This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N2MHSJKotMhG7vUE1_dJlmiUkhI.roa File: N2MHSJKotMhG7vUE1_dJlmiUkhI.roa (raw, json) Hash identifier: WChmZLWhkP8NrUHSB9SZwO7kHmiMM/HyIjTApmmuYUs= Subject key identifier: 37:63:07:48:92:A8:B4:C8:46:EE:F5:04:D7:F7:49:96:68:94:92:12 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8494545ED7A3F9954B7B1475383290 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N2MHSJKotMhG7vUE1_dJlmiUkhI.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 31.59.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:94:54:5e:d7:a3:f9:95:4b:7b:14:75:38:32:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3763074892a8b4c846eef504d7f7499668949212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:3b:13:dd:1d:92:62:66:78:07:18:2b:b4: 3f:12:85:dd:67:a1:3e:17:24:bc:b2:00:c2:76:fe: b7:e4:cc:66:f3:32:36:1d:16:f7:9c:d1:2c:db:d2: 80:3e:a7:1f:8c:17:57:fa:48:df:67:68:1b:1f:26: 3b:95:46:5a:b4:c4:3f:36:32:23:20:07:0d:2c:c2: a4:76:b4:03:85:e5:83:7e:25:ea:96:31:7d:ad:cb: 04:f5:25:83:4a:5c:e6:46:56:c4:6a:20:c8:13:d7: b3:0c:bf:83:03:65:89:09:5b:cf:10:02:8a:5e:bc: e5:78:92:8a:e8:f8:4d:1d:0a:74:82:60:cb:03:6b: 1c:85:02:47:4f:29:7c:9e:b5:dd:e7:51:62:5b:11: 03:82:3e:7f:d7:b2:9b:61:81:b2:4c:d7:66:5b:5f: 6a:92:c8:4f:45:3d:76:9a:29:ff:b1:e2:c9:83:ef: eb:06:13:1a:85:56:0a:c5:2d:bb:41:79:0b:d9:1e: 5c:59:30:aa:c5:35:1d:8c:00:5f:bf:68:6b:d2:61: 4c:11:bd:c4:f4:2e:a7:fb:5a:f2:41:ec:11:b3:ec: 2d:64:56:74:8c:00:de:45:0a:8d:a5:24:0b:6c:cc: bd:0e:8b:11:15:96:31:28:d1:4a:8f:61:19:b0:38: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:63:07:48:92:A8:B4:C8:46:EE:F5:04:D7:F7:49:96:68:94:92:12 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N2MHSJKotMhG7vUE1_dJlmiUkhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.223.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:50:31:f1:55:5d:2b:b1:4b:8a:a4:14:84:06:ee:35:e1:3d: fb:3b:94:8c:47:8a:91:0d:65:09:d0:fd:a1:ac:97:e5:52:ab: 86:85:eb:2d:9f:94:da:50:c2:07:b6:89:95:59:3c:fd:17:01: 5c:fe:6c:59:58:56:95:1d:e1:3e:2c:ed:86:79:34:60:52:eb: d8:39:56:26:f7:38:05:dc:52:64:fd:94:93:83:68:be:f4:cd: e9:14:d0:3c:4f:33:01:6a:56:35:9f:20:7f:79:a6:78:24:85: 4a:25:44:1d:32:75:98:8c:6e:8a:e3:c4:02:b1:53:b4:6b:a8: f4:db:a7:37:81:70:60:98:ec:f6:82:b2:fe:fc:07:57:d9:92: a6:c0:f4:fa:b8:01:73:41:72:7c:03:51:a4:cd:1d:2a:cd:26: fc:ec:7a:98:d3:a4:f8:eb:39:90:10:25:b8:11:4a:ab:3f:3b: 27:ca:c2:90:91:ef:64:5c:c6:61:e2:24:bc:cb:94:10:ef:4d: 69:e7:db:4a:3b:1a:29:0d:da:47:f3:25:81:80:48:8e:db:86: 2d:de:c6:2d:7e:a4:32:12:a8:d6:fa:a3:b8:b9:71:26:02:c1: bc:c7:8f:ba:ec:33:37:fe:43:a3:0d:e0:01:b8:cb:5e:e8:61: 9d:ac:cb:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJRUXtej+ZVLexR1ODKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzYzMDc0ODkyYThiNGM4NDZlZWY1MDRkN2Y3NDk5NjY4OTQ5MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAI7E90dkmJmeAcYK7Q/EoXdZ6E+ FyS8sgDCdv635Mxm8zI2HRb3nNEs29KAPqcfjBdX+kjfZ2gbHyY7lUZatMQ/NjIj IAcNLMKkdrQDheWDfiXqljF9rcsE9SWDSlzmRlbEaiDIE9ezDL+DA2WJCVvPEAKK XrzleJKK6PhNHQp0gmDLA2schQJHTyl8nrXd51FiWxEDgj5/17KbYYGyTNdmW19q kshPRT12min/seLJg+/rBhMahVYKxS27QXkL2R5cWTCqxTUdjABfv2hr0mFMEb3E 9C6n+1ryQewRs+wtZFZ0jADeRQqNpSQLbMy9DosRFZYxKNFKj2EZsDiTmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdjB0iSqLTIRu71BNf3SZZolJISMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTjJNSFNKS290TWhHN3ZVRTFfZEpsbWlVa2hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzvfMA0G CSqGSIb3DQEBCwUAA4IBAQBPUDHxVV0rsUuKpBSEBu414T37O5SMR4qRDWUJ0P2h rJflUquGhestn5TaUMIHtomVWTz9FwFc/mxZWFaVHeE+LO2GeTRgUuvYOVYm9zgF 3FJk/ZSTg2i+9M3pFNA8TzMBalY1nyB/eaZ4JIVKJUQdMnWYjG6K48QCsVO0a6j0 26c3gXBgmOz2grL+/AdX2ZKmwPT6uAFzQXJ8A1GkzR0qzSb87HqY06T46zmQECW4 EUqrPzsnysKQke9kXMZh4iS8y5QQ701p59tKOxopDdpH8yWBgEiO24Yt3sYtfqQy EqjW+qO4uXEmAsG8x4+67DM3/kOjDeABuMte6GGdrMtK -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:46 2026 by rpki-client