This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NT1TXb-Vv-3qDNaTKS0gJlh8FFE.roa File: NT1TXb-Vv-3qDNaTKS0gJlh8FFE.roa (raw, json) Hash identifier: oxEkUcLvstyRsAkxLWIHoYFSf9HmSKydqpBsleO7HJk= Subject key identifier: 35:3D:53:5D:BF:95:BF:ED:EA:0C:D6:93:29:2D:20:26:58:7C:14:51 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7FF6CBFE4CE0A185916F1648D3DF1000 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NT1TXb-Vv-3qDNaTKS0gJlh8FFE.roa Signing time: Fri 02 Jan 2026 18:27:19 +0000 ROA not before: Fri 02 Jan 2026 18:27:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213929 IP address blocks: 31.59.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f6:cb:fe:4c:e0:a1:85:91:6f:16:48:d3:df:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 18:27:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=353d535dbf95bfedea0cd693292d2026587c1451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:37:82:67:72:f2:81:d9:28:a9:0e:19:00: 00:e3:f7:6f:ed:1a:4c:b6:b1:ca:9a:38:87:fb:d0: 7c:f1:a2:6f:1a:c8:eb:13:af:b1:c7:a1:c0:bb:3d: e0:10:f5:b0:6c:96:9d:cc:fe:bf:09:50:bb:40:5d: c3:23:eb:66:66:c8:8b:18:8e:54:e1:02:15:39:e1: 82:e8:f8:d5:f4:84:71:93:1c:8b:c3:0c:7b:ed:5d: 22:d7:be:89:ab:c7:e9:05:20:de:35:ea:8b:83:c5: 11:91:22:9c:3e:57:2a:bc:51:12:22:40:29:e9:2d: 77:74:e1:e1:d2:2e:cd:0f:da:6f:4f:e6:33:92:cd: 95:62:60:02:15:b5:d2:ef:77:84:93:57:c4:4e:3c: 59:b8:49:0b:9c:9f:38:55:aa:1a:67:13:58:a9:5a: 8e:99:74:32:a6:6d:6c:b5:68:3f:30:43:1f:43:15: 47:ab:f5:c6:a8:5a:f3:c7:0f:f0:ff:92:bd:0d:6a: 8a:69:7e:b1:10:8d:b7:a9:6e:95:3a:00:93:6d:b8: b2:7c:ed:d1:be:60:3d:b3:df:f2:dd:1a:57:14:af: c8:a4:e5:df:e8:59:65:01:f1:bb:33:34:fc:6a:4e: f9:84:67:43:a8:88:12:b5:d9:c3:d2:e7:1c:7b:ad: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3D:53:5D:BF:95:BF:ED:EA:0C:D6:93:29:2D:20:26:58:7C:14:51 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NT1TXb-Vv-3qDNaTKS0gJlh8FFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.100.0/24 Signature Algorithm: sha256WithRSAEncryption aa:96:32:f6:5e:b4:c4:dc:31:ca:8f:47:d7:14:4e:28:9b:3c: c6:91:fa:2c:2a:4e:d0:a7:a8:89:4d:7e:ef:a4:8d:64:a6:9b: aa:e2:4d:e1:8f:73:3a:85:98:64:1f:0b:82:f7:9e:de:34:fc: 73:b8:7b:29:b2:f9:e4:76:9f:e7:d8:b3:7e:78:e9:1c:55:52: e1:61:bd:5d:e9:05:d7:ca:ce:0a:80:a4:2a:2e:ff:1e:a6:50: a3:03:a9:63:42:51:e6:ee:3a:12:4f:a3:fe:0f:9d:1b:25:6f: 79:d6:5d:3c:f5:b5:8e:38:82:9a:bb:84:63:1e:9a:fc:30:54: bf:ab:12:d2:e0:68:ea:cf:e1:e7:e9:40:20:e9:4d:9f:79:24: ba:3a:78:7c:fa:7c:96:d2:26:eb:f6:be:65:e0:19:af:90:98: 65:4d:9e:f4:4b:d2:55:6c:fe:7d:35:df:3f:9c:51:fd:b9:bf: 2e:80:65:d5:7c:d6:54:a3:a2:7b:0f:a9:dc:89:f8:f6:ad:00: b9:90:24:2e:1a:08:02:53:54:1e:a8:52:bf:14:a5:7b:27:d6: f8:35:22:3c:e3:06:32:72:53:de:f1:2e:83:bc:e1:30:c0:b7: 2d:74:1b:d1:bb:32:4e:12:07:d9:06:22:7e:1a:62:cf:c1:36: 13:bf:8a:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/9sv+TOChhZFvFkjT3xAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTgyNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTNkNTM1ZGJmOTViZmVkZWEwY2Q2OTMyOTJkMjAyNjU4N2MxNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl43gmdy8oHZKKkOGQAA4/dv7RpM trHKmjiH+9B88aJvGsjrE6+xx6HAuz3gEPWwbJadzP6/CVC7QF3DI+tmZsiLGI5U 4QIVOeGC6PjV9IRxkxyLwwx77V0i176Jq8fpBSDeNeqLg8URkSKcPlcqvFESIkAp 6S13dOHh0i7ND9pvT+Yzks2VYmACFbXS73eEk1fETjxZuEkLnJ84VaoaZxNYqVqO mXQypm1stWg/MEMfQxVHq/XGqFrzxw/w/5K9DWqKaX6xEI23qW6VOgCTbbiyfO3R vmA9s9/y3RpXFK/IpOXf6FllAfG7MzT8ak75hGdDqIgStdnD0ucce61SYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDU9U12/lb/t6gzWkyktICZYfBRRMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTlQxVFhiLVZ2LTNxRE5hVEtTMGdKbGg4RkZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztkMA0G CSqGSIb3DQEBCwUAA4IBAQCqljL2XrTE3DHKj0fXFE4omzzGkfosKk7Qp6iJTX7v pI1kppuq4k3hj3M6hZhkHwuC957eNPxzuHspsvnkdp/n2LN+eOkcVVLhYb1d6QXX ys4KgKQqLv8eplCjA6ljQlHm7joST6P+D50bJW951l089bWOOIKau4RjHpr8MFS/ qxLS4Gjqz+Hn6UAg6U2feSS6Onh8+nyW0ibr9r5l4BmvkJhlTZ70S9JVbP59Nd8/ nFH9ub8ugGXVfNZUo6J7D6ncifj2rQC5kCQuGggCU1QeqFK/FKV7J9b4NSI84wYy clPe8S6DvOEwwLctdBvRuzJOEgfZBiJ+GmLPwTYTv4r8 -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:35 2026 by rpki-client