This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KxGlZWRrV2dknJGqa_M9JhTz8Fs.roa File: KxGlZWRrV2dknJGqa_M9JhTz8Fs.roa (raw, json) Hash identifier: 18DvTVYUn2SFOIEpKfjNeT74d2X1eChIRJwGHjdyYew= Subject key identifier: 2B:11:A5:65:64:6B:57:67:64:9C:91:AA:6B:F3:3D:26:14:F3:F0:5B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844D4B4985CA746676ECEA8E05C239 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KxGlZWRrV2dknJGqa_M9JhTz8Fs.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 31.56.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4d:4b:49:85:ca:74:66:76:ec:ea:8e:05:c2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b11a565646b5767649c91aa6bf33d2614f3f05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:6b:06:ef:b9:76:3e:5a:23:de:91:95:9e: a4:96:ec:1b:22:cc:15:d7:89:92:fb:68:8b:f7:06: fe:60:22:10:86:b3:a6:ae:3b:17:ba:27:71:30:05: 5a:ad:12:25:d4:62:44:73:b4:4c:20:83:16:2b:67: 26:b8:71:fa:ec:0d:66:45:02:e1:23:32:89:a2:ef: d4:23:61:ee:ea:66:7b:1a:d1:20:c9:71:2d:d7:d0: c9:fe:00:cc:72:46:27:e2:3e:25:a9:30:97:3c:41: 98:5e:5b:8d:b0:a8:14:55:00:33:04:d0:3b:05:28: d5:cc:dc:37:4f:c6:c3:2d:35:10:a8:57:5e:88:42: f6:5b:7c:35:86:43:de:5b:6e:64:33:c4:4a:1a:d5: d2:74:db:b7:04:63:a3:40:c1:9e:7a:e5:fa:5b:4c: ab:bb:1a:b4:1a:50:63:bf:bc:46:e8:07:3a:13:71: 1e:7c:9d:9f:5c:a8:be:bf:57:ad:59:57:fa:72:6d: 55:d3:57:bc:94:5e:43:56:98:10:66:11:36:7b:80: 5d:f1:1b:75:24:a2:34:09:2f:b6:96:12:1d:ff:06: 33:24:00:09:38:7c:4b:c9:f4:2d:40:28:c2:7c:b4: 03:c8:c6:bd:18:ad:e7:c3:de:77:37:2e:27:e5:15: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:11:A5:65:64:6B:57:67:64:9C:91:AA:6B:F3:3D:26:14:F3:F0:5B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KxGlZWRrV2dknJGqa_M9JhTz8Fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.160.0/21 Signature Algorithm: sha256WithRSAEncryption 77:7a:8d:a3:15:c5:5b:e5:44:98:07:db:a6:2e:bb:54:b1:9f: d4:8b:50:42:02:d0:6b:51:12:04:00:c3:42:fb:f6:a8:9d:59: 2e:00:99:4e:26:98:08:da:1e:a7:70:a6:8a:9c:e8:57:c2:59: 3c:12:88:84:6b:80:31:1e:95:ff:31:ea:a3:0f:67:eb:57:2b: 19:1c:15:91:a2:59:d6:ec:67:f7:95:72:0a:1c:96:40:9d:f8: 00:b0:23:e7:c7:19:e7:88:f1:d1:71:1f:da:d0:70:26:c3:48: 94:e3:7b:f4:06:05:24:c8:4a:6d:df:4f:6f:ce:a1:47:86:b3: b0:c9:a3:1d:c9:a4:84:b5:ff:e3:16:54:85:7d:d5:f0:f8:51: b9:32:c0:f1:8c:ac:bc:61:d6:21:b6:fc:8d:cc:28:53:b5:e3: 38:14:99:32:66:02:c5:7f:9e:b7:5e:23:82:22:2c:36:e2:67: bb:06:b7:fc:fa:a5:84:09:b6:cf:01:51:e3:ce:74:fc:d4:b1: c7:9e:95:db:75:64:2d:b2:31:b3:ec:9c:86:4e:e3:ee:cf:a1: 1b:88:9c:d5:a2:ef:4d:37:10:0e:aa:16:5d:1c:93:1c:d8:71: 18:a8:94:89:fe:4a:eb:35:59:21:5c:aa:98:8f:a1:3b:60:a4: 08:c3:51:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hE1LSYXKdGZ27OqOBcI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjExYTU2NTY0NmI1NzY3NjQ5YzkxYWE2YmYzM2QyNjE0ZjNmMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/RrBu+5dj5aI96RlZ6kluwbIswV 14mS+2iL9wb+YCIQhrOmrjsXuidxMAVarRIl1GJEc7RMIIMWK2cmuHH67A1mRQLh IzKJou/UI2Hu6mZ7GtEgyXEt19DJ/gDMckYn4j4lqTCXPEGYXluNsKgUVQAzBNA7 BSjVzNw3T8bDLTUQqFdeiEL2W3w1hkPeW25kM8RKGtXSdNu3BGOjQMGeeuX6W0yr uxq0GlBjv7xG6Ac6E3EefJ2fXKi+v1etWVf6cm1V01e8lF5DVpgQZhE2e4Bd8Rt1 JKI0CS+2lhId/wYzJAAJOHxLyfQtQCjCfLQDyMa9GK3nw953Ny4n5RXd+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCsRpWVka1dnZJyRqmvzPSYU8/BbMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS3hHbFpXUnJWMmRrbkpHcWFfTTlKaFR6OEZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHzigMA0G CSqGSIb3DQEBCwUAA4IBAQB3eo2jFcVb5USYB9umLrtUsZ/Ui1BCAtBrURIEAMNC +/aonVkuAJlOJpgI2h6ncKaKnOhXwlk8EoiEa4AxHpX/MeqjD2frVysZHBWRolnW 7Gf3lXIKHJZAnfgAsCPnxxnniPHRcR/a0HAmw0iU43v0BgUkyEpt309vzqFHhrOw yaMdyaSEtf/jFlSFfdXw+FG5MsDxjKy8YdYhtvyNzChTteM4FJkyZgLFf563XiOC Iiw24me7Brf8+qWECbbPAVHjznT81LHHnpXbdWQtsjGz7JyGTuPuz6EbiJzVou9N NxAOqhZdHJMc2HEYqJSJ/krrNVkhXKqYj6E7YKQIw1Gd -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:55 2026 by rpki-client