This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KB91OAVkqZR-XzaRiFn5soL7ULo.roa File: KB91OAVkqZR-XzaRiFn5soL7ULo.roa (raw, json) Hash identifier: jqaqCQ+oYPmH5k1Uwrze/TcxG5f7oBJshyjxVZCcQbE= Subject key identifier: 28:1F:75:38:05:64:A9:94:7E:5F:36:91:88:59:F9:B2:82:FB:50:BA Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8494EA97F5141AC2E39B049D3C063B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KB91OAVkqZR-XzaRiFn5soL7ULo.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203758 IP address blocks: 31.59.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:94:ea:97:f5:14:1a:c2:e3:9b:04:9d:3c:06:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=281f75380564a9947e5f36918859f9b282fb50ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:04:7d:d8:f4:39:c0:b9:cd:30:df:0f:a4:ca: cd:a9:68:76:cd:16:f5:70:87:b9:37:45:ec:69:4a: 0c:6d:87:13:b8:6a:36:39:11:82:d6:6f:2f:9e:1b: ff:24:d7:e9:88:94:5b:70:cc:8e:32:58:3d:8b:91: ac:d3:29:14:84:8a:05:2b:ba:03:a3:8e:61:c3:81: 74:32:cb:c5:28:cb:0e:19:12:f4:45:e6:b4:3d:87: d2:35:c8:59:23:f7:5e:a4:c1:af:e6:4e:2f:da:3d: 20:ca:c0:6d:86:5e:47:a1:8c:66:a7:80:52:9d:d4: b9:d6:12:5d:af:40:2d:90:a9:ab:73:ac:1a:c1:b5: 21:28:ca:d0:86:45:e3:b6:55:59:ae:18:69:c7:2b: 86:e8:da:d9:ac:fa:d0:3a:2c:c2:ad:63:4d:31:b6: c4:ca:b8:d3:f1:a5:96:02:98:eb:cd:6c:c2:a7:aa: a6:dc:24:37:6d:0e:77:67:67:9e:61:f1:76:07:ae: 76:3a:63:fa:1b:be:b4:46:38:ef:84:7d:1f:14:34: df:0d:94:d4:13:eb:4a:93:15:6e:85:19:39:f3:ea: e5:8e:13:58:1a:5e:f4:df:4d:24:25:a4:a4:a8:72: 29:cd:9b:8b:6f:10:0c:1c:df:50:93:93:84:7f:3d: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1F:75:38:05:64:A9:94:7E:5F:36:91:88:59:F9:B2:82:FB:50:BA X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KB91OAVkqZR-XzaRiFn5soL7ULo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.122.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:3a:0f:33:a9:b6:b9:3b:df:77:95:d7:25:e2:c0:79:07:34: 40:3e:15:bf:5c:37:c2:44:0b:fe:dd:db:e2:f4:b3:d1:ed:06: 0e:77:3a:cc:5c:b8:a7:66:da:b4:60:5d:d2:86:5b:fd:45:e1: d3:61:e7:81:7b:ac:e0:54:1e:0e:fc:7d:56:2b:2d:de:5d:3b: a4:d1:70:bd:62:9d:58:07:ba:06:48:4e:73:17:f4:6d:6e:2e: 5d:49:e6:2f:eb:34:36:46:07:aa:18:0b:39:09:f7:9e:94:82: 17:40:3f:71:b2:dd:1c:b8:93:f2:0c:14:6f:5a:b4:a0:5c:a2: 9c:e9:9c:c3:a6:b8:37:4e:c3:37:e7:59:93:27:fb:ff:37:bf: a8:4e:3d:5e:4c:a9:fc:89:2c:83:5e:7a:09:79:9c:80:70:d9: e6:95:d9:f6:07:cb:81:36:14:da:b9:2d:67:10:ef:77:d7:7c: a9:91:6e:b3:50:74:21:c3:2c:25:c5:f1:02:5f:e2:4f:b3:04: ac:e6:7f:71:4c:b7:ff:3b:9e:ee:84:5c:ef:08:c0:8e:9a:96: 43:6a:aa:f6:82:32:f8:35:13:b3:c9:49:6c:31:1a:74:aa:f4: 69:fb:51:47:23:ab:4a:89:75:01:13:09:1e:03:70:49:c2:42: 56:fe:aa:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJTql/UUGsLjmwSdPAY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODFmNzUzODA1NjRhOTk0N2U1ZjM2OTE4ODU5ZjliMjgyZmI1MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wR92PQ5wLnNMN8PpMrNqWh2zRb1 cIe5N0XsaUoMbYcTuGo2ORGC1m8vnhv/JNfpiJRbcMyOMlg9i5Gs0ykUhIoFK7oD o45hw4F0MsvFKMsOGRL0Rea0PYfSNchZI/depMGv5k4v2j0gysBthl5HoYxmp4BS ndS51hJdr0AtkKmrc6wawbUhKMrQhkXjtlVZrhhpxyuG6NrZrPrQOizCrWNNMbbE yrjT8aWWApjrzWzCp6qm3CQ3bQ53Z2eeYfF2B652OmP6G760RjjvhH0fFDTfDZTU E+tKkxVuhRk58+rljhNYGl70300kJaSkqHIpzZuLbxAMHN9Qk5OEfz3LbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgfdTgFZKmUfl82kYhZ+bKC+1C6MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS0I5MU9BVmtxWlItWHphUmlGbjVzb0w3VUxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzt6MA0G CSqGSIb3DQEBCwUAA4IBAQCPOg8zqba5O993ldcl4sB5BzRAPhW/XDfCRAv+3dvi 9LPR7QYOdzrMXLinZtq0YF3Shlv9ReHTYeeBe6zgVB4O/H1WKy3eXTuk0XC9Yp1Y B7oGSE5zF/Rtbi5dSeYv6zQ2RgeqGAs5CfeelIIXQD9xst0cuJPyDBRvWrSgXKKc 6ZzDprg3TsM351mTJ/v/N7+oTj1eTKn8iSyDXnoJeZyAcNnmldn2B8uBNhTauS1n EO9313ypkW6zUHQhwywlxfECX+JPswSs5n9xTLf/O57uhFzvCMCOmpZDaqr2gjL4 NROzyUlsMRp0qvRp+1FHI6tKiXUBEwkeA3BJwkJW/qpT -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:10 2026 by rpki-client