This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9S_lyPQibiVWJCTBu5axaMAp7v0.roa File: 9S_lyPQibiVWJCTBu5axaMAp7v0.roa (raw, json) Hash identifier: n2GuKw+u6oWWWc3qrLQ/lUIf6F0On0x7gsh92dz0FBI= Subject key identifier: F5:2F:E5:C8:F4:22:6E:25:56:24:24:C1:BB:96:B1:68:C0:29:EE:FD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B23CFD728ED42CCBAC5D15B32ACB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9S_lyPQibiVWJCTBu5axaMAp7v0.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212871 IP address blocks: 31.57.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b2:3c:fd:72:8e:d4:2c:cb:ac:5d:15:b3:2a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f52fe5c8f4226e25562424c1bb96b168c029eefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:80:eb:f8:30:52:be:d5:bf:99:f7:1b:bb: 26:b9:e8:7d:2d:da:a7:a4:82:98:fc:ab:38:d8:32: 8d:24:b8:f5:e5:77:7b:f8:4b:01:a4:60:05:30:f6: 54:dc:81:cb:b3:ad:5f:e5:b9:3d:a1:fc:42:96:e2: d5:f3:d8:bf:f9:a5:89:10:8a:cd:52:b2:d5:13:ef: 1a:ea:ae:91:c9:99:5a:9b:ce:ed:98:23:7d:be:7f: b1:0a:d3:93:1b:19:61:99:bd:1d:49:8e:7d:27:f0: f5:5e:2e:5d:e7:59:48:28:0e:6e:c9:61:6a:9c:81: 1a:da:2f:64:6b:6f:ae:44:5e:5f:b4:9b:ab:ff:c1: c4:c1:68:df:17:86:79:53:51:f7:18:d1:3b:76:ae: 45:f8:1b:9a:25:e3:47:83:11:14:db:d6:8a:a9:4a: b5:97:85:9d:d5:8f:31:de:fc:a5:04:52:03:c2:5e: 80:67:8a:c5:db:cf:eb:33:4a:00:06:45:0d:d6:ed: fc:e8:12:be:8e:88:ce:6b:42:6b:7b:80:14:82:50: 48:10:10:d6:09:94:6c:c4:f1:e9:70:37:79:a0:cb: f0:32:92:68:e0:28:7d:1e:d8:d9:4b:be:06:2e:c1: e8:8d:cf:af:34:c4:c4:71:05:99:f9:5e:7f:ff:79: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:E5:C8:F4:22:6E:25:56:24:24:C1:BB:96:B1:68:C0:29:EE:FD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9S_lyPQibiVWJCTBu5axaMAp7v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.214.0/24 Signature Algorithm: sha256WithRSAEncryption 68:42:b7:94:cb:fd:9d:0c:95:48:e8:29:f7:fc:4d:73:c5:6f: e2:cf:6e:67:3b:76:1f:c0:bd:73:2e:5b:17:0a:1e:76:e1:62: 9f:62:56:96:ee:1b:40:6c:2e:a1:23:4d:a7:0a:4b:de:f8:22: 83:12:fa:70:88:ca:a7:2d:e9:4e:41:c3:ab:c9:8c:74:28:e4: 8d:bd:52:f6:23:62:aa:66:09:af:fb:1f:d2:bd:0f:35:42:c6: e0:f9:47:d8:11:64:6a:42:2c:9e:5b:0c:e2:8d:37:df:2d:62: 25:ba:04:83:03:02:0c:71:f5:5b:04:38:1e:15:3a:b4:20:5c: a1:f3:13:69:ee:1f:23:78:5e:a1:b8:72:3c:9f:71:11:0d:4c: 1e:9b:f1:73:25:43:50:6f:ef:e3:a7:29:b6:30:88:04:4c:6a: d9:5d:ab:83:0d:01:9f:d4:23:43:61:5b:c5:e6:ae:ed:74:a1: c0:46:15:72:bc:f1:b2:b8:0b:b6:a9:68:34:c1:ec:19:89:9b: 92:9f:d6:92:74:89:52:7c:cf:87:9d:63:61:27:8e:08:d1:4f: 53:90:99:3d:0e:29:14:e7:cf:3a:bc:17:58:8b:2e:9e:8d:12: 10:40:b8:ac:0b:33:c5:bb:6b:5b:6f:04:1b:3a:fb:ef:34:2f: 90:29:06:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLI8/XKO1CzLrF0VsyrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTJmZTVjOGY0MjI2ZTI1NTYyNDI0YzFiYjk2YjE2OGMwMjllZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmiA6/gwUr7Vv5n3G7smueh9Ldqn pIKY/Ks42DKNJLj15Xd7+EsBpGAFMPZU3IHLs61f5bk9ofxCluLV89i/+aWJEIrN UrLVE+8a6q6RyZlam87tmCN9vn+xCtOTGxlhmb0dSY59J/D1Xi5d51lIKA5uyWFq nIEa2i9ka2+uRF5ftJur/8HEwWjfF4Z5U1H3GNE7dq5F+BuaJeNHgxEU29aKqUq1 l4Wd1Y8x3vylBFIDwl6AZ4rF28/rM0oABkUN1u386BK+jojOa0Jre4AUglBIEBDW CZRsxPHpcDd5oMvwMpJo4Ch9HtjZS74GLsHojc+vNMTEcQWZ+V5//3lMjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUv5cj0Im4lViQkwbuWsWjAKe79MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOVNfbHlQUWliaVZXSkNUQnU1YXhhTUFwN3YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznWMA0G CSqGSIb3DQEBCwUAA4IBAQBoQreUy/2dDJVI6Cn3/E1zxW/iz25nO3YfwL1zLlsX Ch524WKfYlaW7htAbC6hI02nCkve+CKDEvpwiMqnLelOQcOryYx0KOSNvVL2I2Kq Zgmv+x/SvQ81Qsbg+UfYEWRqQiyeWwzijTffLWIlugSDAwIMcfVbBDgeFTq0IFyh 8xNp7h8jeF6huHI8n3ERDUwem/FzJUNQb+/jpym2MIgETGrZXauDDQGf1CNDYVvF 5q7tdKHARhVyvPGyuAu2qWg0wewZiZuSn9aSdIlSfM+HnWNhJ44I0U9TkJk9DikU 5886vBdYiy6ejRIQQLisCzPFu2tbbwQbOvvvNC+QKQba -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client