This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IyxiipxHRxNqbGMY1tlxO4PRNSg.roa File: IyxiipxHRxNqbGMY1tlxO4PRNSg.roa (raw, json) Hash identifier: RXTZfdeg3rcsIEcZOJpdd0juNSMi1OgZp823u6K0f84= Subject key identifier: 23:2C:62:8A:9C:47:47:13:6A:6C:63:18:D6:D9:71:3B:83:D1:35:28 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849F8AA628DE26C6C2228299B74BC1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IyxiipxHRxNqbGMY1tlxO4PRNSg.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208483 IP address blocks: 31.57.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9f:8a:a6:28:de:26:c6:c2:22:82:99:b7:4b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=232c628a9c4747136a6c6318d6d9713b83d13528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:7e:52:eb:d9:4d:a0:58:ad:49:34:11:36: ac:bb:f2:d6:be:2a:f8:88:c0:20:bb:fd:e2:28:8f: bb:9f:17:09:87:16:1b:99:e9:db:14:83:32:e7:d5: 56:5d:c8:32:1a:60:39:23:95:a5:a5:b7:7e:fc:eb: 1d:32:bd:85:70:ef:fd:e1:29:39:ce:3a:86:ba:7b: 19:71:fb:7a:6f:a4:ef:d9:ad:da:02:4c:30:35:b3: 09:37:18:86:68:67:16:4d:0c:39:50:19:35:05:79: 65:55:ef:54:38:13:dd:42:1e:10:4a:bf:4e:94:aa: 0d:4c:00:6e:f6:3b:ac:8e:c9:f7:13:9f:2f:09:3c: 6c:7f:d8:c3:a4:6e:2c:6b:bb:5e:37:30:2d:3d:fd: d9:d9:8a:ff:1e:ef:0a:9a:75:93:c6:e8:68:eb:28: b1:b6:ff:d6:67:ac:20:21:75:25:c0:40:20:1d:a5: e2:5b:56:99:f4:5a:29:42:9b:99:36:3c:3b:9b:8d: 43:c3:f1:27:1e:6e:6e:46:c2:01:24:3e:51:58:d9: 2e:af:84:4c:0c:4b:17:98:a2:be:7d:7b:24:08:2e: 90:ab:89:c7:b6:64:3b:25:a8:01:16:45:96:cb:53: c4:d0:c5:d9:e3:66:b8:56:36:d4:4c:35:a8:86:f1: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2C:62:8A:9C:47:47:13:6A:6C:63:18:D6:D9:71:3B:83:D1:35:28 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IyxiipxHRxNqbGMY1tlxO4PRNSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.135.0/24 Signature Algorithm: sha256WithRSAEncryption 31:99:07:15:99:2f:fb:72:ee:01:7d:1f:b6:ab:87:0e:66:37: 2c:db:05:6b:1f:ce:38:54:85:e8:30:07:64:56:4e:46:5e:bb: 43:fa:31:17:8b:79:00:c4:13:ea:5b:86:76:5c:91:7e:31:5c: b2:a7:40:f0:22:3f:46:df:0d:05:c6:65:02:22:11:48:87:ad: c0:00:60:66:71:7f:18:45:15:3e:5f:84:37:50:96:1d:b6:f2: 5b:4d:07:74:c0:30:81:65:8b:0e:7b:1f:f9:c1:1f:d5:1c:c5: 2c:9a:1c:27:1e:25:48:bb:a9:5d:9f:d3:3c:0e:df:33:df:c2: 98:88:08:09:cf:ea:f6:5f:7f:ba:8d:06:8f:b2:8c:f4:5e:1c: 79:4f:bd:36:ac:2c:b1:33:3e:11:77:29:59:fd:cb:97:34:ac: e0:13:f0:eb:b1:13:75:31:63:8c:e6:cf:39:1c:1a:13:16:62: 3d:ba:a8:bd:56:be:95:aa:db:3e:18:8d:a3:1f:b3:7f:2f:36: 01:c1:ef:c6:93:de:f8:3d:3f:af:81:b4:01:cc:25:31:25:be: 7e:8f:93:fd:a7:7b:2a:b8:7d:50:09:27:5d:90:3a:49:5c:f3: 4f:b5:97:b7:5b:51:8e:da:6f:f7:e4:81:2e:94:02:97:73:00: c2:b0:84:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJ+KpijeJsbCIoKZt0vBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzJjNjI4YTljNDc0NzEzNmE2YzYzMThkNmQ5NzEzYjgzZDEzNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMR+UuvZTaBYrUk0ETasu/LWvir4 iMAgu/3iKI+7nxcJhxYbmenbFIMy59VWXcgyGmA5I5Wlpbd+/OsdMr2FcO/94Sk5 zjqGunsZcft6b6Tv2a3aAkwwNbMJNxiGaGcWTQw5UBk1BXllVe9UOBPdQh4QSr9O lKoNTABu9jusjsn3E58vCTxsf9jDpG4sa7teNzAtPf3Z2Yr/Hu8KmnWTxuho6yix tv/WZ6wgIXUlwEAgHaXiW1aZ9FopQpuZNjw7m41Dw/EnHm5uRsIBJD5RWNkur4RM DEsXmKK+fXskCC6Qq4nHtmQ7JagBFkWWy1PE0MXZ42a4VjbUTDWohvGdUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCMsYoqcR0cTamxjGNbZcTuD0TUoMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSXl4aWlweEhSeE5xYkdNWTF0bHhPNFBSTlNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmHMA0G CSqGSIb3DQEBCwUAA4IBAQAxmQcVmS/7cu4BfR+2q4cOZjcs2wVrH844VIXoMAdk Vk5GXrtD+jEXi3kAxBPqW4Z2XJF+MVyyp0DwIj9G3w0FxmUCIhFIh63AAGBmcX8Y RRU+X4Q3UJYdtvJbTQd0wDCBZYsOex/5wR/VHMUsmhwnHiVIu6ldn9M8Dt8z38KY iAgJz+r2X3+6jQaPsoz0Xhx5T702rCyxMz4RdylZ/cuXNKzgE/DrsRN1MWOM5s85 HBoTFmI9uqi9Vr6Vqts+GI2jH7N/LzYBwe/Gk974PT+vgbQBzCUxJb5+j5P9p3sq uH1QCSddkDpJXPNPtZe3W1GO2m/35IEulAKXcwDCsISa -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:59 2026 by rpki-client