This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F0ars_fMVI2eaSnFPOFh1egw8p8.roa File: F0ars_fMVI2eaSnFPOFh1egw8p8.roa (raw, json) Hash identifier: 3xt6dZ4dTjNDB2gnz4VTGehfKt2gxuzKh5SylJ7O3Ek= Subject key identifier: 17:46:AB:B3:F7:CC:54:8D:9E:69:29:C5:3C:E1:61:D5:E8:30:F2:9F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846D381224ED7DC5D64116A06A930F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F0ars_fMVI2eaSnFPOFh1egw8p8.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56594 IP address blocks: 31.58.137.0/24 maxlen: 24 31.59.114.0/24 maxlen: 24 31.59.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6d:38:12:24:ed:7d:c5:d6:41:16:a0:6a:93:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1746abb3f7cc548d9e6929c53ce161d5e830f29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:54:b4:06:9a:18:e2:6d:27:c8:9b:0a:94: 68:09:bf:be:b9:e3:51:ea:bd:cb:14:13:fc:73:51: cd:b9:14:83:c7:69:60:e5:3e:9c:0b:fd:20:b8:c0: a2:9e:f0:36:62:25:ca:d1:bf:8e:ba:a5:1e:02:ab: 7d:b7:33:6b:5a:5c:83:10:21:73:b0:89:0a:5f:f2: 47:81:a8:98:4e:7b:4f:ce:67:29:1e:8b:7f:ac:8b: 91:f2:b5:21:aa:ad:71:df:aa:e4:89:31:26:d0:af: 12:10:1b:fc:99:d1:d3:d0:c2:d5:6e:a7:7a:32:49: 41:03:fe:ce:ec:da:85:23:19:03:b4:47:bf:d1:df: f4:b2:80:af:40:8c:99:c0:59:21:fc:95:79:4c:7e: 09:57:ee:bf:72:72:99:d0:26:6d:fc:b9:dd:b0:5b: 73:53:ee:5a:df:88:01:32:52:ae:b8:b9:33:d6:45: 79:80:72:e8:a5:46:ae:33:e7:f4:a7:8f:fc:ab:af: d5:02:27:2e:cc:00:ec:f6:6f:fa:bf:b4:40:23:73: e8:af:44:b3:b6:e8:71:1f:de:12:80:78:03:27:71: f7:77:f5:02:e6:7a:bf:cd:39:19:70:a8:fb:02:64: a8:c8:95:98:18:fe:27:f3:2f:c8:51:7a:5b:30:10: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:46:AB:B3:F7:CC:54:8D:9E:69:29:C5:3C:E1:61:D5:E8:30:F2:9F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F0ars_fMVI2eaSnFPOFh1egw8p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.137.0/24 31.59.114.0/24 31.59.185.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:57:cc:c5:b2:ea:7f:02:b9:d6:88:5c:41:29:c3:52:58:ab: 7f:0a:7a:77:cc:67:07:2a:07:3f:db:e3:0a:5b:7f:7c:e4:59: c1:e2:37:f7:da:62:53:b7:ff:ff:c6:0f:0b:bb:91:b3:25:28: c0:ee:6f:78:37:19:88:f0:1e:0c:eb:22:c1:92:41:10:91:f4: 6f:00:e2:69:96:6a:b3:ad:ef:b6:71:0c:35:d1:0d:e7:2c:c1: 22:f8:94:b9:d5:17:4f:09:f3:c6:b3:e9:40:e6:31:cf:0b:0c: dc:f4:26:1c:bf:0f:85:94:fc:58:bb:75:e6:5f:41:8b:6d:6b: dd:0e:b1:af:97:ea:90:ff:94:e5:e4:51:eb:78:87:af:8f:38: 42:00:10:ad:36:67:fa:40:bf:6c:cf:60:11:51:d6:88:69:ea: 9e:33:56:46:cf:2f:c8:97:8f:fc:20:02:23:2e:1b:f2:57:f6: e4:57:6c:f8:d5:7b:91:f9:97:11:e7:20:cd:0a:16:3c:0c:14: 6e:ff:e1:62:32:ad:77:7e:65:df:34:65:93:c4:27:b6:4f:b4: b5:66:6a:df:2f:f3:15:6e:f1:00:8b:4f:e2:48:2c:79:1d:ca: f6:6e:22:ce:31:b3:2c:9b:d6:b8:41:8a:f0:17:b7:ad:ed:83: 93:53:25:47 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hG04EiTtfcXWQRagapMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzQ2YWJiM2Y3Y2M1NDhkOWU2OTI5YzUzY2UxNjFkNWU4MzBmMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHtUtAaaGOJtJ8ibCpRoCb++ueNR 6r3LFBP8c1HNuRSDx2lg5T6cC/0guMCinvA2YiXK0b+OuqUeAqt9tzNrWlyDECFz sIkKX/JHgaiYTntPzmcpHot/rIuR8rUhqq1x36rkiTEm0K8SEBv8mdHT0MLVbqd6 MklBA/7O7NqFIxkDtEe/0d/0soCvQIyZwFkh/JV5TH4JV+6/cnKZ0CZt/LndsFtz U+5a34gBMlKuuLkz1kV5gHLopUauM+f0p4/8q6/VAicuzADs9m/6v7RAI3Por0Sz tuhxH94SgHgDJ3H3d/UC5nq/zTkZcKj7AmSoyJWYGP4n8y/IUXpbMBBj1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBdGq7P3zFSNnmkpxTzhYdXoMPKfMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRjBhcnNfZk1WSTJlYVNuRlBPRmgxZWd3OHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzqJAwQA HztyAwQAHzu5MA0GCSqGSIb3DQEBCwUAA4IBAQAOV8zFsup/ArnWiFxBKcNSWKt/ Cnp3zGcHKgc/2+MKW3985FnB4jf32mJTt///xg8Lu5GzJSjA7m94NxmI8B4M6yLB kkEQkfRvAOJplmqzre+2cQw10Q3nLMEi+JS51RdPCfPGs+lA5jHPCwzc9CYcvw+F lPxYu3XmX0GLbWvdDrGvl+qQ/5Tl5FHreIevjzhCABCtNmf6QL9sz2ARUdaIaeqe M1ZGzy/Il4/8IAIjLhvyV/bkV2z41XuR+ZcR5yDNChY8DBRu/+FiMq13fmXfNGWT xCe2T7S1ZmrfL/MVbvEAi0/iSCx5Hcr2biLOMbMsm9a4QYrwF7et7YOTUyVH -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:52 2026 by rpki-client