This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C6fpQriS_fUVIsi16N2-FVf6pmg.roa File: C6fpQriS_fUVIsi16N2-FVf6pmg.roa (raw, json) Hash identifier: uZLDgORIRPZZ1+8U3/VMMogV+9AEph2xeAFEoHALEnQ= Subject key identifier: 0B:A7:E9:42:B8:92:FD:F5:15:22:C8:B5:E8:DD:BE:15:57:FA:A6:68 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D31614D309C082342540C41A3BA5 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C6fpQriS_fUVIsi16N2-FVf6pmg.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216145 IP address blocks: 31.57.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d3:16:14:d3:09:c0:82:34:25:40:c4:1a:3b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ba7e942b892fdf51522c8b5e8ddbe1557faa668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:9d:37:c7:18:e6:bb:4f:5d:c8:7e:1c:1a: 99:92:bf:e9:59:78:fa:d6:f5:e9:a1:08:b5:85:03: 33:14:ba:a1:6c:71:af:ce:83:b4:55:db:0b:4e:0b: 60:5a:d5:d5:5d:b0:5d:94:49:30:58:02:a2:7c:3d: 8e:42:bb:82:fb:60:7f:7a:9b:69:44:d9:9b:4c:dc: 29:10:7f:6a:2d:cc:c8:89:a8:3f:55:4c:da:b5:3f: 68:27:23:a6:0b:45:5a:4b:28:90:27:fb:02:6b:da: 23:a9:9c:13:27:4c:5e:c1:29:d7:27:cf:37:da:13: 85:f8:85:6d:fa:1c:b6:fd:ee:67:85:02:05:f6:02: 7e:41:04:ae:e0:39:2c:81:7e:c1:10:c7:24:b4:7f: e6:fa:5d:c4:d5:75:ec:9e:f0:ea:68:52:17:a8:ee: 7e:f7:bf:26:40:bd:ea:f9:07:12:33:56:20:61:a8: 1d:60:77:55:6c:75:a4:5c:d7:64:cc:80:79:bb:65: 74:0a:8a:75:2c:ca:72:19:b0:d3:0d:ca:ce:3c:6d: c6:c1:75:11:15:a7:af:5c:33:be:82:73:5f:9f:37: 87:62:a6:70:13:b4:89:30:48:bd:fb:71:af:d2:4c: d2:be:a6:d9:93:de:21:40:79:27:47:f4:02:31:82: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A7:E9:42:B8:92:FD:F5:15:22:C8:B5:E8:DD:BE:15:57:FA:A6:68 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/C6fpQriS_fUVIsi16N2-FVf6pmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.167.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:5a:61:66:e3:1d:c1:84:35:ff:8f:6f:ad:b5:f1:25:29:ab: 4a:68:96:7b:fc:19:07:f7:63:66:84:ca:03:86:56:50:00:78: 69:49:b5:ae:6d:a5:42:53:0b:93:76:24:b3:c2:ab:bc:11:b6: 17:69:7b:ad:29:70:9d:17:3b:8e:97:1d:75:44:81:51:1f:2c: 46:6f:86:d2:ef:7d:bd:a8:cf:62:3a:e2:21:45:a6:8f:68:31: 46:c2:51:90:13:57:85:ac:05:69:3c:43:57:f5:f4:99:78:06: 57:16:0d:b3:99:48:25:ae:55:80:34:13:08:21:fa:11:d9:9a: e8:f3:10:92:36:1d:6c:46:2a:76:f4:f7:51:31:97:85:5c:45: 69:04:fa:a2:48:82:04:99:51:d9:06:de:5d:5b:cf:35:3d:82: 49:f7:d4:ae:d5:12:28:ea:b5:2e:c8:6f:65:0e:5e:4b:22:19: 8b:4b:57:8a:51:d0:6f:a5:ae:af:00:d8:b0:58:89:1f:3c:91: 4e:c3:85:4b:bc:8d:2f:ce:8a:42:93:41:0d:45:19:5e:4f:d0: f9:cc:7e:3d:3d:53:3a:10:e0:de:1e:e3:72:4a:b3:1c:1d:a1: 54:92:c0:52:d3:82:38:25:eb:01:2b:14:30:8b:de:50:a4:d9: 3b:e7:28:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNMWFNMJwII0JUDEGjulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmE3ZTk0MmI4OTJmZGY1MTUyMmM4YjVlOGRkYmUxNTU3ZmFhNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwradN8cY5rtPXch+HBqZkr/pWXj6 1vXpoQi1hQMzFLqhbHGvzoO0VdsLTgtgWtXVXbBdlEkwWAKifD2OQruC+2B/eptp RNmbTNwpEH9qLczIiag/VUzatT9oJyOmC0VaSyiQJ/sCa9ojqZwTJ0xewSnXJ883 2hOF+IVt+hy2/e5nhQIF9gJ+QQSu4DksgX7BEMcktH/m+l3E1XXsnvDqaFIXqO5+ 978mQL3q+QcSM1YgYagdYHdVbHWkXNdkzIB5u2V0Cop1LMpyGbDTDcrOPG3GwXUR FaevXDO+gnNfnzeHYqZwE7SJMEi9+3Gv0kzSvqbZk94hQHknR/QCMYKirQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAun6UK4kv31FSLItejdvhVX+qZoMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQzZmcFFyaVNfZlVWSXNpMTZOMi1GVmY2cG1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmnMA0G CSqGSIb3DQEBCwUAA4IBAQCeWmFm4x3BhDX/j2+ttfElKatKaJZ7/BkH92NmhMoD hlZQAHhpSbWubaVCUwuTdiSzwqu8EbYXaXutKXCdFzuOlx11RIFRHyxGb4bS7329 qM9iOuIhRaaPaDFGwlGQE1eFrAVpPENX9fSZeAZXFg2zmUglrlWANBMIIfoR2Zro 8xCSNh1sRip29PdRMZeFXEVpBPqiSIIEmVHZBt5dW881PYJJ99Su1RIo6rUuyG9l Dl5LIhmLS1eKUdBvpa6vANiwWIkfPJFOw4VLvI0vzopCk0ENRRleT9D5zH49PVM6 EODeHuNySrMcHaFUksBS04I4JesBKxQwi95QpNk75yhG -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:15 2026 by rpki-client