This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BT6l1QZivHKH8QUBXvL_1LMSWT4.roa File: BT6l1QZivHKH8QUBXvL_1LMSWT4.roa (raw, json) Hash identifier: n8Wdd1eyJAc0rhzDnQgcWIxjhLQDIxJn4FchPtMCRgU= Subject key identifier: 05:3E:A5:D5:06:62:BC:72:87:F1:05:01:5E:F2:FF:D4:B3:12:59:3E Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849DA29F989E31E2FE98DB8B9AA426 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BT6l1QZivHKH8QUBXvL_1LMSWT4.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207590 IP address blocks: 31.56.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9d:a2:9f:98:9e:31:e2:fe:98:db:8b:9a:a4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=053ea5d50662bc7287f105015ef2ffd4b312593e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:95:0c:8a:7e:99:fc:69:26:2b:13:a8:7c: 58:ba:27:00:61:a8:ba:77:aa:34:29:b1:0d:40:96: ed:8d:28:cd:84:82:4d:b5:73:f8:dd:7f:a8:b8:a1: 9f:a2:fa:27:e8:5a:dc:89:1b:84:2c:c2:94:4d:9f: f6:04:61:ad:95:26:87:d4:7a:77:d9:13:14:01:ff: 6c:e7:7d:9f:39:fd:5d:9e:f8:7d:30:e8:a7:c5:bf: 9a:06:97:e2:04:33:c4:24:55:4e:94:21:e2:e1:19: 79:66:03:65:1c:da:7d:0e:df:f0:29:ba:f4:7e:6e: c7:5e:26:79:08:8d:f1:07:6b:5a:cf:75:27:7d:dd: ca:1e:14:4d:b3:45:65:26:f3:04:2d:ef:8b:64:34: 88:fc:45:75:13:91:37:f7:55:15:9e:98:d5:21:ce: b0:bd:67:da:3e:44:05:5e:58:64:05:45:83:24:d0: ea:1f:7e:76:b5:28:9b:e9:64:2f:82:b6:cf:a9:02: d2:55:da:31:2f:9e:8d:62:4b:d2:aa:ed:5e:84:55: 34:09:38:b0:51:eb:03:7b:df:a2:87:eb:0d:14:a5: e0:4b:51:b1:26:69:18:14:62:93:21:75:81:02:0c: e0:8a:67:a1:a8:cb:ff:7f:52:a7:99:06:12:c1:51: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3E:A5:D5:06:62:BC:72:87:F1:05:01:5E:F2:FF:D4:B3:12:59:3E X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BT6l1QZivHKH8QUBXvL_1LMSWT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.32.0/24 Signature Algorithm: sha256WithRSAEncryption 58:75:9c:69:51:dd:20:31:13:c0:b8:66:9a:9c:3d:14:be:83: 7c:fd:1e:45:91:f9:69:4e:cd:33:dc:ee:bd:03:bb:62:97:9b: de:02:b4:f7:a1:f0:a6:46:df:18:46:c2:ac:8e:69:56:e6:d9: d3:49:56:76:2d:62:dc:60:03:a2:ac:65:7e:82:1f:9c:72:08: 82:d1:52:9a:e6:7e:f7:54:52:de:d7:34:50:9f:76:25:38:34: 07:f4:35:ee:31:69:5b:39:16:05:dc:77:d6:65:f6:46:d7:f7: aa:2b:df:f8:c8:a1:8f:6f:64:42:f4:fc:ce:c3:17:ce:65:be: 8d:99:26:6b:4a:82:19:03:86:ec:7f:a0:e5:05:f6:7f:73:ca: 1a:bb:2f:c6:83:f9:2a:ac:f6:d0:5b:8e:7e:5d:63:66:1d:20: cf:50:45:9f:00:31:ef:d2:d4:7f:26:4a:a9:35:1b:a1:2b:52: a3:a8:11:24:b4:a0:7b:0a:b2:27:d2:82:e2:c9:41:de:e2:c5: 7a:4d:7a:bc:2a:7b:8f:bd:59:fb:37:a0:b2:f6:dc:d2:52:12: 08:fd:18:03:ce:b5:28:64:8a:2e:94:ba:a5:3c:af:f5:b3:08: 43:88:ec:e4:e7:c9:3a:17:ab:dc:9e:0f:e3:74:fb:06:b1:89: 48:23:25:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJ2in5ieMeL+mNuLmqQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTNlYTVkNTA2NjJiYzcyODdmMTA1MDE1ZWYyZmZkNGIzMTI1OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r+VDIp+mfxpJisTqHxYuicAYai6 d6o0KbENQJbtjSjNhIJNtXP43X+ouKGfovon6FrciRuELMKUTZ/2BGGtlSaH1Hp3 2RMUAf9s532fOf1dnvh9MOinxb+aBpfiBDPEJFVOlCHi4Rl5ZgNlHNp9Dt/wKbr0 fm7HXiZ5CI3xB2taz3Unfd3KHhRNs0VlJvMELe+LZDSI/EV1E5E391UVnpjVIc6w vWfaPkQFXlhkBUWDJNDqH352tSib6WQvgrbPqQLSVdoxL56NYkvSqu1ehFU0CTiw UesDe9+ih+sNFKXgS1GxJmkYFGKTIXWBAgzgimehqMv/f1KnmQYSwVFv9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAU+pdUGYrxyh/EFAV7y/9SzElk+MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQlQ2bDFRWml2SEtIOFFVQlh2TF8xTE1TV1Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzggMA0G CSqGSIb3DQEBCwUAA4IBAQBYdZxpUd0gMRPAuGaanD0UvoN8/R5FkflpTs0z3O69 A7til5veArT3ofCmRt8YRsKsjmlW5tnTSVZ2LWLcYAOirGV+gh+ccgiC0VKa5n73 VFLe1zRQn3YlODQH9DXuMWlbORYF3HfWZfZG1/eqK9/4yKGPb2RC9PzOwxfOZb6N mSZrSoIZA4bsf6DlBfZ/c8oauy/Gg/kqrPbQW45+XWNmHSDPUEWfADHv0tR/Jkqp NRuhK1KjqBEktKB7CrIn0oLiyUHe4sV6TXq8KnuPvVn7N6Cy9tzSUhII/RgDzrUo ZIoulLqlPK/1swhDiOzk58k6F6vcng/jdPsGsYlIIyW8 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:21 2026 by rpki-client