This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9BSV-aYhBLuyYOz4MlbSpAcNB_8.roa File: 9BSV-aYhBLuyYOz4MlbSpAcNB_8.roa (raw, json) Hash identifier: 0ppsqHfVLkbBXjomlO0ut3lBvy+LdkOSEwAzClWZeJo= Subject key identifier: F4:14:95:F9:A6:21:04:BB:B2:60:EC:F8:32:56:D2:A4:07:0D:07:FF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AB713C11EBB9557B0882FD5F7E227B320 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9BSV-aYhBLuyYOz4MlbSpAcNB_8.roa Signing time: Mon 24 Nov 2025 18:15:16 +0000 ROA not before: Mon 24 Nov 2025 18:15:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60404 IP address blocks: 31.59.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:13:c1:1e:bb:95:57:b0:88:2f:d5:f7:e2:27:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 24 18:15:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f41495f9a62104bbb260ecf83256d2a4070d07ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:03:a0:10:ae:be:ef:26:05:0e:a3:a6:98: 74:e1:bc:e8:d5:28:05:39:b2:cf:64:09:a0:61:71: 02:d1:3e:87:c9:bc:1a:db:bf:29:e4:4a:7f:6e:5f: 64:c2:72:f2:70:44:8e:0f:d5:14:df:3a:18:68:6d: 96:5c:83:ae:b2:62:77:c4:78:14:37:41:a1:95:81: c8:94:80:5d:05:67:7f:7a:0b:2e:5b:56:33:51:07: 0a:d8:74:d1:f8:d9:9c:d1:9c:2d:85:65:38:80:ca: cc:e7:95:2e:c7:b3:a5:34:6e:77:8e:a7:23:b7:83: ec:95:56:ff:6a:49:38:2d:b2:cf:7f:d6:a9:ed:e6: c1:42:3c:de:1c:2b:a8:91:a8:97:7b:4f:f6:f7:5c: 9b:6c:ad:19:2c:88:61:70:b9:9d:b1:6d:8a:e8:54: be:fd:48:87:f3:a0:84:d3:ac:68:1f:5e:24:82:f0: 33:17:7b:9d:73:71:52:7d:72:81:5d:7b:d5:c2:34: 3d:27:53:2e:9a:67:77:61:e2:85:34:8b:62:4a:d7: 0c:07:8d:b5:73:8a:32:28:c4:b9:1b:7d:c2:23:b0: 2f:8f:37:61:2f:51:b4:bd:98:c6:02:8c:c2:22:2f: 09:7d:20:6a:ab:4b:a9:5d:08:30:25:b5:e8:e0:d9: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:95:F9:A6:21:04:BB:B2:60:EC:F8:32:56:D2:A4:07:0D:07:FF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9BSV-aYhBLuyYOz4MlbSpAcNB_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.101.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:ab:cb:68:56:18:a2:eb:c5:5a:96:3a:2b:f0:fc:c6:c0:e9: 58:24:b0:70:b3:ea:38:45:de:c2:0f:ed:69:07:b4:17:b1:67: f0:c6:da:19:7f:38:0e:34:40:42:3b:34:cd:79:9f:82:83:7a: 7e:08:ec:43:db:bf:90:0c:49:4e:e9:60:20:60:c9:cc:d9:d7: 15:73:9f:07:09:ad:4b:55:b3:ac:91:5f:ad:5a:57:06:0a:1c: ce:ae:60:fb:a0:73:13:56:b0:60:f4:67:0e:6d:d5:a5:da:5c: 49:c0:90:0a:83:a7:dd:d2:77:9c:c8:ae:1d:76:31:81:9f:ca: 0a:c2:ae:86:ef:48:25:0b:18:43:de:82:97:4c:d5:f1:81:c4: e3:f9:0e:af:5b:01:a0:10:ce:19:78:7e:32:c6:9f:9f:11:5d: 17:4b:d9:7a:bd:5c:e7:ef:0e:64:74:0d:4e:a0:0a:aa:88:50: 81:2b:8c:68:6c:24:4a:4e:cb:e6:8a:07:e0:df:24:a7:b4:ae: c7:04:db:89:96:91:46:65:4b:1a:9b:46:15:0c:3c:14:89:e5: e9:01:e2:65:58:97:38:98:8e:46:19:e6:b6:63:21:3b:e8:38: 65:e6:e2:ef:e5:39:17:b0:c4:92:a5:8f:2a:8c:46:e0:a6:97: 48:68:02:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq3E8Eeu5VXsIgv1ffiJ7MgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI0MTgxNTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDE0OTVmOWE2MjEwNGJiYjI2MGVjZjgzMjU2ZDJhNDA3MGQwN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JgDoBCuvu8mBQ6jpph04bzo1SgF ObLPZAmgYXEC0T6Hybwa278p5Ep/bl9kwnLycESOD9UU3zoYaG2WXIOusmJ3xHgU N0GhlYHIlIBdBWd/egsuW1YzUQcK2HTR+Nmc0ZwthWU4gMrM55Uux7OlNG53jqcj t4PslVb/akk4LbLPf9ap7ebBQjzeHCuokaiXe0/291ybbK0ZLIhhcLmdsW2K6FS+ /UiH86CE06xoH14kgvAzF3udc3FSfXKBXXvVwjQ9J1Mummd3YeKFNItiStcMB421 c4oyKMS5G33CI7AvjzdhL1G0vZjGAozCIi8JfSBqq0upXQgwJbXo4NnF4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQUlfmmIQS7smDs+DJW0qQHDQf/MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOUJTVi1hWWhCTHV5WU96NE1sYlNwQWNOQl84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztlMA0G CSqGSIb3DQEBCwUAA4IBAQAcq8toVhii68Valjor8PzGwOlYJLBws+o4Rd7CD+1p B7QXsWfwxtoZfzgONEBCOzTNeZ+Cg3p+COxD27+QDElO6WAgYMnM2dcVc58HCa1L VbOskV+tWlcGChzOrmD7oHMTVrBg9GcObdWl2lxJwJAKg6fd0necyK4ddjGBn8oK wq6G70glCxhD3oKXTNXxgcTj+Q6vWwGgEM4ZeH4yxp+fEV0XS9l6vVzn7w5kdA1O oAqqiFCBK4xobCRKTsvmigfg3ySntK7HBNuJlpFGZUsam0YVDDwUieXpAeJlWJc4 mI5GGea2YyE76Dhl5uLv5TkXsMSSpY8qjEbgppdIaALV -----END CERTIFICATE-----Generated at Tue Nov 25 11:26:36 2025 by rpki-client