This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MhToh2vNQMmQr2rOa0djgLW1X60.roa File: MhToh2vNQMmQr2rOa0djgLW1X60.roa (raw, json) Hash identifier: UnSekXR9mee525E6YUKrmP6jJjB4onA9pxI5oHoMTvw= Subject key identifier: 32:14:E8:87:6B:CD:40:C9:90:AF:6A:CE:6B:47:63:80:B5:B5:5F:AD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B0E3EA00F7C6EDE6AB683236745C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MhToh2vNQMmQr2rOa0djgLW1X60.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 31.57.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b0:e3:ea:00:f7:c6:ed:e6:ab:68:32:36:74:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3214e8876bcd40c990af6ace6b476380b5b55fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:4b:3c:92:0f:44:a7:ce:8f:8d:18:18:53: 8c:cf:f2:06:b8:aa:82:cf:a2:1a:76:ee:1a:6b:88: 74:52:d1:15:f6:78:43:8f:d2:a6:78:85:74:9c:8a: 7b:7d:88:c8:bd:d9:2f:25:35:77:be:ea:52:72:d8: 83:80:1c:9a:36:46:d0:8f:7f:c5:cd:e2:ed:d2:c0: e8:ba:5f:19:4e:08:90:c5:0b:9b:52:9f:41:29:8a: 64:4f:8f:29:b4:ba:11:89:b8:c8:53:de:8a:8e:25: 32:75:2d:70:27:cb:67:22:c3:5e:ee:6f:ea:ea:5c: 5d:cc:05:35:e9:95:66:d0:6a:eb:23:00:ce:0a:28: 06:4e:f0:f4:27:c2:1d:5d:9a:96:16:ef:93:db:f1: fb:1f:26:89:a5:eb:c6:cc:df:97:ae:23:3c:cf:d3: 98:d3:42:64:0d:c4:af:a8:b8:2e:10:fb:53:f4:cd: 7b:6f:5c:a8:5c:eb:10:b6:ab:a8:21:3a:a9:ca:af: c4:37:b7:76:91:f7:a0:a1:10:b4:49:f3:b9:97:6a: ab:14:f0:ff:b3:06:96:90:3a:3d:13:7e:cc:5d:10: b5:92:45:c1:3f:98:05:45:42:ac:28:c8:b8:74:ac: 0b:0c:b5:1b:78:c0:55:4f:87:ed:7c:22:34:f0:fe: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:14:E8:87:6B:CD:40:C9:90:AF:6A:CE:6B:47:63:80:B5:B5:5F:AD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MhToh2vNQMmQr2rOa0djgLW1X60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.94.0/24 Signature Algorithm: sha256WithRSAEncryption b5:48:8b:3c:34:8c:56:27:f4:1d:46:ca:5d:f1:53:96:c3:59: 60:81:bb:81:ab:fb:85:ab:ad:b5:2c:31:53:24:c2:4a:c8:90: be:83:32:a0:92:a3:dc:81:33:df:e9:10:2d:24:81:c6:4b:fc: 23:14:3a:e7:bf:d9:73:99:1f:cb:49:c2:5d:4e:0b:24:b2:b6: 5d:ee:4e:a9:bb:3b:85:af:51:0f:e0:2d:f4:43:cb:4d:11:c4: 58:2c:a9:1c:da:9b:22:7b:e1:c3:63:e4:03:00:8c:3f:b9:a6: a6:db:c6:5d:50:64:e3:a7:6e:26:0d:60:c8:76:a8:46:e6:59: 08:6a:1c:5f:59:3c:36:6e:f7:08:8a:2f:f6:a2:19:9b:cb:fc: df:8e:af:ac:d3:4f:07:91:41:0e:64:08:1b:58:3d:fd:12:6a: a2:6d:67:62:8b:19:d3:95:27:87:fe:ee:12:a2:7d:2d:f0:d1: e0:48:35:43:8e:a5:8d:87:a2:7e:3b:ee:da:a6:81:6f:c4:1d: ee:a6:c6:21:a5:fa:7e:d7:85:52:6a:8f:6c:90:fd:32:dc:35: 1c:ad:55:84:eb:31:7d:bc:22:fa:86:24:f3:43:db:7e:df:a0: 4b:3b:76:26:04:41:0a:d0:1b:0e:22:ed:39:1b:e8:0a:f2:f6: 5b:16:cf:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLDj6gD3xu3mq2gyNnRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjE0ZTg4NzZiY2Q0MGM5OTBhZjZhY2U2YjQ3NjM4MGI1YjU1ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAdLPJIPRKfOj40YGFOMz/IGuKqC z6Iadu4aa4h0UtEV9nhDj9KmeIV0nIp7fYjIvdkvJTV3vupSctiDgByaNkbQj3/F zeLt0sDoul8ZTgiQxQubUp9BKYpkT48ptLoRibjIU96KjiUydS1wJ8tnIsNe7m/q 6lxdzAU16ZVm0GrrIwDOCigGTvD0J8IdXZqWFu+T2/H7HyaJpevGzN+XriM8z9OY 00JkDcSvqLguEPtT9M17b1yoXOsQtquoITqpyq/EN7d2kfegoRC0SfO5l2qrFPD/ swaWkDo9E37MXRC1kkXBP5gFRUKsKMi4dKwLDLUbeMBVT4ftfCI08P7SvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDIU6IdrzUDJkK9qzmtHY4C1tV+tMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTWhUb2gydk5RTW1RcjJyT2EwZGpnTFcxWDYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzleMA0G CSqGSIb3DQEBCwUAA4IBAQC1SIs8NIxWJ/QdRspd8VOWw1lggbuBq/uFq621LDFT JMJKyJC+gzKgkqPcgTPf6RAtJIHGS/wjFDrnv9lzmR/LScJdTgsksrZd7k6puzuF r1EP4C30Q8tNEcRYLKkc2psie+HDY+QDAIw/uaam28ZdUGTjp24mDWDIdqhG5lkI ahxfWTw2bvcIii/2ohmby/zfjq+s008HkUEOZAgbWD39EmqibWdiixnTlSeH/u4S on0t8NHgSDVDjqWNh6J+O+7apoFvxB3upsYhpfp+14VSao9skP0y3DUcrVWE6zF9 vCL6hiTzQ9t+36BLO3YmBEEK0BsOIu05G+gK8vZbFs/b -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:34 2026 by rpki-client