This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KOmiWDMQRlMCUaRRZs7yGngi35A.roa File: KOmiWDMQRlMCUaRRZs7yGngi35A.roa (raw, json) Hash identifier: GwXOCsY2piZirHNqaVR3v7gTArb/OgrQrG7GlVxC11o= Subject key identifier: 28:E9:A2:58:33:10:46:53:02:51:A4:51:66:CE:F2:1A:78:22:DF:90 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8474D4FC5F5D05998208D7E0B93372 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KOmiWDMQRlMCUaRRZs7yGngi35A.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62425 IP address blocks: 31.58.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:74:d4:fc:5f:5d:05:99:82:08:d7:e0:b9:33:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28e9a258331046530251a45166cef21a7822df90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:5c:91:0b:e8:04:c0:6f:c9:5d:43:e0:b3: b4:db:b9:82:49:e7:b6:90:05:95:11:aa:99:c7:df: 5b:5b:7a:74:78:66:6f:ed:ac:7f:83:8c:41:54:3c: 67:d8:5f:30:ad:e2:6d:4e:8d:13:34:3f:e4:a4:78: 32:30:41:46:7f:de:04:ca:ce:ae:ec:e8:ae:b9:c5: 89:e7:f8:74:6e:30:9e:75:3d:af:cf:fa:f7:9b:37: 2c:0f:f3:28:a6:f1:61:bf:5f:32:2c:63:4b:fb:43: 5f:57:e9:af:14:2a:ed:4c:37:44:be:bd:70:b8:a6: 5d:cc:cc:7f:08:f3:3e:9e:58:33:3e:9c:01:f1:2d: 31:36:94:e0:dd:2a:69:3c:b2:bc:08:30:0d:5d:dc: f1:55:c3:ab:11:34:b3:ff:d6:75:79:c4:95:e7:06: 6a:6e:60:77:5c:32:6a:95:f0:c5:61:73:93:bf:d5: 5e:84:06:75:f8:5f:51:46:9b:46:d8:db:1e:c6:2a: da:44:e3:3c:6d:3e:0b:d0:e9:79:e8:96:4f:d0:56: 17:0c:03:86:2e:7e:a8:b6:1d:a6:84:ee:fe:ba:d5: 8e:86:bc:44:96:a0:f8:79:33:dc:07:7d:72:0f:4b: 26:20:18:b9:c3:fd:b7:04:77:91:9c:fd:96:1a:e3: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:A2:58:33:10:46:53:02:51:A4:51:66:CE:F2:1A:78:22:DF:90 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KOmiWDMQRlMCUaRRZs7yGngi35A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.236.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:c1:02:f0:eb:7c:6d:49:b7:d3:37:89:a7:ef:eb:5c:74:5a: 3e:46:d0:3a:90:df:7a:2f:8c:15:b0:13:1f:ce:79:80:80:ad: a3:4c:2c:d0:1d:8f:41:6d:99:c0:20:2c:30:60:99:9a:53:19: 6d:1f:c9:f3:52:bc:9c:46:62:6d:1d:33:dd:12:63:3d:25:23: 74:6d:ac:9c:a9:31:90:3c:11:75:52:6f:d0:0a:f6:e3:2d:4c: 3a:55:ef:27:9e:f7:1f:c0:3d:46:8f:f3:e5:81:31:f6:18:47: 19:f3:e2:e2:ff:b5:82:79:f9:d5:e0:a6:d1:10:2e:19:37:9d: 14:aa:b3:21:1b:2f:1b:fa:60:09:ca:dc:57:22:15:25:4d:7e: d2:3e:17:30:06:15:a0:db:c0:93:ac:96:31:a2:ec:c7:29:1c: 56:62:53:99:07:06:b3:5a:f4:40:5e:a1:e9:d7:92:ef:6b:a7: 48:29:ad:3f:66:4f:0b:eb:a9:f0:96:19:f9:9b:8f:1b:b5:e9: 19:b4:06:46:c4:cd:ad:ef:e2:6a:5a:24:0b:25:a0:ed:96:a4: 91:90:68:5d:c2:15:6d:52:7d:7f:c3:c0:1c:d9:88:a1:3a:33: 8a:4c:dd:89:70:c7:50:33:66:40:5b:31:5d:34:6d:1f:07:ea: 38:0f:ec:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHTU/F9dBZmCCNfguTNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGU5YTI1ODMzMTA0NjUzMDI1MWE0NTE2NmNlZjIxYTc4MjJkZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5BckQvoBMBvyV1D4LO027mCSee2 kAWVEaqZx99bW3p0eGZv7ax/g4xBVDxn2F8wreJtTo0TND/kpHgyMEFGf94Eys6u 7OiuucWJ5/h0bjCedT2vz/r3mzcsD/MopvFhv18yLGNL+0NfV+mvFCrtTDdEvr1w uKZdzMx/CPM+nlgzPpwB8S0xNpTg3SppPLK8CDANXdzxVcOrETSz/9Z1ecSV5wZq bmB3XDJqlfDFYXOTv9VehAZ1+F9RRptG2NsexiraROM8bT4L0Ol56JZP0FYXDAOG Ln6oth2mhO7+utWOhrxElqD4eTPcB31yD0smIBi5w/23BHeRnP2WGuOwYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjpolgzEEZTAlGkUWbO8hp4It+QMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS09taVdETVFSbE1DVWFSUlpzN3lHbmdpMzVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrsMA0G CSqGSIb3DQEBCwUAA4IBAQBswQLw63xtSbfTN4mn7+tcdFo+RtA6kN96L4wVsBMf znmAgK2jTCzQHY9BbZnAICwwYJmaUxltH8nzUrycRmJtHTPdEmM9JSN0baycqTGQ PBF1Um/QCvbjLUw6Ve8nnvcfwD1Gj/PlgTH2GEcZ8+Li/7WCefnV4KbREC4ZN50U qrMhGy8b+mAJytxXIhUlTX7SPhcwBhWg28CTrJYxouzHKRxWYlOZBwazWvRAXqHp 15Lva6dIKa0/Zk8L66nwlhn5m48btekZtAZGxM2t7+JqWiQLJaDtlqSRkGhdwhVt Un1/w8Ac2YihOjOKTN2JcMdQM2ZAWzFdNG0fB+o4D+zT -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:21 2026 by rpki-client