This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CkjaC_USH2-OxUzKLq5w7dW1pxM.roa File: CkjaC_USH2-OxUzKLq5w7dW1pxM.roa (raw, json) Hash identifier: lyJki8X/TodMzMxd4GbY3Yo0VMS93BoL2ymxHR3n0w4= Subject key identifier: 0A:48:DA:0B:F5:12:1F:6F:8E:C5:4C:CA:2E:AE:70:ED:D5:B5:A7:13 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B1E7E4727F7FF8291340C6A52E4A27796 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CkjaC_USH2-OxUzKLq5w7dW1pxM.roa Signing time: Sun 14 Dec 2025 20:12:30 +0000 ROA not before: Sun 14 Dec 2025 20:12:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154410 IP address blocks: 31.56.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:7e:47:27:f7:ff:82:91:34:0c:6a:52:e4:a2:77:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 14 20:12:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a48da0bf5121f6f8ec54cca2eae70edd5b5a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:a8:f1:19:3b:fa:4a:19:1b:5f:f4:c4:4f: 23:54:1a:fa:74:c9:f5:76:94:44:fa:ce:4d:46:d1: 2f:c1:b9:7c:82:78:cb:3e:14:45:32:30:67:0c:c9: b7:51:48:50:9e:b6:5f:cf:c3:64:5c:2d:64:e8:30: 3c:3c:91:42:9a:6a:b4:56:a6:0c:99:1f:3c:bd:b6: 7c:10:f1:63:01:86:d9:4b:3f:68:fd:6c:6c:d5:73: c2:af:e9:0e:1c:12:6f:7e:ef:85:8e:0a:79:eb:19: 1e:bd:cd:75:56:0f:4b:0b:9b:f7:ec:8d:05:84:41: 6b:ce:f4:80:e1:75:5f:26:80:bf:a9:9f:63:85:1f: a2:7e:3a:7e:ac:42:b0:2f:5e:ab:4e:08:38:45:7e: 6c:f2:97:fa:5d:96:c6:50:3a:65:d6:4e:be:0d:bc: 25:a6:10:4c:a0:8c:aa:39:d0:51:27:77:8a:38:22: a4:6a:7a:12:fc:37:70:d7:4f:90:20:fb:15:07:0d: e1:bc:f2:4a:80:c3:3d:80:39:7c:42:a7:5d:af:b8: da:8a:ce:5f:99:fb:b0:5f:ec:f4:ea:e3:39:40:a4: d1:36:b7:af:ab:3e:81:f4:ab:45:eb:e6:b9:4b:a2: fc:de:87:f9:91:9a:d6:78:85:d1:17:97:0c:9a:98: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:48:DA:0B:F5:12:1F:6F:8E:C5:4C:CA:2E:AE:70:ED:D5:B5:A7:13 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CkjaC_USH2-OxUzKLq5w7dW1pxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.71.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:56:16:2a:23:9c:7d:03:58:ff:68:b2:8d:ca:b4:9d:cc:9c: 2f:85:4d:d7:8d:d1:0d:f2:2d:c8:b9:e0:8e:32:04:10:92:5b: 5e:59:74:a1:e0:24:85:88:26:78:4f:e5:29:63:c6:f2:80:3c: 87:b1:12:8b:b7:1e:ac:f2:2f:35:bf:4b:55:33:ae:11:2e:d5: ec:92:8f:e3:1b:1b:c2:d0:06:08:85:de:39:0d:a2:35:0a:2d: 13:4c:b4:35:09:ef:c2:0e:5b:68:45:29:d5:de:61:87:57:19: 9d:40:cb:3a:b0:df:77:18:93:b1:e1:d4:11:59:79:04:14:5c: c7:34:e5:93:ec:95:be:9a:31:1e:fc:8e:28:34:64:d0:ef:c0: 62:c7:d6:7e:f0:90:a6:c6:29:48:dd:53:06:49:83:15:51:51: 9a:98:e4:10:74:49:64:c8:0f:cf:e3:ad:73:63:b4:5d:55:ff: bc:bd:34:41:f6:98:b5:59:f7:fd:74:bf:29:19:b2:c6:96:59: 9b:f0:a3:ce:0d:41:10:ee:0d:d2:19:4d:fb:81:0f:cb:7a:79: 9f:06:4b:f8:46:1e:4e:67:aa:c3:e2:22:f7:85:e5:15:97:31: d6:07:a9:d1:04:f1:09:f7:93:78:68:c0:53:d9:54:18:1c:86: 76:fb:92:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsefkcn9/+CkTQMalLkoneWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE0MjAxMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTQ4ZGEwYmY1MTIxZjZmOGVjNTRjY2EyZWFlNzBlZGQ1YjVhNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ao8Rk7+koZG1/0xE8jVBr6dMn1 dpRE+s5NRtEvwbl8gnjLPhRFMjBnDMm3UUhQnrZfz8NkXC1k6DA8PJFCmmq0VqYM mR88vbZ8EPFjAYbZSz9o/Wxs1XPCr+kOHBJvfu+Fjgp56xkevc11Vg9LC5v37I0F hEFrzvSA4XVfJoC/qZ9jhR+ifjp+rEKwL16rTgg4RX5s8pf6XZbGUDpl1k6+Dbwl phBMoIyqOdBRJ3eKOCKkanoS/Ddw10+QIPsVBw3hvPJKgMM9gDl8Qqddr7jais5f mfuwX+z06uM5QKTRNrevqz6B9KtF6+a5S6L83of5kZrWeIXRF5cMmpjSvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApI2gv1Eh9vjsVMyi6ucO3VtacTMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ2tqYUNfVVNIMi1PeFV6S0xxNXc3ZFcxcHhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhHMA0G CSqGSIb3DQEBCwUAA4IBAQBLVhYqI5x9A1j/aLKNyrSdzJwvhU3XjdEN8i3IueCO MgQQklteWXSh4CSFiCZ4T+UpY8bygDyHsRKLtx6s8i81v0tVM64RLtXsko/jGxvC 0AYIhd45DaI1Ci0TTLQ1Ce/CDltoRSnV3mGHVxmdQMs6sN93GJOx4dQRWXkEFFzH NOWT7JW+mjEe/I4oNGTQ78Bix9Z+8JCmxilI3VMGSYMVUVGamOQQdElkyA/P461z Y7RdVf+8vTRB9pi1Wff9dL8pGbLGllmb8KPODUEQ7g3SGU37gQ/LenmfBkv4Rh5O Z6rD4iL3heUVlzHWB6nRBPEJ95N4aMBT2VQYHIZ2+5K8 -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:36 2025 by rpki-client