This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ZAAEuuKXNAxlCFETBgeMbU-JmY.roa File: 9ZAAEuuKXNAxlCFETBgeMbU-JmY.roa (raw, json) Hash identifier: fBl9FJIOzRZ1Dcs4M3bRenp0Koj9PjCJGUYJtqq4n1s= Subject key identifier: F5:90:00:12:EB:8A:5C:D0:31:94:21:44:4C:18:1E:31:B5:3E:26:66 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BB0D348FA23D98219DC445A24DEA50BF6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ZAAEuuKXNAxlCFETBgeMbU-JmY.roa Signing time: Mon 12 Jan 2026 06:09:55 +0000 ROA not before: Mon 12 Jan 2026 06:09:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 31.57.131.0/24 maxlen: 24 31.57.150.0/24 maxlen: 24 31.58.52.0/24 maxlen: 24 31.58.147.0/24 maxlen: 24 31.58.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:d3:48:fa:23:d9:82:19:dc:44:5a:24:de:a5:0b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 12 06:09:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5900012eb8a5cd0319421444c181e31b53e2666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:73:2c:47:00:b4:5b:e1:6f:32:01:fa:98: 4f:84:66:f8:68:f4:26:be:fb:4b:68:7b:dc:98:c3: d4:b3:6f:71:15:7e:bb:7f:b9:7d:83:74:cc:ee:24: ec:52:5b:0e:29:ab:03:36:8b:bf:9b:34:f8:79:e8: 2a:92:6c:1e:57:0b:48:76:8b:11:ec:15:f8:4b:4a: d3:f9:f3:6f:d9:2d:0e:da:51:f1:c4:cb:44:c1:ae: 53:3b:05:0b:34:0f:7e:c7:d8:0c:07:ca:ed:c6:b5: 9d:e3:8a:1a:10:e6:28:e5:ad:9c:7a:65:8b:8b:7c: 6e:d7:b1:48:36:a2:47:df:52:8d:db:54:38:7b:f0: d9:07:ce:9c:cc:f5:92:7c:fc:f7:1a:41:31:28:f7: ba:d4:57:b4:7d:ef:2f:d0:5f:e6:d4:2e:22:a3:11: df:8b:86:9c:74:2d:7d:9a:7d:02:3f:7d:a2:d7:78: cd:5f:c5:bc:14:76:68:24:56:64:d6:55:41:42:13: ad:d0:80:29:ca:db:3e:77:3a:2f:8f:e7:16:08:5f: a0:cf:96:da:f2:6f:10:45:a6:d2:e5:91:b9:07:d1: dc:01:03:0a:70:9b:d0:dc:3c:e5:75:09:0a:56:3e: 54:c2:e9:66:7a:26:81:a5:70:89:f2:07:7d:b2:ba: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:00:12:EB:8A:5C:D0:31:94:21:44:4C:18:1E:31:B5:3E:26:66 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ZAAEuuKXNAxlCFETBgeMbU-JmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.131.0/24 31.57.150.0/24 31.58.52.0/24 31.58.147.0/24 31.58.228.0/24 Signature Algorithm: sha256WithRSAEncryption 75:5e:d7:da:d6:56:91:93:34:0f:58:55:2d:d7:a6:65:75:5e: 7f:9e:3f:02:da:5d:cf:5d:48:cc:95:19:4f:f2:9c:ed:24:72: c5:1d:d2:74:30:fb:dc:51:3f:38:40:f4:fb:41:3a:c7:5e:7d: ab:28:e8:e8:94:ef:01:86:37:36:65:33:04:51:68:e2:71:9f: ea:5a:ee:e9:a8:68:c1:60:68:5a:75:bb:74:e2:51:a4:d6:d8: 6a:73:c3:06:42:f0:1f:35:6f:a4:82:2c:5b:f0:0a:b5:84:71: 19:0a:0c:2c:3c:1f:7e:99:fe:17:f9:0b:86:e2:cb:54:20:36: 04:4d:d0:ab:1b:0c:f8:6d:21:c8:30:46:b5:84:e0:80:ad:60: 7d:a7:6a:bd:b3:cf:86:83:fb:e7:a0:67:0b:7d:d8:c2:f2:15: 7b:b4:c9:e4:b2:dc:53:79:a2:a9:09:55:69:32:63:51:cd:bf: 9d:89:9b:85:c9:fc:a5:99:ed:0a:8b:35:04:a1:f5:5a:76:d1: 5d:60:11:2f:00:46:af:69:7b:a9:79:c9:3a:99:27:47:7e:60: 01:71:12:fb:ef:ce:ee:43:c6:db:dc:76:04:4e:43:14:d7:5d: 3c:8a:43:ec:6c:a7:8b:02:76:8f:75:e0:a5:0f:64:c9:aa:66: 85:93:48:db -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZuw00j6I9mCGdxEWiTepQv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTEyMDYwOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTkwMDAxMmViOGE1Y2QwMzE5NDIxNDQ0YzE4MWUzMWI1M2UyNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniNzLEcAtFvhbzIB+phPhGb4aPQm vvtLaHvcmMPUs29xFX67f7l9g3TM7iTsUlsOKasDNou/mzT4eegqkmweVwtIdosR 7BX4S0rT+fNv2S0O2lHxxMtEwa5TOwULNA9+x9gMB8rtxrWd44oaEOYo5a2cemWL i3xu17FINqJH31KN21Q4e/DZB86czPWSfPz3GkExKPe61Fe0fe8v0F/m1C4ioxHf i4acdC19mn0CP32i13jNX8W8FHZoJFZk1lVBQhOt0IApyts+dzovj+cWCF+gz5ba 8m8QRabS5ZG5B9HcAQMKcJvQ3DzldQkKVj5UwulmeiaBpXCJ8gd9srqpJwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPWQABLrilzQMZQhREwYHjG1PiZmMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOVpBQUV1dUtYTkF4bENGRVRCZ2VNYlUtSm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzmDAwQA HzmWAwQAHzo0AwQAHzqTAwQAHzrkMA0GCSqGSIb3DQEBCwUAA4IBAQB1Xtfa1laR kzQPWFUt16ZldV5/nj8C2l3PXUjMlRlP8pztJHLFHdJ0MPvcUT84QPT7QTrHXn2r KOjolO8Bhjc2ZTMEUWjicZ/qWu7pqGjBYGhadbt04lGk1thqc8MGQvAfNW+kgixb 8Aq1hHEZCgwsPB9+mf4X+QuG4stUIDYETdCrGwz4bSHIMEa1hOCArWB9p2q9s8+G g/vnoGcLfdjC8hV7tMnkstxTeaKpCVVpMmNRzb+diZuFyfylme0KizUEofVadtFd YBEvAEavaXupeck6mSdHfmABcRL7787uQ8bb3HYETkMU1108ikPsbKeLAnaPdeCl D2TJqmaFk0jb -----END CERTIFICATE-----Generated at Tue Jan 13 06:59:25 2026 by rpki-client