This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I3VglOORTki1ZC9gG2JRE4bepXo.roa File: I3VglOORTki1ZC9gG2JRE4bepXo.roa (raw, json) Hash identifier: 6wMAPK4d92Jsi/QAiRzIgDZhASHAWF4y0Lhw1Xje9zc= Subject key identifier: 23:75:60:94:E3:91:4E:48:B5:64:2F:60:1B:62:51:13:86:DE:A5:7A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BE1A787FA91D4E0C7BC0B10FFD08CA55D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I3VglOORTki1ZC9gG2JRE4bepXo.roa Signing time: Wed 21 Jan 2026 17:43:31 +0000 ROA not before: Wed 21 Jan 2026 17:43:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 31.56.141.0/24 maxlen: 24 31.56.154.0/24 maxlen: 24 31.56.158.0/24 maxlen: 24 31.56.159.0/24 maxlen: 24 31.56.168.0/24 maxlen: 24 31.56.169.0/24 maxlen: 24 31.56.170.0/24 maxlen: 24 31.56.171.0/24 maxlen: 24 31.56.174.0/24 maxlen: 24 31.56.175.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.36.0/24 maxlen: 24 31.58.37.0/24 maxlen: 24 31.58.38.0/24 maxlen: 24 31.58.39.0/24 maxlen: 24 31.59.203.0/24 maxlen: 24 31.59.204.0/24 maxlen: 24 31.59.205.0/24 maxlen: 24 31.59.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:a7:87:fa:91:d4:e0:c7:bc:0b:10:ff:d0:8c:a5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 21 17:43:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23756094e3914e48b5642f601b62511386dea57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:b2:8e:55:8f:6a:eb:d3:cd:4d:66:0d:e6: a0:71:96:ac:a6:c9:f4:a3:fc:3d:28:6d:d1:b9:b0: 0c:f9:06:ce:eb:25:f1:ed:a7:11:59:8b:a7:93:d2: e9:2b:68:21:18:3d:01:56:2b:0f:e6:57:34:87:69: 59:2e:01:5e:26:4f:f3:7b:c9:e5:36:bf:21:05:ba: 10:e7:ff:76:15:b4:63:2e:b3:1e:11:c0:e3:f5:b2: f6:d9:a1:69:95:55:57:5b:22:95:58:8c:c9:95:7f: a0:3a:3e:06:fd:aa:b5:e9:12:13:ac:d8:4a:34:85: 5c:40:f0:93:ac:d6:68:5e:90:04:08:26:30:2f:d1: a9:14:79:d1:33:cc:14:c1:af:5c:c7:0c:0b:f3:c8: 60:fb:0a:54:1b:02:3e:f7:26:d0:d7:30:c0:81:a7: cf:23:64:d1:dd:11:f2:e2:22:c7:d5:eb:7a:13:fb: 6e:ce:35:58:54:ce:b4:79:57:6d:76:fe:b5:28:d2: 8f:42:f0:82:53:85:86:1e:c6:50:bb:bc:e1:8b:77: 9d:ae:ea:e0:7b:c8:e9:46:a7:30:6d:45:4e:b9:65: ee:1e:b0:59:d3:5c:e7:a1:9e:98:c3:aa:e2:0f:d9: 22:1a:90:ee:dd:4c:0d:bf:99:bd:3e:37:a0:f0:ca: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:75:60:94:E3:91:4E:48:B5:64:2F:60:1B:62:51:13:86:DE:A5:7A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I3VglOORTki1ZC9gG2JRE4bepXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.141.0/24 31.56.154.0/24 31.56.158.0/23 31.56.168.0/22 31.56.174.0/23 31.58.34.0-31.58.39.255 31.59.203.0-31.59.205.255 31.59.215.0/24 Signature Algorithm: sha256WithRSAEncryption 62:2d:73:27:4b:82:3f:0b:df:6e:a0:c0:80:01:f7:e5:9c:13: 51:84:93:02:07:45:a6:c6:e6:87:47:26:2c:24:5c:6e:e7:ec: cb:b2:7a:b3:15:61:03:d8:bd:81:3e:95:97:b9:60:fd:df:57: 9b:3c:79:7f:3a:1d:1e:f7:d8:5d:ed:0b:8e:2b:ae:b9:eb:7e: b7:9f:da:fa:be:6b:6e:12:5b:18:c7:b8:ec:1c:33:b3:d5:a2: 62:fc:1e:cf:03:c2:21:84:9b:fb:2e:d5:fe:ca:a5:1c:ca:b9: 61:15:5b:e8:d7:42:68:7e:a0:d6:e3:49:a0:d8:1f:52:33:00: fd:74:1f:16:5b:59:e4:03:27:38:f2:1f:dc:ad:d3:98:0e:4f: 7a:8f:83:84:61:b1:17:89:ef:5b:3c:76:71:5f:52:cc:6d:26: 4e:6a:c4:6b:f3:3a:1e:fd:54:57:ff:1c:97:5d:a3:0b:87:80: 4a:cd:90:6c:f5:6b:e8:3f:ab:8e:b5:11:d3:89:8d:c3:a3:86: a9:9f:6e:31:18:cd:e0:95:77:7d:4d:be:2a:4d:ac:2b:6b:32: e4:ee:36:e8:f3:0e:f5:27:89:d4:58:33:08:0d:b3:5c:c0:a1: 9b:58:e4:f8:eb:15:3c:39:b6:d0:ca:34:13:80:45:a9:4d:6e: 67:6d:a5:a7 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZvhp4f6kdTgx7wLEP/QjKVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIxMTc0MzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzc1NjA5NGUzOTE0ZTQ4YjU2NDJmNjAxYjYyNTExMzg2ZGVhNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9OyjlWPauvTzU1mDeagcZaspsn0 o/w9KG3RubAM+QbO6yXx7acRWYunk9LpK2ghGD0BVisP5lc0h2lZLgFeJk/ze8nl Nr8hBboQ5/92FbRjLrMeEcDj9bL22aFplVVXWyKVWIzJlX+gOj4G/aq16RITrNhK NIVcQPCTrNZoXpAECCYwL9GpFHnRM8wUwa9cxwwL88hg+wpUGwI+9ybQ1zDAgafP I2TR3RHy4iLH1et6E/tuzjVYVM60eVdtdv61KNKPQvCCU4WGHsZQu7zhi3edrurg e8jpRqcwbUVOuWXuHrBZ01znoZ6Yw6riD9kiGpDu3UwNv5m9Pjeg8MqH/wIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFCN1YJTjkU5ItWQvYBtiUROG3qV6MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSTNWZ2xPT1JUa2kxWkM5Z0cySlJFNGJlcFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAHziNAwQA HziaAwQBHzieAwQCHzioAwQBHziuMAwDBAEfOiIDBAMfOiAwDAMEAB87ywMEAR87 zAMEAB871zANBgkqhkiG9w0BAQsFAAOCAQEAYi1zJ0uCPwvfbqDAgAH35ZwTUYST AgdFpsbmh0cmLCRcbufsy7J6sxVhA9i9gT6Vl7lg/d9Xmzx5fzodHvfYXe0Ljiuu uet+t5/a+r5rbhJbGMe47Bwzs9WiYvwezwPCIYSb+y7V/sqlHMq5YRVb6NdCaH6g 1uNJoNgfUjMA/XQfFltZ5AMnOPIf3K3TmA5Peo+DhGGxF4nvWzx2cV9SzG0mTmrE a/M6Hv1UV/8cl12jC4eASs2QbPVr6D+rjrUR04mNw6OGqZ9uMRjN4JV3fU2+Kk2s K2sy5O426PMO9SeJ1FgzCA2zXMChm1jk+OsVPDm20Mo0E4BFqU1uZ22lpw== -----END CERTIFICATE-----Generated at Thu Jan 22 00:46:31 2026 by rpki-client