This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fh28dP8Q_R9J8_XksTJ5DD2fu2A.roa File: Fh28dP8Q_R9J8_XksTJ5DD2fu2A.roa (raw, json) Hash identifier: L5tpRxyy+9aPvj+5FxO2kI4YA9kmi7lv87X9RSOgJs0= Subject key identifier: 16:1D:BC:74:FF:10:FD:1F:49:F3:F5:E4:B1:32:79:0C:3D:9F:BB:60 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C635AEC42393C7128DD115775945 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fh28dP8Q_R9J8_XksTJ5DD2fu2A.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214914 IP address blocks: 31.57.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c6:35:ae:c4:23:93:c7:12:8d:d1:15:77:59:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=161dbc74ff10fd1f49f3f5e4b132790c3d9fbb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:2b:7d:7d:fc:9f:6b:fc:a6:b7:18:21:80: 20:4b:24:94:df:d7:df:01:fb:19:c3:fd:9d:de:e4: 32:50:ea:34:74:2d:cf:eb:17:de:33:d1:a7:ab:1f: 7d:97:9c:cd:d5:d8:15:6c:90:e7:3e:bf:7d:e6:11: 3d:83:1c:05:15:3a:fd:3f:dd:17:e6:73:98:48:d8: 82:17:a0:08:3c:60:60:aa:ad:39:2c:60:05:d0:7a: d3:d8:af:f1:a9:ba:af:1e:4f:bd:77:83:e3:c0:4f: eb:65:97:38:cc:a2:3e:c3:78:f5:91:2d:3a:9c:e3: 1e:41:ae:9b:cb:97:f3:2d:46:72:12:9f:dc:41:8c: 60:a5:a2:9e:94:0e:10:14:df:f2:f2:6d:d6:4e:ce: 37:4f:31:ce:41:a6:e8:b7:49:58:75:d6:06:66:53: a0:7a:44:3c:3d:0c:ae:c8:bb:5b:58:59:bb:3a:7b: a5:86:4e:d2:f3:af:ec:ac:6a:05:be:36:40:48:9e: cd:26:55:fc:53:f3:ca:44:9e:88:fd:cd:a8:5a:32: d8:f8:2e:f9:7c:b2:15:00:9f:83:72:88:43:46:55: b5:47:f5:7a:dd:ba:b6:3b:c7:b8:cc:d1:72:1d:de: 6c:de:d6:4c:20:4b:c4:dc:54:e6:c8:d2:a3:d9:8d: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1D:BC:74:FF:10:FD:1F:49:F3:F5:E4:B1:32:79:0C:3D:9F:BB:60 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Fh28dP8Q_R9J8_XksTJ5DD2fu2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.66.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:3d:47:b4:14:d9:7d:96:bb:70:75:80:c0:c7:99:72:85:34: 54:17:a4:74:e2:81:57:62:ec:ca:95:47:39:cd:91:f4:02:96: 09:1f:60:a7:70:23:f2:02:d6:7b:5b:7d:c4:5a:9c:c4:34:c0: 1c:01:6a:0c:22:df:00:10:ac:67:56:ee:a2:ca:b4:de:ef:ea: 67:30:22:d1:75:5b:85:fd:a9:67:db:53:fb:4c:3b:7a:ab:60: f8:c9:c1:c1:c1:fa:ae:97:34:71:ea:47:a6:28:ad:a5:bb:bb: f1:4e:1e:54:17:59:66:d6:6c:d8:76:2f:6d:64:2c:4a:06:09: 0d:df:95:50:e6:62:0a:ea:14:8b:ea:28:a5:be:51:e0:6b:48: 1d:4a:40:e5:e4:e0:c4:d3:dd:d4:6f:1c:ed:7e:d6:15:ee:87: a1:19:ae:30:df:fe:66:84:d0:9a:d4:8c:b3:ac:1c:7c:92:6d: 6b:1a:01:d9:a1:5c:f0:7c:7c:d1:1d:b0:49:5c:7b:a1:d8:1d: 0c:3c:a1:c3:9e:91:21:65:50:4c:ae:9f:a8:f3:49:2a:17:4d: c9:08:87:d3:45:28:45:98:cd:36:9d:1f:ab:27:2a:7f:85:d1: cf:33:c7:5c:96:81:d3:93:5c:d6:b6:a9:14:2d:d9:c5:45:11: b2:34:4f:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMY1rsQjk8cSjdEVd1lFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjFkYmM3NGZmMTBmZDFmNDlmM2Y1ZTRiMTMyNzkwYzNkOWZiYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPkrfX38n2v8prcYIYAgSySU39ff AfsZw/2d3uQyUOo0dC3P6xfeM9Gnqx99l5zN1dgVbJDnPr995hE9gxwFFTr9P90X 5nOYSNiCF6AIPGBgqq05LGAF0HrT2K/xqbqvHk+9d4PjwE/rZZc4zKI+w3j1kS06 nOMeQa6by5fzLUZyEp/cQYxgpaKelA4QFN/y8m3WTs43TzHOQabot0lYddYGZlOg ekQ8PQyuyLtbWFm7Onulhk7S86/srGoFvjZASJ7NJlX8U/PKRJ6I/c2oWjLY+C75 fLIVAJ+DcohDRlW1R/V63bq2O8e4zNFyHd5s3tZMIEvE3FTmyNKj2Y2TzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYdvHT/EP0fSfP15LEyeQw9n7tgMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRmgyOGRQOFFfUjlKOF9Ya3NUSjVERDJmdTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzlCMA0G CSqGSIb3DQEBCwUAA4IBAQAePUe0FNl9lrtwdYDAx5lyhTRUF6R04oFXYuzKlUc5 zZH0ApYJH2CncCPyAtZ7W33EWpzENMAcAWoMIt8AEKxnVu6iyrTe7+pnMCLRdVuF /aln21P7TDt6q2D4ycHBwfqulzRx6kemKK2lu7vxTh5UF1lm1mzYdi9tZCxKBgkN 35VQ5mIK6hSL6iilvlHga0gdSkDl5ODE093UbxztftYV7oehGa4w3/5mhNCa1Iyz rBx8km1rGgHZoVzwfHzRHbBJXHuh2B0MPKHDnpEhZVBMrp+o80kqF03JCIfTRShF mM02nR+rJyp/hdHPM8dcloHTk1zWtqkULdnFRRGyNE8o -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:26 2026 by rpki-client