This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdfEs8PZms8d1OrKSRgvolDKzBo.roa File: IdfEs8PZms8d1OrKSRgvolDKzBo.roa (raw, json) Hash identifier: QfYq+7XaKU4m3KjVEVf9N30CwP1Aj5n+Wb/H5vmu4jA= Subject key identifier: 21:D7:C4:B3:C3:D9:9A:CF:1D:D4:EA:CA:49:18:2F:A2:50:CA:CC:1A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845D5D162093586B9904471F1508CE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdfEs8PZms8d1OrKSRgvolDKzBo.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 31.58.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5d:5d:16:20:93:58:6b:99:04:47:1f:15:08:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21d7c4b3c3d99acf1dd4eaca49182fa250cacc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:60:bd:96:56:7b:ed:b9:7e:63:94:09:c5: cf:35:9b:89:3f:55:ef:ff:48:01:8d:a1:33:93:58: c5:3d:90:92:4b:e5:42:8a:8b:9d:96:c1:aa:9e:ab: fb:48:44:11:e5:cc:0c:1a:a2:25:da:6e:ec:77:e5: 25:0a:0e:3e:02:ea:fe:d8:8c:cb:b3:2f:15:fe:b6: fb:15:69:d1:12:08:0c:e5:31:f0:74:80:c9:35:d9: 8d:f2:c3:5f:38:0d:b6:49:61:34:91:1d:b4:64:51: c1:91:f5:9e:a8:2d:b3:4b:3e:86:14:eb:3e:28:4e: 27:42:98:be:1a:71:30:9c:fd:ce:d6:5d:7a:f2:dd: a2:6b:0d:cd:e2:56:82:cf:7d:2f:04:d2:21:06:21: c1:59:7f:6d:2d:53:7d:40:36:d5:1e:97:76:19:61: 45:6c:02:65:1c:47:b9:39:57:9a:06:de:eb:a3:a6: 17:f6:84:7f:93:cc:20:c2:1c:98:3e:67:00:1c:82: ec:48:0c:0e:1a:b2:bc:a5:88:ab:2e:f7:cf:2c:2c: a9:81:ce:6d:c3:ce:f5:43:36:79:81:a2:36:ab:8d: 31:d0:35:12:59:ce:23:0a:7f:c6:7d:6b:70:f9:7f: 72:ad:08:d4:6d:b0:6a:99:a6:37:6c:04:70:e1:73: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D7:C4:B3:C3:D9:9A:CF:1D:D4:EA:CA:49:18:2F:A2:50:CA:CC:1A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdfEs8PZms8d1OrKSRgvolDKzBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.60.0/22 Signature Algorithm: sha256WithRSAEncryption a0:82:20:d5:d2:55:2d:cc:de:5e:97:df:cc:c0:3f:d3:39:7e: cf:34:95:40:b3:0e:ca:e4:f6:71:08:54:cb:b9:0d:b1:c2:6f: c1:61:e5:69:ad:94:a5:11:44:1c:5d:c4:2a:52:29:87:c5:72: 5f:8a:7c:a9:4e:41:a4:96:b2:dd:49:56:28:68:1d:42:a2:60: 86:62:fc:78:46:d3:96:61:21:a8:cf:d8:17:66:21:44:22:2e: 80:9c:e0:2f:95:75:cf:4d:0b:51:44:9e:c0:3c:7f:5a:f3:ca: 95:fd:f4:3b:3e:0b:3a:15:34:88:76:94:28:67:ef:3c:c6:bc: 11:f7:1e:62:62:3e:32:3e:17:1a:2e:8a:da:0c:9c:e4:75:73: 07:a0:19:81:34:c6:92:ed:88:06:0c:93:0b:b9:61:e9:ec:42: b1:59:ed:e0:d5:2c:05:04:48:ee:6b:d7:1b:85:c7:d4:28:e2: 42:0b:3e:98:aa:12:04:94:9c:c8:05:ea:03:2e:2f:53:e6:07: c7:33:5f:8c:47:a6:c2:cb:3d:48:80:07:1a:b7:49:63:bf:ff: 41:df:b8:d6:ad:d3:73:63:e7:d4:ab:c8:09:b1:dc:09:a7:8f: 75:11:90:df:fb:42:03:41:fb:58:3a:6c:df:ae:ea:ff:c4:fe: fd:74:bb:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hF1dFiCTWGuZBEcfFQjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWQ3YzRiM2MzZDk5YWNmMWRkNGVhY2E0OTE4MmZhMjUwY2FjYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAropgvZZWe+25fmOUCcXPNZuJP1Xv /0gBjaEzk1jFPZCSS+VCioudlsGqnqv7SEQR5cwMGqIl2m7sd+UlCg4+Aur+2IzL sy8V/rb7FWnREggM5THwdIDJNdmN8sNfOA22SWE0kR20ZFHBkfWeqC2zSz6GFOs+ KE4nQpi+GnEwnP3O1l168t2iaw3N4laCz30vBNIhBiHBWX9tLVN9QDbVHpd2GWFF bAJlHEe5OVeaBt7ro6YX9oR/k8wgwhyYPmcAHILsSAwOGrK8pYirLvfPLCypgc5t w871QzZ5gaI2q40x0DUSWc4jCn/GfWtw+X9yrQjUbbBqmaY3bARw4XOQWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCHXxLPD2ZrPHdTqykkYL6JQyswaMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSWRmRXM4UFptczhkMU9yS1NSZ3ZvbERLekJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzo8MA0G CSqGSIb3DQEBCwUAA4IBAQCggiDV0lUtzN5el9/MwD/TOX7PNJVAsw7K5PZxCFTL uQ2xwm/BYeVprZSlEUQcXcQqUimHxXJfinypTkGklrLdSVYoaB1ComCGYvx4RtOW YSGoz9gXZiFEIi6AnOAvlXXPTQtRRJ7APH9a88qV/fQ7Pgs6FTSIdpQoZ+88xrwR 9x5iYj4yPhcaLoraDJzkdXMHoBmBNMaS7YgGDJMLuWHp7EKxWe3g1SwFBEjua9cb hcfUKOJCCz6YqhIElJzIBeoDLi9T5gfHM1+MR6bCyz1IgAcat0ljv/9B37jWrdNz Y+fUq8gJsdwJp491EZDf+0IDQftYOmzfrur/xP79dLtk -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:56 2026 by rpki-client