This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E1wA4D5iV0liOzy-Zjx2-La55zM.roa File: E1wA4D5iV0liOzy-Zjx2-La55zM.roa (raw, json) Hash identifier: CFFyTnqZeuKVgeaSBzD7szybQL9qgfqWzMkoiClqykg= Subject key identifier: 13:5C:00:E0:3E:62:57:49:62:3B:3C:BE:66:3C:76:F8:B6:B9:E7:33 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844BC83931F6F4CCDEE304B132A446 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E1wA4D5iV0liOzy-Zjx2-La55zM.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 31.56.172.0/24 maxlen: 24 31.56.173.0/24 maxlen: 24 31.56.242.0/24 maxlen: 24 31.56.243.0/24 maxlen: 24 31.56.244.0/24 maxlen: 24 31.56.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4b:c8:39:31:f6:f4:cc:de:e3:04:b1:32:a4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=135c00e03e625749623b3cbe663c76f8b6b9e733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:17:82:50:50:35:f4:33:f1:78:f8:4b:b8: 26:4f:6d:3f:d5:0e:be:c0:72:31:71:72:ab:b9:8a: ed:3b:6f:2d:6d:34:63:f5:1f:ac:0c:3d:92:7f:ef: 79:33:48:a4:d9:59:e7:a9:1e:3f:f2:59:85:6b:95: 97:fa:e5:98:c1:3e:e9:b4:fd:e0:ec:bb:77:11:71: 39:77:1e:f5:62:eb:43:2c:15:35:e3:d1:64:ea:ae: 34:a5:a6:0d:3d:11:20:53:8c:bf:67:7f:18:65:37: 13:4e:74:eb:f9:2c:55:90:fa:14:63:fa:cb:dd:c4: e0:90:78:c2:69:1f:b9:09:fc:45:db:80:85:81:66: a1:df:91:e5:8e:32:3e:ca:68:40:96:13:e6:b2:cb: ba:c9:0d:ef:89:2b:4b:7d:04:b4:7b:53:f4:2c:c2: 13:00:0e:fd:ff:de:69:84:35:08:da:38:dc:bc:e4: 9a:38:e0:93:3a:8d:72:ba:51:9c:d9:23:0b:92:98: c4:79:b6:e3:0b:74:cf:a2:73:7f:18:e7:4c:b7:50: 25:50:b2:21:a3:e2:d7:04:b0:55:aa:c9:20:2d:03: 44:e8:74:32:78:c6:19:86:c4:d2:49:d9:1f:d4:34: 03:e3:a1:cc:48:a7:8d:41:99:16:be:1e:cd:9f:52: 26:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5C:00:E0:3E:62:57:49:62:3B:3C:BE:66:3C:76:F8:B6:B9:E7:33 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E1wA4D5iV0liOzy-Zjx2-La55zM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.172.0/23 31.56.242.0-31.56.245.255 Signature Algorithm: sha256WithRSAEncryption bf:bb:89:6e:f9:15:45:04:19:61:99:87:9f:83:2d:0d:41:c7: 5e:0e:19:84:6d:3b:f4:4a:ca:18:38:ec:77:4e:09:dd:0b:66: e0:43:7d:77:a1:84:0f:cf:14:bb:cd:00:f3:81:34:28:0c:7b: 94:dd:66:ab:25:28:93:c4:f9:f2:fc:e8:3c:9a:6c:f9:75:9e: 1b:c6:ad:dd:ba:05:c8:e9:75:42:4b:80:97:46:06:01:71:24: 51:05:9f:e6:28:6f:2a:0a:3f:41:6e:a3:81:29:4e:2d:a0:51: e4:09:d1:16:8a:cd:84:9d:23:89:58:e1:ff:2b:f0:34:7e:a4: eb:77:c3:2c:29:d2:fe:ea:bf:e7:a8:96:9b:ec:15:a5:91:15: 97:63:92:88:0d:1b:8a:18:55:25:11:48:0c:f5:00:96:89:6a: bb:74:1a:9e:d8:9e:9a:35:6f:4d:28:63:b9:bb:49:3f:a0:83: e3:85:5a:c2:18:4a:22:fb:b7:df:38:25:82:41:7c:a9:32:0c: 4f:51:43:b0:9c:f0:84:8c:58:50:91:ee:91:12:53:0e:2a:01: 8a:ab:6d:e8:93:64:22:a2:3c:6b:8c:a8:bc:44:ee:44:77:37: df:97:7d:b8:e3:ad:67:aa:f4:cd:0f:16:ed:99:47:a1:ec:ec: 20:ef:30:32 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/hEvIOTH29Mze4wSxMqRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzVjMDBlMDNlNjI1NzQ5NjIzYjNjYmU2NjNjNzZmOGI2YjllNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3oXglBQNfQz8Xj4S7gmT20/1Q6+ wHIxcXKruYrtO28tbTRj9R+sDD2Sf+95M0ik2VnnqR4/8lmFa5WX+uWYwT7ptP3g 7Lt3EXE5dx71YutDLBU149Fk6q40paYNPREgU4y/Z38YZTcTTnTr+SxVkPoUY/rL 3cTgkHjCaR+5CfxF24CFgWah35HljjI+ymhAlhPmssu6yQ3viStLfQS0e1P0LMIT AA79/95phDUI2jjcvOSaOOCTOo1yulGc2SMLkpjEebbjC3TPonN/GOdMt1AlULIh o+LXBLBVqskgLQNE6HQyeMYZhsTSSdkf1DQD46HMSKeNQZkWvh7Nn1ImoQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBNcAOA+YldJYjs8vmY8dvi2ueczMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRTF3QTRENWlWMGxpT3p5LVpqeDItTGE1NXpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBHzisMAwD BAEfOPIDBAEfOPQwDQYJKoZIhvcNAQELBQADggEBAL+7iW75FUUEGWGZh5+DLQ1B x14OGYRtO/RKyhg47HdOCd0LZuBDfXehhA/PFLvNAPOBNCgMe5TdZqslKJPE+fL8 6DyabPl1nhvGrd26BcjpdUJLgJdGBgFxJFEFn+YobyoKP0Fuo4EpTi2gUeQJ0RaK zYSdI4lY4f8r8DR+pOt3wywp0v7qv+eolpvsFaWRFZdjkogNG4oYVSURSAz1AJaJ art0Gp7Ynpo1b00oY7m7ST+gg+OFWsIYSiL7t984JYJBfKkyDE9RQ7Cc8ISMWFCR 7pESUw4qAYqrbeiTZCKiPGuMqLxE7kR3N9+XfbjjrWeq9M0PFu2ZR6Hs7CDvMDI= -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:35 2026 by rpki-client