This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnosytamgXiiC5ZzFMsCPmfvE_w.roa File: EnosytamgXiiC5ZzFMsCPmfvE_w.roa (raw, json) Hash identifier: SE3kxtg5P/ZobebVaZJXq9qMsATe5AbG+fuwHmWvMXA= Subject key identifier: 12:7A:2C:CA:D6:A6:81:78:A2:0B:96:73:14:CB:02:3E:67:EF:13:FC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B9E34240AFE16342E469E801A9B378F8F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnosytamgXiiC5ZzFMsCPmfvE_w.roa Signing time: Thu 08 Jan 2026 15:22:55 +0000 ROA not before: Thu 08 Jan 2026 15:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 31.57.205.0/24 maxlen: 24 31.57.220.0/24 maxlen: 24 31.57.223.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.57.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:34:24:0a:fe:16:34:2e:46:9e:80:1a:9b:37:8f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 8 15:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=127a2ccad6a68178a20b967314cb023e67ef13fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:7f:9c:a6:46:28:23:9b:63:03:8a:df:b8: 76:59:54:fb:e4:c3:64:de:6e:e4:82:51:29:d6:ec: 81:46:57:08:0b:69:e3:31:34:46:1b:4c:b1:c4:68: ed:1b:e8:9b:50:27:c9:b7:dc:ef:7e:18:b7:32:bf: 6f:49:63:3c:60:40:11:a5:c0:44:cf:cf:c7:9e:78: 9d:d5:ad:37:e7:90:ef:8d:1e:f1:ae:e7:b9:c8:a1: b4:e1:d8:14:8a:78:3f:0a:8c:dd:ed:bd:39:47:f6: 41:18:7a:e9:67:fd:a7:5c:2f:c4:c7:39:07:5a:2b: 1b:7c:37:81:28:6e:b0:35:1f:94:5d:c7:0b:4f:cc: 72:3b:7c:a0:9f:93:24:d7:86:e5:59:9f:64:1f:85: 45:a1:84:30:ca:ef:df:41:df:ba:04:81:21:cd:2a: e9:a6:81:a0:96:39:d2:ab:77:a8:88:5a:2b:67:47: e7:49:e4:78:1f:f3:8c:a8:e5:c9:4f:71:12:0a:af: 67:22:17:b7:7f:5e:40:4e:5c:55:fa:aa:ee:47:81: a1:7f:d7:a8:a8:7f:fd:02:a1:d9:43:21:4c:df:d2: 05:83:0f:7b:b3:fe:7e:33:03:82:75:70:5e:11:a5: f6:e5:6d:d4:23:6d:aa:a4:6c:00:2b:9a:cf:bd:92: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7A:2C:CA:D6:A6:81:78:A2:0B:96:73:14:CB:02:3E:67:EF:13:FC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnosytamgXiiC5ZzFMsCPmfvE_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.205.0/24 31.57.220.0/24 31.57.223.0/24 31.57.237.0/24 31.57.239.0/24 Signature Algorithm: sha256WithRSAEncryption 91:1c:a5:c8:36:f3:9c:27:c2:87:19:e1:16:98:dc:30:6d:1c: 48:15:a9:cb:70:67:8b:48:91:c1:37:88:a2:bd:d2:4b:87:5a: 62:70:74:88:7d:68:17:ff:2a:7a:a1:98:0b:0d:78:10:5e:7a: 81:d5:97:22:1c:0e:32:4e:ff:84:5d:72:f9:a3:31:cd:e2:b4: 04:ec:56:65:04:45:4e:46:07:7d:71:03:11:64:63:d2:2e:51: 37:96:18:63:e0:19:ea:ad:6d:a7:46:e2:b1:a9:46:60:3e:4d: 94:bb:ab:70:9a:14:dd:d2:8b:07:d8:8c:fe:f6:7c:dc:54:21: 8e:6e:48:20:19:63:bb:3d:c5:72:1d:da:93:e8:d1:49:61:30: 95:0c:8b:06:a7:5b:1d:b4:97:1d:17:6d:e1:5a:8f:ac:e3:b5: a5:86:a1:39:56:ef:34:91:3c:86:82:05:c3:f5:46:90:0e:0e: 8b:0d:7d:cb:33:50:4b:05:92:6c:fd:b0:ba:36:be:95:1a:da: 91:fc:f3:ef:e3:f3:da:68:c7:41:a6:f2:21:6b:a4:60:0b:82: c1:28:01:d4:9d:6b:d5:55:7c:cc:41:d9:10:16:53:8b:5c:ff: 2d:81:e9:4f:e9:5e:99:f6:33:44:e3:20:81:a2:ee:70:ab:81: 5c:c5:96:b0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZueNCQK/hY0LkaegBqbN4+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA4MTUyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjdhMmNjYWQ2YTY4MTc4YTIwYjk2NzMxNGNiMDIzZTY3ZWYxM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C9/nKZGKCObYwOK37h2WVT75MNk 3m7kglEp1uyBRlcIC2njMTRGG0yxxGjtG+ibUCfJt9zvfhi3Mr9vSWM8YEARpcBE z8/Hnnid1a0355DvjR7xrue5yKG04dgUing/Cozd7b05R/ZBGHrpZ/2nXC/ExzkH WisbfDeBKG6wNR+UXccLT8xyO3ygn5Mk14blWZ9kH4VFoYQwyu/fQd+6BIEhzSrp poGgljnSq3eoiForZ0fnSeR4H/OMqOXJT3ESCq9nIhe3f15ATlxV+qruR4Ghf9eo qH/9AqHZQyFM39IFgw97s/5+MwOCdXBeEaX25W3UI22qpGwAK5rPvZIC0wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBJ6LMrWpoF4oguWcxTLAj5n7xP8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRW5vc3l0YW1nWGlpQzVaekZNc0NQbWZ2RV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHznNAwQA HzncAwQAHznfAwQAHzntAwQAHznvMA0GCSqGSIb3DQEBCwUAA4IBAQCRHKXINvOc J8KHGeEWmNwwbRxIFanLcGeLSJHBN4iivdJLh1picHSIfWgX/yp6oZgLDXgQXnqB 1ZciHA4yTv+EXXL5ozHN4rQE7FZlBEVORgd9cQMRZGPSLlE3lhhj4BnqrW2nRuKx qUZgPk2Uu6twmhTd0osH2Iz+9nzcVCGObkggGWO7PcVyHdqT6NFJYTCVDIsGp1sd tJcdF23hWo+s47WlhqE5Vu80kTyGggXD9UaQDg6LDX3LM1BLBZJs/bC6Nr6VGtqR /PPv4/PaaMdBpvIha6RgC4LBKAHUnWvVVXzMQdkQFlOLXP8tgelP6V6Z9jNE4yCB ou5wq4FcxZaw -----END CERTIFICATE-----Generated at Sat Jan 10 09:44:22 2026 by rpki-client