This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K9cPOrgstG9CP8YS9CH3br2Pc9w.roa File: K9cPOrgstG9CP8YS9CH3br2Pc9w.roa (raw, json) Hash identifier: xwgN9ShKJL4YloduvmXkEahjanzcWTQ98zdGIK5mQng= Subject key identifier: 2B:D7:0F:3A:B8:2C:B4:6F:42:3F:C6:12:F4:21:F7:6E:BD:8F:73:DC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BC0F2DEED0B4F9BBF6D296A98590A6355 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K9cPOrgstG9CP8YS9CH3br2Pc9w.roa Signing time: Thu 15 Jan 2026 09:18:20 +0000 ROA not before: Thu 15 Jan 2026 09:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 31.58.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:f2:de:ed:0b:4f:9b:bf:6d:29:6a:98:59:0a:63:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 15 09:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bd70f3ab82cb46f423fc612f421f76ebd8f73dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:08:2d:54:4d:fa:6a:35:67:49:3e:9d:08: 60:7b:af:97:4f:21:d6:22:1b:0f:36:c3:e4:69:76: 80:95:03:c1:17:fa:b1:8e:d6:47:c4:59:09:aa:fb: 71:39:87:b1:a6:83:9c:88:ea:4a:db:e2:5c:a6:b1: 35:d4:50:21:bf:2a:ac:d7:b2:35:20:e0:47:96:11: 7e:f7:02:de:57:32:9f:60:20:09:f3:98:84:d2:1e: f8:07:2c:2a:68:20:3d:a2:9e:47:0d:d6:c2:70:8f: 29:5b:5d:b8:16:0d:b5:7c:cf:3e:78:31:da:3c:99: e1:0a:58:98:30:f9:9e:c8:f6:43:3b:9c:f6:f6:8f: f1:d5:6b:8e:31:1e:15:d4:cc:d0:00:b2:69:46:d2: a7:55:9e:ef:1b:5f:75:de:9a:6e:e0:5e:a3:6e:00: 20:c8:2d:df:4c:50:4e:72:28:53:02:9e:81:0f:c1: 1f:e3:c3:19:b1:00:f8:a3:7d:1d:61:97:da:c3:56: e4:dd:f6:e0:01:8f:0b:22:0a:6b:ae:4a:8f:b4:dd: 3f:7f:d0:89:34:53:14:17:0b:24:48:e2:2b:6e:b9: 02:fc:fd:cb:8f:a7:2a:84:64:b9:06:19:16:cc:25: f5:3f:6a:c8:cb:e6:d1:25:c4:7a:e5:7c:ab:c7:a4: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D7:0F:3A:B8:2C:B4:6F:42:3F:C6:12:F4:21:F7:6E:BD:8F:73:DC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K9cPOrgstG9CP8YS9CH3br2Pc9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.169.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:c6:7a:3e:2a:a6:d2:4e:af:d8:0c:46:8a:b7:44:05:f3:94: 92:06:09:22:35:b5:46:98:2c:5f:4b:3c:7f:b8:4a:cb:4a:db: f3:0d:e3:ce:1a:03:0e:a5:b2:e5:e3:5c:82:f0:32:1f:c1:36: 21:92:ff:ae:ae:bc:eb:72:7d:4d:e9:d3:34:fe:a8:23:45:33: b5:dc:da:8a:cc:8d:c9:6e:ac:58:c1:38:85:c7:21:20:54:36: 56:de:9f:a5:a5:c0:e9:03:f3:ca:46:40:09:61:31:ad:67:5d: 26:4e:5b:88:f7:ff:71:15:7f:76:37:fb:c5:87:f9:15:fc:64: 9a:cf:7f:00:ae:bd:f6:ad:c2:af:87:83:5e:a7:d6:f4:6e:4a: ed:62:75:8c:38:f5:01:43:f8:ba:83:fc:1d:e9:c9:69:b6:a0: ec:85:35:78:80:4b:81:aa:e9:80:a3:c4:8e:b6:f3:e9:63:b6: b2:ec:73:3d:f9:96:dc:47:9c:c6:d1:0e:ea:4b:fd:04:93:5a: 69:3f:a8:c3:ea:ea:00:f2:8a:3a:2a:1a:41:d0:f3:78:fd:9d: cf:dc:24:ff:f5:1e:ed:39:b9:8d:34:cb:79:49:19:8a:82:f1: 99:49:60:20:b9:be:cc:24:07:24:da:e1:cb:d1:00:59:9a:9b: 44:59:32:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvA8t7tC0+bv20paphZCmNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE1MDkxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmQ3MGYzYWI4MmNiNDZmNDIzZmM2MTJmNDIxZjc2ZWJkOGY3M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgkILVRN+mo1Z0k+nQhge6+XTyHW IhsPNsPkaXaAlQPBF/qxjtZHxFkJqvtxOYexpoOciOpK2+JcprE11FAhvyqs17I1 IOBHlhF+9wLeVzKfYCAJ85iE0h74BywqaCA9op5HDdbCcI8pW124Fg21fM8+eDHa PJnhCliYMPmeyPZDO5z29o/x1WuOMR4V1MzQALJpRtKnVZ7vG1913ppu4F6jbgAg yC3fTFBOcihTAp6BD8Ef48MZsQD4o30dYZfaw1bk3fbgAY8LIgprrkqPtN0/f9CJ NFMUFwskSOIrbrkC/P3Lj6cqhGS5BhkWzCX1P2rIy+bRJcR65Xyrx6Q1TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCvXDzq4LLRvQj/GEvQh9269j3PcMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSzljUE9yZ3N0RzlDUDhZUzlDSDNicjJQYzl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqpMA0G CSqGSIb3DQEBCwUAA4IBAQAfxno+KqbSTq/YDEaKt0QF85SSBgkiNbVGmCxfSzx/ uErLStvzDePOGgMOpbLl41yC8DIfwTYhkv+urrzrcn1N6dM0/qgjRTO13NqKzI3J bqxYwTiFxyEgVDZW3p+lpcDpA/PKRkAJYTGtZ10mTluI9/9xFX92N/vFh/kV/GSa z38Arr32rcKvh4Nep9b0bkrtYnWMOPUBQ/i6g/wd6clptqDshTV4gEuBqumAo8SO tvPpY7ay7HM9+ZbcR5zG0Q7qS/0Ek1ppP6jD6uoA8oo6KhpB0PN4/Z3P3CT/9R7t ObmNNMt5SRmKgvGZSWAgub7MJAck2uHL0QBZmptEWTJh -----END CERTIFICATE-----Generated at Thu Jan 15 22:46:08 2026 by rpki-client