This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DTOBcIzZUwlPzTXSKhAVLpQPhL0.roa File: DTOBcIzZUwlPzTXSKhAVLpQPhL0.roa (raw, json) Hash identifier: cdg3q36RxmWGXEPbprwIJghhGyJW0Ppux2Fpg6jA8mg= Subject key identifier: 0D:33:81:70:8C:D9:53:09:4F:CD:35:D2:2A:10:15:2E:94:0F:84:BD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E0140883D1544BCFCCE00775A485 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DTOBcIzZUwlPzTXSKhAVLpQPhL0.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 31.56.139.0/24 maxlen: 24 31.57.90.0/24 maxlen: 24 31.58.72.0/22 maxlen: 24 31.58.108.0/22 maxlen: 24 31.58.124.0/22 maxlen: 24 31.58.136.0/24 maxlen: 24 31.59.11.0/24 maxlen: 24 31.59.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e0:14:08:83:d1:54:4b:cf:cc:e0:07:75:a4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d3381708cd953094fcd35d22a10152e940f84bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:32:6b:72:55:61:2c:49:e9:b9:cc:2e:1e: 1e:03:1c:94:7a:2b:27:73:a9:e8:7e:fd:48:bb:ae: 23:02:42:31:33:e4:15:4c:e7:65:d2:8d:9a:ad:4c: c3:ec:b5:e8:54:89:a0:00:a2:20:b6:3c:6b:33:36: 2b:48:20:35:9f:8b:b6:51:c8:b9:2d:0d:f5:e8:f2: 0b:87:12:00:25:85:35:3a:32:fc:75:df:90:6e:11: 22:02:4b:3d:18:be:5a:c8:a7:59:92:6b:d8:ab:79: 4a:2d:1b:0e:80:a4:76:3a:a6:a4:f1:f2:81:0b:c3: 0f:9f:07:ed:d4:41:6e:1b:8b:43:8f:31:3b:dd:32: 91:eb:cc:4b:bb:fb:76:a0:74:94:03:bd:57:ae:85: f5:ff:1c:f8:ac:12:b6:1b:3f:a5:d9:b9:bf:b5:13: e7:f6:1d:8e:f0:b4:8f:81:50:50:6b:78:b6:54:fc: 34:ce:40:27:c4:b6:54:a1:fc:a7:69:76:f1:f9:e7: 2f:58:3b:67:28:9e:79:ca:41:87:a8:80:c7:ed:e6: 2b:7f:3c:31:80:c2:1f:0d:2f:95:2a:bc:6f:d3:c7: d9:5f:d3:e1:7f:78:15:91:74:1f:d5:48:d9:4c:24: 8b:f7:40:80:c1:d6:55:0e:78:94:cc:db:82:f9:70: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:33:81:70:8C:D9:53:09:4F:CD:35:D2:2A:10:15:2E:94:0F:84:BD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DTOBcIzZUwlPzTXSKhAVLpQPhL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.139.0/24 31.57.90.0/24 31.58.72.0/22 31.58.108.0/22 31.58.124.0/22 31.58.136.0/24 31.59.11.0/24 31.59.107.0/24 Signature Algorithm: sha256WithRSAEncryption 14:d2:87:c0:e9:0b:a5:56:e1:28:7a:00:e4:98:2a:2f:cd:fa: 70:3a:07:46:14:42:2f:ff:c1:c2:ee:d1:06:8c:7a:82:50:27: d9:b2:ea:0f:a7:53:58:7c:2e:45:59:ff:f1:f9:40:70:91:0a: fd:f6:f1:81:b4:be:10:0e:c6:ee:46:38:1d:5e:fb:72:88:03: 0d:a8:84:8f:10:dc:03:3d:ab:4a:96:1b:f4:7b:38:14:1e:6a: 78:0f:96:1a:60:8d:01:38:97:de:0a:d6:57:f7:95:b3:d3:8f: c9:16:5c:65:dc:e6:cb:4a:cf:7e:a5:5d:c7:c9:3f:16:82:f9: b6:b0:82:87:42:c3:70:ad:76:16:a2:5c:df:41:fc:f9:0b:a7: 2a:2d:da:32:5b:0a:85:c5:56:8b:42:5c:44:ca:41:1e:82:d0: 78:1e:d9:c4:52:6a:a6:66:64:cd:67:60:52:63:27:ff:02:a3: 4e:24:3c:5e:cf:81:8a:bc:9d:4b:23:9d:ef:98:f8:6f:0e:4e: cd:48:7e:4c:ff:7d:43:f5:78:8f:c0:fb:08:7b:1e:41:68:97: 08:a6:6b:a5:1f:2b:e0:26:5a:63:be:66:22:8b:4a:92:8f:f1: 65:e7:ae:4c:63:a9:0e:a7:c5:5b:7d:c0:0b:4d:c4:24:13:94: 73:07:7f:13 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt/hOAUCIPRVEvPzOAHdaSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDMzODE3MDhjZDk1MzA5NGZjZDM1ZDIyYTEwMTUyZTk0MGY4NGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt0ya3JVYSxJ6bnMLh4eAxyUeisn c6nofv1Iu64jAkIxM+QVTOdl0o2arUzD7LXoVImgAKIgtjxrMzYrSCA1n4u2Uci5 LQ316PILhxIAJYU1OjL8dd+QbhEiAks9GL5ayKdZkmvYq3lKLRsOgKR2Oqak8fKB C8MPnwft1EFuG4tDjzE73TKR68xLu/t2oHSUA71XroX1/xz4rBK2Gz+l2bm/tRPn 9h2O8LSPgVBQa3i2VPw0zkAnxLZUofynaXbx+ecvWDtnKJ55ykGHqIDH7eYrfzwx gMIfDS+VKrxv08fZX9Phf3gVkXQf1UjZTCSL90CAwdZVDniUzNuC+XBAxQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFA0zgXCM2VMJT8010ioQFS6UD4S9MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRFRPQmNJelpVd2xQelRYU0toQVZMcFFQaEwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAHziLAwQA HzlaAwQCHzpIAwQCHzpsAwQCHzp8AwQAHzqIAwQAHzsLAwQAHztrMA0GCSqGSIb3 DQEBCwUAA4IBAQAU0ofA6QulVuEoegDkmCovzfpwOgdGFEIv/8HC7tEGjHqCUCfZ suoPp1NYfC5FWf/x+UBwkQr99vGBtL4QDsbuRjgdXvtyiAMNqISPENwDPatKlhv0 ezgUHmp4D5YaYI0BOJfeCtZX95Wz04/JFlxl3ObLSs9+pV3HyT8Wgvm2sIKHQsNw rXYWolzfQfz5C6cqLdoyWwqFxVaLQlxEykEegtB4HtnEUmqmZmTNZ2BSYyf/AqNO JDxez4GKvJ1LI53vmPhvDk7NSH5M/31D9XiPwPsIex5BaJcIpmulHyvgJlpjvmYi i0qSj/Fl565MY6kOp8VbfcALTcQkE5RzB38T -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client