This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EJXHxmg7e5xCS9-ftvS81fUZR7g.roa File: EJXHxmg7e5xCS9-ftvS81fUZR7g.roa (raw, json) Hash identifier: a4kk+4zpzjP3kV5cZJjyQvavIFbuVdwapy4WHMdeVXI= Subject key identifier: 10:95:C7:C6:68:3B:7B:9C:42:4B:DF:9F:B6:F4:BC:D5:F5:19:47:B8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B7579A2E9FCD9BF96050CD8B82D9 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EJXHxmg7e5xCS9-ftvS81fUZR7g.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213737 IP address blocks: 31.58.210.0/24 maxlen: 24 31.58.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b7:57:9a:2e:9f:cd:9b:f9:60:50:cd:8b:82:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1095c7c6683b7b9c424bdf9fb6f4bcd5f51947b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:83:b4:47:0b:47:5a:89:3b:e5:81:7e:3c: ed:79:be:ce:3d:2b:2f:61:01:40:80:8f:b2:55:68: 7d:4d:dd:c3:7b:3d:f4:7d:c8:9f:6c:0d:35:d7:89: 84:fa:a2:b7:80:57:ae:a4:7c:18:e9:2a:eb:fc:40: b0:7a:65:5c:6a:f6:8d:cd:04:ef:87:1a:15:e5:8d: e6:99:1d:db:be:56:78:22:e7:47:af:db:1c:3c:27: 92:59:f9:52:a0:f7:c5:c3:b3:d1:0c:13:3e:70:d7: 1c:43:af:a9:70:b2:e0:37:40:a0:f9:9c:7f:ae:dd: 2e:7d:73:c5:81:2b:0c:59:03:02:a1:3c:c1:e9:a5: 3d:f1:66:60:ea:d7:fd:3d:6a:98:2f:3c:48:c8:1b: 58:75:bf:81:f8:31:37:32:f0:e2:3c:80:f9:b3:dc: 64:5c:d0:b1:e4:37:20:21:b4:5e:8d:14:88:20:f0: 60:e7:07:b3:2c:5f:bf:95:36:d6:05:a3:ee:85:0d: 59:65:a9:b2:d2:5c:21:43:bc:6f:5e:a0:6b:cf:6e: d5:fa:72:51:0d:4a:e1:4c:f6:65:b3:31:9e:d6:1e: b6:36:1f:68:87:f1:3d:25:60:6c:e8:42:fc:4c:f3: 56:fa:20:da:90:ff:d3:21:cf:62:17:66:32:5e:5e: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:C7:C6:68:3B:7B:9C:42:4B:DF:9F:B6:F4:BC:D5:F5:19:47:B8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EJXHxmg7e5xCS9-ftvS81fUZR7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.210.0/23 Signature Algorithm: sha256WithRSAEncryption 85:6e:63:01:7d:55:18:96:98:8b:f0:dd:3b:98:0e:6a:ea:b3: 43:67:fa:55:94:d5:3b:ba:61:5e:26:34:70:5d:63:54:26:9f: 65:09:b9:bf:ce:4b:e2:34:29:38:b8:cf:78:f1:18:74:09:5a: 8f:e4:d4:79:f4:f5:25:df:2e:0f:f2:1e:9c:f0:66:44:c6:fb: 28:cb:44:aa:1f:d8:1d:49:0d:ac:53:65:d6:06:35:a5:d5:d6: 33:00:a3:81:93:db:47:a5:86:1a:15:da:e4:4a:68:a5:a2:b9: a5:e7:07:6a:ca:60:37:41:81:d4:ae:1b:a7:74:f1:df:a9:48: 5c:b9:1f:ba:7c:e4:c5:49:fe:dd:71:6e:d7:6e:71:ae:73:b0: 3a:39:da:f3:86:55:37:a5:a8:70:ac:56:b8:d5:5d:2b:64:99: 82:69:89:8b:fa:78:ba:1e:0d:6f:89:67:0e:97:2f:78:90:a8: 76:79:58:01:c5:98:71:10:fc:5b:7b:03:5e:ef:5e:9f:75:8f: ae:b8:f5:f1:4e:0e:86:ea:ef:97:16:31:fa:a9:41:05:5e:39: ff:03:6d:58:bc:ac:ae:27:44:52:45:c9:ab:fd:8c:49:2c:23: b0:fe:b5:aa:2f:b3:af:9b:df:50:13:c5:a4:5a:ec:2e:a1:09: 32:5c:d3:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLdXmi6fzZv5YFDNi4LZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDk1YzdjNjY4M2I3YjljNDI0YmRmOWZiNmY0YmNkNWY1MTk0N2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwISDtEcLR1qJO+WBfjzteb7OPSsv YQFAgI+yVWh9Td3Dez30fcifbA0114mE+qK3gFeupHwY6Srr/ECwemVcavaNzQTv hxoV5Y3mmR3bvlZ4IudHr9scPCeSWflSoPfFw7PRDBM+cNccQ6+pcLLgN0Cg+Zx/ rt0ufXPFgSsMWQMCoTzB6aU98WZg6tf9PWqYLzxIyBtYdb+B+DE3MvDiPID5s9xk XNCx5DcgIbRejRSIIPBg5wezLF+/lTbWBaPuhQ1ZZamy0lwhQ7xvXqBrz27V+nJR DUrhTPZlszGe1h62Nh9oh/E9JWBs6EL8TPNW+iDakP/TIc9iF2YyXl7DFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCVx8ZoO3ucQkvfn7b0vNX1GUe4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRUpYSHhtZzdlNXhDUzktZnR2UzgxZlVaUjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzrSMA0G CSqGSIb3DQEBCwUAA4IBAQCFbmMBfVUYlpiL8N07mA5q6rNDZ/pVlNU7umFeJjRw XWNUJp9lCbm/zkviNCk4uM948Rh0CVqP5NR59PUl3y4P8h6c8GZExvsoy0SqH9gd SQ2sU2XWBjWl1dYzAKOBk9tHpYYaFdrkSmilorml5wdqymA3QYHUrhundPHfqUhc uR+6fOTFSf7dcW7XbnGuc7A6OdrzhlU3pahwrFa41V0rZJmCaYmL+ni6Hg1viWcO ly94kKh2eVgBxZhxEPxbewNe716fdY+uuPXxTg6G6u+XFjH6qUEFXjn/A21YvKyu J0RSRcmr/YxJLCOw/rWqL7Ovm99QE8WkWuwuoQkyXNOj -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client