This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BS5uvYKMPjfhYECA8MX2KjRRFFo.roa File: BS5uvYKMPjfhYECA8MX2KjRRFFo.roa (raw, json) Hash identifier: J/bWfVe/GTRHYGP5wKFsGf63jKWkda5T15Mq2zpu1PQ= Subject key identifier: 05:2E:6E:BD:82:8C:3E:37:E1:60:40:80:F0:C5:F6:2A:34:51:14:5A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84853E3C575B8D6B8FACF7DD26143E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BS5uvYKMPjfhYECA8MX2KjRRFFo.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142382 IP address blocks: 31.56.74.0/24 maxlen: 24 31.56.121.0/24 maxlen: 24 31.56.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:85:3e:3c:57:5b:8d:6b:8f:ac:f7:dd:26:14:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=052e6ebd828c3e37e1604080f0c5f62a3451145a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:3a:cf:eb:8c:2e:54:74:54:08:e6:5a:db: 9c:c9:c1:05:b2:98:ad:f1:6c:d5:ad:38:db:17:4d: 6f:e3:31:98:f9:f1:5b:08:f9:dc:a9:39:bd:27:8d: 8f:57:7c:3a:9b:1a:98:17:91:32:a9:9e:01:0a:9e: 4f:d1:51:f0:7e:a6:8d:92:83:5f:ad:77:f0:e7:04: 6e:88:9a:c1:9a:cd:08:b3:ae:11:40:dd:cd:6f:7a: f4:f2:1b:c7:26:53:f5:ed:b8:6f:37:5e:52:a2:a9: 90:c0:38:b8:2c:7d:9d:45:c3:cf:eb:02:ec:65:64: 7b:8c:95:67:89:9f:4c:f9:72:fa:46:3e:cb:af:2e: 0f:f8:7a:e0:8b:3a:90:e7:38:3c:d4:25:bb:7d:dd: 62:41:23:c3:32:15:9a:93:a2:82:4d:c6:03:02:31: 88:81:d5:35:e2:fb:40:36:c2:21:38:14:0e:48:b2: a0:d3:8d:a4:9a:3c:9a:01:97:ad:20:c1:1e:3d:b0: 44:9d:a4:f1:b8:ed:96:0f:f0:19:e3:a3:0b:10:df: 4f:ac:23:cc:02:b9:8e:47:78:dc:e7:0f:89:d7:32: 1d:b4:c6:d5:28:a8:7c:c5:0a:3e:12:36:9e:0f:1a: 4f:4e:11:53:55:f8:66:69:9a:45:ed:8d:e3:f8:50: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:6E:BD:82:8C:3E:37:E1:60:40:80:F0:C5:F6:2A:34:51:14:5A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BS5uvYKMPjfhYECA8MX2KjRRFFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.74.0/24 31.56.121.0/24 31.56.199.0/24 Signature Algorithm: sha256WithRSAEncryption 23:3d:86:21:80:bf:60:c2:f5:e9:a1:c7:1d:86:6b:4e:ea:02: d1:47:f2:88:a3:d8:d6:b4:75:8c:70:d4:93:60:3d:36:5a:cc: 0c:ea:7a:89:a0:d6:fd:f4:3b:17:ff:e4:fe:be:45:08:c8:7b: 58:e0:21:fe:b0:2b:db:d0:be:5f:60:54:3c:20:60:fd:53:76: be:51:42:1b:f0:07:4e:2f:a0:75:88:1b:46:29:6a:62:8f:7e: a3:71:cd:b7:ea:44:bc:34:bd:bb:40:10:01:83:c8:d2:96:51: e7:24:a6:b0:6c:39:03:42:09:e3:56:63:d8:3f:ce:c2:c4:c4: f6:89:0b:99:bd:9f:25:01:b2:da:f7:ac:0f:73:ee:be:ac:5f: 22:07:00:63:90:d3:16:ec:62:e9:44:f4:c7:74:14:ab:fa:83: 66:62:a5:19:f5:46:42:eb:3d:2b:e9:2f:71:70:25:9d:8d:e7: 3c:2e:71:5a:19:15:12:fd:8f:83:e2:c3:c8:6a:91:6a:00:27: f1:0e:62:47:f1:35:ea:1d:6b:9f:e4:8e:e1:78:b3:65:41:22: ca:e1:7e:b0:30:54:61:bb:84:cf:2b:8f:6b:43:a0:af:74:ea: a7:94:05:47:cc:2e:08:e2:ff:d2:2e:bd:09:6b:07:92:9d:a4: 4b:4b:a8:89 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hIU+PFdbjWuPrPfdJhQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTJlNmViZDgyOGMzZTM3ZTE2MDQwODBmMGM1ZjYyYTM0NTExNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3U6z+uMLlR0VAjmWtucycEFspit 8WzVrTjbF01v4zGY+fFbCPncqTm9J42PV3w6mxqYF5EyqZ4BCp5P0VHwfqaNkoNf rXfw5wRuiJrBms0Is64RQN3Nb3r08hvHJlP17bhvN15SoqmQwDi4LH2dRcPP6wLs ZWR7jJVniZ9M+XL6Rj7Lry4P+HrgizqQ5zg81CW7fd1iQSPDMhWak6KCTcYDAjGI gdU14vtANsIhOBQOSLKg042kmjyaAZetIMEePbBEnaTxuO2WD/AZ46MLEN9PrCPM ArmOR3jc5w+J1zIdtMbVKKh8xQo+EjaeDxpPThFTVfhmaZpF7Y3j+FDGSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAUubr2CjD434WBAgPDF9io0URRaMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQlM1dXZZS01QamZoWUVDQThNWDJLalJSRkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhKAwQA Hzh5AwQAHzjHMA0GCSqGSIb3DQEBCwUAA4IBAQAjPYYhgL9gwvXpoccdhmtO6gLR R/KIo9jWtHWMcNSTYD02WswM6nqJoNb99DsX/+T+vkUIyHtY4CH+sCvb0L5fYFQ8 IGD9U3a+UUIb8AdOL6B1iBtGKWpij36jcc236kS8NL27QBABg8jSllHnJKawbDkD QgnjVmPYP87CxMT2iQuZvZ8lAbLa96wPc+6+rF8iBwBjkNMW7GLpRPTHdBSr+oNm YqUZ9UZC6z0r6S9xcCWdjec8LnFaGRUS/Y+D4sPIapFqACfxDmJH8TXqHWuf5I7h eLNlQSLK4X6wMFRhu4TPK49rQ6CvdOqnlAVHzC4I4v/SLr0JaweSnaRLS6iJ -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:26 2026 by rpki-client