This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ExNtLP9cH_vvhKjO9vXB0RFG-f0.roa File: ExNtLP9cH_vvhKjO9vXB0RFG-f0.roa (raw, json) Hash identifier: 2DK6DDHJK+Rn8LexKD1HTnvnCTTnfw3PrQSVJ4L+cQc= Subject key identifier: 13:13:6D:2C:FF:5C:1F:FB:EF:84:A8:CE:F6:F5:C1:D1:11:46:F9:FD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8478BDC91F18A48759AA749448A9C6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ExNtLP9cH_vvhKjO9vXB0RFG-f0.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 31.56.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:78:bd:c9:1f:18:a4:87:59:aa:74:94:48:a9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13136d2cff5c1ffbef84a8cef6f5c1d11146f9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:70:09:b4:6a:99:85:21:48:f4:bf:d1:a3: 4b:d6:c4:4b:89:08:2b:0b:71:b5:00:f5:1e:e3:ef: 83:e8:b5:48:6e:14:38:af:5d:c1:58:4f:b1:64:09: 4e:27:c8:51:54:af:1f:41:74:70:82:3c:7f:93:71: c7:0c:e6:ad:27:f8:cb:7f:0d:7c:fe:1c:0f:09:0e: f6:11:09:68:63:6b:d3:52:90:bc:cf:3c:72:23:ed: 60:82:57:5b:b6:9d:97:74:1b:d8:5c:83:5c:0e:c3: a2:f6:25:b9:16:00:ec:c3:bd:59:cb:7e:8c:2e:b1: 2d:ab:ec:98:a1:ca:ca:89:ba:42:f0:b9:a6:ee:f9: 01:0a:a1:e6:cb:db:a1:f1:04:63:02:80:85:f4:25: 19:e8:4d:12:e7:90:75:25:cd:19:13:30:63:e0:50: 8e:fb:83:cf:90:3e:b2:0d:e6:79:69:0b:f2:84:16: 81:d3:cf:b6:39:61:e8:67:fb:02:f3:03:1a:d5:cb: 4e:6b:97:8f:09:63:61:0b:ec:c1:66:d1:4f:c2:7d: ba:9b:f3:0a:02:3f:26:a3:e2:de:10:bf:1c:f6:51: ea:cd:d8:12:0d:dc:a5:d8:3e:8d:b0:a6:04:b7:41: fa:ae:09:f6:96:67:3e:2c:d8:87:80:2d:1d:52:8a: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:13:6D:2C:FF:5C:1F:FB:EF:84:A8:CE:F6:F5:C1:D1:11:46:F9:FD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ExNtLP9cH_vvhKjO9vXB0RFG-f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/24 Signature Algorithm: sha256WithRSAEncryption ae:3c:0e:23:04:cf:36:90:ce:88:42:98:3c:34:e8:8e:23:87: 55:b8:41:2a:d9:b4:c0:11:07:81:50:df:24:17:77:c4:37:34: df:72:7b:d4:0c:7b:4c:01:8f:d3:9e:af:a0:80:7f:fd:e8:ce: 25:cb:da:34:2a:98:33:e6:2b:7b:9c:af:86:c8:6d:4f:30:de: 55:05:c0:b2:d0:f9:75:07:c7:af:8c:40:ee:06:e4:e7:83:89: dc:35:1f:72:b7:57:f3:b2:1c:89:ff:c6:ae:6a:1e:7b:1c:71: 32:c0:e0:1c:a1:e9:bc:de:a3:d1:c8:95:87:f6:fe:48:60:61: 8e:99:6a:27:e1:32:01:ac:7f:62:ac:ea:03:81:66:cb:7a:1b: 64:7a:53:ae:eb:a0:8c:55:72:1c:78:be:3a:fd:22:e5:a0:95: 5b:56:b0:78:e6:4b:54:c8:18:3d:2f:c0:fd:57:4c:11:69:18: af:90:8f:40:1d:e2:49:6c:40:06:c8:20:cf:91:84:a2:1b:54: fc:bc:da:50:dc:77:d7:36:19:71:8c:40:22:dc:2c:78:52:c3: 9e:66:c4:f5:bd:0d:76:7b:be:cd:b4:53:46:ba:8b:1a:f8:a2: 46:58:95:00:8a:61:0c:bd:0c:15:d6:61:7b:f3:73:49:6e:89: 05:11:b2:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHi9yR8YpIdZqnSUSKnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzEzNmQyY2ZmNWMxZmZiZWY4NGE4Y2VmNmY1YzFkMTExNDZmOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuflwCbRqmYUhSPS/0aNL1sRLiQgr C3G1APUe4++D6LVIbhQ4r13BWE+xZAlOJ8hRVK8fQXRwgjx/k3HHDOatJ/jLfw18 /hwPCQ72EQloY2vTUpC8zzxyI+1ggldbtp2XdBvYXINcDsOi9iW5FgDsw71Zy36M LrEtq+yYocrKibpC8Lmm7vkBCqHmy9uh8QRjAoCF9CUZ6E0S55B1Jc0ZEzBj4FCO +4PPkD6yDeZ5aQvyhBaB08+2OWHoZ/sC8wMa1ctOa5ePCWNhC+zBZtFPwn26m/MK Aj8mo+LeEL8c9lHqzdgSDdyl2D6NsKYEt0H6rgn2lmc+LNiHgC0dUooSHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMTbSz/XB/774Sozvb1wdERRvn9MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRXhOdExQOWNIX3Z2aEtqTzl2WEIwUkZHLWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgEMA0G CSqGSIb3DQEBCwUAA4IBAQCuPA4jBM82kM6IQpg8NOiOI4dVuEEq2bTAEQeBUN8k F3fENzTfcnvUDHtMAY/Tnq+ggH/96M4ly9o0Kpgz5it7nK+GyG1PMN5VBcCy0Pl1 B8evjEDuBuTng4ncNR9yt1fzshyJ/8auah57HHEywOAcoem83qPRyJWH9v5IYGGO mWon4TIBrH9irOoDgWbLehtkelOu66CMVXIceL46/SLloJVbVrB45ktUyBg9L8D9 V0wRaRivkI9AHeJJbEAGyCDPkYSiG1T8vNpQ3HfXNhlxjEAi3Cx4UsOeZsT1vQ12 e77NtFNGuosa+KJGWJUAimEMvQwV1mF783NJbokFEbID -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:38 2026 by rpki-client