This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DbB07A-p_XZ6sw-Dpd_-rqES09Q.roa File: DbB07A-p_XZ6sw-Dpd_-rqES09Q.roa (raw, json) Hash identifier: CoFeQHr9FAL0xPnfmx9vejyEhMRW1M61NnPhBXKmgSM= Subject key identifier: 0D:B0:74:EC:0F:A9:FD:76:7A:B3:0F:83:A5:DF:FE:AE:A1:12:D3:D4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E0F359DE4A54EC6A7E2112859431 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DbB07A-p_XZ6sw-Dpd_-rqES09Q.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 31.56.140.0/24 maxlen: 24 31.56.147.0/24 maxlen: 24 31.57.78.0/24 maxlen: 24 31.57.79.0/24 maxlen: 24 31.57.80.0/24 maxlen: 24 31.57.81.0/24 maxlen: 24 31.57.85.0/24 maxlen: 24 31.57.86.0/24 maxlen: 24 31.57.87.0/24 maxlen: 24 31.57.203.0/24 maxlen: 24 31.58.10.0/24 maxlen: 24 31.58.16.0/24 maxlen: 24 31.58.19.0/24 maxlen: 24 31.58.20.0/24 maxlen: 24 31.58.21.0/24 maxlen: 24 31.58.26.0/24 maxlen: 24 31.58.29.0/24 maxlen: 24 31.58.30.0/24 maxlen: 24 31.58.167.0/24 maxlen: 24 31.59.13.0/24 maxlen: 24 31.59.18.0/24 maxlen: 24 31.59.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e0:f3:59:de:4a:54:ec:6a:7e:21:12:85:94:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db074ec0fa9fd767ab30f83a5dffeaea112d3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:71:30:c9:27:47:f9:9c:89:17:b6:f3:9a: a0:6f:4c:46:18:4a:52:43:b3:52:67:68:7a:a3:aa: 7e:dc:d9:53:41:64:96:29:6b:25:eb:62:ac:4b:c5: eb:77:ab:74:4c:59:4e:7f:6b:2e:a8:92:57:d9:a1: 73:b3:3a:a2:df:55:0f:ed:72:50:b9:d4:24:86:d9: 74:43:ee:d0:16:80:fb:1b:e0:6d:9a:82:21:b1:3f: 30:52:39:42:0a:3c:a6:5a:b2:a5:cf:4e:2e:76:b1: 31:04:fb:a1:0a:5f:a9:ec:c2:c3:27:ec:53:3a:b2: e3:e0:07:be:92:04:a9:49:0f:e4:55:62:47:25:d5: ab:7a:72:a5:7f:a8:8c:90:2e:8f:5c:58:9a:ee:97: 70:be:12:f3:2c:5e:de:49:87:64:57:50:be:a7:ce: f6:26:6a:d1:da:2e:3e:1e:97:f1:d6:e4:b9:40:6b: 07:8e:fd:7e:0b:73:d9:bb:dc:94:ba:ff:35:d2:e7: 00:bb:0a:7d:0e:31:93:a4:e1:c3:99:86:88:2d:ec: 61:fe:c1:f6:b2:5e:a6:f1:b0:2f:98:09:f4:6d:ae: 8f:39:8f:c6:29:44:70:16:5c:4f:65:8d:2d:7e:26: d1:be:df:81:5a:52:38:f6:5b:af:36:f5:3f:00:20: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B0:74:EC:0F:A9:FD:76:7A:B3:0F:83:A5:DF:FE:AE:A1:12:D3:D4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DbB07A-p_XZ6sw-Dpd_-rqES09Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.140.0/24 31.56.147.0/24 31.57.78.0-31.57.81.255 31.57.85.0-31.57.87.255 31.57.203.0/24 31.58.10.0/24 31.58.16.0/24 31.58.19.0-31.58.21.255 31.58.26.0/24 31.58.29.0-31.58.30.255 31.58.167.0/24 31.59.13.0/24 31.59.18.0/24 31.59.24.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:a6:db:d9:39:84:69:2c:6e:d1:d9:c3:2d:99:c4:aa:b3:32: 83:eb:a9:5f:dc:04:c9:7f:35:28:5e:6a:29:b8:41:31:36:e4: a1:51:86:35:10:fb:b2:a9:1f:ab:e0:ef:90:d0:80:f7:00:84: dc:a8:94:a0:52:f1:22:a5:02:14:90:20:19:75:4e:2b:38:ee: 92:87:58:ac:74:40:3d:be:e8:57:92:b4:70:6b:14:49:cc:07: a6:da:2b:01:b6:5b:d4:46:23:62:58:cf:ff:26:39:38:08:34: c5:17:1d:6a:25:76:5e:70:ad:66:55:df:66:cc:29:b1:df:2f: 14:f7:c6:60:11:39:42:f1:01:e1:a9:ea:34:a0:51:b4:6f:ff: 85:01:ed:60:d8:94:cb:da:be:81:c4:4b:6a:b2:0a:1b:e5:e1: f8:cf:db:c3:b0:fe:75:d5:2e:67:9a:fe:3e:ec:43:d9:5a:a5: f5:fe:fc:f1:29:07:4e:a6:49:1d:63:4e:a9:65:83:ac:32:59: f7:e8:9c:1c:42:53:23:42:28:6b:e2:7d:a1:9c:8c:56:69:d5: cf:65:8c:7e:74:23:35:0c:70:29:67:a6:37:65:07:23:db:07: bb:3b:16:4f:a0:36:69:ca:52:1e:ab:47:bf:39:59:7c:83:2c: e6:90:9d:8c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt/hODzWd5KVOxqfiEShZQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGIwNzRlYzBmYTlmZDc2N2FiMzBmODNhNWRmZmVhZWExMTJkM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq9xMMknR/mciRe285qgb0xGGEpS Q7NSZ2h6o6p+3NlTQWSWKWsl62KsS8Xrd6t0TFlOf2suqJJX2aFzszqi31UP7XJQ udQkhtl0Q+7QFoD7G+BtmoIhsT8wUjlCCjymWrKlz04udrExBPuhCl+p7MLDJ+xT OrLj4Ae+kgSpSQ/kVWJHJdWrenKlf6iMkC6PXFia7pdwvhLzLF7eSYdkV1C+p872 JmrR2i4+Hpfx1uS5QGsHjv1+C3PZu9yUuv810ucAuwp9DjGTpOHDmYaILexh/sH2 sl6m8bAvmAn0ba6POY/GKURwFlxPZY0tfibRvt+BWlI49luvNvU/ACBgtwIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFA2wdOwPqf12erMPg6Xf/q6hEtPUMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRGJCMDdBLXBfWFo2c3ctRHBkXy1ycUVTMDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAB84jAME AB84kzAMAwQBHzlOAwQBHzlQMAwDBAAfOVUDBAMfOVADBAAfOcsDBAAfOgoDBAAf OhAwDAMEAB86EwMEAR86FAMEAB86GjAMAwQAHzodAwQAHzoeAwQAHzqnAwQAHzsN AwQAHzsSAwQAHzsYMA0GCSqGSIb3DQEBCwUAA4IBAQAaptvZOYRpLG7R2cMtmcSq szKD66lf3ATJfzUoXmopuEExNuShUYY1EPuyqR+r4O+Q0ID3AITcqJSgUvEipQIU kCAZdU4rOO6Sh1isdEA9vuhXkrRwaxRJzAem2isBtlvURiNiWM//Jjk4CDTFFx1q JXZecK1mVd9mzCmx3y8U98ZgETlC8QHhqeo0oFG0b/+FAe1g2JTL2r6BxEtqsgob 5eH4z9vDsP511S5nmv4+7EPZWqX1/vzxKQdOpkkdY06pZYOsMln36JwcQlMjQihr 4n2hnIxWadXPZYx+dCM1DHApZ6Y3ZQcj2we7OxZPoDZpylIeq0e/OVl8gyzmkJ2M -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:05 2026 by rpki-client