This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BKpFVf-2QD5X2TCyT8crB8deTyo.roa File: BKpFVf-2QD5X2TCyT8crB8deTyo.roa (raw, json) Hash identifier: gLMnU80UGfI0TXdD/V/AUWyvebBGmZ/Isk0hyv/Mh0A= Subject key identifier: 04:AA:45:55:FF:B6:40:3E:57:D9:30:B2:4F:C7:2B:07:C7:5E:4F:2A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B4AD4D7B8513033F8C58CAC75E1B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BKpFVf-2QD5X2TCyT8crB8deTyo.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213613 IP address blocks: 31.57.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b4:ad:4d:7b:85:13:03:3f:8c:58:ca:c7:5e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04aa4555ffb6403e57d930b24fc72b07c75e4f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:9f:cf:8d:14:4f:df:8d:63:7e:6d:70:50: e5:12:aa:56:31:18:a9:a8:15:09:fe:f8:b4:84:69: 2b:be:38:57:6f:4e:40:61:87:3d:da:f4:02:e4:af: 0c:ac:1a:fd:43:7e:8f:40:c3:b9:57:4d:36:f5:f9: 65:59:e7:41:a7:8b:c6:03:dd:0c:10:c1:80:db:14: 3e:b6:23:bb:25:f3:71:87:c5:40:c3:15:c0:42:6f: 69:1b:3d:a9:96:42:36:34:24:3d:50:ce:f9:c3:32: 97:bc:68:73:57:75:d1:fa:b4:42:45:9a:9a:8f:08: be:28:f6:02:ed:e8:1b:b1:7d:d1:4a:d8:0e:db:ff: 22:17:92:b9:6c:0c:90:af:de:b4:7a:46:c4:71:30: 49:48:ae:5d:df:aa:3c:2b:fd:d9:9f:67:e1:8d:0a: a9:bc:78:25:a4:d0:9b:be:e0:4c:91:77:a2:ec:cc: e4:73:31:a1:9f:8f:66:d4:9e:bb:72:8a:0f:58:58: 11:c5:74:7f:f7:1e:49:ab:bb:47:ac:d5:cb:61:6a: 67:f4:23:71:9b:1e:76:c3:44:83:63:2b:a0:27:68: 88:c9:63:62:06:de:cf:a9:78:6b:2d:3e:31:52:4d: 35:e4:c2:4c:5f:b0:e4:8c:13:df:87:59:77:e0:8c: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AA:45:55:FF:B6:40:3E:57:D9:30:B2:4F:C7:2B:07:C7:5E:4F:2A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BKpFVf-2QD5X2TCyT8crB8deTyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.13.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:3b:a3:7d:4d:bb:33:59:2a:e3:a5:2f:52:19:9f:99:f0:9d: e8:03:ea:24:a7:40:25:92:10:36:59:89:af:6a:11:9e:f6:ee: eb:51:3b:1a:c3:39:c7:95:36:b0:3a:ba:3d:d6:46:6c:8b:ba: d6:ce:e0:4e:8e:cb:10:b9:78:47:32:c2:85:14:79:7d:4f:2d: 00:e4:ec:fa:d4:95:3b:ea:f4:09:3f:12:73:3d:16:c8:5f:9c: 49:c4:40:de:40:2f:ae:63:1b:96:dd:be:cb:70:87:f4:c6:4e: 2f:ea:1f:1d:ab:09:9f:c8:21:68:fe:27:37:27:b5:4e:bc:ae: 82:ad:67:51:90:ed:08:42:20:a7:47:f3:92:e9:36:ba:05:ae: c2:32:83:95:f0:cd:8a:26:6f:4e:55:f4:53:da:5d:0a:0f:f1: af:ee:0a:03:1b:ad:13:95:ca:8d:ad:ce:69:34:cd:19:56:76: a4:13:59:22:3f:37:47:c4:5c:35:b4:a9:fb:78:d2:54:6d:b2: e1:43:df:d7:b2:8a:49:01:d2:84:d1:96:e1:48:8f:15:99:0c: e8:4a:b2:bd:98:c6:cd:9f:d1:89:4a:fe:88:1a:89:08:f4:c5: fc:6c:4b:1d:31:63:f5:f8:ba:aa:66:13:d1:eb:ea:2e:2a:fb: c0:53:df:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLStTXuFEwM/jFjKx14bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFhNDU1NWZmYjY0MDNlNTdkOTMwYjI0ZmM3MmIwN2M3NWU0ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGmfz40UT9+NY35tcFDlEqpWMRip qBUJ/vi0hGkrvjhXb05AYYc92vQC5K8MrBr9Q36PQMO5V0029fllWedBp4vGA90M EMGA2xQ+tiO7JfNxh8VAwxXAQm9pGz2plkI2NCQ9UM75wzKXvGhzV3XR+rRCRZqa jwi+KPYC7egbsX3RStgO2/8iF5K5bAyQr960ekbEcTBJSK5d36o8K/3Zn2fhjQqp vHglpNCbvuBMkXei7MzkczGhn49m1J67cooPWFgRxXR/9x5Jq7tHrNXLYWpn9CNx mx52w0SDYyugJ2iIyWNiBt7PqXhrLT4xUk015MJMX7DkjBPfh1l34Iz+xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASqRVX/tkA+V9kwsk/HKwfHXk8qMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQktwRlZmLTJRRDVYMlRDeVQ4Y3JCOGRlVHlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkNMA0G CSqGSIb3DQEBCwUAA4IBAQA9O6N9TbszWSrjpS9SGZ+Z8J3oA+okp0AlkhA2WYmv ahGe9u7rUTsawznHlTawOro91kZsi7rWzuBOjssQuXhHMsKFFHl9Ty0A5Oz61JU7 6vQJPxJzPRbIX5xJxEDeQC+uYxuW3b7LcIf0xk4v6h8dqwmfyCFo/ic3J7VOvK6C rWdRkO0IQiCnR/OS6Ta6Ba7CMoOV8M2KJm9OVfRT2l0KD/Gv7goDG60TlcqNrc5p NM0ZVnakE1kiPzdHxFw1tKn7eNJUbbLhQ9/XsopJAdKE0ZbhSI8VmQzoSrK9mMbN n9GJSv6IGokI9MX8bEsdMWP1+LqqZhPR6+ouKvvAU98x -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:02 2026 by rpki-client