This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/J-ylMdREDdLdDWbklkbtxm89u7s.roa File: J-ylMdREDdLdDWbklkbtxm89u7s.roa (raw, json) Hash identifier: bO1IAjH56aCca1G/cCEyMraS46yVx/P8agxxzPLTkfs= Subject key identifier: 27:EC:A5:31:D4:44:0D:D2:DD:0D:66:E4:96:46:ED:C6:6F:3D:BB:BB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C3A43FCBA4F028019A791591D746 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/J-ylMdREDdLdDWbklkbtxm89u7s.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214677 IP address blocks: 31.56.7.0/24 maxlen: 24 31.56.233.0/24 maxlen: 24 31.58.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c3:a4:3f:cb:a4:f0:28:01:9a:79:15:91:d7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27eca531d4440dd2dd0d66e49646edc66f3dbbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:15:a0:4f:b0:ca:cd:ed:bc:04:72:73:5f: e2:fb:3f:8f:0d:3d:3e:66:e0:a6:ee:4b:09:8c:8a: 37:7d:ce:50:af:16:20:28:2b:ae:c6:95:f4:8b:20: 17:da:a0:ac:59:dc:98:4e:4a:2c:fe:13:20:90:bc: 7a:cc:d5:8e:cc:06:bc:31:4c:53:42:99:fd:c4:ba: 53:ee:95:cc:57:d7:ea:86:c5:d9:4a:96:c8:82:e7: 2e:2c:ba:c5:88:d0:47:d0:01:73:54:6c:54:a3:43: bb:3e:5e:e2:08:86:06:c9:28:52:e0:2d:60:c6:34: 61:dc:ad:33:22:fe:fe:ba:e1:e9:b0:84:7f:d1:bc: 26:fa:ec:30:23:50:46:b9:ca:a0:46:32:cd:b1:9a: ff:75:7d:cd:12:37:19:0a:5a:3f:8f:ed:59:17:b8: de:91:d2:51:31:55:eb:6b:20:e5:6b:c2:12:6f:bd: 69:f3:ff:04:18:af:59:bd:ea:e5:ef:5a:6e:d1:38: 5f:9f:30:43:9f:1d:2f:16:5b:a1:05:99:0a:23:81: 29:76:3e:3c:53:c5:03:c5:e8:9e:37:79:9e:e6:5d: 32:05:92:f3:f8:9b:67:36:9a:59:b0:39:c1:97:d3: c0:ed:bc:ee:7b:36:61:2a:06:81:68:2b:32:d1:9d: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EC:A5:31:D4:44:0D:D2:DD:0D:66:E4:96:46:ED:C6:6F:3D:BB:BB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/J-ylMdREDdLdDWbklkbtxm89u7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.7.0/24 31.56.233.0/24 31.58.156.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:e9:08:26:b2:ca:a1:3a:6b:da:ae:21:ec:a1:f6:fb:f3:be: 91:c9:3d:ed:48:2a:66:0d:4c:55:93:7c:50:45:c7:7a:12:48: 4b:aa:30:19:86:b6:e9:a2:57:76:53:dd:36:cf:9b:6e:5a:a0: ce:f0:bb:02:44:fb:34:ca:62:c5:2b:6c:3f:12:b3:e6:37:a2: ad:f3:6e:89:c9:81:4b:de:37:bb:c9:92:b9:cb:3b:9f:20:90: 8e:49:a1:6c:6c:ab:36:6a:61:10:1b:11:32:6a:17:0d:81:5a: e1:0c:18:a7:e4:01:27:3e:8a:6d:3e:59:eb:c4:d2:75:3b:bd: 70:10:fe:aa:cf:e9:db:bc:07:36:4a:d2:14:29:e6:b0:1e:97: ea:e1:fa:71:f3:85:29:3b:bb:19:c0:c1:94:3b:06:3a:d6:81: 54:b1:d8:34:a7:12:d2:44:61:86:17:87:b2:d6:be:fd:a7:2a: cb:33:8d:3d:ff:6b:6d:29:63:ba:52:4d:f7:30:47:84:4a:b3: 91:fa:12:9b:6f:5f:87:3b:38:7d:1d:f0:e2:23:d0:8b:2c:da: 42:be:59:f0:d7:30:c4:f5:9f:60:8b:1e:6b:a7:b5:ca:60:d5: 14:49:c8:fc:b0:25:2d:56:46:b5:f7:bf:cc:dc:d6:12:77:9b: 5f:fe:c5:01 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hMOkP8uk8CgBmnkVkddGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2VjYTUzMWQ0NDQwZGQyZGQwZDY2ZTQ5NjQ2ZWRjNjZmM2RiYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnwVoE+wys3tvARyc1/i+z+PDT0+ ZuCm7ksJjIo3fc5QrxYgKCuuxpX0iyAX2qCsWdyYTkos/hMgkLx6zNWOzAa8MUxT Qpn9xLpT7pXMV9fqhsXZSpbIgucuLLrFiNBH0AFzVGxUo0O7Pl7iCIYGyShS4C1g xjRh3K0zIv7+uuHpsIR/0bwm+uwwI1BGucqgRjLNsZr/dX3NEjcZClo/j+1ZF7je kdJRMVXrayDla8ISb71p8/8EGK9Zverl71pu0ThfnzBDnx0vFluhBZkKI4Epdj48 U8UDxeieN3me5l0yBZLz+JtnNppZsDnBl9PA7bzuezZhKgaBaCsy0Z2blQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCfspTHURA3S3Q1m5JZG7cZvPbu7MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSi15bE1kUkVEZExkRFdia2xrYnR4bTg5dTdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzgHAwQA HzjpAwQAHzqcMA0GCSqGSIb3DQEBCwUAA4IBAQBv6QgmssqhOmvariHsofb7876R yT3tSCpmDUxVk3xQRcd6EkhLqjAZhrbpold2U902z5tuWqDO8LsCRPs0ymLFK2w/ ErPmN6Kt826JyYFL3je7yZK5yzufIJCOSaFsbKs2amEQGxEyahcNgVrhDBin5AEn PoptPlnrxNJ1O71wEP6qz+nbvAc2StIUKeawHpfq4fpx84UpO7sZwMGUOwY61oFU sdg0pxLSRGGGF4ey1r79pyrLM409/2ttKWO6Uk33MEeESrOR+hKbb1+HOzh9HfDi I9CLLNpCvlnw1zDE9Z9gix5rp7XKYNUUScj8sCUtVka197/M3NYSd5tf/sUB -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:02 2026 by rpki-client