This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K7DvvtuSoRipE3ZvnetfT945-Fs.roa File: K7DvvtuSoRipE3ZvnetfT945-Fs.roa (raw, json) Hash identifier: 7vr3JIGR+68TJGeuPdg6K4L7MHE9IaavMLbbtNWQfBc= Subject key identifier: 2B:B0:EF:BE:DB:92:A1:18:A9:13:76:6F:9D:EB:5F:4F:DE:39:F8:5B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BBBF4F10D44BE6D1BDB4D7A47A6490D9D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K7DvvtuSoRipE3ZvnetfT945-Fs.roa Signing time: Wed 14 Jan 2026 10:02:30 +0000 ROA not before: Wed 14 Jan 2026 10:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.25.0/24 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:f4:f1:0d:44:be:6d:1b:db:4d:7a:47:a6:49:0d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 14 10:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bb0efbedb92a118a913766f9deb5f4fde39f85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:06:cb:93:b3:47:d2:24:79:c7:87:39:a9: f9:bb:3b:07:11:69:1b:52:64:78:ed:46:58:fc:91: 7c:53:0d:03:66:52:9d:74:3a:fa:63:b8:ad:63:ed: ea:93:1a:5e:0e:bc:2a:47:93:ec:c5:58:49:a6:a6: 11:0f:b6:f0:65:92:1b:c0:11:06:66:54:82:f9:d1: 52:eb:65:9a:03:c8:ba:b9:76:92:21:d9:0f:95:34: 24:da:6e:43:33:71:00:ef:f8:c7:6d:ea:a0:5c:a0: a8:17:c9:bb:75:2e:09:e6:65:97:92:d0:7a:bc:3f: 04:38:a4:ce:90:dc:e9:cb:48:a3:29:93:63:38:01: 19:6a:f3:ef:f3:27:5f:74:38:bf:c4:c6:ad:78:8a: 26:6f:62:21:cf:f1:e8:b0:79:c7:73:51:93:c8:ee: a7:bf:d0:10:61:db:39:dd:5f:f6:2b:ca:2b:5f:8f: 8e:0a:1f:f2:61:16:94:14:88:02:8d:70:43:30:d0: 5e:d7:44:63:71:a3:fc:f6:6c:8e:69:77:ed:af:a1: 60:c5:e7:a5:31:ad:fb:39:5d:d8:b5:9d:b9:8c:e4: c7:17:53:f6:fe:aa:7a:21:9b:4c:45:05:86:11:46: 30:05:49:19:29:f7:94:28:ec:9c:4b:f1:a6:4d:af: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B0:EF:BE:DB:92:A1:18:A9:13:76:6F:9D:EB:5F:4F:DE:39:F8:5B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K7DvvtuSoRipE3ZvnetfT945-Fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.58.239.0/24 31.59.84.0/22 31.59.90.0/23 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.25.0/24 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.208.0-217.60.235.255 217.60.237.0/24 Signature Algorithm: sha256WithRSAEncryption 45:91:ab:12:01:9c:2d:3d:38:0e:81:a8:55:2e:56:8c:85:1d: 78:ea:9f:58:f2:ba:5a:59:df:10:55:b7:29:f5:fd:40:cd:c3: ff:41:39:d1:d7:dc:59:12:37:5c:8e:93:d5:53:4e:43:3e:01: bb:41:29:cb:0b:ce:b9:f3:07:49:71:4b:d5:41:62:15:03:6f: f2:77:47:11:67:e7:6a:a8:19:a5:7d:02:a6:8d:35:46:55:c6: 9c:a2:58:7a:84:eb:5e:e2:7a:f6:b1:a0:34:f0:81:2f:77:f6: 74:7c:37:6c:08:04:3e:75:5a:5e:95:91:78:02:c4:81:5c:28: bd:9e:dc:48:20:25:fe:cc:1b:e5:7e:a4:c3:a7:8d:6d:ca:80: df:2d:9e:d7:da:2e:77:88:94:b4:9c:0b:9f:37:c4:b3:58:18: 4f:f3:45:98:d9:b1:a7:65:2f:d4:1e:e8:65:a1:5e:d5:86:14: 3a:c0:7e:32:27:fb:81:c0:d0:aa:07:03:5a:ea:07:1e:4a:46: 8c:0d:f5:2b:04:86:4f:dc:8b:ed:17:72:b2:90:8f:7c:17:5e: 05:76:a7:d0:a8:66:03:6f:4a:40:73:57:5b:f4:64:fd:5b:57: 62:0c:be:b3:df:43:ae:7a:48:3b:89:7e:ef:38:de:7c:0b:f2: 56:f9:80:03 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZu79PENRL5tG9tNekemSQ2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE0MTAwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmIwZWZiZWRiOTJhMTE4YTkxMzc2NmY5ZGViNWY0ZmRlMzlmODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtooGy5OzR9IkeceHOan5uzsHEWkb UmR47UZY/JF8Uw0DZlKddDr6Y7itY+3qkxpeDrwqR5PsxVhJpqYRD7bwZZIbwBEG ZlSC+dFS62WaA8i6uXaSIdkPlTQk2m5DM3EA7/jHbeqgXKCoF8m7dS4J5mWXktB6 vD8EOKTOkNzpy0ijKZNjOAEZavPv8ydfdDi/xMateIomb2Ihz/HosHnHc1GTyO6n v9AQYds53V/2K8orX4+OCh/yYRaUFIgCjXBDMNBe10RjcaP89myOaXftr6Fgxeel Ma37OV3YtZ25jOTHF1P2/qp6IZtMRQWGEUYwBUkZKfeUKOycS/GmTa/kTwIDAQAB o4IClDCCApAwHQYDVR0OBBYEFCuw777bkqEYqRN2b53rX0/eOfhbMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSzdEdnZ0dVNvUmlwRTNadm5ldGZUOTQ1LUZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAf ONMDBAAfOcgwDAMEAh86tAMEAh86wAMEAB867wMEAh87VAMEAR87WgMEAF63lwME AF63ngMEAF63pAMEAF63pjAMAwQBXreuAwQAXrewAwQBXre0AwQA2TwPAwQA2TwZ MAwDBAXZPKADBAPZPLADBALZPLwwDAMEBNk80AMEAtk86AMEANk87TANBgkqhkiG 9w0BAQsFAAOCAQEARZGrEgGcLT04DoGoVS5WjIUdeOqfWPK6WlnfEFW3KfX9QM3D /0E50dfcWRI3XI6T1VNOQz4Bu0EpywvOufMHSXFL1UFiFQNv8ndHEWfnaqgZpX0C po01RlXGnKJYeoTrXuJ69rGgNPCBL3f2dHw3bAgEPnVaXpWReALEgVwovZ7cSCAl /swb5X6kw6eNbcqA3y2e19oud4iUtJwLnzfEs1gYT/NFmNmxp2Uv1B7oZaFe1YYU OsB+Mif7gcDQqgcDWuoHHkpGjA31KwSGT9yL7RdyspCPfBdeBXan0KhmA29KQHNX W/Rk/VtXYgy+s99DrnpIO4l+7zjefAvyVvmAAw== -----END CERTIFICATE-----Generated at Thu Jan 15 10:24:38 2026 by rpki-client