This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BudVgPCwknusBHouBrU89XAPfCw.roa File: BudVgPCwknusBHouBrU89XAPfCw.roa (raw, json) Hash identifier: FUV9ELxHmGZkc+rKruiT0M+VQVHoVVRy4UeZfMRxGEw= Subject key identifier: 06:E7:55:80:F0:B0:92:7B:AC:04:7A:2E:06:B5:3C:F5:70:0F:7C:2C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BB32921350EBF4D25845E7B403B536EFA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BudVgPCwknusBHouBrU89XAPfCw.roa Signing time: Mon 12 Jan 2026 17:02:55 +0000 ROA not before: Mon 12 Jan 2026 17:02:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 31.57.221.0/24 maxlen: 24 31.58.139.0/24 maxlen: 24 31.59.199.0/24 maxlen: 24 31.59.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:29:21:35:0e:bf:4d:25:84:5e:7b:40:3b:53:6e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 12 17:02:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06e75580f0b0927bac047a2e06b53cf5700f7c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:3a:b7:35:71:54:b5:0a:b9:63:dc:35:de: d9:71:fa:70:4d:96:f2:92:0a:2d:28:c8:69:fc:bc: 79:08:b1:f3:cf:aa:0c:e5:9a:cf:55:91:d3:c0:ae: 1e:46:d9:e5:72:e8:62:8f:f8:e0:c0:f1:6c:59:29: a6:0d:06:37:bd:01:41:50:1f:89:e5:bb:1f:11:fb: dd:7e:af:f9:98:62:b3:04:c2:d5:3c:f5:ea:ba:4c: c1:30:c6:d4:e4:33:d6:a2:e9:b0:8e:aa:d6:9e:a5: e2:b6:17:15:e0:42:f9:c8:55:cb:98:f6:df:b6:c6: 54:1b:dc:22:a6:20:86:f8:2a:3e:3d:8f:af:02:df: eb:b0:ed:16:15:76:6c:3e:32:02:a1:1b:0c:8f:61: 7f:42:af:5f:ec:02:c0:50:9f:44:72:09:46:29:69: d8:89:d7:03:5a:9f:fc:98:71:ae:44:12:d5:6c:c2: 73:a4:03:67:f6:2d:a5:1a:85:7d:6b:f1:b2:c4:ca: d6:05:5b:b4:7d:ff:e9:c7:cd:c9:8c:dd:2d:7e:18: f0:10:74:02:74:27:37:a1:09:a5:a7:f2:e3:7f:29: c9:d4:30:28:23:eb:1f:a3:29:44:11:23:79:d1:51: 2e:6f:d1:a0:d2:af:c1:be:5a:b8:6f:28:e3:ea:3a: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:55:80:F0:B0:92:7B:AC:04:7A:2E:06:B5:3C:F5:70:0F:7C:2C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BudVgPCwknusBHouBrU89XAPfCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.221.0/24 31.58.139.0/24 31.59.199.0/24 31.59.215.0/24 Signature Algorithm: sha256WithRSAEncryption a6:92:49:20:a1:59:c4:fd:13:13:ae:ea:a8:08:f2:1c:94:9f: 16:5b:91:a3:6b:c2:64:e8:c1:db:21:28:3f:8a:2b:55:e9:7f: 84:c4:c4:84:c0:e5:04:20:ee:f4:ff:65:ed:63:0d:30:30:65: 9b:9f:24:ff:b8:ed:00:17:31:48:8d:f7:d7:41:10:87:a2:cc: 31:52:cf:a3:06:5b:94:fe:48:16:2a:86:33:2b:92:0c:15:8c: 9c:dd:76:44:f1:ad:cf:41:18:62:1b:75:d2:7d:0b:25:ed:78: d6:9a:70:b5:f2:e5:4d:e0:ac:8b:90:a4:03:1c:9a:79:56:b8: 94:f5:cc:d7:c0:56:a6:2b:5f:f2:3d:ba:6f:28:6b:23:cf:d0: 96:7b:cb:af:85:18:83:e6:46:5e:a3:16:44:38:1e:ae:a7:bf: c9:21:2a:af:f3:70:c1:1a:cc:9c:6a:2c:c6:f7:c0:bf:fe:e8: 42:49:db:f6:b8:1b:9c:ea:45:46:00:8a:6e:d1:85:0d:1b:6e: 1c:cc:fd:45:66:39:11:d8:8f:17:f5:3c:41:6d:a5:79:10:55: 62:42:6a:0b:0e:42:7c:76:b9:50:f2:96:43:d9:d5:18:58:bc: 78:e7:d0:62:14:d7:89:c5:45:88:ab:c2:d0:b8:a8:0a:83:1b: 29:12:db:b6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuzKSE1Dr9NJYRee0A7U276MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTEyMTcwMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmU3NTU4MGYwYjA5MjdiYWMwNDdhMmUwNmI1M2NmNTcwMGY3YzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS86tzVxVLUKuWPcNd7ZcfpwTZby kgotKMhp/Lx5CLHzz6oM5ZrPVZHTwK4eRtnlcuhij/jgwPFsWSmmDQY3vQFBUB+J 5bsfEfvdfq/5mGKzBMLVPPXqukzBMMbU5DPWoumwjqrWnqXithcV4EL5yFXLmPbf tsZUG9wipiCG+Co+PY+vAt/rsO0WFXZsPjICoRsMj2F/Qq9f7ALAUJ9EcglGKWnY idcDWp/8mHGuRBLVbMJzpANn9i2lGoV9a/GyxMrWBVu0ff/px83JjN0tfhjwEHQC dCc3oQmlp/LjfynJ1DAoI+sfoylEESN50VEub9Gg0q/Bvlq4byjj6jpldwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAbnVYDwsJJ7rAR6Lga1PPVwD3wsMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQnVkVmdQQ3drbnVzQkhvdUJyVTg5WEFQZkN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzndAwQA HzqLAwQAHzvHAwQAHzvXMA0GCSqGSIb3DQEBCwUAA4IBAQCmkkkgoVnE/RMTruqo CPIclJ8WW5Gja8Jk6MHbISg/iitV6X+ExMSEwOUEIO70/2XtYw0wMGWbnyT/uO0A FzFIjffXQRCHoswxUs+jBluU/kgWKoYzK5IMFYyc3XZE8a3PQRhiG3XSfQsl7XjW mnC18uVN4KyLkKQDHJp5VriU9czXwFamK1/yPbpvKGsjz9CWe8uvhRiD5kZeoxZE OB6up7/JISqv83DBGsycaizG98C//uhCSdv2uBuc6kVGAIpu0YUNG24czP1FZjkR 2I8X9TxBbaV5EFViQmoLDkJ8drlQ8pZD2dUYWLx459BiFNeJxUWIq8LQuKgKgxsp Etu2 -----END CERTIFICATE-----Generated at Tue Jan 13 06:59:25 2026 by rpki-client