This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8rZzvYVBziU08FRB7rC8TUEStPw.roa File: 8rZzvYVBziU08FRB7rC8TUEStPw.roa (raw, json) Hash identifier: +/n61gSKq9ItIhqjC7+lfnXIqDjlxwuWmW5++eeVK/Q= Subject key identifier: F2:B6:73:BD:85:41:CE:25:34:F0:54:41:EE:B0:BC:4D:41:12:B4:FC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B2E4EAF3E9E493BA10C154616C09 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8rZzvYVBziU08FRB7rC8TUEStPw.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213385 IP address blocks: 31.59.186.0/24 maxlen: 24 31.59.212.0/24 maxlen: 24 217.60.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b2:e4:ea:f3:e9:e4:93:ba:10:c1:54:61:6c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2b673bd8541ce2534f05441eeb0bc4d4112b4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:a7:6e:c9:12:24:47:de:47:04:4b:d4:79: 4c:01:32:a3:76:af:a9:3e:41:d6:a7:45:28:cb:58: 90:19:0c:f6:24:a9:29:c1:69:4c:0f:cb:cd:ff:86: 66:39:6c:ef:41:42:f5:13:9f:ac:3e:c1:76:e0:53: 3a:94:59:c7:df:7f:d2:49:a5:6e:e7:cd:38:20:ad: f0:bb:7d:80:22:d9:f7:29:be:f2:85:3c:74:84:7b: 15:b4:cb:78:21:df:b1:dc:0b:3c:9c:b4:6b:95:a4: d9:85:17:15:b0:4b:72:94:e3:9b:6e:03:06:5c:61: 8e:96:26:4f:19:7f:08:eb:60:92:58:0b:2f:54:d6: cc:87:e3:1c:cc:ba:34:40:e3:a6:bc:65:f0:10:6e: 69:21:18:df:9a:91:33:95:ff:2a:37:9c:26:8e:ac: 26:4b:d2:ff:c2:00:20:16:15:08:d6:6d:86:9e:b2: 1a:ea:c0:23:d2:a3:69:25:26:5d:02:cb:e3:39:44: ba:d5:9c:85:b1:17:73:ca:c7:43:ab:db:37:97:bf: dd:c2:57:cd:15:c7:93:36:f0:42:21:2e:27:cb:c4: 64:60:7d:55:ad:b0:d8:b9:0e:08:c9:f3:0a:a7:03: 4e:02:d8:fe:f0:48:c7:d1:d1:37:ff:6d:4b:af:66: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:73:BD:85:41:CE:25:34:F0:54:41:EE:B0:BC:4D:41:12:B4:FC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8rZzvYVBziU08FRB7rC8TUEStPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.186.0/24 31.59.212.0/24 217.60.253.0/24 Signature Algorithm: sha256WithRSAEncryption 33:7f:95:c5:a0:49:80:e2:09:0f:a4:10:07:4d:ff:53:65:0d: 61:9e:35:8b:23:49:e0:05:e1:56:6a:8b:c4:f3:f6:11:c3:8f: b7:27:ab:02:a7:78:06:64:5c:f1:8a:01:02:89:d6:2d:3b:35: 09:b4:d6:dc:f8:52:43:92:d3:a0:2c:27:5e:26:33:a4:ea:13: 85:7f:23:1b:1b:09:f5:d3:b9:ff:73:61:c3:21:0d:1d:a8:b1: 3f:88:f5:93:90:df:65:32:2d:72:3e:c5:9f:12:3c:a8:37:a2: 2b:70:3d:d6:44:3f:93:bc:e0:34:0b:3b:d5:d2:34:03:eb:e6: 91:73:78:c8:1b:42:89:a4:bb:6e:5f:36:93:26:5f:0e:1c:c4: d6:86:ed:e0:41:80:bb:e3:1a:36:4f:54:bb:92:89:82:89:5a: 42:0c:0f:0a:8f:dc:ae:88:45:a0:9c:63:b4:df:04:95:74:db: ae:4f:5c:77:f6:11:95:2a:d6:b4:e6:08:d2:12:85:4e:60:c6: 4b:13:e3:b2:c5:f4:57:8e:5b:f2:16:84:28:6b:66:45:5b:4d: 86:bb:af:44:99:ae:87:15:9a:18:95:2d:7a:f8:9b:9f:5b:81: 96:83:4d:73:95:c7:39:68:17:2f:a6:ab:4b:4e:00:e6:b9:5b: 2d:97:28:7d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hLLk6vPp5JO6EMFUYWwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmI2NzNiZDg1NDFjZTI1MzRmMDU0NDFlZWIwYmM0ZDQxMTJiNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA2nbskSJEfeRwRL1HlMATKjdq+p PkHWp0Uoy1iQGQz2JKkpwWlMD8vN/4ZmOWzvQUL1E5+sPsF24FM6lFnH33/SSaVu 5804IK3wu32AItn3Kb7yhTx0hHsVtMt4Id+x3As8nLRrlaTZhRcVsEtylOObbgMG XGGOliZPGX8I62CSWAsvVNbMh+MczLo0QOOmvGXwEG5pIRjfmpEzlf8qN5wmjqwm S9L/wgAgFhUI1m2GnrIa6sAj0qNpJSZdAsvjOUS61ZyFsRdzysdDq9s3l7/dwlfN FceTNvBCIS4ny8RkYH1VrbDYuQ4IyfMKpwNOAtj+8EjH0dE3/21Lr2ZhfwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPK2c72FQc4lNPBUQe6wvE1BErT8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOHJaenZZVkJ6aVUwOEZSQjdyQzhUVUVTdFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzu6AwQA HzvUAwQA2Tz9MA0GCSqGSIb3DQEBCwUAA4IBAQAzf5XFoEmA4gkPpBAHTf9TZQ1h njWLI0ngBeFWaovE8/YRw4+3J6sCp3gGZFzxigECidYtOzUJtNbc+FJDktOgLCde JjOk6hOFfyMbGwn107n/c2HDIQ0dqLE/iPWTkN9lMi1yPsWfEjyoN6IrcD3WRD+T vOA0CzvV0jQD6+aRc3jIG0KJpLtuXzaTJl8OHMTWhu3gQYC74xo2T1S7komCiVpC DA8Kj9yuiEWgnGO03wSVdNuuT1x39hGVKta05gjSEoVOYMZLE+OyxfRXjlvyFoQo a2ZFW02Gu69Ema6HFZoYlS16+JufW4GWg01zlcc5aBcvpqtLTgDmuVstlyh9 -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:10 2026 by rpki-client