This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ItbWlYeE8GynQYSIlaMrEteYeeE.roa File: ItbWlYeE8GynQYSIlaMrEteYeeE.roa (raw, json) Hash identifier: 2XyfYbNiXu3bw2lkesEyd1gASA3QCluhphz3i6HZkOw= Subject key identifier: 22:D6:D6:95:87:84:F0:6C:A7:41:84:88:95:A3:2B:12:D7:98:79:E1 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B9BC7066E4FA8522ADB736807BCA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ItbWlYeE8GynQYSIlaMrEteYeeE.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213990 IP address blocks: 31.59.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b9:bc:70:66:e4:fa:85:22:ad:b7:36:80:7b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22d6d6958784f06ca741848895a32b12d79879e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:6a:b0:38:af:d7:35:ec:81:b0:2b:fe:d6: 1d:a5:25:6d:29:20:c7:e8:17:18:c7:f1:c9:de:79: 7e:48:26:a4:b1:5a:8d:d6:79:92:26:cd:ad:cd:6f: b1:8c:f6:cf:82:12:a9:bd:92:c0:f8:4d:2a:dd:f6: d1:89:fe:fe:11:51:84:27:1e:ce:fb:12:6c:9d:35: 77:cf:25:12:2c:66:42:97:2b:02:49:93:7b:90:cb: 7a:36:43:64:f8:74:08:0a:99:b6:43:15:af:aa:dc: ac:0c:42:26:44:9f:84:1e:5f:56:4e:a4:60:0a:ff: 1b:cd:38:29:e8:d7:29:65:e7:b4:ba:81:cf:68:7f: 9e:ea:b4:b3:9a:f2:fd:be:47:18:d9:0a:f9:4a:b8: 1a:59:81:70:ab:11:b6:af:ce:40:92:d5:3d:1e:e8: ef:52:2c:1d:3b:c8:8f:7e:8d:b5:51:5c:9d:7b:44: 13:0c:12:42:e7:e2:9a:19:91:15:40:cf:70:80:d5: e9:e4:b3:12:cc:f5:0e:b9:6a:23:9f:9c:8a:cf:17: 9a:9f:69:74:52:f3:14:4e:5a:78:4b:02:56:cf:f0: 56:d8:fe:5b:1c:ea:bd:20:e8:58:63:a5:96:71:9c: ab:c8:e6:6d:67:1d:2a:b1:74:98:c1:b5:f6:fe:44: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:D6:95:87:84:F0:6C:A7:41:84:88:95:A3:2B:12:D7:98:79:E1 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ItbWlYeE8GynQYSIlaMrEteYeeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.69.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:a4:6b:b6:63:84:cc:19:55:3c:8b:75:74:cf:b1:98:94:a5: 13:bb:fc:e5:a2:01:f1:bb:ef:c3:7a:f9:eb:6a:dd:39:1a:92: 88:b4:40:f5:14:ec:b3:42:8d:0d:11:b2:02:70:f6:e4:e7:25: cd:cb:9f:11:43:f0:9e:4c:62:44:ec:55:21:14:9e:13:d4:16: b2:69:95:d2:4b:6d:09:5e:2f:6b:12:8b:89:59:c4:56:63:cc: 2e:13:fe:7c:30:82:fe:64:77:b5:ad:0c:83:94:c2:be:53:78: 8a:9e:3b:c6:a6:73:9d:6e:90:1e:c6:e8:18:93:18:a7:36:b0: 48:5c:68:b4:9c:58:bb:21:ee:fb:ab:c0:2c:b5:02:f7:ba:96: f1:58:ed:a5:bf:a3:7b:e1:60:dd:10:56:d7:71:b3:46:ec:e4: 4b:e4:e6:f7:05:2d:eb:76:04:d5:54:65:af:09:1a:44:2f:ac: 08:af:e5:a8:ea:b1:fd:68:ce:ff:0b:96:76:0d:8e:cc:f5:8f: d7:a9:5d:e2:78:c7:95:c6:43:ad:2c:0d:71:4e:22:79:64:a9: b6:1a:f0:27:98:c0:48:88:76:d2:0b:c3:1b:76:c8:7d:46:53: f8:5f:54:65:0e:53:44:ee:f9:f8:99:b3:67:b7:79:a9:f1:41: 18:c3:49:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLm8cGbk+oUirbc2gHvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmQ2ZDY5NTg3ODRmMDZjYTc0MTg0ODg5NWEzMmIxMmQ3OTg3OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWBqsDiv1zXsgbAr/tYdpSVtKSDH 6BcYx/HJ3nl+SCaksVqN1nmSJs2tzW+xjPbPghKpvZLA+E0q3fbRif7+EVGEJx7O +xJsnTV3zyUSLGZClysCSZN7kMt6NkNk+HQICpm2QxWvqtysDEImRJ+EHl9WTqRg Cv8bzTgp6NcpZee0uoHPaH+e6rSzmvL9vkcY2Qr5SrgaWYFwqxG2r85AktU9Hujv UiwdO8iPfo21UVyde0QTDBJC5+KaGZEVQM9wgNXp5LMSzPUOuWojn5yKzxean2l0 UvMUTlp4SwJWz/BW2P5bHOq9IOhYY6WWcZyryOZtZx0qsXSYwbX2/kTjIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLW1pWHhPBsp0GEiJWjKxLXmHnhMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSXRiV2xZZUU4R3luUVlTSWxhTXJFdGVZZWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztFMA0G CSqGSIb3DQEBCwUAA4IBAQAOpGu2Y4TMGVU8i3V0z7GYlKUTu/zlogHxu+/Devnr at05GpKItED1FOyzQo0NEbICcPbk5yXNy58RQ/CeTGJE7FUhFJ4T1BayaZXSS20J Xi9rEouJWcRWY8wuE/58MIL+ZHe1rQyDlMK+U3iKnjvGpnOdbpAexugYkxinNrBI XGi0nFi7Ie77q8AstQL3upbxWO2lv6N74WDdEFbXcbNG7ORL5Ob3BS3rdgTVVGWv CRpEL6wIr+Wo6rH9aM7/C5Z2DY7M9Y/XqV3ieMeVxkOtLA1xTiJ5ZKm2GvAnmMBI iHbSC8Mbdsh9RlP4X1RlDlNE7vn4mbNnt3mp8UEYw0lZ -----END CERTIFICATE-----Generated at Mon Jan 5 14:39:15 2026 by rpki-client