This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FwPDTPLO0xeP_B1m94AzGCPW5Mo.roa File: FwPDTPLO0xeP_B1m94AzGCPW5Mo.roa (raw, json) Hash identifier: lrgW8inRcwOwxGBVeGB4aWL5ie3FyQ7bJaTGlxdENgQ= Subject key identifier: 17:03:C3:4C:F2:CE:D3:17:8F:FC:1D:66:F7:80:33:18:23:D6:E4:CA Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84558E70E8FFFAC5331A8F8A7CC851 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FwPDTPLO0xeP_B1m94AzGCPW5Mo.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 31.57.196.0/24 maxlen: 24 31.57.238.0/24 maxlen: 24 31.58.169.0/24 maxlen: 24 31.59.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:55:8e:70:e8:ff:fa:c5:33:1a:8f:8a:7c:c8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1703c34cf2ced3178ffc1d66f780331823d6e4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:c2:2e:7e:4a:6a:36:f5:1a:66:b2:c0:be: e4:f3:f8:fe:07:ee:72:4c:09:82:ca:66:0c:3b:01: 7f:62:51:4b:05:4d:7f:c9:a5:5f:9a:6e:ed:4f:d4: 7f:da:a7:63:1c:4a:9a:60:d3:ae:88:c0:84:11:82: a4:7d:cf:71:9e:fd:a1:c4:35:e0:45:83:00:da:5d: 7d:1f:46:54:34:46:4f:b0:9e:f9:1a:1c:ce:71:e9: 21:8a:ad:21:01:b5:db:6a:4f:5f:13:de:70:07:c4: 49:60:9b:de:75:ed:fc:bd:d3:77:e5:2e:36:64:b4: 06:ac:2d:2e:35:05:5b:41:49:6e:e4:9c:6c:55:52: 68:eb:dc:0e:e5:10:d0:15:33:d6:76:b8:f8:fb:28: ce:c6:a4:03:93:63:ea:f3:aa:67:12:8e:ec:03:f5: 5b:f6:e3:92:39:cb:05:db:95:11:ec:35:55:2e:0e: 2a:4a:d9:2b:0d:23:a5:1d:41:b0:d0:bd:66:3d:ad: ee:55:0d:03:f0:bf:2b:fd:3c:98:11:c9:02:33:10: 7c:2f:7f:5a:e2:a7:0b:43:c7:fe:19:a3:54:a7:b3: 13:7b:3d:05:ac:8c:41:a5:91:1f:a8:00:9d:f6:cd: 34:1e:f8:25:e6:7e:37:a9:44:2e:23:4b:58:ee:ab: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:03:C3:4C:F2:CE:D3:17:8F:FC:1D:66:F7:80:33:18:23:D6:E4:CA X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FwPDTPLO0xeP_B1m94AzGCPW5Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.196.0/24 31.57.238.0/24 31.58.169.0/24 31.59.172.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:56:2e:b1:61:82:fb:45:fb:82:58:1e:61:83:22:40:c0:73: 3f:60:f5:90:ee:83:76:1e:c0:86:e8:90:ec:57:ca:15:ff:3f: dc:50:75:a4:18:97:74:83:bd:37:5e:ef:17:71:e5:25:d6:02: c5:40:ae:8c:98:82:38:03:b7:48:b5:8f:c2:96:47:9f:4d:0a: 51:5b:e8:4c:02:eb:8b:47:f5:83:92:98:66:26:3a:de:23:46: ee:43:a8:03:6e:71:2b:06:a7:44:a0:4b:aa:bb:65:08:6f:db: 40:93:21:81:69:70:c8:1b:7a:67:9d:3c:fc:8f:5a:dd:19:24: 3a:7c:71:1a:86:93:38:c6:7f:79:04:b7:5c:a7:a7:87:cb:92: 9e:48:a5:57:21:60:92:a5:74:cd:83:23:b9:7a:98:f3:48:32: 72:c7:a4:de:e8:28:0f:27:38:36:af:16:ee:24:ac:a9:f5:ae: aa:91:03:ae:ec:40:5e:5e:d2:c4:d5:7a:c0:08:99:c6:a9:0a: 18:24:07:78:5c:10:99:a6:1a:19:d0:23:16:1b:58:3d:7e:d3: 91:0e:ae:1d:ca:32:f3:ae:b7:08:72:c7:36:b9:97:60:f5:b9: de:4b:fa:52:fe:7e:66:6e:0e:cc:6b:45:88:b4:1b:14:03:ed: dd:ba:9d:6e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hFWOcOj/+sUzGo+KfMhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzAzYzM0Y2YyY2VkMzE3OGZmYzFkNjZmNzgwMzMxODIzZDZlNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRvCLn5Kajb1GmaywL7k8/j+B+5y TAmCymYMOwF/YlFLBU1/yaVfmm7tT9R/2qdjHEqaYNOuiMCEEYKkfc9xnv2hxDXg RYMA2l19H0ZUNEZPsJ75GhzOcekhiq0hAbXbak9fE95wB8RJYJvede38vdN35S42 ZLQGrC0uNQVbQUlu5JxsVVJo69wO5RDQFTPWdrj4+yjOxqQDk2Pq86pnEo7sA/Vb 9uOSOcsF25UR7DVVLg4qStkrDSOlHUGw0L1mPa3uVQ0D8L8r/TyYEckCMxB8L39a 4qcLQ8f+GaNUp7MTez0FrIxBpZEfqACd9s00Hvgl5n43qUQuI0tY7qu/fQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBcDw0zyztMXj/wdZveAMxgj1uTKMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRndQRFRQTE8weGVQX0IxbTk0QXpHQ1BXNU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHznEAwQA HznuAwQAHzqpAwQAHzusMA0GCSqGSIb3DQEBCwUAA4IBAQA9Vi6xYYL7RfuCWB5h gyJAwHM/YPWQ7oN2HsCG6JDsV8oV/z/cUHWkGJd0g703Xu8XceUl1gLFQK6MmII4 A7dItY/ClkefTQpRW+hMAuuLR/WDkphmJjreI0buQ6gDbnErBqdEoEuqu2UIb9tA kyGBaXDIG3pnnTz8j1rdGSQ6fHEahpM4xn95BLdcp6eHy5KeSKVXIWCSpXTNgyO5 epjzSDJyx6Te6CgPJzg2rxbuJKyp9a6qkQOu7EBeXtLE1XrACJnGqQoYJAd4XBCZ phoZ0CMWG1g9ftORDq4dyjLzrrcIcsc2uZdg9bneS/pS/n5mbg7Ma0WItBsUA+3d up1u -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:53 2026 by rpki-client