80qMfpU.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48529 IP address blocks: 31.58.53.0/24 maxlen: 24 31.58.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6a:4f:ce:08:48:6b:67:85:30:79:fa:94:ab:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f196e4bb14cfd173bcd512cc6e0194f34a8c7e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c4:d9:f8:f9:28:9d:fb:14:9b:0f:98:13:67: f6:a2:bc:dc:75:d0:5a:18:24:8a:ab:0b:0e:fd:8d: b1:15:e9:64:fe:95:55:c0:a9:02:9f:cc:1d:bb:1c: c3:0e:68:43:e2:47:ed:00:86:45:af:72:1c:fc:99: 14:f2:58:c1:a8:61:23:d5:07:6a:4a:3a:28:99:6e: 03:10:ee:c1:c1:bf:ea:30:c3:08:dd:b7:21:70:b4: 1c:83:4a:2d:e0:1c:9a:65:d3:f0:2a:fd:66:d1:05: 53:13:c8:c6:b4:29:98:2e:86:06:53:b0:74:76:42: 43:3d:13:6b:88:99:95:6a:ca:d1:47:2f:3a:e7:00: e1:d8:2f:49:08:81:1f:bd:8e:b8:9e:07:0f:76:11: 20:5e:e0:12:2f:46:ad:4e:ff:35:7f:8b:2b:54:d1: 2e:97:5d:df:b8:11:47:90:8d:9c:0b:5c:95:5f:e0: 5d:de:05:37:3a:52:7b:83:3f:1f:8a:f7:6b:e3:5e: c5:c2:2a:d4:f6:2f:31:b8:a5:dd:70:20:e5:5c:ca: d4:9d:3d:64:ef:21:f2:a8:8f:a8:4b:c8:a1:a9:45: 68:1e:16:90:5d:f3:ad:27:00:37:71:0e:5e:3e:2c: d0:5f:94:20:02:25:b9:75:f0:b9:dd:54:04:21:58: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:96:E4:BB:14:CF:D1:73:BC:D5:12:CC:6E:01:94:F3:4A:8C:7E:95 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ZbkuxTP0XO81RLMbgGU80qMfpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.53.0/24 31.58.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:4e:18:29:da:68:f4:af:b0:0b:0b:7e:09:eb:6b:a9:ff:a0: 44:7a:1a:56:14:6c:bb:51:d5:8f:c8:05:32:1b:c1:ba:4e:27: a4:27:e0:71:dd:cb:33:bc:fc:a9:81:e8:ca:eb:9d:8d:d5:b2: 21:36:7a:c2:2f:03:46:29:8d:9c:eb:59:d1:57:01:d9:37:58: 6b:44:8e:4b:08:ff:30:50:ad:e8:5d:cc:22:a2:2a:ec:48:a1: c8:1d:6b:5a:5c:8c:75:b8:3f:b3:4c:c5:42:f1:57:6b:43:6e: be:71:12:4a:03:df:07:1e:dc:ab:cf:77:18:60:a0:9b:b9:6d: 70:7d:74:78:9a:d2:5d:9f:1a:bb:0c:63:8e:f1:a6:14:dd:31: 6b:a8:7d:da:f0:76:42:83:a5:57:c1:91:4a:bd:c0:24:e1:d1: a6:26:28:5b:2c:52:12:60:7d:86:58:c5:5c:d0:8a:27:1e:f7: 0c:03:b4:91:85:a2:66:1e:94:c2:47:5d:97:e7:9f:3c:7c:ce: 12:1b:2d:3c:6f:0f:a0:79:c1:cb:22:4d:86:a7:63:5f:29:6c: 91:e2:23:cf:9f:d2:93:31:11:b9:d9:f0:1d:1b:b9:84:c2:49: 51:60:49:a3:ec:79:5c:e2:3b:ab:10:27:f5:61:3b:26:8c:95: 1a:d5:80:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hGpPzghIa2eFMHn6lKtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTk2ZTRiYjE0Y2ZkMTczYmNkNTEyY2M2ZTAxOTRmMzRhOGM3ZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8TZ+PkonfsUmw+YE2f2orzcddBa GCSKqwsO/Y2xFelk/pVVwKkCn8wduxzDDmhD4kftAIZFr3Ic/JkU8ljBqGEj1Qdq SjoomW4DEO7Bwb/qMMMI3bchcLQcg0ot4ByaZdPwKv1m0QVTE8jGtCmYLoYGU7B0 dkJDPRNriJmVasrRRy865wDh2C9JCIEfvY64ngcPdhEgXuASL0atTv81f4srVNEu l13fuBFHkI2cC1yVX+Bd3gU3OlJ7gz8fivdr417FwirU9i8xuKXdcCDlXMrUnT1k 7yHyqI+oS8ihqUVoHhaQXfOtJwA3cQ5ePizQX5QgAiW5dfC53VQEIVg8PwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPGW5LsUz9FzvNUSzG4BlPNKjH6VMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOFpia3V4VFAwWE84MVJMTWJnR1U4MHFNZnBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzo1AwQA HzrjMA0GCSqGSIb3DQEBCwUAA4IBAQBuThgp2mj0r7ALC34J62up/6BEehpWFGy7 UdWPyAUyG8G6TiekJ+Bx3cszvPypgejK652N1bIhNnrCLwNGKY2c61nRVwHZN1hr RI5LCP8wUK3oXcwioirsSKHIHWtaXIx1uD+zTMVC8VdrQ26+cRJKA98HHtyrz3cY YKCbuW1wfXR4mtJdnxq7DGOO8aYU3TFrqH3a8HZCg6VXwZFKvcAk4dGmJihbLFIS YH2GWMVc0IonHvcMA7SRhaJmHpTCR12X5588fM4SGy08bw+gecHLIk2Gp2NfKWyR 4iPPn9KTMRG52fAdG7mEwklRYEmj7Hlc4jurECf1YTsmjJUa1YBY -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client