This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BKtcCEwPMjXRAW7aNtogaBROXHM.roa File: BKtcCEwPMjXRAW7aNtogaBROXHM.roa (raw, json) Hash identifier: fX8uOIHk1M2u2/BQvLs+rNcOOBiJTth6Fmvp5FdE8BM= Subject key identifier: 04:AB:5C:08:4C:0F:32:35:D1:01:6E:DA:36:DA:20:68:14:4E:5C:73 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846E9775274DF662B14E148F65B5C6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BKtcCEwPMjXRAW7aNtogaBROXHM.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56962 IP address blocks: 31.57.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6e:97:75:27:4d:f6:62:b1:4e:14:8f:65:b5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ab5c084c0f3235d1016eda36da2068144e5c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:03:7a:27:45:15:63:e1:91:b3:04:8e:ca: 0f:53:99:77:a4:2a:02:ca:53:58:9e:e8:8f:e1:04: ef:ce:89:8e:20:73:a5:db:46:53:7d:8d:82:18:1b: 8e:11:a3:46:e0:37:9b:39:71:30:3e:86:82:38:ed: 82:98:c4:ac:b0:9d:96:9d:57:81:f4:f9:18:4b:50: 44:3d:3e:cb:c6:b2:58:f1:38:b2:e7:0a:44:a1:69: b9:71:f2:80:99:c7:7d:9f:78:93:a1:0b:b9:89:0e: 3a:96:70:90:c8:0f:20:8d:b1:a6:0d:70:ef:31:5f: 1f:38:02:bc:01:47:79:ff:83:a1:fc:e9:54:6b:03: 96:b3:f7:c6:37:9a:19:5e:ec:af:70:2c:21:e6:21: 5c:9f:a6:7b:50:bf:7f:4a:ff:bc:0d:2b:89:0b:28: af:62:e4:3d:14:10:d2:a2:78:5a:d1:d0:b3:97:9f: 60:84:ab:7d:8f:a5:07:d3:f1:9f:7a:83:2e:61:8a: 25:54:c5:f7:7a:ee:ba:bc:93:76:4f:85:c8:0d:a5: 7d:44:a5:35:80:2d:2f:c9:9b:8c:90:b7:c3:2b:05: 8a:ab:a4:85:ce:9d:d3:f0:4e:0d:94:d4:48:10:87: d4:ec:88:3e:fd:0c:24:a0:ac:9b:31:f5:14:b6:0e: 13:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AB:5C:08:4C:0F:32:35:D1:01:6E:DA:36:DA:20:68:14:4E:5C:73 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BKtcCEwPMjXRAW7aNtogaBROXHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ef:22:b5:b1:e3:35:b3:a1:f9:96:36:48:47:3b:fd:55:c7: 73:d5:75:cd:41:f1:5b:c4:15:6a:40:fe:38:bf:13:90:40:50: 3b:98:9f:0b:b5:14:e4:de:27:f0:84:ad:2c:38:fb:53:2e:b2: 46:9a:56:26:22:69:57:f3:00:ec:94:9f:cc:6f:15:fd:82:5f: 2f:d2:19:eb:b1:c4:84:10:df:16:62:78:da:44:2a:4a:18:bc: 25:f2:1a:8e:12:ce:0d:26:b5:f9:bc:ad:9b:8d:4e:a5:4b:88: 61:79:c0:7e:11:77:56:f8:e9:29:5a:34:fd:f4:9f:e7:39:a6: 45:f7:23:a4:6a:93:b8:6b:96:f7:11:37:cf:6c:9d:bf:f0:75: d6:7a:5b:c8:17:81:04:55:ad:b5:4e:91:9b:03:31:d5:c6:0c: 4b:d4:43:c6:7a:1b:dc:31:6b:35:44:3c:ab:c8:4a:ab:04:b6: fe:76:b1:11:3e:de:bc:f8:03:64:2b:5a:21:86:a8:90:e6:91: 98:73:65:48:dd:52:2e:b5:54:ac:8f:fe:79:e5:81:ec:62:36: e9:24:19:7a:cc:30:5d:31:74:b1:50:76:b6:d5:01:94:c6:38: c8:70:39:83:00:c1:ce:07:fc:42:be:14:8e:61:23:f1:df:69: d9:4f:72:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hG6XdSdN9mKxThSPZbXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFiNWMwODRjMGYzMjM1ZDEwMTZlZGEzNmRhMjA2ODE0NGU1YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp98DeidFFWPhkbMEjsoPU5l3pCoC ylNYnuiP4QTvzomOIHOl20ZTfY2CGBuOEaNG4DebOXEwPoaCOO2CmMSssJ2WnVeB 9PkYS1BEPT7LxrJY8Tiy5wpEoWm5cfKAmcd9n3iToQu5iQ46lnCQyA8gjbGmDXDv MV8fOAK8AUd5/4Oh/OlUawOWs/fGN5oZXuyvcCwh5iFcn6Z7UL9/Sv+8DSuJCyiv YuQ9FBDSonha0dCzl59ghKt9j6UH0/GfeoMuYYolVMX3eu66vJN2T4XIDaV9RKU1 gC0vyZuMkLfDKwWKq6SFzp3T8E4NlNRIEIfU7Ig+/QwkoKybMfUUtg4TJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASrXAhMDzI10QFu2jbaIGgUTlxzMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQkt0Y0NFd1BNalhSQVc3YU50b2dhQlJPWEhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznnMA0G CSqGSIb3DQEBCwUAA4IBAQB+7yK1seM1s6H5ljZIRzv9Vcdz1XXNQfFbxBVqQP44 vxOQQFA7mJ8LtRTk3ifwhK0sOPtTLrJGmlYmImlX8wDslJ/MbxX9gl8v0hnrscSE EN8WYnjaRCpKGLwl8hqOEs4NJrX5vK2bjU6lS4hhecB+EXdW+OkpWjT99J/nOaZF 9yOkapO4a5b3ETfPbJ2/8HXWelvIF4EEVa21TpGbAzHVxgxL1EPGehvcMWs1RDyr yEqrBLb+drERPt68+ANkK1ohhqiQ5pGYc2VI3VIutVSsj/555YHsYjbpJBl6zDBd MXSxUHa21QGUxjjIcDmDAMHOB/xCvhSOYSPx32nZT3Ie -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:56 2026 by rpki-client