This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IlhoVQF8qQf7lfs5F4rMn5jPTWc.roa File: IlhoVQF8qQf7lfs5F4rMn5jPTWc.roa (raw, json) Hash identifier: R+q6uX+9G8sXMjRGYc6rrcL1a64dOsENNatY8ZcPaGA= Subject key identifier: 22:58:68:55:01:7C:A9:07:FB:95:FB:39:17:8A:CC:9F:98:CF:4D:67 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B976FB9267DBD3ACE108B7B4E7FC8CEC3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IlhoVQF8qQf7lfs5F4rMn5jPTWc.roa Signing time: Wed 07 Jan 2026 07:50:39 +0000 ROA not before: Wed 07 Jan 2026 07:50:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216032 IP address blocks: 31.56.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:6f:b9:26:7d:bd:3a:ce:10:8b:7b:4e:7f:c8:ce:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 7 07:50:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22586855017ca907fb95fb39178acc9f98cf4d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:4e:74:3c:f4:18:36:1d:aa:1e:5d:a3:ba: 12:c2:a8:fb:a3:54:34:c4:4c:ce:0c:86:89:05:11: f8:a6:d5:15:76:ae:18:13:f2:a1:2c:a2:de:2c:36: 86:37:ff:68:d8:a4:a3:35:09:55:5e:08:d2:20:5e: dc:03:01:fd:ed:1d:47:4b:c7:12:7d:e3:72:b9:b2: cb:d1:d7:c8:60:0f:74:21:e9:2f:66:34:16:71:6e: 48:f8:fc:f2:c0:33:fc:ae:50:97:1e:ce:4e:77:db: 2d:89:d2:26:73:e7:62:5a:cf:13:2d:0a:7a:85:22: b5:a2:bb:1b:74:9a:82:75:c9:80:65:b2:3d:5e:c7: ce:a8:35:b2:af:d8:8e:23:60:be:e5:6b:85:7b:f7: 4a:a4:26:d9:2f:48:0b:3e:61:70:ff:87:31:8d:1e: 8c:35:50:f7:42:ae:83:66:53:a3:0b:61:f3:93:30: e2:d6:e3:8e:aa:1e:d0:af:5e:aa:08:90:83:8c:64: 42:ae:c4:05:1e:48:e9:51:e0:49:39:a0:58:20:2a: 46:98:0c:bd:55:51:85:f1:36:4b:7d:50:db:35:87: 55:53:3d:15:ee:bf:0a:e1:9a:14:58:c0:1e:c8:d0: 68:47:18:7b:e2:c9:cf:48:5f:c4:60:d8:de:3a:52: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:58:68:55:01:7C:A9:07:FB:95:FB:39:17:8A:CC:9F:98:CF:4D:67 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IlhoVQF8qQf7lfs5F4rMn5jPTWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.101.0/24 Signature Algorithm: sha256WithRSAEncryption 86:46:7d:7a:19:eb:c2:45:78:12:29:d1:d5:6f:a2:3a:14:f0: 9d:d8:49:11:fc:5a:19:85:cc:00:80:3d:76:38:e0:06:69:9b: 58:77:cd:2f:87:8e:27:14:49:33:a0:a6:cf:de:39:89:db:27: eb:b8:3c:f9:c5:01:5a:65:ad:8b:72:ad:4b:c9:05:e5:fb:48: 1d:c2:77:65:e5:ec:c6:39:03:ea:01:30:6f:99:c8:32:1f:0e: 21:f2:28:d2:8b:ad:e4:cb:5e:9a:d1:58:45:40:46:77:c4:c8: 89:cc:96:4f:55:67:34:ff:bb:1e:4c:d4:16:73:af:0e:0f:1f: 25:dc:08:8f:dd:7b:d4:b9:ca:0a:6e:7a:a5:85:98:06:53:3d: 16:5c:22:e1:10:ac:9d:00:2a:eb:bc:7d:8d:cb:d6:ff:2b:ac: 78:37:ee:e3:2e:48:b4:41:1c:60:78:bc:87:f3:72:70:70:21: d9:7f:d9:a6:46:09:07:dc:2d:3e:78:d4:ed:5c:c3:18:6a:7f: 18:ad:f2:69:6c:ea:d5:c0:47:21:7c:61:5a:ca:28:a1:f5:1a: c1:f8:02:e1:45:5c:ca:90:b3:00:0e:3c:f7:1f:4e:41:50:2d: df:65:d7:14:2a:28:cc:b1:57:f3:b8:d4:0d:58:97:e0:98:04: da:84:37:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuXb7kmfb06zhCLe05/yM7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA3MDc1MDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjU4Njg1NTAxN2NhOTA3ZmI5NWZiMzkxNzhhY2M5Zjk4Y2Y0ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwklOdDz0GDYdqh5do7oSwqj7o1Q0 xEzODIaJBRH4ptUVdq4YE/KhLKLeLDaGN/9o2KSjNQlVXgjSIF7cAwH97R1HS8cS feNyubLL0dfIYA90IekvZjQWcW5I+PzywDP8rlCXHs5Od9stidImc+diWs8TLQp6 hSK1orsbdJqCdcmAZbI9XsfOqDWyr9iOI2C+5WuFe/dKpCbZL0gLPmFw/4cxjR6M NVD3Qq6DZlOjC2HzkzDi1uOOqh7Qr16qCJCDjGRCrsQFHkjpUeBJOaBYICpGmAy9 VVGF8TZLfVDbNYdVUz0V7r8K4ZoUWMAeyNBoRxh74snPSF/EYNjeOlL9aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCJYaFUBfKkH+5X7OReKzJ+Yz01nMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSWxob1ZRRjhxUWY3bGZzNUY0ck1uNWpQVFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhlMA0G CSqGSIb3DQEBCwUAA4IBAQCGRn16GevCRXgSKdHVb6I6FPCd2EkR/FoZhcwAgD12 OOAGaZtYd80vh44nFEkzoKbP3jmJ2yfruDz5xQFaZa2Lcq1LyQXl+0gdwndl5ezG OQPqATBvmcgyHw4h8ijSi63ky16a0VhFQEZ3xMiJzJZPVWc0/7seTNQWc68ODx8l 3AiP3XvUucoKbnqlhZgGUz0WXCLhEKydACrrvH2Ny9b/K6x4N+7jLki0QRxgeLyH 83JwcCHZf9mmRgkH3C0+eNTtXMMYan8YrfJpbOrVwEchfGFayiih9RrB+ALhRVzK kLMADjz3H05BUC3fZdcUKijMsVfzuNQNWJfgmATahDdm -----END CERTIFICATE-----Generated at Sat Jan 10 09:45:27 2026 by rpki-client