This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cw86f2ijzee5GbbRuTXCe-I8Pgw.roa File: Cw86f2ijzee5GbbRuTXCe-I8Pgw.roa (raw, json) Hash identifier: 6+WdHVz64GfjfRhMtFgnSeq5F9YlFIZSlJ5iCZIUkY4= Subject key identifier: 0B:0F:3A:7F:68:A3:CD:E7:B9:19:B6:D1:B9:35:C2:7B:E2:3C:3E:0C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BB0D6095A0B42E8C81F0A5D01608C404B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cw86f2ijzee5GbbRuTXCe-I8Pgw.roa Signing time: Mon 12 Jan 2026 06:12:55 +0000 ROA not before: Mon 12 Jan 2026 06:12:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11439 IP address blocks: 31.58.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:d6:09:5a:0b:42:e8:c8:1f:0a:5d:01:60:8c:40:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 12 06:12:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b0f3a7f68a3cde7b919b6d1b935c27be23c3e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8c:7b:91:0a:44:f2:6d:a6:74:f2:d8:36:99: 89:b8:13:97:dc:51:9d:30:b4:62:a0:72:d4:b6:ae: 62:73:9d:a5:03:02:39:13:17:bf:15:f1:47:3b:e0: 90:31:fa:84:97:c2:9e:a1:0b:51:93:ea:a2:af:31: 48:62:28:a7:b2:9f:94:e0:ed:a1:c7:ce:d9:2c:bc: 6d:8d:62:e8:41:5f:0a:7d:e2:e5:d5:1d:a8:87:de: 39:6e:35:89:ce:3a:c6:5c:8e:04:0c:78:6f:e6:7a: ca:f5:fd:f1:2b:85:88:07:fd:64:bf:59:62:a4:5f: 37:0e:e3:38:38:7e:2d:98:01:2a:48:25:16:eb:3b: 41:d9:8d:3e:20:8f:ad:96:c1:29:06:e9:47:74:bc: 2a:47:07:d3:79:ee:84:26:c7:c0:2a:c4:10:55:bc: e5:bf:ad:7e:db:e8:d6:ae:4e:5f:71:27:e2:7b:53: d0:0d:5b:9e:70:9a:17:9b:67:1d:33:c4:78:24:38: 20:18:8e:db:f6:f6:3b:11:8f:32:41:cc:99:07:a0: 01:f0:29:3a:c8:40:e9:e8:0b:f7:a8:08:d8:98:25: b9:96:23:b1:30:fc:f8:8c:3e:86:18:5e:b5:b8:b8: 3c:47:79:3f:d3:24:93:e0:3e:a3:39:e8:87:dc:ee: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0F:3A:7F:68:A3:CD:E7:B9:19:B6:D1:B9:35:C2:7B:E2:3C:3E:0C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cw86f2ijzee5GbbRuTXCe-I8Pgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.138.0/23 Signature Algorithm: sha256WithRSAEncryption 99:35:89:a6:9e:ce:3e:d5:0b:b9:b5:1e:bc:6f:26:a1:f9:fd: 2e:3d:4d:67:11:be:4d:61:52:60:1d:52:04:b7:17:4a:64:87: 9c:8e:de:bc:27:e5:4e:0f:f2:f0:bf:90:51:64:86:24:13:0f: 0d:b4:94:da:c2:e4:f7:ca:31:ef:b6:03:af:e1:9e:a2:e6:fe: 55:a5:d7:08:46:93:0b:53:61:82:66:29:d9:3d:bf:3a:6d:a5: f6:e3:e4:69:50:17:8b:50:5d:92:51:ee:bb:71:2c:94:e3:b0: 30:98:52:85:dc:a3:db:53:71:39:0e:c1:1e:f9:35:79:7f:27: d2:97:f7:43:93:6c:c5:8e:dc:df:d7:ec:bb:79:7d:09:ee:56: 4c:bc:55:43:01:e6:b6:16:75:c3:4b:a7:cf:6b:83:db:e7:22: 08:e0:3c:4e:c4:40:01:79:4a:05:67:88:85:39:8d:82:16:51: a2:a0:66:95:e3:4a:a6:55:ab:7c:12:7a:c3:f2:01:4e:db:48: f9:e2:37:9c:02:83:69:38:35:51:52:0d:f3:23:f1:6d:10:08: 7e:dc:40:d7:7c:54:b7:c5:6f:e4:c3:35:ee:2c:5c:66:dd:84: f6:cd:06:ad:a4:89:73:a1:c8:ea:06:6a:1b:fe:a5:fb:b3:d6: e8:c0:12:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuw1glaC0LoyB8KXQFgjEBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTEyMDYxMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjBmM2E3ZjY4YTNjZGU3YjkxOWI2ZDFiOTM1YzI3YmUyM2MzZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yx7kQpE8m2mdPLYNpmJuBOX3FGd MLRioHLUtq5ic52lAwI5Exe/FfFHO+CQMfqEl8KeoQtRk+qirzFIYiinsp+U4O2h x87ZLLxtjWLoQV8KfeLl1R2oh945bjWJzjrGXI4EDHhv5nrK9f3xK4WIB/1kv1li pF83DuM4OH4tmAEqSCUW6ztB2Y0+II+tlsEpBulHdLwqRwfTee6EJsfAKsQQVbzl v61+2+jWrk5fcSfie1PQDVuecJoXm2cdM8R4JDggGI7b9vY7EY8yQcyZB6AB8Ck6 yEDp6Av3qAjYmCW5liOxMPz4jD6GGF61uLg8R3k/0yST4D6jOeiH3O5PIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsPOn9oo83nuRm20bk1wnviPD4MMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ3c4NmYyaWp6ZWU1R2JiUnVUWENlLUk4UGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzqKMA0G CSqGSIb3DQEBCwUAA4IBAQCZNYmmns4+1Qu5tR68byah+f0uPU1nEb5NYVJgHVIE txdKZIecjt68J+VOD/Lwv5BRZIYkEw8NtJTawuT3yjHvtgOv4Z6i5v5VpdcIRpML U2GCZinZPb86baX24+RpUBeLUF2SUe67cSyU47AwmFKF3KPbU3E5DsEe+TV5fyfS l/dDk2zFjtzf1+y7eX0J7lZMvFVDAea2FnXDS6fPa4Pb5yII4DxOxEABeUoFZ4iF OY2CFlGioGaV40qmVat8EnrD8gFO20j54jecAoNpODVRUg3zI/FtEAh+3EDXfFS3 xW/kwzXuLFxm3YT2zQatpIlzocjqBmob/qX7s9bowBIM -----END CERTIFICATE-----Generated at Tue Jan 13 06:59:25 2026 by rpki-client