This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O06SLoBfKdF66ac7boXiwcAKZWE.roa File: O06SLoBfKdF66ac7boXiwcAKZWE.roa (raw, json) Hash identifier: CLLFFoBhqpTu17zeWSxbv5YJWTafqzRbSiUg+kzLn4s= Subject key identifier: 3B:4E:92:2E:80:5F:29:D1:7A:E9:A7:3B:6E:85:E2:C1:C0:0A:65:61 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D625E16855C529C660CB5630C0F3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O06SLoBfKdF66ac7boXiwcAKZWE.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265005 IP address blocks: 31.56.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d6:25:e1:68:55:c5:29:c6:60:cb:56:30:c0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b4e922e805f29d17ae9a73b6e85e2c1c00a6561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:64:9a:b6:69:97:3e:29:16:7e:9d:fb:db: f0:2b:a1:96:7a:8d:e5:2c:d1:a6:bc:73:46:7d:fc: d4:c6:dd:65:4f:5e:4a:6a:d3:0a:23:95:2e:12:46: d2:96:5a:7b:6f:67:d9:1d:d9:8a:36:c1:62:58:ff: 46:e7:5e:b1:de:9b:f7:ea:d4:76:91:d7:a2:68:b5: 23:80:0e:1c:8d:9b:86:b5:89:11:ce:e5:39:1b:56: bb:7f:41:f4:52:7e:78:17:2f:91:29:09:3a:6b:e3: e0:a2:c6:bf:ff:5b:d8:40:d3:61:19:1f:c3:96:b9: 3e:1e:de:9c:36:cf:4e:06:3b:5b:6c:93:ab:75:66: fe:bf:fa:93:25:9c:4c:d7:6b:ed:0d:27:e6:1e:e1: 5f:c9:81:cc:a7:db:4c:13:2d:b7:74:35:ea:8e:60: 5c:5c:97:3a:76:97:5f:c1:42:7d:f5:9c:ee:8d:4d: 36:ad:45:12:19:a8:65:61:2b:12:6f:42:3a:1d:15: dc:ac:89:12:bb:fd:23:30:68:a0:75:01:d4:c1:24: 8e:eb:86:c1:1f:4e:f2:31:80:bc:41:01:85:1c:af: 56:ab:f2:65:28:bf:0d:2f:3c:79:c0:72:c7:c0:54: 9f:5e:28:d9:3f:fb:8a:b7:5c:6c:ea:8f:24:45:ea: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4E:92:2E:80:5F:29:D1:7A:E9:A7:3B:6E:85:E2:C1:C0:0A:65:61 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O06SLoBfKdF66ac7boXiwcAKZWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.2.0/24 Signature Algorithm: sha256WithRSAEncryption 51:28:fa:22:23:e0:f0:d0:90:01:f0:dc:9e:0f:5e:e0:96:e3: a5:8a:f8:24:b0:db:ac:37:41:c8:d5:6e:a3:ff:de:1c:33:02: ee:78:ea:a8:d3:99:08:bc:a7:60:de:8e:43:fa:02:49:08:8c: 32:8e:01:61:13:18:55:79:75:39:00:dc:90:c7:ac:f8:db:95: 83:99:66:9d:39:95:ad:dd:ee:52:c9:69:66:a4:6f:1c:73:b5: c1:29:8d:ed:e8:1f:da:9e:90:34:e5:be:8e:8d:1a:2c:de:8f: 91:f6:c3:d9:55:f5:b7:99:29:eb:f0:a5:a5:65:65:6e:fe:7b: 59:03:34:ab:e8:23:3f:56:e4:c9:7a:fd:ed:3a:d2:cb:6e:d2: 69:cc:4e:8e:6a:fc:1a:29:d4:11:72:6b:cb:3f:b5:c9:44:2a: b2:3c:b1:59:39:59:0d:eb:88:cb:8d:2d:dc:2b:4e:18:9a:32: b3:a1:d2:3f:c5:ed:dc:a4:c4:55:0a:3d:50:87:d8:4d:a9:d6: 8b:32:16:d5:07:b0:9e:f7:69:26:2c:3b:37:5e:7f:07:00:99: d0:02:43:d1:e1:dd:b8:c5:e4:02:78:1f:8c:61:e6:9b:2b:67: 45:32:bd:c5:db:3f:76:58:cc:cb:64:75:bf:ed:71:dc:05:f8: bd:52:db:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNYl4WhVxSnGYMtWMMDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjRlOTIyZTgwNWYyOWQxN2FlOWE3M2I2ZTg1ZTJjMWMwMGE2NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2NkmrZplz4pFn6d+9vwK6GWeo3l LNGmvHNGffzUxt1lT15KatMKI5UuEkbSllp7b2fZHdmKNsFiWP9G516x3pv36tR2 kdeiaLUjgA4cjZuGtYkRzuU5G1a7f0H0Un54Fy+RKQk6a+Pgosa//1vYQNNhGR/D lrk+Ht6cNs9OBjtbbJOrdWb+v/qTJZxM12vtDSfmHuFfyYHMp9tMEy23dDXqjmBc XJc6dpdfwUJ99ZzujU02rUUSGahlYSsSb0I6HRXcrIkSu/0jMGigdQHUwSSO64bB H07yMYC8QQGFHK9Wq/JlKL8NLzx5wHLHwFSfXijZP/uKt1xs6o8kRepVZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDtOki6AXynReumnO26F4sHACmVhMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTzA2U0xvQmZLZEY2NmFjN2JvWGl3Y0FLWldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgCMA0G CSqGSIb3DQEBCwUAA4IBAQBRKPoiI+Dw0JAB8NyeD17gluOlivgksNusN0HI1W6j /94cMwLueOqo05kIvKdg3o5D+gJJCIwyjgFhExhVeXU5ANyQx6z425WDmWadOZWt 3e5SyWlmpG8cc7XBKY3t6B/anpA05b6OjRos3o+R9sPZVfW3mSnr8KWlZWVu/ntZ AzSr6CM/VuTJev3tOtLLbtJpzE6OavwaKdQRcmvLP7XJRCqyPLFZOVkN64jLjS3c K04YmjKzodI/xe3cpMRVCj1Qh9hNqdaLMhbVB7Ce92kmLDs3Xn8HAJnQAkPR4d24 xeQCeB+MYeabK2dFMr3F2z92WMzLZHW/7XHcBfi9UttJ -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client