This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MUuj8T6fyOX0ithmy1TJBG08oM8.roa File: MUuj8T6fyOX0ithmy1TJBG08oM8.roa (raw, json) Hash identifier: yp8aeRD2/+ax19U4HHF+UyihRbrOCIyuG3mUxJjTDVA= Subject key identifier: 31:4B:A3:F1:3E:9F:C8:E5:F4:8A:D8:66:CB:54:C9:04:6D:3C:A0:CF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845A1120A79C0577780016A8FC62E0 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MUuj8T6fyOX0ithmy1TJBG08oM8.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21928 IP address blocks: 31.57.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5a:11:20:a7:9c:05:77:78:00:16:a8:fc:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=314ba3f13e9fc8e5f48ad866cb54c9046d3ca0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:c4:f0:76:15:79:a3:a8:ef:c8:aa:ae:e7: 1e:96:9d:93:01:a2:e2:0f:1d:74:96:ce:28:a2:18: 1e:4d:7b:92:b5:ad:f5:0e:0d:cb:1f:ad:de:ce:6e: 66:61:5d:d3:e8:52:43:d4:cb:9e:3d:32:10:8a:f4: 0d:8b:6d:9a:a7:0d:05:f2:71:dc:0a:86:3b:d5:d6: f5:42:76:b3:ed:b5:dd:72:81:63:4c:22:c1:6f:25: 7a:64:f8:dd:d1:70:a7:f3:6f:d7:2a:ed:de:19:6f: ec:cd:d1:cf:80:8c:2a:4a:80:75:9a:96:23:40:9b: 71:e1:9e:58:96:38:1c:1d:da:6b:ed:8c:ed:95:21: 93:39:e9:08:12:09:4d:0a:22:2e:21:a5:05:83:ba: 05:98:36:dc:da:28:d1:26:a8:25:6e:d9:8d:f3:7f: 43:c2:fb:a5:0a:4a:58:10:b5:f7:09:65:e5:97:a3: b0:b3:8f:72:7b:83:b7:e2:36:ac:ab:ea:2d:80:4f: 9d:7e:0c:5c:75:31:21:8e:93:69:ce:c1:d9:0e:1f: 4f:3a:bf:d7:d6:12:f2:fc:9b:b3:5b:9b:16:7f:34: cf:41:b1:a1:a6:48:8f:cf:af:fa:f6:fd:61:0d:af: 0e:d5:a9:42:0b:03:b9:e2:ba:c8:a4:90:11:9f:1a: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:A3:F1:3E:9F:C8:E5:F4:8A:D8:66:CB:54:C9:04:6D:3C:A0:CF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MUuj8T6fyOX0ithmy1TJBG08oM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.212.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:4a:71:78:d2:69:3d:fc:b1:d7:b5:e4:59:a4:3b:c6:78:71: 90:12:72:62:91:f2:e7:5e:84:07:97:40:40:1b:90:91:38:52: fe:bc:50:4a:9a:26:ac:a6:bf:71:3f:e3:f7:45:2a:73:8b:0b: e7:0e:75:9d:0a:c8:02:d2:02:3c:ad:23:cf:9c:09:66:b8:20: 20:d6:e4:42:34:fa:19:3b:4d:3f:c8:25:6d:d6:50:1f:9b:e4: 40:ab:78:65:3e:dc:fc:7e:36:c5:91:d3:ab:c2:c2:e4:d3:87: 18:f7:6a:62:11:d1:95:2b:3e:d7:64:4d:f2:0d:0e:bf:2d:88: a1:77:59:92:b1:f5:07:d3:fa:a1:0e:29:26:70:af:9b:e6:10: 30:48:ab:f3:a7:94:f8:3a:16:9a:70:d6:50:fe:c8:31:7a:41: d3:50:39:02:3a:eb:57:da:5e:44:b5:36:5b:d5:90:3d:02:8c: 0e:77:aa:62:81:01:1d:13:a3:2d:98:af:9b:ff:5c:e2:89:0e: 34:8c:6f:94:90:1e:a6:76:7d:47:53:37:a6:37:f4:0c:87:2d: dc:db:81:fc:7d:23:ce:01:6f:e1:79:4a:59:0a:99:ef:1a:2f: e9:8b:a1:68:7c:a3:a9:7d:21:33:90:db:f2:fb:f0:84:f6:bc: a2:50:ba:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFoRIKecBXd4ABao/GLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTRiYTNmMTNlOWZjOGU1ZjQ4YWQ4NjZjYjU0YzkwNDZkM2NhMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLzE8HYVeaOo78iqrucelp2TAaLi Dx10ls4oohgeTXuSta31Dg3LH63ezm5mYV3T6FJD1MuePTIQivQNi22apw0F8nHc CoY71db1Qnaz7bXdcoFjTCLBbyV6ZPjd0XCn82/XKu3eGW/szdHPgIwqSoB1mpYj QJtx4Z5YljgcHdpr7YztlSGTOekIEglNCiIuIaUFg7oFmDbc2ijRJqglbtmN839D wvulCkpYELX3CWXll6Ows49ye4O34jasq+otgE+dfgxcdTEhjpNpzsHZDh9POr/X 1hLy/JuzW5sWfzTPQbGhpkiPz6/69v1hDa8O1alCCwO54rrIpJARnxr4pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFLo/E+n8jl9IrYZstUyQRtPKDPMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTVV1ajhUNmZ5T1gwaXRobXkxVEpCRzA4b004LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHznUMA0G CSqGSIb3DQEBCwUAA4IBAQA+SnF40mk9/LHXteRZpDvGeHGQEnJikfLnXoQHl0BA G5CROFL+vFBKmiaspr9xP+P3RSpziwvnDnWdCsgC0gI8rSPPnAlmuCAg1uRCNPoZ O00/yCVt1lAfm+RAq3hlPtz8fjbFkdOrwsLk04cY92piEdGVKz7XZE3yDQ6/LYih d1mSsfUH0/qhDikmcK+b5hAwSKvzp5T4OhaacNZQ/sgxekHTUDkCOutX2l5EtTZb 1ZA9AowOd6pigQEdE6MtmK+b/1ziiQ40jG+UkB6mdn1HUzemN/QMhy3c24H8fSPO AW/heUpZCpnvGi/pi6FofKOpfSEzkNvy+/CE9ryiULrb -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:56 2026 by rpki-client