This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N2UBazYzTnaRoASq43vy9ybNzOs.roa File: N2UBazYzTnaRoASq43vy9ybNzOs.roa (raw, json) Hash identifier: nTYDwHNznG1saQJTzmC0Ah5dteoV58LZ8yO5UH7880o= Subject key identifier: 37:65:01:6B:36:33:4E:76:91:A0:04:AA:E3:7B:F2:F7:26:CD:CC:EB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C9187D3C208A7F54D52F7F409699 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N2UBazYzTnaRoASq43vy9ybNzOs.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214987 IP address blocks: 31.56.25.0/24 maxlen: 24 31.56.81.0/24 maxlen: 24 31.57.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c9:18:7d:3c:20:8a:7f:54:d5:2f:7f:40:96:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3765016b36334e7691a004aae37bf2f726cdcceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:54:9c:ab:75:03:f2:8b:a3:84:67:92:47: 81:1e:6f:fa:bd:cf:8b:aa:01:09:bb:63:69:2b:a3: 13:27:47:43:cb:2e:d5:62:3d:5c:04:d3:89:d5:db: e6:25:75:1e:0c:92:2c:4f:c8:02:44:6b:a9:41:24: 6a:29:e9:a9:d5:92:0c:cd:8f:03:51:6e:b3:43:d0: e4:2b:ab:95:5a:27:30:4a:66:5a:40:d7:5f:e8:16: 0e:2c:49:af:1e:25:1e:cd:d6:6e:e5:b2:74:6f:47: 23:93:ae:67:c5:59:f7:66:50:4f:85:96:8d:60:09: 18:fe:b5:1c:03:10:3f:af:d6:eb:4a:79:1e:c6:58: cc:9a:e0:8c:da:d9:17:cb:ca:a2:e2:08:ea:e5:12: e4:d6:05:07:9b:00:62:b7:65:d2:62:d2:22:5b:17: 0c:09:04:4b:e5:77:b8:7a:a8:f2:c9:9a:da:57:a3: 80:0a:fa:2a:34:07:30:e2:7f:ab:4d:0b:0b:68:b4: 7b:e6:54:10:02:b1:d2:af:02:42:2d:f2:f3:f1:92: 10:25:82:eb:ac:6e:58:52:e2:64:2a:82:25:8d:b7: 88:27:0a:ae:74:b5:c0:0f:df:1d:24:65:ce:3d:69: 1c:64:05:74:aa:ce:fb:d2:82:30:ff:b2:7d:60:27: 7e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:01:6B:36:33:4E:76:91:A0:04:AA:E3:7B:F2:F7:26:CD:CC:EB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N2UBazYzTnaRoASq43vy9ybNzOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.25.0/24 31.56.81.0/24 31.57.240.0/24 Signature Algorithm: sha256WithRSAEncryption af:10:17:1c:e5:90:ee:21:fa:d1:73:47:97:18:fa:8b:a8:52: 0b:dd:d8:ef:87:94:c3:0c:76:07:b3:bd:fe:2a:1e:1d:1f:d2: f6:dd:ed:2e:55:cc:ef:cc:40:db:fa:a9:cc:60:86:68:7e:64: 23:26:21:e1:4f:88:03:08:4d:fc:72:49:ea:b0:9a:eb:61:9d: 4c:0b:9c:0e:ed:e7:2d:39:24:f4:e2:f7:fc:28:52:b4:52:5c: d4:52:f6:ac:58:c1:f0:c0:b0:8e:de:dc:61:f0:27:4e:35:17: a1:05:29:3b:4c:87:5b:f0:c2:a9:92:eb:3c:5d:a3:b5:3b:42: d9:14:a0:ff:f9:fc:f8:7b:1f:f4:c3:b3:99:ee:fd:ff:ce:58: 2a:7e:88:74:31:d9:84:86:3d:99:f1:ad:d2:f3:3c:6f:39:07: 11:1a:29:fe:f0:9f:5e:e0:25:73:f5:34:fb:4f:59:41:c0:5a: 38:3f:7c:c3:0f:60:fc:db:34:22:30:ec:52:91:8e:d0:ad:64: 7b:c8:56:81:40:8b:63:b7:4a:ca:3e:cd:ea:37:c9:87:19:b8: bc:67:30:62:54:6e:2f:6f:73:13:f2:3d:87:f0:6e:93:99:91: ce:99:f8:df:45:c5:ef:97:86:e0:c4:ef:ad:62:6b:96:6d:66: 12:7e:95:ba -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hMkYfTwgin9U1S9/QJaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzY1MDE2YjM2MzM0ZTc2OTFhMDA0YWFlMzdiZjJmNzI2Y2RjY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZNUnKt1A/KLo4RnkkeBHm/6vc+L qgEJu2NpK6MTJ0dDyy7VYj1cBNOJ1dvmJXUeDJIsT8gCRGupQSRqKemp1ZIMzY8D UW6zQ9DkK6uVWicwSmZaQNdf6BYOLEmvHiUezdZu5bJ0b0cjk65nxVn3ZlBPhZaN YAkY/rUcAxA/r9brSnkexljMmuCM2tkXy8qi4gjq5RLk1gUHmwBit2XSYtIiWxcM CQRL5Xe4eqjyyZraV6OACvoqNAcw4n+rTQsLaLR75lQQArHSrwJCLfLz8ZIQJYLr rG5YUuJkKoIljbeIJwqudLXAD98dJGXOPWkcZAV0qs770oIw/7J9YCd+lwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDdlAWs2M052kaAEquN78vcmzczrMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTjJVQmF6WXpUbmFSb0FTcTQzdnk5eWJOek9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzgZAwQA HzhRAwQAHznwMA0GCSqGSIb3DQEBCwUAA4IBAQCvEBcc5ZDuIfrRc0eXGPqLqFIL 3djvh5TDDHYHs73+Kh4dH9L23e0uVczvzEDb+qnMYIZofmQjJiHhT4gDCE38cknq sJrrYZ1MC5wO7ectOST04vf8KFK0UlzUUvasWMHwwLCO3txh8CdONRehBSk7TIdb 8MKpkus8XaO1O0LZFKD/+fz4ex/0w7OZ7v3/zlgqfoh0MdmEhj2Z8a3S8zxvOQcR Gin+8J9e4CVz9TT7T1lBwFo4P3zDD2D82zQiMOxSkY7QrWR7yFaBQItjt0rKPs3q N8mHGbi8ZzBiVG4vb3MT8j2H8G6TmZHOmfjfRcXvl4bgxO+tYmuWbWYSfpW6 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:43 2026 by rpki-client