This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CMe27El5IRgE0seiUeeBPMYyFpw.roa File: CMe27El5IRgE0seiUeeBPMYyFpw.roa (raw, json) Hash identifier: 6H69pxh6TuJW+m8zYPsbA0o3UVCSVan4r98lCcXdKeg= Subject key identifier: 08:C7:B6:EC:49:79:21:18:04:D2:C7:A2:51:E7:81:3C:C6:32:16:9C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B817ABDA10F5AD5644D86B54C7E5 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CMe27El5IRgE0seiUeeBPMYyFpw.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213795 IP address blocks: 31.56.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b8:17:ab:da:10:f5:ad:56:44:d8:6b:54:c7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08c7b6ec4979211804d2c7a251e7813cc632169c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:2d:da:c9:d9:06:3c:59:98:ff:89:ce:55: d5:dc:1a:9e:92:8d:df:b0:19:8f:08:a3:68:12:90: 17:df:99:1b:13:08:c2:a7:d6:7b:30:10:05:72:a1: a8:f8:3a:f7:a0:2d:0a:f0:4d:d9:d5:66:a5:11:00: f0:74:cc:0b:a7:70:2d:34:04:26:d8:13:c4:80:42: 80:97:82:5d:f5:24:38:08:47:5e:9e:8b:d5:c3:78: 81:18:57:d9:77:e4:92:e1:9e:48:bb:f2:2a:35:98: 6e:d4:6b:17:0f:ec:23:58:c8:c8:bf:eb:4f:6d:ca: cf:f9:ea:77:70:47:5c:fa:5d:70:31:bf:00:d2:d3: b7:00:d1:6a:5b:c4:35:7d:fb:7d:0a:93:54:6b:7d: 4f:81:e6:af:76:7d:0f:78:54:f3:ff:e9:4d:a5:06: f0:c5:23:64:52:4c:ad:36:b7:9f:82:76:45:44:a6: bb:f8:3d:63:01:5b:f5:15:b7:95:8f:09:c3:c4:0d: e7:15:ba:07:bb:bd:23:3e:6c:8c:2c:f5:2f:79:10: a0:4f:de:5b:88:fa:e7:36:35:1a:3b:71:aa:ca:1a: 21:3b:fa:15:bb:81:0e:37:8f:c5:d4:ad:15:79:8c: 2f:f7:03:1b:10:e3:0a:d7:4c:e4:5b:e8:7e:b5:5e: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:B6:EC:49:79:21:18:04:D2:C7:A2:51:E7:81:3C:C6:32:16:9C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CMe27El5IRgE0seiUeeBPMYyFpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.60.0/24 Signature Algorithm: sha256WithRSAEncryption 20:5a:68:ff:f9:c6:95:f6:43:eb:90:c4:13:5a:ac:ea:66:de: bc:b2:14:5d:31:44:ed:8d:c1:ff:a8:e8:2e:96:a6:fc:18:93: 31:a2:95:ef:b8:34:2a:1b:64:25:e6:7b:62:78:82:e7:8e:26: cf:c8:bc:c7:f3:0b:d0:a9:ef:7c:18:c4:b4:2b:93:ca:70:89: 93:b8:c8:9a:35:70:e2:38:50:3e:6f:72:f4:bb:c9:f0:e4:8b: 4b:33:b1:9b:47:8b:64:0b:57:21:39:6c:fb:00:d1:93:7c:2a: b0:17:96:c8:46:df:98:e5:fb:ea:d4:7c:15:26:cd:34:e5:80: 8e:4c:c0:fb:e8:42:41:16:b4:bf:d1:38:c4:a2:b9:1a:9f:ad: e2:94:63:db:20:ae:5b:9a:47:17:e8:bd:39:f5:00:23:ad:97: 0a:30:b6:e5:4d:e5:4e:d4:18:95:b3:b5:11:c8:cc:a6:ae:7d: 7e:c5:93:59:95:35:c2:17:5c:e3:e2:7c:a2:07:a7:1f:98:9d: e2:8a:8b:68:9a:b8:79:d9:f3:e1:8d:08:f2:2d:3d:3e:9d:20: 58:33:bb:44:e8:73:68:91:c7:ff:ba:1a:df:55:5a:71:a6:2d: 9f:86:40:b6:db:15:e2:e6:43:a7:5a:a2:40:3a:1c:93:c7:4c: f4:d5:7b:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLgXq9oQ9a1WRNhrVMflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGM3YjZlYzQ5NzkyMTE4MDRkMmM3YTI1MWU3ODEzY2M2MzIxNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rgt2snZBjxZmP+JzlXV3Bqeko3f sBmPCKNoEpAX35kbEwjCp9Z7MBAFcqGo+Dr3oC0K8E3Z1WalEQDwdMwLp3AtNAQm 2BPEgEKAl4Jd9SQ4CEdenovVw3iBGFfZd+SS4Z5Iu/IqNZhu1GsXD+wjWMjIv+tP bcrP+ep3cEdc+l1wMb8A0tO3ANFqW8Q1fft9CpNUa31Pgeavdn0PeFTz/+lNpQbw xSNkUkytNrefgnZFRKa7+D1jAVv1FbeVjwnDxA3nFboHu70jPmyMLPUveRCgT95b iPrnNjUaO3GqyhohO/oVu4EON4/F1K0VeYwv9wMbEOMK10zkW+h+tV5fGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjHtuxJeSEYBNLHolHngTzGMhacMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ01lMjdFbDVJUmdFMHNlaVVlZUJQTVl5RnB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg8MA0G CSqGSIb3DQEBCwUAA4IBAQAgWmj/+caV9kPrkMQTWqzqZt68shRdMUTtjcH/qOgu lqb8GJMxopXvuDQqG2Ql5ntieILnjibPyLzH8wvQqe98GMS0K5PKcImTuMiaNXDi OFA+b3L0u8nw5ItLM7GbR4tkC1chOWz7ANGTfCqwF5bIRt+Y5fvq1HwVJs005YCO TMD76EJBFrS/0TjEorkan63ilGPbIK5bmkcX6L059QAjrZcKMLblTeVO1BiVs7UR yMymrn1+xZNZlTXCF1zj4nyiB6cfmJ3iiotomrh52fPhjQjyLT0+nSBYM7tE6HNo kcf/uhrfVVpxpi2fhkC22xXi5kOnWqJAOhyTx0z01XtD -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:27 2026 by rpki-client