This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IJbQv9UgHWNOIgNjGpS2fT396Uw.roa File: IJbQv9UgHWNOIgNjGpS2fT396Uw.roa (raw, json) Hash identifier: Su8YiBewX2eJ7OFI+zLfB/KS/jA82xvpWKC6KapHT9E= Subject key identifier: 20:96:D0:BF:D5:20:1D:63:4E:22:03:63:1A:94:B6:7D:3D:FD:E9:4C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E4B3829B11E83B852B5CC0758988 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IJbQv9UgHWNOIgNjGpS2fT396Uw.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401171 IP address blocks: 31.57.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e4:b3:82:9b:11:e8:3b:85:2b:5c:c0:75:89:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2096d0bfd5201d634e2203631a94b67d3dfde94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:82:e4:f1:97:6e:bb:23:cc:d5:4e:ed:7c: 86:f7:88:8f:0c:87:e4:91:f8:73:96:6a:8c:04:21: 3b:7d:ab:37:d9:b3:e6:09:da:93:db:46:18:8e:f3: 2e:be:f1:3d:84:36:48:29:01:6a:66:8c:ae:5d:84: 96:68:78:6a:35:f5:2e:d1:9f:15:13:3d:71:db:88: be:bb:38:e7:84:35:e7:0a:7c:39:08:fc:b1:ef:a1: 0f:30:df:97:88:2b:d8:62:30:7c:e8:d6:eb:c1:eb: e3:cf:c0:42:4b:d3:26:4e:cc:fb:60:5e:54:ba:ee: b4:2e:8c:67:2e:60:e9:86:f5:89:70:25:55:a1:15: 35:95:24:d8:34:7c:8c:cc:49:c8:a9:67:2f:c2:73: 24:6c:ed:45:3b:b7:5a:14:db:cf:7f:d3:eb:ae:ab: 55:1b:05:8e:2e:66:41:d7:02:75:b6:66:0e:ba:3c: a2:6f:f9:b8:ac:e3:6f:82:c8:e5:ea:c6:63:97:2b: b4:77:04:4d:65:34:3f:a9:bf:69:31:64:ec:58:af: 84:e7:75:19:5e:05:bb:05:49:cc:db:35:91:38:1d: 43:17:71:b5:42:f2:79:79:e3:0d:8a:03:ee:cf:01: 94:f8:34:54:0d:6d:a7:86:88:f9:94:82:08:48:24: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:D0:BF:D5:20:1D:63:4E:22:03:63:1A:94:B6:7D:3D:FD:E9:4C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IJbQv9UgHWNOIgNjGpS2fT396Uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.64.0/21 Signature Algorithm: sha256WithRSAEncryption 23:99:1d:6a:b2:16:c1:7e:c6:7a:a3:3e:43:a7:24:56:a3:1f: a1:5f:0b:c7:81:e9:5d:68:51:63:5d:95:f0:d3:36:28:75:03: 4d:22:68:94:03:1a:83:b4:4a:59:21:f4:7d:eb:ad:58:a3:4a: 1a:0e:af:95:e4:21:2a:a2:08:08:2e:ac:e9:a7:0b:2d:4c:4d: 19:8a:b7:f2:51:e6:34:50:7f:ad:4d:ec:4d:48:3d:77:fa:88: 3d:11:fd:ec:2f:16:eb:ed:5f:87:dd:3e:25:16:48:d7:e3:1d: 66:8e:d3:2d:ba:ab:b1:9d:c0:03:be:c8:85:04:f3:2e:39:da: 19:9a:79:b6:2a:6a:03:41:4e:71:ed:aa:3f:80:22:ab:7d:9d: 0f:90:57:f9:d6:3d:96:d7:c1:bb:5d:27:7e:a2:90:76:53:2f: fd:8d:30:1d:c2:f2:36:0f:6f:b4:0a:3d:3a:8a:b6:9e:01:4c: 55:f6:7c:09:a3:36:7e:fb:5a:94:ff:76:07:4f:df:f4:e8:fa: b8:17:a1:8f:f6:e2:21:9d:59:b4:4c:43:0a:b5:95:19:ba:83: c4:9e:5d:bb:2c:ea:80:d2:85:e8:c5:3d:db:09:96:3a:46:f7: 9b:59:c1:21:88:94:75:30:2f:c5:92:c8:c9:2f:5a:f8:6c:c8: 18:8b:0a:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOSzgpsR6DuFK1zAdYmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDk2ZDBiZmQ1MjAxZDYzNGUyMjAzNjMxYTk0YjY3ZDNkZmRlOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZSC5PGXbrsjzNVO7XyG94iPDIfk kfhzlmqMBCE7fas32bPmCdqT20YYjvMuvvE9hDZIKQFqZoyuXYSWaHhqNfUu0Z8V Ez1x24i+uzjnhDXnCnw5CPyx76EPMN+XiCvYYjB86Nbrwevjz8BCS9MmTsz7YF5U uu60LoxnLmDphvWJcCVVoRU1lSTYNHyMzEnIqWcvwnMkbO1FO7daFNvPf9PrrqtV GwWOLmZB1wJ1tmYOujyib/m4rONvgsjl6sZjlyu0dwRNZTQ/qb9pMWTsWK+E53UZ XgW7BUnM2zWROB1DF3G1QvJ5eeMNigPuzwGU+DRUDW2nhoj5lIIISCT27wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCW0L/VIB1jTiIDYxqUtn09/elMMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSUpiUXY5VWdIV05PSWdOakdwUzJmVDM5NlV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHzlAMA0G CSqGSIb3DQEBCwUAA4IBAQAjmR1qshbBfsZ6oz5DpyRWox+hXwvHgeldaFFjXZXw 0zYodQNNImiUAxqDtEpZIfR9661Yo0oaDq+V5CEqoggILqzppwstTE0ZirfyUeY0 UH+tTexNSD13+og9Ef3sLxbr7V+H3T4lFkjX4x1mjtMtuquxncADvsiFBPMuOdoZ mnm2KmoDQU5x7ao/gCKrfZ0PkFf51j2W18G7XSd+opB2Uy/9jTAdwvI2D2+0Cj06 iraeAUxV9nwJozZ++1qU/3YHT9/06Pq4F6GP9uIhnVm0TEMKtZUZuoPEnl27LOqA 0oXoxT3bCZY6RvebWcEhiJR1MC/FksjJL1r4bMgYiwqr -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:41 2026 by rpki-client