This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BQ5aRcsKnPgyQyP96PSYzn7NJ9I.roa File: BQ5aRcsKnPgyQyP96PSYzn7NJ9I.roa (raw, json) Hash identifier: GdEjc3fe8m3VJI/xhe3cV+eRUx7nBjiKvGvY9SBEbUA= Subject key identifier: 05:0E:5A:45:CB:0A:9C:F8:32:43:23:FD:E8:F4:98:CE:7E:CD:27:D2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84671C12FAB15AF217084F7513599B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BQ5aRcsKnPgyQyP96PSYzn7NJ9I.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 31.58.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:67:1c:12:fa:b1:5a:f2:17:08:4f:75:13:59:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=050e5a45cb0a9cf8324323fde8f498ce7ecd27d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:8b:e3:a7:42:4b:2f:32:c1:f4:ef:81:5e: 67:a4:b3:b7:72:6a:9a:46:d5:e7:4b:ae:20:d3:7b: 3f:22:8f:00:53:ab:32:87:0b:6b:d1:48:7d:a4:29: 51:8d:42:33:40:a9:5f:2c:67:e0:4c:33:7f:69:44: e3:87:72:3f:e8:bb:e9:96:e7:20:1b:f2:bc:1f:2f: 4d:57:3f:a8:09:6f:85:40:d3:91:60:00:05:d4:18: 75:02:fe:42:71:45:5d:43:bf:24:ad:f0:11:97:11: db:8b:b9:e2:6c:c2:c8:4a:df:db:b5:73:72:b0:66: 10:f4:0b:aa:ee:7f:df:25:d6:23:fe:09:d5:84:26: c1:ea:54:32:ef:00:97:33:88:2f:48:1e:e7:f5:57: a1:3f:75:f3:5c:99:a7:c9:a3:5e:5e:43:c5:ae:fe: b1:02:2f:9a:82:26:5b:17:64:80:85:b2:e1:d9:85: bc:1d:3d:4f:23:ec:f3:c0:62:74:b7:6c:0a:32:57: 90:8d:f7:8b:04:71:4c:a9:6a:a2:c4:cc:51:13:6a: e2:f0:2e:33:b1:b8:93:d1:98:03:b0:03:79:a9:cf: 24:08:0c:c2:48:24:16:fd:74:dc:bd:5b:db:ba:9f: 0e:0a:8f:f2:87:94:c4:ec:e1:62:4c:9d:3e:9a:6e: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:5A:45:CB:0A:9C:F8:32:43:23:FD:E8:F4:98:CE:7E:CD:27:D2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BQ5aRcsKnPgyQyP96PSYzn7NJ9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.248.0/24 Signature Algorithm: sha256WithRSAEncryption 77:d8:58:95:6d:90:07:e2:c4:64:bb:e5:c2:cc:79:b5:51:cb: 57:6b:04:d6:56:e4:ee:91:95:34:44:44:f3:89:c4:8b:01:bc: 14:62:7d:0e:a9:8b:52:f0:ee:ab:df:1c:a9:60:43:74:88:02: 09:2e:c6:91:17:82:cd:70:ac:72:eb:dc:b5:68:8d:12:32:e3: a2:0b:fc:43:6a:4f:18:dc:81:2d:90:91:72:de:49:9c:05:95: 79:d5:21:27:d6:5d:ac:62:13:0a:b3:22:f6:6d:b8:fa:77:91: 11:6a:c0:80:0a:de:f4:da:cc:9d:7f:b5:57:7d:1f:1a:1f:e5: 15:6c:70:cd:6f:3f:a4:af:c4:de:d8:9f:de:e2:23:a9:9a:2b: 39:d6:44:3e:ac:09:46:f3:22:e5:bc:c6:01:e0:b9:c3:55:a5: d5:16:6e:f9:e9:ea:82:33:04:3a:c9:05:79:0a:0a:ef:10:a7: 1c:96:c4:91:87:d6:53:ba:77:7a:70:5e:67:d3:df:61:09:62: cb:4b:81:24:fe:c7:bc:96:1c:c5:66:62:d4:5a:38:a6:f7:a5: ab:76:a4:66:5e:13:40:cb:f4:60:d1:f9:46:49:7a:2e:b6:01: ce:78:de:4b:8c:38:6b:43:34:c3:de:1d:bd:c6:27:37:e7:a6: b6:91:5c:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGccEvqxWvIXCE91E1mbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTBlNWE0NWNiMGE5Y2Y4MzI0MzIzZmRlOGY0OThjZTdlY2QyN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IWL46dCSy8ywfTvgV5npLO3cmqa RtXnS64g03s/Io8AU6syhwtr0Uh9pClRjUIzQKlfLGfgTDN/aUTjh3I/6Lvplucg G/K8Hy9NVz+oCW+FQNORYAAF1Bh1Av5CcUVdQ78krfARlxHbi7nibMLISt/btXNy sGYQ9Auq7n/fJdYj/gnVhCbB6lQy7wCXM4gvSB7n9VehP3XzXJmnyaNeXkPFrv6x Ai+agiZbF2SAhbLh2YW8HT1PI+zzwGJ0t2wKMleQjfeLBHFMqWqixMxRE2ri8C4z sbiT0ZgDsAN5qc8kCAzCSCQW/XTcvVvbup8OCo/yh5TE7OFiTJ0+mm53xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUOWkXLCpz4MkMj/ej0mM5+zSfSMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQlE1YVJjc0tuUGd5UXlQOTZQU1l6bjdOSjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr4MA0G CSqGSIb3DQEBCwUAA4IBAQB32FiVbZAH4sRku+XCzHm1UctXawTWVuTukZU0RETz icSLAbwUYn0OqYtS8O6r3xypYEN0iAIJLsaRF4LNcKxy69y1aI0SMuOiC/xDak8Y 3IEtkJFy3kmcBZV51SEn1l2sYhMKsyL2bbj6d5ERasCACt702sydf7VXfR8aH+UV bHDNbz+kr8Te2J/e4iOpmis51kQ+rAlG8yLlvMYB4LnDVaXVFm756eqCMwQ6yQV5 CgrvEKcclsSRh9ZTund6cF5n099hCWLLS4Ek/se8lhzFZmLUWjim96WrdqRmXhNA y/Rg0flGSXoutgHOeN5LjDhrQzTD3h29xic356a2kVzF -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:46 2026 by rpki-client