This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9Ihuy9fnnFZI-MRsVUsEGqaqXrg.roa File: 9Ihuy9fnnFZI-MRsVUsEGqaqXrg.roa (raw, json) Hash identifier: GWHJVOIR8h3XY580F8C6ICQD7b4rEIaHGUiEbG7S/ZY= Subject key identifier: F4:88:6E:CB:D7:E7:9C:56:48:F8:C4:6C:55:4B:04:1A:A6:AA:5E:B8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A8116F1293D2132993A5906C7777 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9Ihuy9fnnFZI-MRsVUsEGqaqXrg.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211011 IP address blocks: 31.56.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a8:11:6f:12:93:d2:13:29:93:a5:90:6c:77:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4886ecbd7e79c5648f8c46c554b041aa6aa5eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:b5:a9:3d:91:d7:61:4b:ae:a9:7f:ca:38: f2:23:a6:ae:85:0e:86:45:47:55:be:d4:c9:82:94: 61:e0:54:d8:e0:1a:7d:d4:83:c1:c7:15:eb:7e:2b: 93:86:68:7b:87:98:fe:85:fd:59:52:75:1f:87:11: 34:9f:08:55:98:8f:df:11:1a:ba:f4:29:9b:48:53: 54:f2:20:13:d4:a6:45:f2:72:5a:37:78:70:f4:d6: 10:3f:5b:e1:4e:8f:1a:e4:7b:0e:4a:bd:0f:d5:db: 70:16:58:6b:c0:43:ce:a8:d9:ac:82:54:ab:a8:7b: cc:ba:e7:78:2e:b4:2d:cf:6c:b1:44:d1:37:01:13: a4:9b:df:a7:7d:46:9f:9f:ab:c6:8d:0f:83:0e:8d: 63:00:75:3e:bc:e0:36:2d:33:d5:da:20:7c:ff:87: 7f:4b:91:1c:b9:a6:d4:5b:88:4b:ef:48:4f:60:31: ff:e7:9d:28:eb:0e:12:cb:40:51:e1:92:a6:53:1a: e0:7a:e9:57:67:4c:4f:77:35:be:8a:58:6c:d6:21: 23:50:b4:c0:61:2f:3c:12:f0:55:93:e5:c9:76:e4: 8a:20:c1:e2:9f:4c:72:c4:e8:58:09:a0:7c:dd:52: ef:2f:9e:01:96:d9:48:02:31:87:b9:50:6f:de:4f: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:88:6E:CB:D7:E7:9C:56:48:F8:C4:6C:55:4B:04:1A:A6:AA:5E:B8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9Ihuy9fnnFZI-MRsVUsEGqaqXrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.26.0/24 Signature Algorithm: sha256WithRSAEncryption 07:47:c7:1a:80:9f:86:ab:45:05:c3:f9:34:46:7b:5e:5d:92: 85:ee:94:56:87:81:43:05:95:8b:b8:9f:55:1a:98:3e:29:ac: 4a:3b:96:f2:0b:f9:1f:e5:87:bd:26:51:f3:68:ee:30:70:79: 7b:df:ef:72:c4:df:b3:d9:35:47:69:08:a9:30:d8:85:f8:e5: e3:f5:50:66:77:e8:79:c9:12:aa:67:2f:db:81:26:3d:3f:25: 5d:06:af:e0:b0:53:e8:b6:7c:02:f7:fb:e1:f3:53:97:ab:4b: c0:08:fa:39:a2:e7:8d:3a:13:6b:e9:fb:8e:83:21:61:1a:97: 6e:50:6f:49:52:0a:ea:48:48:51:99:4c:ef:17:86:7e:6c:a2: b9:fd:3c:2f:73:2a:bc:85:a8:f3:bb:a7:8a:1b:54:eb:98:f8: 63:da:12:01:35:ae:1c:99:a9:73:89:14:08:d4:85:4e:8d:22: d9:c7:e8:63:d6:c5:02:90:5d:41:d1:88:7d:67:3e:16:b4:7c: 88:07:b1:62:ad:ae:81:79:f5:c3:16:fa:43:49:ae:4b:2b:fc: 2f:c0:2a:e2:a6:ec:13:15:1c:88:84:06:6d:16:c0:0c:d1:a2: f4:38:bf:db:e9:7c:65:54:e4:12:96:81:1c:73:3b:87:01:1a: 78:b4:15:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKgRbxKT0hMpk6WQbHd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDg4NmVjYmQ3ZTc5YzU2NDhmOGM0NmM1NTRiMDQxYWE2YWE1ZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuq1qT2R12FLrql/yjjyI6auhQ6G RUdVvtTJgpRh4FTY4Bp91IPBxxXrfiuThmh7h5j+hf1ZUnUfhxE0nwhVmI/fERq6 9CmbSFNU8iAT1KZF8nJaN3hw9NYQP1vhTo8a5HsOSr0P1dtwFlhrwEPOqNmsglSr qHvMuud4LrQtz2yxRNE3AROkm9+nfUafn6vGjQ+DDo1jAHU+vOA2LTPV2iB8/4d/ S5EcuabUW4hL70hPYDH/550o6w4Sy0BR4ZKmUxrgeulXZ0xPdzW+ilhs1iEjULTA YS88EvBVk+XJduSKIMHin0xyxOhYCaB83VLvL54BltlIAjGHuVBv3k9ksQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSIbsvX55xWSPjEbFVLBBqmql64MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOUlodXk5Zm5uRlpJLU1Sc1ZVc0VHcWFxWHJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgaMA0G CSqGSIb3DQEBCwUAA4IBAQAHR8cagJ+Gq0UFw/k0RnteXZKF7pRWh4FDBZWLuJ9V Gpg+KaxKO5byC/kf5Ye9JlHzaO4wcHl73+9yxN+z2TVHaQipMNiF+OXj9VBmd+h5 yRKqZy/bgSY9PyVdBq/gsFPotnwC9/vh81OXq0vACPo5oueNOhNr6fuOgyFhGpdu UG9JUgrqSEhRmUzvF4Z+bKK5/Twvcyq8hajzu6eKG1TrmPhj2hIBNa4cmalziRQI 1IVOjSLZx+hj1sUCkF1B0Yh9Zz4WtHyIB7Fira6BefXDFvpDSa5LK/wvwCripuwT FRyIhAZtFsAM0aL0OL/b6XxlVOQSloEcczuHARp4tBUO -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client