This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FQnXQBrA1w8JQwn2ZYqqNfvh1tQ.roa File: FQnXQBrA1w8JQwn2ZYqqNfvh1tQ.roa (raw, json) Hash identifier: sdgB7rRkRQdQ31dNLtVG/g2h9TohUYuDwujOp76NvXo= Subject key identifier: 15:09:D7:40:1A:C0:D7:0F:09:43:09:F6:65:8A:AA:35:FB:E1:D6:D4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A60BF49739015F54515174CADDFB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FQnXQBrA1w8JQwn2ZYqqNfvh1tQ.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210464 IP address blocks: 31.57.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a6:0b:f4:97:39:01:5f:54:51:51:74:ca:dd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1509d7401ac0d70f094309f6658aaa35fbe1d6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:e4:4f:27:01:bc:04:45:78:f2:18:0f:66: 78:07:8c:68:20:63:ff:d1:73:a8:4c:be:f5:6c:6d: 92:83:57:64:0b:62:84:10:b4:3c:ca:95:3a:f0:be: 73:7a:0c:27:b7:14:15:88:87:82:fd:09:1d:83:54: 84:6f:83:6f:66:5f:ce:0f:05:b8:9d:76:71:4f:cc: fe:87:6e:68:0d:ae:4e:bc:47:09:1c:88:70:cc:5b: c6:3e:c7:06:e2:16:4d:7e:7c:d7:c8:f1:a8:a5:7d: c1:32:d0:28:ca:5b:dd:43:00:f0:47:fa:fe:11:3e: e6:93:aa:6a:b1:71:fd:53:7a:f4:14:90:7e:6a:b0: 7d:f4:a7:7e:a0:d2:86:ac:ac:aa:97:c8:e1:8a:47: 08:78:22:e0:39:08:e5:a1:a1:ee:cb:d4:f9:5d:70: 38:72:03:5f:77:ed:42:76:97:c7:a3:53:a5:48:af: e6:48:d4:77:2d:19:06:8b:78:09:2a:85:75:06:84: 43:bc:56:4c:11:53:f6:a8:04:b7:ca:fa:91:7e:ac: 0e:af:7b:22:34:23:86:8c:bd:99:1b:a6:bb:1b:30: b5:a8:f8:25:44:4f:ce:17:e2:30:a4:ba:e5:6c:17: 18:12:b1:69:69:e3:4d:bb:4f:64:e8:4d:ef:5b:6f: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:09:D7:40:1A:C0:D7:0F:09:43:09:F6:65:8A:AA:35:FB:E1:D6:D4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FQnXQBrA1w8JQwn2ZYqqNfvh1tQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.56.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:2b:00:d9:6a:e7:39:a9:e5:31:5d:4a:34:8b:7d:d5:cc:92: bf:80:9c:f2:a7:a8:4c:76:df:fd:c1:b9:aa:b6:48:34:2e:59: ed:e4:78:2a:da:84:b5:e4:41:8b:ed:bd:c5:e6:87:b1:09:45: b5:e2:c4:c6:00:9e:54:80:77:4b:d5:36:71:57:64:0a:ee:b8: 59:b8:aa:33:12:35:30:55:65:73:9f:0c:6d:0d:2a:80:ea:7c: 23:ad:1f:24:9b:95:21:03:40:1d:e6:a9:d5:fe:32:a7:f7:65: 29:32:f3:ff:dc:ea:3c:b3:62:65:27:f6:e0:3d:c7:4b:ed:c1: 0b:92:7c:33:a8:3e:af:9c:76:5a:1d:62:17:3e:25:e7:64:de: d7:c9:f4:45:25:81:c2:15:e3:c9:56:d2:2f:14:f3:f7:8f:fa: 26:05:3c:42:42:8f:b2:97:33:b8:1f:9f:49:fe:bc:0f:eb:ca: ac:b7:bf:da:16:57:ff:d6:9d:18:4a:fd:1e:fa:f6:68:f7:77: 4f:e6:d4:6f:64:f2:a6:7a:a0:79:2e:10:04:09:18:cb:0c:0a: 00:f0:fc:76:aa:3d:d8:af:6b:e6:c7:58:4e:05:55:28:e6:75: 00:56:cb:69:8d:06:30:6a:43:c7:ae:57:8b:ae:44:7d:6e:6b: 02:83:03:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKYL9Jc5AV9UUVF0yt37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTA5ZDc0MDFhYzBkNzBmMDk0MzA5ZjY2NThhYWEzNWZiZTFkNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscrkTycBvARFePIYD2Z4B4xoIGP/ 0XOoTL71bG2Sg1dkC2KEELQ8ypU68L5zegwntxQViIeC/Qkdg1SEb4NvZl/ODwW4 nXZxT8z+h25oDa5OvEcJHIhwzFvGPscG4hZNfnzXyPGopX3BMtAoylvdQwDwR/r+ ET7mk6pqsXH9U3r0FJB+arB99Kd+oNKGrKyql8jhikcIeCLgOQjloaHuy9T5XXA4 cgNfd+1CdpfHo1OlSK/mSNR3LRkGi3gJKoV1BoRDvFZMEVP2qAS3yvqRfqwOr3si NCOGjL2ZG6a7GzC1qPglRE/OF+IwpLrlbBcYErFpaeNNu09k6E3vW2+mJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUJ10AawNcPCUMJ9mWKqjX74dbUMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRlFuWFFCckExdzhKUXduMlpZcXFOZnZoMXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzk4MA0G CSqGSIb3DQEBCwUAA4IBAQBdKwDZauc5qeUxXUo0i33VzJK/gJzyp6hMdt/9wbmq tkg0Llnt5Hgq2oS15EGL7b3F5oexCUW14sTGAJ5UgHdL1TZxV2QK7rhZuKozEjUw VWVznwxtDSqA6nwjrR8km5UhA0Ad5qnV/jKn92UpMvP/3Oo8s2JlJ/bgPcdL7cEL knwzqD6vnHZaHWIXPiXnZN7XyfRFJYHCFePJVtIvFPP3j/omBTxCQo+ylzO4H59J /rwP68qst7/aFlf/1p0YSv0e+vZo93dP5tRvZPKmeqB5LhAECRjLDAoA8Px2qj3Y r2vmx1hOBVUo5nUAVstpjQYwakPHrleLrkR9bmsCgwOA -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:59 2026 by rpki-client