This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G8CxspJgv8x3WWrWWHOm9TYlDL0.roa File: G8CxspJgv8x3WWrWWHOm9TYlDL0.roa (raw, json) Hash identifier: pzIhvo0Uq8cvVllXihbgF5N91vFsHJgvJZBIEEQSW8I= Subject key identifier: 1B:C0:B1:B2:92:60:BF:CC:77:59:6A:D6:58:73:A6:F5:36:25:0C:BD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8463576091C3D05622BA0633D798B3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G8CxspJgv8x3WWrWWHOm9TYlDL0.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34872 IP address blocks: 31.59.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:63:57:60:91:c3:d0:56:22:ba:06:33:d7:98:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bc0b1b29260bfcc77596ad65873a6f536250cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:11:84:38:cc:70:77:19:c1:af:a7:0a:ff: eb:83:c1:e6:84:b6:f5:4a:7e:b7:76:d5:0d:66:9a: 09:3c:f2:ce:62:e1:07:78:5f:35:b8:5e:36:25:94: 84:45:f5:37:9a:f2:e3:f9:71:0f:ae:bd:cb:ec:18: 2f:6e:a5:45:57:ec:fe:6f:1c:2e:9f:4f:e2:13:5f: 65:23:b0:dd:29:55:aa:74:fa:26:99:ac:89:82:53: c4:85:f6:8e:79:11:25:5d:a7:82:59:b4:2f:07:b5: 40:da:a9:8b:e6:eb:77:ce:26:51:50:dd:e3:2b:46: 93:f3:6f:5a:b4:d3:58:b7:d1:d4:b3:da:06:81:33: 0d:31:35:23:27:09:ea:75:7d:3c:5f:c8:dc:a4:a1: b2:85:8f:e0:7b:84:50:41:33:0b:14:40:81:2f:a7: 61:f5:de:f3:17:36:44:32:43:cc:e9:86:ff:29:dc: 56:68:5f:90:de:11:8b:6d:28:30:d1:7f:41:40:96: 7e:5b:8c:68:fd:e5:76:e8:19:82:73:bd:9a:d9:5c: ad:14:63:55:13:4b:ee:58:80:35:c0:ba:23:11:68: 88:4e:4d:20:64:12:48:4e:4f:f5:8d:44:90:12:45: db:2b:31:17:02:e7:eb:16:23:b9:4b:18:2e:3a:e0: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C0:B1:B2:92:60:BF:CC:77:59:6A:D6:58:73:A6:F5:36:25:0C:BD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G8CxspJgv8x3WWrWWHOm9TYlDL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.119.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:e2:81:b8:b9:d9:6d:f2:da:47:2c:ab:6f:67:05:52:81:b1: c4:6b:9c:03:d7:25:45:f6:03:fc:8b:46:f9:1e:32:a1:86:24: fb:40:79:b0:e6:05:2c:3b:bb:d4:69:3e:09:ff:4d:7f:6d:8e: 94:7e:a2:fa:52:cb:88:5b:bb:66:fa:7e:61:e2:89:9c:f5:f9: f8:21:68:74:6e:8d:a2:22:50:af:df:11:21:75:12:54:16:86: 1f:03:90:7c:81:10:72:19:90:15:d0:c0:80:56:81:33:95:01: cb:b7:e9:c8:71:59:7c:ea:54:ed:e5:7e:74:2d:4e:a9:1e:4e: ce:6f:da:fb:ea:92:99:12:f8:ad:9e:9a:4e:0c:08:1c:66:b3: 8e:9d:84:0c:04:ef:91:04:14:dc:a6:04:68:76:18:74:23:44: 2d:89:1d:62:80:d5:5e:a9:5e:c6:ad:4b:b5:e8:15:20:7a:75: 39:40:89:be:1d:ae:ed:e5:b3:b2:35:3b:36:ab:3e:d8:0a:88: 75:51:70:66:88:58:e4:4a:d1:b2:6d:82:65:8e:86:79:40:3b: 58:31:95:55:80:8f:dd:45:c7:47:5a:5f:aa:ad:08:d8:80:f7: 30:6e:67:a2:0f:5e:f0:78:1b:48:15:ae:72:41:ce:cd:a6:fb: 1b:7a:f4:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGNXYJHD0FYiugYz15izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmMwYjFiMjkyNjBiZmNjNzc1OTZhZDY1ODczYTZmNTM2MjUwY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHcRhDjMcHcZwa+nCv/rg8HmhLb1 Sn63dtUNZpoJPPLOYuEHeF81uF42JZSERfU3mvLj+XEPrr3L7BgvbqVFV+z+bxwu n0/iE19lI7DdKVWqdPommayJglPEhfaOeRElXaeCWbQvB7VA2qmL5ut3ziZRUN3j K0aT829atNNYt9HUs9oGgTMNMTUjJwnqdX08X8jcpKGyhY/ge4RQQTMLFECBL6dh 9d7zFzZEMkPM6Yb/KdxWaF+Q3hGLbSgw0X9BQJZ+W4xo/eV26BmCc72a2VytFGNV E0vuWIA1wLojEWiITk0gZBJITk/1jUSQEkXbKzEXAufrFiO5SxguOuA56QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvAsbKSYL/Md1lq1lhzpvU2JQy9MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRzhDeHNwSmd2OHgzV1dyV1dIT205VFlsREwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzt3MA0G CSqGSIb3DQEBCwUAA4IBAQCc4oG4udlt8tpHLKtvZwVSgbHEa5wD1yVF9gP8i0b5 HjKhhiT7QHmw5gUsO7vUaT4J/01/bY6UfqL6UsuIW7tm+n5h4omc9fn4IWh0bo2i IlCv3xEhdRJUFoYfA5B8gRByGZAV0MCAVoEzlQHLt+nIcVl86lTt5X50LU6pHk7O b9r76pKZEvitnppODAgcZrOOnYQMBO+RBBTcpgRodhh0I0QtiR1igNVeqV7GrUu1 6BUgenU5QIm+Ha7t5bOyNTs2qz7YCoh1UXBmiFjkStGybYJljoZ5QDtYMZVVgI/d RcdHWl+qrQjYgPcwbmeiD17weBtIFa5yQc7NpvsbevS4 -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:36 2026 by rpki-client