This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OVA3qe8Pr4FI237cbv1RorEgypE.roa File: OVA3qe8Pr4FI237cbv1RorEgypE.roa (raw, json) Hash identifier: 5pLymoaZgCM5yS2uT6c2/3JME2V5ZX2kfDL0YN8fUCw= Subject key identifier: 39:50:37:A9:EF:0F:AF:81:48:DB:7E:DC:6E:FD:51:A2:B1:20:CA:91 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8490E23747CDCF9FF451CB9AA02571 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OVA3qe8Pr4FI237cbv1RorEgypE.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200239 IP address blocks: 31.57.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:90:e2:37:47:cd:cf:9f:f4:51:cb:9a:a0:25:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=395037a9ef0faf8148db7edc6efd51a2b120ca91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:6a:01:64:4e:82:ba:64:54:36:ea:82:86: 6b:c0:7e:35:15:af:7b:e8:d3:8e:5c:ce:19:d9:2b: 9e:7b:55:e6:0e:5e:04:ca:b3:f4:8b:27:7f:3b:88: 0f:07:0b:a2:10:91:44:2d:9f:98:49:24:73:dd:31: 8c:4a:a7:e6:c3:38:70:69:7d:74:aa:0c:e1:e2:da: 32:73:29:d6:c1:bc:1b:57:df:17:79:1c:2f:87:28: 89:53:1b:8b:8e:c9:f7:bd:df:49:e4:a4:ab:c1:6f: 3d:f6:fc:cf:3c:67:a3:87:5b:5d:d7:cd:6c:bf:74: e4:26:75:63:8e:a5:9b:03:01:e4:36:fa:22:8a:d4: d0:ef:c7:78:a6:2b:9e:48:bb:75:b0:d8:dd:9b:56: 19:1c:bc:17:8f:84:22:d1:ed:c7:5d:3c:a7:9b:11: ae:4d:c2:1d:08:11:d0:96:0c:16:85:f1:19:8e:62: a0:54:96:c5:9c:dc:26:88:24:ea:2f:52:6c:22:6e: c7:04:26:51:de:69:66:16:d4:ac:55:a2:c9:7d:eb: 93:67:43:b5:24:9f:c9:cb:f4:8d:4c:32:33:94:1d: c9:6c:a9:1c:80:79:d0:06:a3:bc:6e:ed:88:c6:c1: 93:a1:b7:af:cd:2d:ad:ac:80:13:6a:54:8c:e6:98: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:50:37:A9:EF:0F:AF:81:48:DB:7E:DC:6E:FD:51:A2:B1:20:CA:91 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OVA3qe8Pr4FI237cbv1RorEgypE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.215.0/24 Signature Algorithm: sha256WithRSAEncryption 86:8d:09:d8:36:3f:e0:66:15:03:77:b3:47:fb:a3:ae:0c:ac: 69:10:da:94:77:3a:2c:10:31:f0:b0:0e:12:51:73:da:ac:8c: f5:39:a1:ba:c4:1e:5d:0e:38:c0:64:7c:f4:ae:33:02:ee:41: 80:21:0b:b1:6b:f4:70:d7:0d:38:88:52:10:7f:a1:cf:0d:1f: 1c:21:96:ed:a1:67:3a:9a:1e:f0:e6:84:d8:32:13:f6:c1:2b: 0a:71:a4:ac:58:71:9a:62:dc:d0:ed:ba:9d:01:d7:5b:95:b7: 4a:09:49:97:72:8d:a7:c5:ca:88:fd:5e:84:27:58:cc:11:cb: 95:83:bf:09:a3:c3:1c:e2:fd:1e:2c:5e:c0:9e:0f:dc:de:66: c6:8c:90:cf:66:ec:35:c4:ed:2a:d0:45:6c:cb:a7:11:96:d5: b0:6a:fe:93:d6:c0:0e:f5:b4:a2:83:81:f4:b9:b6:8e:1c:05: 91:17:92:5c:0c:df:d9:66:95:58:30:da:72:88:cf:5f:5e:cf: 53:71:72:de:50:24:26:54:0e:aa:9b:44:b8:a2:c4:2c:b4:3f: 22:b0:e0:be:10:58:e3:02:26:93:37:2b:77:7c:0e:e2:d0:32: f8:11:12:b9:48:ec:63:00:61:16:63:d0:c5:36:af:ab:6f:e4: c2:81:e8:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJDiN0fNz5/0UcuaoCVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTUwMzdhOWVmMGZhZjgxNDhkYjdlZGM2ZWZkNTFhMmIxMjBjYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHlqAWROgrpkVDbqgoZrwH41Fa97 6NOOXM4Z2Suee1XmDl4EyrP0iyd/O4gPBwuiEJFELZ+YSSRz3TGMSqfmwzhwaX10 qgzh4toycynWwbwbV98XeRwvhyiJUxuLjsn3vd9J5KSrwW899vzPPGejh1td181s v3TkJnVjjqWbAwHkNvoiitTQ78d4piueSLt1sNjdm1YZHLwXj4Qi0e3HXTynmxGu TcIdCBHQlgwWhfEZjmKgVJbFnNwmiCTqL1JsIm7HBCZR3mlmFtSsVaLJfeuTZ0O1 JJ/Jy/SNTDIzlB3JbKkcgHnQBqO8bu2IxsGTobevzS2trIATalSM5pg/6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDlQN6nvD6+BSNt+3G79UaKxIMqRMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvT1ZBM3FlOFByNEZJMjM3Y2J2MVJvckVneXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznXMA0G CSqGSIb3DQEBCwUAA4IBAQCGjQnYNj/gZhUDd7NH+6OuDKxpENqUdzosEDHwsA4S UXParIz1OaG6xB5dDjjAZHz0rjMC7kGAIQuxa/Rw1w04iFIQf6HPDR8cIZbtoWc6 mh7w5oTYMhP2wSsKcaSsWHGaYtzQ7bqdAddblbdKCUmXco2nxcqI/V6EJ1jMEcuV g78Jo8Mc4v0eLF7Ang/c3mbGjJDPZuw1xO0q0EVsy6cRltWwav6T1sAO9bSig4H0 ubaOHAWRF5JcDN/ZZpVYMNpyiM9fXs9TcXLeUCQmVA6qm0S4osQstD8isOC+EFjj AiaTNyt3fA7i0DL4ERK5SOxjAGEWY9DFNq+rb+TCgegX -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:56 2026 by rpki-client