This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K5XBgsQ-v264tCbHPwh8_Txx3fI.roa File: K5XBgsQ-v264tCbHPwh8_Txx3fI.roa (raw, json) Hash identifier: nBFhflpW6vWs9QWQPkWBwhv7VNzgZKjuqCdKCc8FmjU= Subject key identifier: 2B:95:C1:82:C4:3E:BF:6E:B8:B4:26:C7:3F:08:7C:FD:3C:71:DD:F2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846442063873DD94B958B217E60A50 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K5XBgsQ-v264tCbHPwh8_Txx3fI.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 31.58.100.0/22 maxlen: 24 31.58.103.0/24 maxlen: 24 31.59.29.0/24 maxlen: 24 31.59.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:64:42:06:38:73:dd:94:b9:58:b2:17:e6:0a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b95c182c43ebf6eb8b426c73f087cfd3c71ddf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:1b:0b:08:1d:a2:2e:44:4f:44:e2:51:ad: dc:3b:e2:4a:71:74:12:7b:36:56:a1:0d:49:8b:22: 22:f2:3c:33:d7:79:31:59:f1:f1:d7:67:18:df:14: 83:8b:67:2e:3c:f4:2e:f7:ad:d2:b5:6b:f9:c1:5d: 11:a6:fa:c8:9e:a6:92:fe:6b:4a:7f:ac:9d:7d:82: f2:ee:32:9d:b9:fb:dc:d4:e4:1d:46:da:ab:f0:39: 06:d9:44:b1:2f:ff:fc:a8:b2:d5:81:d4:e1:e9:bd: 66:b7:0d:4c:f0:6e:1f:39:3f:ee:be:50:0e:36:b5: dc:d9:86:6b:34:6f:98:db:d6:d1:40:d2:c9:74:ad: c3:ed:e4:ff:e6:20:6e:12:37:98:9c:99:81:25:34: 49:c5:ac:27:94:68:dc:60:63:d1:87:4e:64:d8:1c: 61:3e:08:b6:70:8c:65:8a:44:90:b3:b1:5d:c6:ed: 90:ed:3a:52:69:37:92:29:98:44:0c:2f:ad:8b:04: 9d:bb:89:25:9f:ca:e7:d2:d7:b4:67:5f:d9:02:40: d6:c4:8f:fb:23:a8:d5:e5:29:b8:a3:79:3e:e1:41: 54:27:90:b2:36:3c:ab:c2:b6:1c:58:a6:b8:a8:1b: fc:1d:28:ee:5a:86:cb:53:ed:6e:24:6c:fb:9b:6e: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:95:C1:82:C4:3E:BF:6E:B8:B4:26:C7:3F:08:7C:FD:3C:71:DD:F2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K5XBgsQ-v264tCbHPwh8_Txx3fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.100.0/22 31.59.29.0/24 31.59.34.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:0e:1a:48:82:1c:14:49:db:f4:18:db:76:68:99:46:c5:e2: 63:0c:3d:5a:5c:76:26:54:b3:82:eb:0a:a2:65:cb:be:67:6a: ea:ce:ad:02:e3:7a:c9:85:0b:79:b1:77:fa:24:01:b0:3a:10: a3:62:a7:e0:36:b0:84:fd:a8:ad:d8:cf:fc:9b:44:61:3b:3c: f5:19:d2:fc:f6:91:d4:0c:98:f5:14:0c:c8:bc:3a:18:b1:18: 93:24:bc:f9:07:2a:3c:21:f0:20:f7:fb:0e:c7:fe:b5:76:5f: 31:04:bc:33:14:37:05:d4:c8:cd:17:80:5e:26:da:2a:0c:a0: b9:f3:0d:3d:db:7a:49:c0:be:e0:69:3e:33:d7:53:1c:4a:25: 27:12:8b:dc:26:31:4e:49:c5:0d:37:27:dd:21:37:44:b7:82: 84:a1:d5:22:4e:47:0b:45:bd:e9:60:6a:69:52:6d:08:91:50: 88:d0:97:2b:94:47:a9:1d:72:e7:e4:d7:49:fa:fd:ce:66:e6: 75:a0:c7:e7:dd:67:cd:6b:0f:b8:42:4e:86:20:97:dd:38:fe: 32:33:2c:d7:b3:28:83:6e:53:7b:ed:d4:3e:22:99:e7:fb:b1: 5d:53:05:d5:42:82:40:99:2f:ca:a7:39:33:dd:af:9b:0c:56: 06:ff:89:b5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hGRCBjhz3ZS5WLIX5gpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjk1YzE4MmM0M2ViZjZlYjhiNDI2YzczZjA4N2NmZDNjNzFkZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdMbCwgdoi5ET0TiUa3cO+JKcXQS ezZWoQ1JiyIi8jwz13kxWfHx12cY3xSDi2cuPPQu963StWv5wV0RpvrInqaS/mtK f6ydfYLy7jKdufvc1OQdRtqr8DkG2USxL//8qLLVgdTh6b1mtw1M8G4fOT/uvlAO NrXc2YZrNG+Y29bRQNLJdK3D7eT/5iBuEjeYnJmBJTRJxawnlGjcYGPRh05k2Bxh Pgi2cIxlikSQs7Fdxu2Q7TpSaTeSKZhEDC+tiwSdu4kln8rn0te0Z1/ZAkDWxI/7 I6jV5Sm4o3k+4UFUJ5CyNjyrwrYcWKa4qBv8HSjuWobLU+1uJGz7m24o6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCuVwYLEPr9uuLQmxz8IfP08cd3yMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSzVYQmdzUS12MjY0dENiSFB3aDhfVHh4M2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHzpkAwQA HzsdAwQAHzsiMA0GCSqGSIb3DQEBCwUAA4IBAQAPDhpIghwUSdv0GNt2aJlGxeJj DD1aXHYmVLOC6wqiZcu+Z2rqzq0C43rJhQt5sXf6JAGwOhCjYqfgNrCE/ait2M/8 m0RhOzz1GdL89pHUDJj1FAzIvDoYsRiTJLz5Byo8IfAg9/sOx/61dl8xBLwzFDcF 1MjNF4BeJtoqDKC58w0923pJwL7gaT4z11McSiUnEovcJjFOScUNNyfdITdEt4KE odUiTkcLRb3pYGppUm0IkVCI0JcrlEepHXLn5NdJ+v3OZuZ1oMfn3WfNaw+4Qk6G IJfdOP4yMyzXsyiDblN77dQ+Ipnn+7FdUwXVQoJAmS/Kpzkz3a+bDFYG/4m1 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:42 2026 by rpki-client