This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Naeo4FSbJ48kDLNRPLZFettzTyM.roa File: Naeo4FSbJ48kDLNRPLZFettzTyM.roa (raw, json) Hash identifier: Y0SJTWaGYwSDZ06JOzG1vFAAWbD+yoPggl9+YpgzZ5g= Subject key identifier: 35:A7:A8:E0:54:9B:27:8F:24:0C:B3:51:3C:B6:45:7A:DB:73:4F:23 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C1329BEF41914B4A466B13D97C9B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Naeo4FSbJ48kDLNRPLZFettzTyM.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214305 IP address blocks: 31.58.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c1:32:9b:ef:41:91:4b:4a:46:6b:13:d9:7c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35a7a8e0549b278f240cb3513cb6457adb734f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:3b:d5:d1:61:49:db:3b:bf:30:8b:76:48: 7f:c0:1a:f3:f9:29:38:1d:4c:58:c4:5f:d7:63:9a: c5:32:25:46:44:e4:bd:f0:d8:87:ed:01:c1:4d:c1: 7d:9f:3c:ad:0b:c2:4e:7e:86:6b:17:83:13:ac:56: a6:3f:b8:27:aa:9d:1f:7e:7e:e3:5e:15:71:4e:ff: 76:c9:9e:71:89:d3:24:c4:3b:2e:a6:ea:51:db:04: 3c:00:63:0a:f1:fc:31:f6:12:60:d6:12:d1:ad:97: 99:de:50:47:b6:21:48:e3:43:c5:b9:9b:04:fa:f6: e1:26:6f:f2:81:5b:93:6d:8b:d9:cb:f9:bb:e0:6c: d7:84:bd:07:5c:ba:51:19:fa:96:a2:27:11:eb:53: 96:dc:93:11:9c:ab:a8:07:8d:c0:93:d3:49:ac:18: 15:07:9f:79:59:53:be:f4:04:79:ec:d9:b3:a8:b4: 39:9e:31:9f:de:d1:3e:2d:ee:57:d3:ac:d9:9a:32: 16:48:a4:5b:23:6a:cf:d7:6d:e4:0f:ac:bd:ca:46: 8a:1a:bc:bd:b2:94:1e:19:39:62:43:ed:8c:cc:64: 4f:ea:e0:dd:dd:2f:8b:19:7f:3b:68:3c:7c:a8:5e: c6:be:46:75:0d:c8:23:18:18:57:74:48:80:d7:6f: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A7:A8:E0:54:9B:27:8F:24:0C:B3:51:3C:B6:45:7A:DB:73:4F:23 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Naeo4FSbJ48kDLNRPLZFettzTyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.248.0/24 Signature Algorithm: sha256WithRSAEncryption b3:67:63:9f:96:8e:75:95:26:1b:83:66:5c:94:bc:25:09:af: 21:6c:2a:bf:b0:1a:9d:de:e7:81:a7:12:5b:58:4a:ec:27:95: 70:54:1b:ed:8b:b6:92:f7:6c:73:53:1e:2d:b1:ce:36:73:11: c0:0f:8b:cc:96:a8:ab:9c:8c:92:b3:cb:df:b6:ef:3c:69:d6: 18:49:ae:82:1d:ad:2e:a8:8e:54:89:b7:74:9f:53:2a:72:ab: b4:58:ca:cf:12:7a:e5:8c:a0:39:25:5f:09:1d:de:58:0f:92: e3:fb:c3:a9:87:34:c2:7a:d8:f1:2e:6a:9d:5e:0d:06:fe:e0: cb:3a:f0:13:e0:94:62:6f:d7:3e:5d:d7:ac:ae:13:ba:2a:b3: de:4b:11:c9:1c:5b:1f:2f:10:dc:a3:4c:5a:35:86:d7:fb:7c: ce:95:08:d3:c5:7f:38:1f:a3:c5:a8:69:f6:49:38:8d:d0:62: 6c:b7:c5:85:f6:62:49:4d:6d:6c:d2:2c:c8:d2:11:13:02:4c: 87:6c:43:45:b7:20:e2:dd:79:0a:e5:ea:0c:e5:99:8d:8f:fe: 7a:aa:a7:49:53:99:c9:9c:31:dd:0f:54:eb:b0:8b:1f:8c:f6: 5c:92:5f:5c:b5:55:10:0e:f1:5c:ea:88:0e:81:b1:ff:59:46: d1:a3:64:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMEym+9BkUtKRmsT2XybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWE3YThlMDU0OWIyNzhmMjQwY2IzNTEzY2I2NDU3YWRiNzM0ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWk71dFhSds7vzCLdkh/wBrz+Sk4 HUxYxF/XY5rFMiVGROS98NiH7QHBTcF9nzytC8JOfoZrF4MTrFamP7gnqp0ffn7j XhVxTv92yZ5xidMkxDsupupR2wQ8AGMK8fwx9hJg1hLRrZeZ3lBHtiFI40PFuZsE +vbhJm/ygVuTbYvZy/m74GzXhL0HXLpRGfqWoicR61OW3JMRnKuoB43Ak9NJrBgV B595WVO+9AR57NmzqLQ5njGf3tE+Le5X06zZmjIWSKRbI2rP123kD6y9ykaKGry9 spQeGTliQ+2MzGRP6uDd3S+LGX87aDx8qF7GvkZ1DcgjGBhXdEiA129fFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWnqOBUmyePJAyzUTy2RXrbc08jMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTmFlbzRGU2JKNDhrRExOUlBMWkZldHR6VHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr4MA0G CSqGSIb3DQEBCwUAA4IBAQCzZ2Oflo51lSYbg2ZclLwlCa8hbCq/sBqd3ueBpxJb WErsJ5VwVBvti7aS92xzUx4tsc42cxHAD4vMlqirnIySs8vftu88adYYSa6CHa0u qI5Uibd0n1Mqcqu0WMrPEnrljKA5JV8JHd5YD5Lj+8OphzTCetjxLmqdXg0G/uDL OvAT4JRib9c+XdesrhO6KrPeSxHJHFsfLxDco0xaNYbX+3zOlQjTxX84H6PFqGn2 STiN0GJst8WF9mJJTW1s0izI0hETAkyHbENFtyDi3XkK5eoM5ZmNj/56qqdJU5nJ nDHdD1TrsIsfjPZckl9ctVUQDvFc6ogOgbH/WUbRo2QA -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:05 2026 by rpki-client