This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KUt0_woQ8oLOTg0aVNWMJnUTWl0.roa File: KUt0_woQ8oLOTg0aVNWMJnUTWl0.roa (raw, json) Hash identifier: i79X+1b2+AYdzcQPLHGLaOsA1+U5sch/3s15S3ZulwM= Subject key identifier: 29:4B:74:FF:0A:10:F2:82:CE:4E:0D:1A:54:D5:8C:26:75:13:5A:5D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B365A8A3994B72BB3D394567B2C2 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KUt0_woQ8oLOTg0aVNWMJnUTWl0.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213438 IP address blocks: 31.56.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b3:65:a8:a3:99:4b:72:bb:3d:39:45:67:b2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=294b74ff0a10f282ce4e0d1a54d58c2675135a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:55:91:e7:d1:87:20:ea:39:7a:af:e5:0d: ed:6c:c0:09:7d:b1:91:9d:90:5b:20:69:94:da:00: 08:b5:8f:7c:5d:b7:f5:83:c2:36:fd:8d:91:de:63: b5:f8:58:17:fd:21:9a:b2:76:ec:e6:fd:db:93:ea: eb:12:6a:c4:ad:fc:5c:5d:fe:3c:33:31:05:6f:c3: 6f:d2:16:4d:3b:4c:7b:f0:17:1b:37:70:96:ad:3b: 61:00:ba:57:ac:a6:d5:0a:2c:7a:77:6e:bb:a4:dc: 49:f9:7c:3d:85:74:7a:3f:a2:66:81:b0:b2:66:51: 80:d5:63:32:ea:f8:90:1c:39:c2:41:6e:38:21:66: 03:04:75:6a:ba:11:a2:42:8e:10:fc:56:52:a0:83: 2a:45:34:98:0a:8b:ad:9f:c8:e0:10:87:3e:10:e8: 68:3e:8d:a7:ec:2c:23:eb:12:4a:d9:4b:06:20:6b: c0:25:d3:2a:6c:c5:91:56:f5:c7:68:4a:55:e5:69: b2:69:e1:b9:d0:41:13:86:77:b2:25:b9:42:b2:10: 36:cb:d4:2a:6c:6c:93:6a:20:c0:4b:5e:d2:2e:09: eb:ea:27:03:ef:a1:2e:90:97:80:a9:76:48:28:65: 63:a2:fc:af:71:2e:32:ca:c9:c0:7d:f3:2d:7f:67: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4B:74:FF:0A:10:F2:82:CE:4E:0D:1A:54:D5:8C:26:75:13:5A:5D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KUt0_woQ8oLOTg0aVNWMJnUTWl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.110.0/24 Signature Algorithm: sha256WithRSAEncryption 72:16:f2:e9:f4:ae:ca:50:b3:bb:0a:1d:e4:cc:1c:ab:d4:d3: ab:1c:71:41:a1:28:71:05:4d:ba:28:3d:fb:8c:13:78:75:5d: 50:fc:3b:3b:a5:b6:53:35:d2:82:fc:78:72:38:da:40:ea:9a: 1d:6f:66:b2:33:7d:5e:af:28:5b:84:45:1d:67:c1:62:3d:ca: 67:58:26:1a:dd:01:fc:fa:45:fa:44:fc:15:a1:20:80:f9:2a: 3b:e6:79:a2:6a:41:f2:cb:8a:20:f7:17:25:10:6e:15:1c:6c: cf:f0:6f:79:5c:b0:cf:e5:44:de:f0:88:2e:21:85:96:64:01: a5:39:01:3c:fd:30:9e:5f:9a:b8:71:c4:f9:c6:f9:4a:2f:6b: e0:7c:df:0a:47:5b:73:d3:ee:75:44:55:76:5f:ff:ee:6c:8d: 1f:62:e2:d1:18:a8:9c:55:4b:eb:9a:14:b5:98:b6:75:6c:f8: 55:42:fa:a2:bb:e0:fe:7d:62:9b:61:ac:74:4c:18:a1:0f:0a: 3b:48:7d:eb:df:d1:a1:a7:b4:70:2a:37:89:25:e1:0e:35:05: 70:a2:87:e5:2b:43:89:a5:f0:7b:24:17:95:c2:cf:9a:e2:cf: b0:d9:7e:20:fe:dd:e8:cb:d1:22:b4:27:90:d3:ac:92:0a:6a: d6:e7:40:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLNlqKOZS3K7PTlFZ7LCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTRiNzRmZjBhMTBmMjgyY2U0ZTBkMWE1NGQ1OGMyNjc1MTM1YTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoRVkefRhyDqOXqv5Q3tbMAJfbGR nZBbIGmU2gAItY98Xbf1g8I2/Y2R3mO1+FgX/SGasnbs5v3bk+rrEmrErfxcXf48 MzEFb8Nv0hZNO0x78BcbN3CWrTthALpXrKbVCix6d267pNxJ+Xw9hXR6P6JmgbCy ZlGA1WMy6viQHDnCQW44IWYDBHVquhGiQo4Q/FZSoIMqRTSYCoutn8jgEIc+EOho Po2n7Cwj6xJK2UsGIGvAJdMqbMWRVvXHaEpV5WmyaeG50EEThneyJblCshA2y9Qq bGyTaiDAS17SLgnr6icD76EukJeAqXZIKGVjovyvcS4yysnAffMtf2eSyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClLdP8KEPKCzk4NGlTVjCZ1E1pdMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS1V0MF93b1E4b0xPVGcwYVZOV01KblVUV2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhuMA0G CSqGSIb3DQEBCwUAA4IBAQByFvLp9K7KULO7Ch3kzByr1NOrHHFBoShxBU26KD37 jBN4dV1Q/Ds7pbZTNdKC/HhyONpA6podb2ayM31eryhbhEUdZ8FiPcpnWCYa3QH8 +kX6RPwVoSCA+So75nmiakHyy4og9xclEG4VHGzP8G95XLDP5UTe8IguIYWWZAGl OQE8/TCeX5q4ccT5xvlKL2vgfN8KR1tz0+51RFV2X//ubI0fYuLRGKicVUvrmhS1 mLZ1bPhVQvqiu+D+fWKbYax0TBihDwo7SH3r39Ghp7RwKjeJJeEONQVwooflK0OJ pfB7JBeVws+a4s+w2X4g/t3oy9EitCeQ06ySCmrW50D5 -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:56 2026 by rpki-client