This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CFxSGwDvz_Y7CiL8k--M52qO7gk.roa File: CFxSGwDvz_Y7CiL8k--M52qO7gk.roa (raw, json) Hash identifier: cF2E8rrlaFs69eO50jM2kruQIYaAO7N1mrkxNiQCeLQ= Subject key identifier: 08:5C:52:1B:00:EF:CF:F6:3B:0A:22:FC:93:EF:8C:E7:6A:8E:EE:09 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C24C0DCD74C3AE8AA92D5DBBA910 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CFxSGwDvz_Y7CiL8k--M52qO7gk.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214347 IP address blocks: 31.57.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c2:4c:0d:cd:74:c3:ae:8a:a9:2d:5d:bb:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=085c521b00efcff63b0a22fc93ef8ce76a8eee09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:34:f8:db:eb:7e:1a:f1:5d:18:c1:0e:69: 72:40:35:37:cd:25:01:f0:18:bf:8f:52:a4:e0:c9: f6:62:e5:99:e8:6c:d3:27:14:53:40:6f:56:32:4f: 43:1e:b4:fa:80:70:c1:d0:f1:91:a0:d7:46:1c:5f: 10:b4:f2:53:e6:79:2b:fa:93:cf:1a:7a:20:50:85: bc:04:c2:71:1a:af:08:2f:2d:63:91:47:21:72:94: c9:23:49:ec:06:97:35:93:fa:74:02:c8:ad:ec:88: 00:df:8e:dc:8f:5e:2b:a5:9e:b3:34:f3:90:90:db: 8b:47:30:c6:69:0f:e4:6b:e2:5a:76:e8:bb:c5:de: cb:85:6f:07:55:dd:e0:b2:ff:de:4c:56:ac:88:32: 12:7d:5c:82:44:8a:4a:75:f6:cb:43:17:53:32:cc: e2:38:bd:35:64:10:1d:72:16:71:d7:93:eb:6c:6c: b6:3c:5c:69:6d:58:bd:9f:4b:58:79:5a:54:d4:09: f2:a2:b3:95:45:82:d6:26:a7:77:86:2b:d1:c5:33: 09:5e:42:6e:9c:42:3e:76:66:b6:a1:cc:da:46:97: ac:e2:b5:74:a1:43:e1:8d:74:00:b2:64:a9:15:75: 84:00:28:5e:8e:52:c6:44:7d:77:fd:ba:2a:10:70: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5C:52:1B:00:EF:CF:F6:3B:0A:22:FC:93:EF:8C:E7:6A:8E:EE:09 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CFxSGwDvz_Y7CiL8k--M52qO7gk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.48.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:19:9c:fb:85:7a:01:4d:df:91:2d:d1:27:00:dd:13:20:a6: 21:f0:ce:3f:87:e5:91:e1:35:cc:0b:96:53:33:31:51:85:80: 02:40:7d:cf:c5:68:e5:01:b9:ef:8d:7b:6f:46:0f:70:d8:e9: dd:e6:4d:c4:eb:f4:6d:60:7a:cc:07:b0:3e:89:af:86:5f:b6: ba:fd:34:d7:f7:42:eb:ea:5c:73:76:76:da:00:73:c9:be:2e: e4:e9:ff:9b:ff:1e:29:87:48:5d:73:2e:14:73:32:f4:3f:3f: ce:51:c3:d5:3f:c0:00:b4:ab:8d:55:21:2c:36:97:61:b5:8d: f5:39:aa:75:0f:82:6f:82:b8:22:d0:4e:60:3a:a3:96:2e:f0: 36:56:ab:43:30:0e:52:5a:1d:cf:79:35:07:8a:d0:8d:b0:f2: fc:ca:71:78:98:47:90:c3:2e:4e:7c:e3:0e:dd:36:95:18:a0: 91:70:45:19:71:06:5a:78:7f:53:67:21:85:ed:6b:99:1d:84: 71:1a:28:0d:0d:31:bf:19:53:cf:f6:66:e3:5a:cb:76:83:59: 00:af:a0:74:3a:20:7a:4b:94:3b:c9:4e:be:63:40:c5:3d:b3: e2:70:f5:32:b0:64:a5:65:d9:99:11:29:34:a4:f4:95:3b:5b: 50:74:44:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMJMDc10w66KqS1du6kQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODVjNTIxYjAwZWZjZmY2M2IwYTIyZmM5M2VmOGNlNzZhOGVlZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2s0+NvrfhrxXRjBDmlyQDU3zSUB 8Bi/j1Kk4Mn2YuWZ6GzTJxRTQG9WMk9DHrT6gHDB0PGRoNdGHF8QtPJT5nkr+pPP GnogUIW8BMJxGq8ILy1jkUchcpTJI0nsBpc1k/p0Asit7IgA347cj14rpZ6zNPOQ kNuLRzDGaQ/ka+Jadui7xd7LhW8HVd3gsv/eTFasiDISfVyCRIpKdfbLQxdTMszi OL01ZBAdchZx15PrbGy2PFxpbVi9n0tYeVpU1AnyorOVRYLWJqd3hivRxTMJXkJu nEI+dma2oczaRpes4rV0oUPhjXQAsmSpFXWEAChejlLGRH13/boqEHBE6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAhcUhsA78/2Owoi/JPvjOdqju4JMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ0Z4U0d3RHZ6X1k3Q2lMOGstLU01MnFPN2drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkwMA0G CSqGSIb3DQEBCwUAA4IBAQBdGZz7hXoBTd+RLdEnAN0TIKYh8M4/h+WR4TXMC5ZT MzFRhYACQH3PxWjlAbnvjXtvRg9w2Ond5k3E6/RtYHrMB7A+ia+GX7a6/TTX90Lr 6lxzdnbaAHPJvi7k6f+b/x4ph0hdcy4UczL0Pz/OUcPVP8AAtKuNVSEsNpdhtY31 Oap1D4Jvgrgi0E5gOqOWLvA2VqtDMA5SWh3PeTUHitCNsPL8ynF4mEeQwy5OfOMO 3TaVGKCRcEUZcQZaeH9TZyGF7WuZHYRxGigNDTG/GVPP9mbjWst2g1kAr6B0OiB6 S5Q7yU6+Y0DFPbPicPUysGSlZdmZESk0pPSVO1tQdESB -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:01 2026 by rpki-client