This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JBmYSMqeyD0O1EfLksnvSMqVBug.roa File: JBmYSMqeyD0O1EfLksnvSMqVBug.roa (raw, json) Hash identifier: vd+JpEV20A7VY5jmYk+h/lrwcvd1OFuERrFrqVdPIEc= Subject key identifier: 24:19:98:48:CA:9E:C8:3D:0E:D4:47:CB:92:C9:EF:48:CA:95:06:E8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CD611D79DDEA66DB6395D28A26D3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JBmYSMqeyD0O1EfLksnvSMqVBug.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215355 IP address blocks: 31.59.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cd:61:1d:79:dd:ea:66:db:63:95:d2:8a:26:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24199848ca9ec83d0ed447cb92c9ef48ca9506e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:92:75:31:8b:84:aa:da:d0:e2:44:27:5a:ce: 2b:50:cf:5a:41:26:33:1f:4c:82:e7:ca:0c:10:33: 17:a0:0f:38:d7:91:cf:ad:b0:45:a6:49:ef:d9:42: 95:91:27:6c:3c:d5:3c:c2:f4:c0:3a:15:94:cd:d6: ab:05:94:7c:17:20:a6:f4:7c:71:97:34:f9:f7:ba: a5:b2:e7:03:39:84:7e:56:45:db:e0:0b:49:c7:d9: 64:9a:99:06:7a:f8:f8:b8:30:9b:59:44:d0:a9:bb: 64:91:17:22:55:69:db:45:3e:fe:bb:ab:15:a0:44: 74:19:84:4f:f1:43:29:51:7c:d0:d3:0b:73:3c:21: 18:9a:a4:d7:78:a1:bd:01:08:99:e1:7c:e3:9f:90: 69:e8:ad:3f:06:39:83:91:57:80:e1:db:9a:d9:da: 5f:4b:93:55:0e:6a:2f:a8:73:20:4b:95:88:54:5a: f7:0b:a9:b2:0a:de:82:5d:ae:3d:62:e0:39:2b:64: 1a:37:81:c1:56:2e:3f:39:50:ea:95:f0:fa:4f:d9: 1f:de:08:52:8b:04:9d:67:ad:52:db:cf:63:8f:70: 87:32:7a:bf:7f:0d:c6:45:aa:81:92:30:03:dd:90: 0e:e3:d4:b6:b9:f7:79:28:cf:70:c9:6c:d9:b2:32: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:19:98:48:CA:9E:C8:3D:0E:D4:47:CB:92:C9:EF:48:CA:95:06:E8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JBmYSMqeyD0O1EfLksnvSMqVBug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.111.0/24 Signature Algorithm: sha256WithRSAEncryption a3:50:1d:fa:c3:0d:c0:9f:2a:d4:67:d0:fa:92:9c:d4:1f:a9: af:cd:c9:20:dc:68:6c:db:06:ef:9e:72:d1:54:ff:46:35:0f: b8:8d:9b:d6:56:21:28:f9:93:2a:a2:ea:c0:d3:2b:bd:26:84: a4:13:a8:ca:5d:b4:d0:ac:2e:c0:bd:bf:4e:1c:91:51:ca:3d: d7:e1:ce:77:60:9e:ac:b7:df:5c:16:ed:bd:64:42:7b:af:7d: bb:e3:c1:b1:72:32:a4:44:e6:05:8e:3a:1e:86:78:ce:2a:82: 5a:b3:0b:16:c2:62:df:04:fa:95:b6:ad:cf:c7:cb:af:ce:ca: 82:d5:c5:f5:17:e7:e5:14:fd:01:3f:9f:b9:c9:a9:b3:09:3c: d1:d8:4e:7b:bb:49:19:3a:0c:53:40:72:ba:70:11:7d:1a:fe: 24:78:c3:80:60:07:49:77:d9:84:ef:07:05:d2:28:c3:51:c5: fe:74:69:80:fc:37:ef:0f:b4:15:39:42:72:78:d2:d1:1f:77: 21:6d:88:bb:1a:27:f7:33:bb:54:2c:a8:0d:ed:29:58:01:19: 99:d2:92:62:38:c6:48:0b:02:4b:3b:ed:47:77:04:76:07:ee: 45:99:cf:59:75:0f:de:69:58:6c:9a:5a:bb:77:7e:4b:4e:a9: f2:48:da:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hM1hHXnd6mbbY5XSiibTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDE5OTg0OGNhOWVjODNkMGVkNDQ3Y2I5MmM5ZWY0OGNhOTUwNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJJ1MYuEqtrQ4kQnWs4rUM9aQSYz H0yC58oMEDMXoA8415HPrbBFpknv2UKVkSdsPNU8wvTAOhWUzdarBZR8FyCm9Hxx lzT597qlsucDOYR+VkXb4AtJx9lkmpkGevj4uDCbWUTQqbtkkRciVWnbRT7+u6sV oER0GYRP8UMpUXzQ0wtzPCEYmqTXeKG9AQiZ4Xzjn5Bp6K0/BjmDkVeA4dua2dpf S5NVDmovqHMgS5WIVFr3C6myCt6CXa49YuA5K2QaN4HBVi4/OVDqlfD6T9kf3ghS iwSdZ61S289jj3CHMnq/fw3GRaqBkjAD3ZAO49S2ufd5KM9wyWzZsjJSIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQZmEjKnsg9DtRHy5LJ70jKlQboMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSkJtWVNNcWV5RDBPMUVmTGtzbnZTTXFWQnVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztvMA0G CSqGSIb3DQEBCwUAA4IBAQCjUB36ww3AnyrUZ9D6kpzUH6mvzckg3Ghs2wbvnnLR VP9GNQ+4jZvWViEo+ZMqourA0yu9JoSkE6jKXbTQrC7Avb9OHJFRyj3X4c53YJ6s t99cFu29ZEJ7r32748GxcjKkROYFjjoehnjOKoJaswsWwmLfBPqVtq3Px8uvzsqC 1cX1F+flFP0BP5+5yamzCTzR2E57u0kZOgxTQHK6cBF9Gv4keMOAYAdJd9mE7wcF 0ijDUcX+dGmA/DfvD7QVOUJyeNLRH3chbYi7Gif3M7tULKgN7SlYARmZ0pJiOMZI CwJLO+1HdwR2B+5Fmc9ZdQ/eaVhsmlq7d35LTqnySNpX -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:38 2026 by rpki-client