This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O9PVdASs98ddiIyYKYVGfsnnwXI.roa File: O9PVdASs98ddiIyYKYVGfsnnwXI.roa (raw, json) Hash identifier: RgAtns3OC1jPlTXfRL+AEv1x2iP42feF7xnsZAnFbb4= Subject key identifier: 3B:D3:D5:74:04:AC:F7:C7:5D:88:8C:98:29:85:46:7E:C9:E7:C1:72 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84BE6F83B7DE46654CAC2BCD56E900 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O9PVdASs98ddiIyYKYVGfsnnwXI.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214159 IP address blocks: 31.57.204.0/24 maxlen: 24 31.58.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:be:6f:83:b7:de:46:65:4c:ac:2b:cd:56:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bd3d57404acf7c75d888c982985467ec9e7c172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:c6:35:8b:2e:b9:33:7a:28:e6:86:c4:34: 27:ab:27:58:60:8d:24:3d:17:39:f2:14:4e:d6:6f: 40:5c:3f:5c:4d:c7:19:54:da:4f:73:0d:51:f2:e6: f3:bf:a3:a2:de:5d:76:f4:fd:45:b7:7b:84:a8:39: 7b:b0:49:66:1f:ba:0c:01:78:df:5c:85:e0:88:16: cf:aa:ee:e1:4c:e3:f5:16:19:48:1f:91:bc:c4:ac: 11:8c:cb:d5:e7:f6:33:18:68:11:cf:ad:7f:4e:c0: d1:51:96:04:d4:3d:c4:68:d3:bc:2c:84:68:96:8c: b0:59:f8:6c:13:e8:8a:92:97:4d:b1:db:1e:9d:a6: 9c:47:71:20:fc:3c:eb:c3:bb:30:e7:6f:60:2f:65: 95:c3:0c:ae:91:9e:de:03:ac:87:84:28:52:0c:01: 33:85:09:1f:36:46:29:2c:db:eb:b4:64:b5:9a:7d: 67:9a:0d:6d:92:66:f2:09:29:34:e3:e4:37:04:54: d5:3b:eb:62:56:bc:2b:b7:56:c9:5a:ee:e6:bd:54: 38:f3:4c:6a:1c:ee:b7:87:07:fd:ae:12:00:98:f4: fd:ba:c5:7d:81:af:71:ae:12:67:60:d5:23:50:90: ba:08:85:88:d3:8b:5b:ca:b7:05:e5:5c:08:9e:83: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:D5:74:04:AC:F7:C7:5D:88:8C:98:29:85:46:7E:C9:E7:C1:72 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O9PVdASs98ddiIyYKYVGfsnnwXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.204.0/24 31.58.230.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:41:dc:2a:e9:7f:fc:70:6b:10:6c:23:84:ad:cc:75:47:36: 8a:df:42:09:d8:42:6f:76:61:6a:b6:f8:5e:c9:97:2b:6c:5a: 88:78:50:bc:4f:7c:69:48:60:f7:ca:e5:e1:02:cd:70:cb:38: ff:d5:b5:ab:bb:85:0e:d5:79:33:c1:ce:bf:a7:5a:b5:1d:d9: b4:b7:da:24:e2:50:52:14:8f:d6:c0:bc:8f:6d:32:3b:6b:a8: 22:db:d2:f2:0a:a0:3d:1b:2d:fe:db:2b:38:8f:35:b1:aa:95: 36:fb:8d:7b:6b:ac:80:ab:3b:4b:24:ad:a6:f0:27:72:2a:62: 99:34:42:06:33:fa:32:eb:5b:f0:2a:9c:ce:7b:cc:be:2f:5a: cf:ff:cd:e4:16:16:a2:c0:6a:de:fe:6c:3a:97:90:9d:53:90: 35:89:27:7d:62:c1:e2:85:7b:16:b3:b0:fc:94:63:46:1f:e1: 0b:d1:ae:bd:0e:76:92:9b:8f:d3:cf:d9:bf:95:b3:91:ab:9b: cb:53:51:b4:24:08:89:16:af:46:2c:c4:01:d5:fe:80:cb:9c: de:e8:95:51:51:e8:aa:5a:b3:ea:75:f2:e6:d5:1f:a0:c0:e8: c3:a6:7b:e3:ee:06:1b:3d:21:bc:34:ba:98:ab:19:bf:6b:df: 8e:9b:49:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hL5vg7feRmVMrCvNVukAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQzZDU3NDA0YWNmN2M3NWQ4ODhjOTgyOTg1NDY3ZWM5ZTdjMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWvGNYsuuTN6KOaGxDQnqydYYI0k PRc58hRO1m9AXD9cTccZVNpPcw1R8ubzv6Oi3l129P1Ft3uEqDl7sElmH7oMAXjf XIXgiBbPqu7hTOP1FhlIH5G8xKwRjMvV5/YzGGgRz61/TsDRUZYE1D3EaNO8LIRo loywWfhsE+iKkpdNsdsenaacR3Eg/Dzrw7sw529gL2WVwwyukZ7eA6yHhChSDAEz hQkfNkYpLNvrtGS1mn1nmg1tkmbyCSk04+Q3BFTVO+tiVrwrt1bJWu7mvVQ480xq HO63hwf9rhIAmPT9usV9ga9xrhJnYNUjUJC6CIWI04tbyrcF5VwInoNTQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDvT1XQErPfHXYiMmCmFRn7J58FyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTzlQVmRBU3M5OGRkaUl5WUtZVkdmc25ud1hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHznMAwQA HzrmMA0GCSqGSIb3DQEBCwUAA4IBAQBsQdwq6X/8cGsQbCOErcx1RzaK30IJ2EJv dmFqtvheyZcrbFqIeFC8T3xpSGD3yuXhAs1wyzj/1bWru4UO1Xkzwc6/p1q1Hdm0 t9ok4lBSFI/WwLyPbTI7a6gi29LyCqA9Gy3+2ys4jzWxqpU2+417a6yAqztLJK2m 8CdyKmKZNEIGM/oy61vwKpzOe8y+L1rP/83kFhaiwGre/mw6l5CdU5A1iSd9YsHi hXsWs7D8lGNGH+EL0a69DnaSm4/Tz9m/lbORq5vLU1G0JAiJFq9GLMQB1f6Ay5ze 6JVRUeiqWrPqdfLm1R+gwOjDpnvj7gYbPSG8NLqYqxm/a9+Om0kj -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:29 2026 by rpki-client