This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IhYZiJLPv8TImOSVZhMaObIcRUQ.roa File: IhYZiJLPv8TImOSVZhMaObIcRUQ.roa (raw, json) Hash identifier: Pe0CxF/DuI8QHPV7A1cYPdzjCusHGWeQy1yJjt4Dnvk= Subject key identifier: 22:16:19:88:92:CF:BF:C4:C8:98:E4:95:66:13:1A:39:B2:1C:45:44 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CEED4BBF3C2B99F639BCC8E3AE44 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IhYZiJLPv8TImOSVZhMaObIcRUQ.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215391 IP address blocks: 31.56.214.0/24 maxlen: 24 217.60.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ce:ed:4b:bf:3c:2b:99:f6:39:bc:c8:e3:ae:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2216198892cfbfc4c898e49566131a39b21c4544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:80:e6:86:10:0e:2a:30:ab:4a:d2:bc:5b: a0:ce:ea:6c:80:b5:30:72:49:9a:57:c9:35:29:16: 45:83:94:05:8a:88:d0:64:e2:34:0c:f8:f8:a4:4c: 65:0d:b7:c5:ae:b5:ea:2d:93:53:75:6c:a1:75:b8: ac:4a:03:e0:fe:85:fa:97:69:7e:2f:2f:b0:43:e7: 4e:f1:31:71:f0:af:72:59:cf:eb:be:34:be:84:fc: 4a:4a:31:1d:13:63:38:0a:b8:6e:dd:c7:f9:44:57: cb:c9:13:1a:ca:96:b3:b0:56:67:86:34:e7:77:5b: 6a:53:22:ab:07:d8:20:3c:6f:d7:4f:12:cd:92:a6: 02:8c:46:f4:90:12:41:4d:97:91:e5:29:14:51:c6: b8:f8:bf:3c:75:48:a7:c4:91:86:27:a7:0d:c7:a5: d7:27:0e:8f:55:95:19:d9:ee:54:bc:28:e4:a8:f2: 0f:16:16:66:17:07:0e:f2:22:2d:7f:5c:4e:9d:ea: 1c:3c:5b:67:e0:b3:c9:88:0a:a0:e0:77:ee:ff:6a: 23:51:36:2c:d3:e2:d5:3a:89:6f:7e:2e:28:1d:a1: 76:ed:19:1e:09:54:3f:5b:09:77:8d:0e:0b:01:66: 23:b8:ba:53:75:94:63:0c:88:13:11:ee:02:9f:7d: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:16:19:88:92:CF:BF:C4:C8:98:E4:95:66:13:1A:39:B2:1C:45:44 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IhYZiJLPv8TImOSVZhMaObIcRUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.214.0/24 217.60.254.0/24 Signature Algorithm: sha256WithRSAEncryption 84:71:78:de:bf:30:ac:3b:dc:cd:1e:09:d8:1e:b6:26:f3:82: 69:45:35:61:79:d7:7e:54:c0:5a:5a:9d:90:22:4b:6c:db:f8: a3:b1:8b:69:be:d1:af:73:68:88:a1:8e:34:bb:24:f6:4c:da: 8d:e1:19:ad:29:5a:7c:b0:4c:e8:78:1b:db:39:72:85:80:30: f2:71:33:3c:5b:8d:16:dd:0c:1a:78:35:08:28:93:ba:92:b1: bf:d1:ab:5d:f5:52:aa:66:cb:86:8d:cf:cb:a4:29:c9:67:32: e9:55:c4:a7:03:83:53:93:1e:07:87:86:c4:82:6f:28:dd:02: 03:6f:95:08:30:04:09:40:4e:66:1e:7a:aa:4b:25:36:9a:bf: ed:17:ec:6c:ca:49:32:05:04:58:b6:84:b0:17:41:19:03:a4: 31:f6:bc:7c:8c:02:34:cb:12:8d:48:1b:87:fe:f2:85:bd:49: 84:04:55:e3:26:98:1b:12:b7:67:76:83:b1:cf:c3:fc:24:9b: a3:83:40:bb:0a:df:8c:54:7c:4a:cb:51:4d:54:9b:36:f0:01: 5c:c6:b2:6d:91:41:af:39:14:6d:60:dc:6f:24:7e:e4:34:ce: 0d:b8:47:f5:ee:6e:91:4d:3a:7b:d9:0b:87:a1:b0:80:6f:98: c0:9d:2d:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hM7tS788K5n2ObzI465EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjE2MTk4ODkyY2ZiZmM0Yzg5OGU0OTU2NjEzMWEzOWIyMWM0NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KCA5oYQDiowq0rSvFugzupsgLUw ckmaV8k1KRZFg5QFiojQZOI0DPj4pExlDbfFrrXqLZNTdWyhdbisSgPg/oX6l2l+ Ly+wQ+dO8TFx8K9yWc/rvjS+hPxKSjEdE2M4Crhu3cf5RFfLyRMaypazsFZnhjTn d1tqUyKrB9ggPG/XTxLNkqYCjEb0kBJBTZeR5SkUUca4+L88dUinxJGGJ6cNx6XX Jw6PVZUZ2e5UvCjkqPIPFhZmFwcO8iItf1xOneocPFtn4LPJiAqg4Hfu/2ojUTYs 0+LVOolvfi4oHaF27RkeCVQ/Wwl3jQ4LAWYjuLpTdZRjDIgTEe4Cn30v+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCIWGYiSz7/EyJjklWYTGjmyHEVEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSWhZWmlKTFB2OFRJbU9TVlpoTWFPYkljUlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjWAwQA 2Tz+MA0GCSqGSIb3DQEBCwUAA4IBAQCEcXjevzCsO9zNHgnYHrYm84JpRTVhedd+ VMBaWp2QIkts2/ijsYtpvtGvc2iIoY40uyT2TNqN4RmtKVp8sEzoeBvbOXKFgDDy cTM8W40W3QwaeDUIKJO6krG/0atd9VKqZsuGjc/LpCnJZzLpVcSnA4NTkx4Hh4bE gm8o3QIDb5UIMAQJQE5mHnqqSyU2mr/tF+xsykkyBQRYtoSwF0EZA6Qx9rx8jAI0 yxKNSBuH/vKFvUmEBFXjJpgbErdndoOxz8P8JJujg0C7Ct+MVHxKy1FNVJs28AFc xrJtkUGvORRtYNxvJH7kNM4NuEf17m6RTTp72QuHobCAb5jAnS1T -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:11 2026 by rpki-client