This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LOXCVZuTt95ua3N-IMKt3LsrF0A.roa File: LOXCVZuTt95ua3N-IMKt3LsrF0A.roa (raw, json) Hash identifier: 8ymquxVCuBmcswJ90EzOIijUqam2JVVHNElE7zZkSig= Subject key identifier: 2C:E5:C2:55:9B:93:B7:DE:6E:6B:73:7E:20:C2:AD:DC:BB:2B:17:40 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019C28D0D9FBAFC90C00EB7AF44A8B41BEF4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LOXCVZuTt95ua3N-IMKt3LsrF0A.roa Signing time: Wed 04 Feb 2026 13:21:41 +0000 ROA not before: Wed 04 Feb 2026 13:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205463 IP address blocks: 31.58.41.0/24 maxlen: 24 31.58.236.0/24 maxlen: 24 31.58.245.0/24 maxlen: 24 31.58.247.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:d0:d9:fb:af:c9:0c:00:eb:7a:f4:4a:8b:41:be:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Feb 4 13:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ce5c2559b93b7de6e6b737e20c2addcbb2b1740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:70:a6:4c:16:66:12:ba:1a:1e:6f:1e:60: 43:af:69:ec:0d:a8:4c:9b:28:0b:85:90:46:2a:80: e7:6f:45:a8:de:a1:a5:92:fb:b0:82:d9:15:80:fe: bb:0d:ab:6b:b9:52:93:f8:fc:7f:07:42:24:72:e3: db:cc:4f:f8:7f:b4:09:2f:fc:94:7a:c5:c7:78:be: 05:f4:03:fd:e1:97:1f:86:4e:77:49:75:c4:1c:91: 6d:b7:73:6f:29:2d:54:4d:4e:a7:74:10:d0:f9:08: 52:b5:a0:2e:c5:f7:60:06:01:42:01:97:32:90:3f: f8:5c:8c:9f:4c:57:56:58:54:43:bd:57:00:2d:40: 80:ca:52:29:ed:f8:73:65:01:dc:55:54:16:1f:66: 24:f6:51:94:a2:b6:d6:29:2b:1a:b3:bf:7d:a6:96: 95:26:55:26:6d:eb:9a:49:50:ee:55:43:93:83:a3: 3a:56:9d:99:f8:6e:47:d3:ff:77:3b:bb:73:0f:dc: 8d:b5:7e:bd:fa:1c:bb:34:cd:6b:19:8f:1d:e5:aa: ed:50:0a:17:e5:b8:9a:5d:75:4c:60:10:e3:a8:95: e4:f1:b0:f5:72:e4:4d:53:f9:ed:e3:ee:e8:b2:09: 9a:91:f7:f6:0c:e3:ab:96:61:a2:f9:5d:12:c7:4d: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E5:C2:55:9B:93:B7:DE:6E:6B:73:7E:20:C2:AD:DC:BB:2B:17:40 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LOXCVZuTt95ua3N-IMKt3LsrF0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.41.0/24 31.58.236.0/24 31.58.245.0/24 31.58.247.0/24 31.58.249.0-31.58.251.255 Signature Algorithm: sha256WithRSAEncryption bf:f9:30:1a:39:70:80:b5:a5:92:cf:80:e1:b4:ef:3b:79:01: 0e:1e:12:34:a8:d0:bf:b2:9f:88:b7:95:ce:91:2d:62:4c:9e: da:82:69:54:d2:e5:fd:36:e9:96:db:47:38:62:24:89:de:52: 4e:a0:df:05:90:c4:93:ad:2f:0a:a9:48:1e:95:44:0f:a1:10: f4:53:36:eb:cc:5d:37:e7:9f:c6:f2:28:d0:26:67:eb:42:04: a9:56:ea:46:20:3c:3b:f0:a7:89:05:d8:0f:e3:26:43:c2:a6: 72:89:f0:5a:c3:4f:20:f6:f5:ea:79:71:49:b3:3b:6d:dc:41: 40:b2:73:33:48:3f:56:49:75:fe:7b:10:50:43:70:20:53:32: 07:fa:ad:f1:de:8b:e3:15:07:98:fb:da:0f:8d:90:e3:98:76: 15:7c:de:68:eb:db:e6:f3:99:83:2f:fb:37:9b:07:66:29:72: 99:06:89:24:1d:07:f1:eb:36:d6:31:34:66:fd:f4:a7:3b:a1: fe:13:c3:46:00:6c:72:01:40:1d:23:7c:84:c6:a6:68:27:01: 24:fb:8a:3e:ae:f6:57:40:10:83:bc:64:be:35:c2:9c:8b:02: 85:c2:7e:00:43:75:b5:11:f7:f8:d7:40:33:a9:8b:bd:a2:43: 9c:8c:fb:8c -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZwo0Nn7r8kMAOt69EqLQb70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMjA0MTMyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2U1YzI1NTliOTNiN2RlNmU2YjczN2UyMGMyYWRkY2JiMmIxNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneZwpkwWZhK6Gh5vHmBDr2nsDahM mygLhZBGKoDnb0Wo3qGlkvuwgtkVgP67DatruVKT+Px/B0IkcuPbzE/4f7QJL/yU esXHeL4F9AP94Zcfhk53SXXEHJFtt3NvKS1UTU6ndBDQ+QhStaAuxfdgBgFCAZcy kD/4XIyfTFdWWFRDvVcALUCAylIp7fhzZQHcVVQWH2Yk9lGUorbWKSsas799ppaV JlUmbeuaSVDuVUOTg6M6Vp2Z+G5H0/93O7tzD9yNtX69+hy7NM1rGY8d5artUAoX 5biaXXVMYBDjqJXk8bD1cuRNU/nt4+7osgmakff2DOOrlmGi+V0Sx02N1QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCzlwlWbk7febmtzfiDCrdy7KxdAMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTE9YQ1ZadVR0OTV1YTNOLUlNS3QzTHNyRjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAHzopAwQA HzrsAwQAHzr1AwQAHzr3MAwDBAAfOvkDBAIfOvgwDQYJKoZIhvcNAQELBQADggEB AL/5MBo5cIC1pZLPgOG07zt5AQ4eEjSo0L+yn4i3lc6RLWJMntqCaVTS5f026Zbb RzhiJIneUk6g3wWQxJOtLwqpSB6VRA+hEPRTNuvMXTfnn8byKNAmZ+tCBKlW6kYg PDvwp4kF2A/jJkPCpnKJ8FrDTyD29ep5cUmzO23cQUCyczNIP1ZJdf57EFBDcCBT Mgf6rfHei+MVB5j72g+NkOOYdhV83mjr2+bzmYMv+zebB2YpcpkGiSQdB/HrNtYx NGb99Kc7of4Tw0YAbHIBQB0jfITGpmgnAST7ij6u9ldAEIO8ZL41wpyLAoXCfgBD dbUR9/jXQDOpi72iQ5yM+4w= -----END CERTIFICATE-----Generated at Thu Feb 5 08:22:49 2026 by rpki-client