This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9EnS5dEUZJjV0lKP124buxa7Ls8.roa File: 9EnS5dEUZJjV0lKP124buxa7Ls8.roa (raw, json) Hash identifier: nPodT4ErX1a36h81SLrHWs9DWujaZI0arByV6lidioI= Subject key identifier: F4:49:D2:E5:D1:14:64:98:D5:D2:52:8F:D7:6E:1B:BB:16:BB:2E:CF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845E6592F3697A3A63E6E9CD46829E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9EnS5dEUZJjV0lKP124buxa7Ls8.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26737 IP address blocks: 31.57.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5e:65:92:f3:69:7a:3a:63:e6:e9:cd:46:82:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f449d2e5d1146498d5d2528fd76e1bbb16bb2ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a4:66:a7:a6:97:54:37:c4:41:49:09:f6:54: 68:da:0d:36:26:6c:52:ae:ed:24:4c:88:a4:e8:a2: af:f9:3e:cb:86:01:ca:3a:04:56:35:12:7e:5a:8b: 4e:62:dd:0f:77:dd:f1:77:05:02:66:95:5a:74:14: 96:13:cd:6d:0b:51:8d:28:cb:14:2a:45:b5:32:e1: 5f:74:43:6e:1b:bf:c9:d7:7e:25:5f:2a:9f:34:91: 71:d7:cf:82:28:2b:b8:eb:62:83:22:d0:8a:84:29: 4c:34:ef:67:de:4a:28:bd:bb:b9:45:8a:ff:8d:3d: 90:b0:76:3b:a9:12:af:f9:e6:09:6c:4e:4c:c1:fb: 14:73:7b:89:41:b1:8d:46:c9:17:94:60:e6:b8:b3: 1e:68:7e:5f:d0:ac:3e:07:31:35:51:ef:18:5a:ea: b2:8e:7e:67:89:08:f7:52:3a:4d:56:57:5d:ae:4c: 06:b1:ff:83:46:57:ab:12:46:f6:c5:27:8e:bb:53: f1:ef:32:0a:7e:58:0f:8c:09:04:df:bb:7f:e6:84: d1:09:0c:2b:88:df:32:c0:90:64:cd:77:84:59:03: f5:f0:9a:4b:73:07:c5:ea:68:d7:8f:61:24:ea:d4: 07:14:37:ed:96:f7:9e:a9:78:db:63:c8:a2:80:ef: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:49:D2:E5:D1:14:64:98:D5:D2:52:8F:D7:6E:1B:BB:16:BB:2E:CF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9EnS5dEUZJjV0lKP124buxa7Ls8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.212.0/23 Signature Algorithm: sha256WithRSAEncryption 60:01:07:87:29:a6:5e:4d:4f:be:a6:02:d4:1e:83:56:8f:53: d9:f1:1c:97:44:f4:d1:5b:58:86:8c:99:2a:d0:7c:f0:1e:46: aa:e8:0d:9a:91:8b:45:7e:b9:bd:80:98:4c:00:73:90:15:65: 9c:ee:72:7f:a1:b4:9a:cd:db:c4:66:86:3b:1e:5b:74:cc:54: 8f:92:a6:39:a5:32:53:ae:ef:1a:11:17:dc:1c:df:ad:be:a6: a2:bd:e0:27:8f:39:10:3e:f0:c0:56:6a:2e:ea:02:9a:76:fe: 6c:62:4c:3a:b7:e8:d1:95:22:72:a9:b4:69:eb:25:65:08:4e: 21:ea:ea:d2:ec:98:ed:36:b2:e9:56:87:37:fa:98:84:7c:37: b4:1c:9f:01:4e:12:08:39:c2:5a:6c:43:c0:d3:38:0c:d4:3e: 78:a5:f4:04:a4:e6:01:71:24:43:1b:f8:65:51:d7:2c:d9:4f: b7:a1:fb:71:f0:1c:c0:eb:87:8e:69:be:46:d6:36:86:eb:d9: 9a:23:9b:7b:9a:bd:82:b1:88:3d:49:01:16:3b:2c:10:20:ad: 2f:ae:a4:67:cd:73:78:05:cd:c5:d0:9b:72:8f:86:3a:ab:f3: 79:67:42:df:f1:ac:c0:68:69:9f:ea:de:e9:27:2c:74:49:eb: 1a:0e:05:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hF5lkvNpejpj5unNRoKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDQ5ZDJlNWQxMTQ2NDk4ZDVkMjUyOGZkNzZlMWJiYjE2YmIyZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Rmp6aXVDfEQUkJ9lRo2g02JmxS ru0kTIik6KKv+T7LhgHKOgRWNRJ+WotOYt0Pd93xdwUCZpVadBSWE81tC1GNKMsU KkW1MuFfdENuG7/J134lXyqfNJFx18+CKCu462KDItCKhClMNO9n3koovbu5RYr/ jT2QsHY7qRKv+eYJbE5MwfsUc3uJQbGNRskXlGDmuLMeaH5f0Kw+BzE1Ue8YWuqy jn5niQj3UjpNVlddrkwGsf+DRlerEkb2xSeOu1Px7zIKflgPjAkE37t/5oTRCQwr iN8ywJBkzXeEWQP18JpLcwfF6mjXj2Ek6tQHFDftlveeqXjbY8iigO/B2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPRJ0uXRFGSY1dJSj9duG7sWuy7PMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOUVuUzVkRVVaSmpWMGxLUDEyNGJ1eGE3THM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHznUMA0G CSqGSIb3DQEBCwUAA4IBAQBgAQeHKaZeTU++pgLUHoNWj1PZ8RyXRPTRW1iGjJkq 0HzwHkaq6A2akYtFfrm9gJhMAHOQFWWc7nJ/obSazdvEZoY7Hlt0zFSPkqY5pTJT ru8aERfcHN+tvqaiveAnjzkQPvDAVmou6gKadv5sYkw6t+jRlSJyqbRp6yVlCE4h 6urS7JjtNrLpVoc3+piEfDe0HJ8BThIIOcJabEPA0zgM1D54pfQEpOYBcSRDG/hl Udcs2U+3oftx8BzA64eOab5G1jaG69maI5t7mr2CsYg9SQEWOywQIK0vrqRnzXN4 Bc3F0Jtyj4Y6q/N5Z0Lf8azAaGmf6t7pJyx0SesaDgWn -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:04 2026 by rpki-client