This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9AhEokyGvVLnVc9lcS5yDlC-NAk.roa File: 9AhEokyGvVLnVc9lcS5yDlC-NAk.roa (raw, json) Hash identifier: 7dVmzAjj7tbMXQPl8LmL93Xdx585Tf4YxYd+3zpr7uc= Subject key identifier: F4:08:44:A2:4C:86:BD:52:E7:55:CF:65:71:2E:72:0E:50:BE:34:09 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D2A52361D943E2761C6455EFA9AD Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9AhEokyGvVLnVc9lcS5yDlC-NAk.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216129 IP address blocks: 31.57.117.0/24 maxlen: 24 31.58.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d2:a5:23:61:d9:43:e2:76:1c:64:55:ef:a9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f40844a24c86bd52e755cf65712e720e50be3409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:a3:5f:8a:38:17:2f:95:4c:dc:e1:07:bd: fe:ea:2d:e2:05:69:39:c1:6b:95:76:8e:81:cc:fa: 8f:fb:42:66:92:89:ba:b2:78:93:e2:70:88:3a:30: 3c:51:47:ce:c0:07:65:69:8b:cc:4c:25:a0:b3:dc: e9:e3:60:d5:69:a7:6d:88:26:2d:8d:30:ba:56:7a: 9a:69:4f:ec:0f:93:4e:93:7c:0d:21:74:5f:de:40: 86:6a:6c:00:01:b5:20:71:c8:92:b4:9e:45:8d:33: 7f:63:e2:34:db:67:e9:e1:af:ae:9e:31:3c:9b:86: 26:b8:25:71:3f:02:8a:86:03:ca:ee:a2:0b:9c:56: 1d:bc:46:ef:f0:20:cd:ec:64:9a:4b:56:c0:cf:c7: 99:80:df:ee:91:3c:08:d8:18:8d:b7:df:cb:6a:d8: 8e:15:20:9a:6d:a4:ef:0b:00:fe:5e:a3:0d:fe:16: d1:93:22:a2:db:92:84:58:a7:9b:73:12:d0:09:43: 13:f4:f8:00:f8:f4:45:b1:f0:9f:e3:88:55:2d:d3: 96:a2:e8:ea:be:0b:f2:1f:82:fa:ae:13:81:90:e5: cd:70:e5:fd:22:35:47:8b:34:bb:d7:88:b6:ff:51: 2f:29:ef:4f:ad:39:e5:81:05:b4:48:45:63:87:c5: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:08:44:A2:4C:86:BD:52:E7:55:CF:65:71:2E:72:0E:50:BE:34:09 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9AhEokyGvVLnVc9lcS5yDlC-NAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.117.0/24 31.58.85.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e7:74:04:d6:3d:b4:d9:47:18:59:25:5e:f0:43:ff:22:93: 5f:a6:bc:04:66:8d:c6:fb:e7:48:3b:4c:c6:53:45:b4:21:e2: 82:a8:cf:04:f0:17:8c:6c:5e:02:5f:57:cc:ac:73:61:fe:7a: b8:8b:2b:9b:fa:6d:c0:d5:a6:9f:92:c3:e0:55:fa:d3:59:80: 9c:db:a6:66:43:31:bf:12:19:26:34:53:56:48:d4:2c:05:19: f7:f9:cc:6f:b1:18:78:cf:8e:6a:56:00:39:02:ee:52:c9:9a: f7:b1:78:1a:c0:5b:d2:1d:7f:4f:85:91:78:9a:71:8e:9e:59: 11:97:3f:2f:e7:50:2e:cd:93:c1:2c:22:cf:e4:a2:08:79:77: 5c:aa:b2:35:57:f0:05:15:b3:8d:61:a3:d2:8b:e2:89:d5:56: a4:dc:44:3c:68:06:96:0d:d8:ab:85:b3:2e:66:17:e2:b3:df: ae:fc:6f:b9:d7:67:9b:23:f2:06:fe:45:b8:2a:28:66:20:f0: a7:58:ad:7c:75:02:cb:b4:6a:e1:d5:71:d8:f0:3c:b6:d8:5b: 94:85:83:a3:24:45:bb:3c:5e:99:63:04:8d:95:80:96:aa:6e: ba:35:70:39:fa:9e:eb:6a:2c:48:6c:16:03:7c:db:f8:f5:79: 92:6b:2e:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hNKlI2HZQ+J2HGRV76mtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDA4NDRhMjRjODZiZDUyZTc1NWNmNjU3MTJlNzIwZTUwYmUzNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J2jX4o4Fy+VTNzhB73+6i3iBWk5 wWuVdo6BzPqP+0Jmkom6sniT4nCIOjA8UUfOwAdlaYvMTCWgs9zp42DVaadtiCYt jTC6VnqaaU/sD5NOk3wNIXRf3kCGamwAAbUgcciStJ5FjTN/Y+I022fp4a+unjE8 m4YmuCVxPwKKhgPK7qILnFYdvEbv8CDN7GSaS1bAz8eZgN/ukTwI2BiNt9/LatiO FSCabaTvCwD+XqMN/hbRkyKi25KEWKebcxLQCUMT9PgA+PRFsfCf44hVLdOWoujq vgvyH4L6rhOBkOXNcOX9IjVHizS714i2/1EvKe9PrTnlgQW0SEVjh8XjlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPQIRKJMhr1S51XPZXEucg5QvjQJMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOUFoRW9reUd2VkxuVmM5bGNTNXlEbEMtTkFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzl1AwQA HzpVMA0GCSqGSIb3DQEBCwUAA4IBAQBj53QE1j202UcYWSVe8EP/IpNfprwEZo3G ++dIO0zGU0W0IeKCqM8E8BeMbF4CX1fMrHNh/nq4iyub+m3A1aafksPgVfrTWYCc 26ZmQzG/EhkmNFNWSNQsBRn3+cxvsRh4z45qVgA5Au5SyZr3sXgawFvSHX9PhZF4 mnGOnlkRlz8v51AuzZPBLCLP5KIIeXdcqrI1V/AFFbONYaPSi+KJ1Vak3EQ8aAaW DdirhbMuZhfis9+u/G+512ebI/IG/kW4KihmIPCnWK18dQLLtGrh1XHY8Dy22FuU hYOjJEW7PF6ZYwSNlYCWqm66NXA5+p7raixIbBYDfNv49XmSay6d -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client