This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Isa_RkvmhfnsLStpd-ij86deMPs.roa File: Isa_RkvmhfnsLStpd-ij86deMPs.roa (raw, json) Hash identifier: aCGYWeRe0JE1HXk2fZZgaauvRr2pPZ4AExa77xtzBAo= Subject key identifier: 22:C6:BF:46:4B:E6:85:F9:EC:2D:2B:69:77:E8:A3:F3:A7:5E:30:FB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F847B7C97174657DA23920EC8423909 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Isa_RkvmhfnsLStpd-ij86deMPs.roa Signing time: Fri 02 Jan 2026 16:22:27 +0000 ROA not before: Fri 02 Jan 2026 16:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134955 IP address blocks: 31.58.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7b:7c:97:17:46:57:da:23:92:0e:c8:42:39:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c6bf464be685f9ec2d2b6977e8a3f3a75e30fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:04:98:33:89:1f:f1:c1:cf:ac:2f:85:b6:4f: 62:94:e1:1e:8a:8f:18:51:8b:ed:5b:70:dc:92:72: 73:63:3b:67:16:24:cb:a0:7e:c9:84:ff:39:2f:db: a8:94:ce:18:8c:1e:3e:d2:f7:75:16:df:0c:b2:3c: 56:93:4c:7f:5b:da:a7:d1:11:72:cc:fa:50:bf:22: c2:be:4e:19:2c:74:13:96:a6:75:e1:3e:7e:97:8d: f5:0b:6a:40:b5:9b:63:13:23:81:b4:36:94:db:05: 62:f1:74:90:0f:4b:ca:6e:b8:60:6b:0c:b9:f2:fb: 15:db:96:a1:4e:26:e5:dd:1f:61:b4:28:32:54:f6: 7f:97:83:a7:87:0a:72:3e:1c:55:d0:da:65:3a:7e: e7:5e:56:b1:2a:9e:e0:06:8f:19:ab:9d:54:52:55: 3a:f6:b7:4a:75:f3:f9:de:01:8c:ef:d7:26:33:28: 61:0e:0c:ff:5b:90:a8:06:b1:42:5c:74:88:53:31: 88:50:3b:b0:66:21:7e:61:14:97:2f:31:eb:5d:1e: 46:14:81:79:74:e5:41:41:01:78:e1:3f:a8:88:c2: bb:8b:99:68:2c:77:8a:02:eb:4b:ac:04:d2:a7:02: bc:47:5e:7c:90:00:de:91:8c:4e:7f:56:90:ab:9c: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:BF:46:4B:E6:85:F9:EC:2D:2B:69:77:E8:A3:F3:A7:5E:30:FB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Isa_RkvmhfnsLStpd-ij86deMPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.132.0/23 Signature Algorithm: sha256WithRSAEncryption 38:e6:15:b2:10:ae:73:09:ed:de:86:d6:3e:76:75:9f:f6:c4: 27:f1:7f:2b:f9:10:64:1d:1f:d6:0d:b5:db:8b:07:62:7f:2c: af:32:25:65:9a:ce:ba:4f:53:58:f3:e3:42:0c:a9:7c:c9:aa: fe:32:5c:b6:13:40:94:b9:90:58:b6:2a:4d:6f:5f:17:06:af: 13:9a:c2:aa:10:50:6b:00:5a:db:a7:51:97:9d:c9:5a:56:56: f2:2f:67:43:ba:71:9c:8c:0a:45:8c:f9:5a:b5:6f:57:f5:d1: 69:fe:75:ed:c4:2f:d4:30:f0:f5:da:2e:23:b0:c0:4c:0a:25: e9:70:f2:3c:ac:77:86:70:8b:fc:24:1b:45:3e:a5:ed:7b:6e: e7:72:6f:4d:1c:92:ef:4a:15:a3:b4:d2:80:61:fd:92:3a:da: bc:f9:1e:8f:b1:6d:ad:c6:54:8f:e1:1a:08:40:c8:72:a6:17: aa:89:d3:68:23:44:86:46:31:00:c9:ab:ac:55:db:9a:a5:20: d1:51:27:47:a1:5c:56:9e:99:58:92:cf:ee:4f:d6:6a:c8:15: 1a:26:2b:7a:53:6c:89:08:ee:8a:e0:c1:c3:46:45:b5:7c:99: ca:38:dd:b2:a7:d9:c0:46:d3:c9:24:51:c5:75:9d:38:73:21: 54:eb:0c:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHt8lxdGV9ojkg7IQjkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM2YmY0NjRiZTY4NWY5ZWMyZDJiNjk3N2U4YTNmM2E3NWUzMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wSYM4kf8cHPrC+Ftk9ilOEeio8Y UYvtW3DcknJzYztnFiTLoH7JhP85L9uolM4YjB4+0vd1Ft8MsjxWk0x/W9qn0RFy zPpQvyLCvk4ZLHQTlqZ14T5+l431C2pAtZtjEyOBtDaU2wVi8XSQD0vKbrhgawy5 8vsV25ahTibl3R9htCgyVPZ/l4OnhwpyPhxV0NplOn7nXlaxKp7gBo8Zq51UUlU6 9rdKdfP53gGM79cmMyhhDgz/W5CoBrFCXHSIUzGIUDuwZiF+YRSXLzHrXR5GFIF5 dOVBQQF44T+oiMK7i5loLHeKAutLrATSpwK8R158kADekYxOf1aQq5w30QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLGv0ZL5oX57C0raXfoo/OnXjD7MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSXNhX1Jrdm1oZm5zTFN0cGQtaWo4NmRlTVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzqEMA0G CSqGSIb3DQEBCwUAA4IBAQA45hWyEK5zCe3ehtY+dnWf9sQn8X8r+RBkHR/WDbXb iwdifyyvMiVlms66T1NY8+NCDKl8yar+Mly2E0CUuZBYtipNb18XBq8TmsKqEFBr AFrbp1GXnclaVlbyL2dDunGcjApFjPlatW9X9dFp/nXtxC/UMPD12i4jsMBMCiXp cPI8rHeGcIv8JBtFPqXte27ncm9NHJLvShWjtNKAYf2SOtq8+R6PsW2txlSP4RoI QMhypheqidNoI0SGRjEAyausVduapSDRUSdHoVxWnplYks/uT9ZqyBUaJit6U2yJ CO6K4MHDRkW1fJnKON2yp9nARtPJJFHFdZ04cyFU6wz7 -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:51 2026 by rpki-client