This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FjAD6Xt7MyYXU_SckEDkjNREKvA.roa File: FjAD6Xt7MyYXU_SckEDkjNREKvA.roa (raw, json) Hash identifier: h0AFKDgVSGI+CpWEOsCbAs4Mpoc+lGeR8XlZWvsVg4A= Subject key identifier: 16:30:03:E9:7B:7B:33:26:17:53:F4:9C:90:40:E4:8C:D4:44:2A:F0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DC353991E064D0DB813A01379350 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FjAD6Xt7MyYXU_SckEDkjNREKvA.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393406 IP address blocks: 31.56.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dc:35:39:91:e0:64:d0:db:81:3a:01:37:93:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=163003e97b7b33261753f49c9040e48cd4442af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:29:20:d7:2a:77:f9:df:5f:e9:44:41:ba: 80:44:48:cd:0d:8b:cd:24:91:1f:27:af:30:a8:b1: b7:d8:86:9e:f2:cf:79:ae:15:4b:27:ce:dc:c7:78: 9d:a4:02:0b:b1:86:bf:b3:40:2a:2d:5f:93:3b:28: ca:0b:56:76:53:08:21:7f:33:ab:6d:1f:1d:9a:e1: 07:d5:cb:ba:2f:15:b1:47:52:c3:24:bc:2f:2c:6e: 08:3e:25:8e:dd:ca:0e:1f:9b:3d:df:b5:fd:54:18: d7:b7:28:86:ef:dc:86:85:07:99:7d:16:ac:74:c7: c8:7e:53:24:f9:77:ab:b5:4f:b5:85:63:61:d7:7e: 8e:44:fa:90:4b:18:f2:c6:e7:e2:05:00:47:d4:29: c0:fd:db:14:1e:a2:5a:70:94:73:31:d3:57:3e:56: ac:79:9b:59:71:88:1b:35:0a:62:b1:9d:19:25:0a: f5:30:4d:0d:69:59:f9:79:41:d4:9d:b6:62:e5:53: ed:d0:a4:d6:ca:0d:c8:72:9c:24:cc:90:62:b5:51: 30:9f:a0:a8:37:bc:76:db:39:5d:69:df:75:1a:7e: ff:fd:b3:e7:36:4e:a2:e8:b5:75:85:f9:79:2e:3a: aa:44:f1:4a:20:6a:3e:dc:bf:1d:61:e5:c4:12:4b: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:30:03:E9:7B:7B:33:26:17:53:F4:9C:90:40:E4:8C:D4:44:2A:F0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FjAD6Xt7MyYXU_SckEDkjNREKvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.191.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e2:c5:22:73:ec:0d:1d:6e:ee:11:db:bd:3b:4c:66:d3:99: 95:a2:da:cd:7d:99:ea:1b:87:b6:73:c2:a6:1b:c8:be:30:b3: 42:d6:cf:66:7f:4a:f4:7e:91:26:39:bd:c2:d2:43:a9:df:3c: ff:08:64:8d:4a:eb:7b:9a:44:0d:1e:3c:cd:a9:58:28:ab:75: 1d:fa:95:d3:d0:52:cc:41:e7:32:ec:7c:15:2f:05:bb:d7:dd: f3:18:e7:58:ed:2a:f1:20:79:88:be:61:8c:8a:1a:0d:3c:96: 03:26:fe:8c:52:7e:02:bb:58:c1:3c:55:a1:9f:dd:c3:7f:fd: 11:c8:46:d9:b1:99:ac:5e:94:d7:44:1b:b5:2b:cb:e8:f6:0c: 7e:25:4a:c7:73:4e:1d:28:60:e2:d5:61:20:34:18:3a:be:bc: e6:34:53:38:c0:db:86:8a:a2:ba:2d:e7:96:b8:07:36:18:24: 53:07:c3:6a:10:08:db:04:a2:6f:99:31:ea:10:dd:a0:c6:4e: 1c:33:43:e7:42:bc:54:20:16:be:04:ca:38:c6:51:c0:e7:94: 2d:3f:10:41:c1:9c:d7:9a:5d:5a:a0:34:d4:cc:2f:8b:c3:7c: 72:72:64:c4:48:e5:a6:c3:7a:42:b7:0e:07:3e:71:26:cb:39: 9e:1d:88:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNw1OZHgZNDbgToBN5NQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjMwMDNlOTdiN2IzMzI2MTc1M2Y0OWM5MDQwZTQ4Y2Q0NDQyYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlYpINcqd/nfX+lEQbqAREjNDYvN JJEfJ68wqLG32Iae8s95rhVLJ87cx3idpAILsYa/s0AqLV+TOyjKC1Z2UwghfzOr bR8dmuEH1cu6LxWxR1LDJLwvLG4IPiWO3coOH5s937X9VBjXtyiG79yGhQeZfRas dMfIflMk+XertU+1hWNh136ORPqQSxjyxufiBQBH1CnA/dsUHqJacJRzMdNXPlas eZtZcYgbNQpisZ0ZJQr1ME0NaVn5eUHUnbZi5VPt0KTWyg3IcpwkzJBitVEwn6Co N7x22zldad91Gn7//bPnNk6i6LV1hfl5LjqqRPFKIGo+3L8dYeXEEkvGyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYwA+l7ezMmF1P0nJBA5IzURCrwMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRmpBRDZYdDdNeVlYVV9TY2tFRGtqTlJFS3ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzi/MA0G CSqGSIb3DQEBCwUAA4IBAQCO4sUic+wNHW7uEdu9O0xm05mVotrNfZnqG4e2c8Km G8i+MLNC1s9mf0r0fpEmOb3C0kOp3zz/CGSNSut7mkQNHjzNqVgoq3Ud+pXT0FLM Qecy7HwVLwW7193zGOdY7SrxIHmIvmGMihoNPJYDJv6MUn4Cu1jBPFWhn93Df/0R yEbZsZmsXpTXRBu1K8vo9gx+JUrHc04dKGDi1WEgNBg6vrzmNFM4wNuGiqK6LeeW uAc2GCRTB8NqEAjbBKJvmTHqEN2gxk4cM0PnQrxUIBa+BMo4xlHA55QtPxBBwZzX ml1aoDTUzC+Lw3xycmTESOWmw3pCtw4HPnEmyzmeHYhy -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client