This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PC95I6HmEO-7oX9U2MndTm0Az1U.roa File: PC95I6HmEO-7oX9U2MndTm0Az1U.roa (raw, json) Hash identifier: dIUFmvRna7oBbT++9dOT8wi8AM+tnTpUJNZgymOUFcI= Subject key identifier: 3C:2F:79:23:A1:E6:10:EF:BB:A1:7F:54:D8:C9:DD:4E:6D:00:CF:55 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846590E8BFB160A711E31996B5AC16 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PC95I6HmEO-7oX9U2MndTm0Az1U.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 31.56.116.0/24 maxlen: 24 31.56.127.0/24 maxlen: 24 31.57.192.0/24 maxlen: 24 31.57.193.0/24 maxlen: 24 31.57.195.0/24 maxlen: 24 31.57.232.0/24 maxlen: 24 31.57.233.0/24 maxlen: 24 31.57.234.0/24 maxlen: 24 31.57.235.0/24 maxlen: 24 31.58.141.0/24 maxlen: 24 31.58.145.0/24 maxlen: 24 31.58.148.0/24 maxlen: 24 31.58.149.0/24 maxlen: 24 31.58.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:65:90:e8:bf:b1:60:a7:11:e3:19:96:b5:ac:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c2f7923a1e610efbba17f54d8c9dd4e6d00cf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:2f:43:36:e4:cc:ff:15:4d:dd:1a:f1:c4: a6:53:7c:ea:30:e4:8a:a8:04:e5:ac:c9:c1:f9:5c: 38:c1:35:99:63:0e:23:dc:a6:7c:75:c3:fc:22:d8: 91:5b:86:e9:ce:51:42:d8:5e:80:1f:97:36:27:28: d8:72:4d:62:b7:79:43:05:3a:70:67:18:3f:8a:76: 68:23:a1:6d:e2:80:eb:91:55:51:c7:0d:de:63:89: 12:22:33:61:a6:4c:bd:37:2e:6e:e8:64:82:99:2b: fb:48:94:98:c3:6b:9a:7d:91:50:79:ee:0e:64:ee: 4b:f7:ec:71:3a:8c:48:8c:c2:4f:9e:aa:4b:8b:af: fd:b3:74:8d:3b:00:3c:54:aa:03:c2:e3:37:e6:be: 51:4c:af:03:99:78:54:0b:34:f0:4a:32:3f:b8:90: 1b:0b:5e:c9:1a:1e:05:60:c7:0f:7c:1c:be:18:80: f0:1b:2e:f1:bb:69:fa:75:2a:16:28:88:d3:de:5c: 1c:ad:3d:7d:0b:d5:d8:97:af:9b:c0:19:ce:6b:34: 18:60:f1:16:5c:d1:84:b9:03:25:2e:bd:ca:dc:f9: 88:db:08:b7:60:61:07:83:c7:fc:0b:90:ea:a2:22: fb:eb:06:71:7c:0a:d4:b9:80:40:e3:71:9e:ba:30: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2F:79:23:A1:E6:10:EF:BB:A1:7F:54:D8:C9:DD:4E:6D:00:CF:55 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PC95I6HmEO-7oX9U2MndTm0Az1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.116.0/24 31.56.127.0/24 31.57.192.0/23 31.57.195.0/24 31.57.232.0/22 31.58.141.0/24 31.58.145.0/24 31.58.148.0/23 31.58.151.0/24 Signature Algorithm: sha256WithRSAEncryption 61:1d:6e:ef:a7:b1:33:55:bb:b9:8a:05:68:d6:8c:0e:12:4b: ee:ad:c5:2d:16:8f:f0:8e:d0:ce:be:8d:19:93:cc:71:08:e1: c3:ac:ec:e0:db:e0:37:28:d2:90:43:0b:3a:e5:60:b1:73:44: bf:07:f4:bb:f6:ea:37:b9:b4:21:72:89:6c:f4:1d:df:ff:a7: 2e:38:ae:94:e2:7b:9e:4a:fc:2d:af:d8:02:41:75:6c:ee:29: 92:d4:b6:07:46:b0:a5:08:5c:eb:11:2d:89:0b:85:b0:9d:a1: e9:6c:d9:b0:59:fe:34:3b:dc:49:cd:7e:c8:bd:6f:bc:13:ce: 2d:0b:49:36:f2:26:59:17:fe:fd:b3:e4:fd:bd:f2:68:ec:76: f5:69:dc:a4:44:49:e7:21:00:c3:da:72:ba:41:eb:9b:af:8d: f0:47:c5:11:14:18:94:c1:d7:ae:78:7b:a9:89:78:d8:37:a8: 48:77:f3:53:9c:e5:fe:c0:e8:bd:08:9d:ce:86:9a:07:9a:8f: 07:dc:d2:8f:a8:34:2b:56:22:50:3c:40:ff:74:4d:2b:10:82: 50:4a:b0:b7:b3:95:f4:b7:a8:bf:16:b5:92:d1:b4:e3:ed:08: 35:b5:ac:fe:5c:c0:eb:08:0e:bc:d5:fb:db:12:b8:a7:af:bb: 8b:35:97:78 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/hGWQ6L+xYKcR4xmWtawWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzJmNzkyM2ExZTYxMGVmYmJhMTdmNTRkOGM5ZGQ0ZTZkMDBjZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx8vQzbkzP8VTd0a8cSmU3zqMOSK qATlrMnB+Vw4wTWZYw4j3KZ8dcP8ItiRW4bpzlFC2F6AH5c2JyjYck1it3lDBTpw Zxg/inZoI6Ft4oDrkVVRxw3eY4kSIjNhpky9Ny5u6GSCmSv7SJSYw2uafZFQee4O ZO5L9+xxOoxIjMJPnqpLi6/9s3SNOwA8VKoDwuM35r5RTK8DmXhUCzTwSjI/uJAb C17JGh4FYMcPfBy+GIDwGy7xu2n6dSoWKIjT3lwcrT19C9XYl6+bwBnOazQYYPEW XNGEuQMlLr3K3PmI2wi3YGEHg8f8C5DqoiL76wZxfArUuYBA43GeujBBeQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFDwveSOh5hDvu6F/VNjJ3U5tAM9VMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUEM5NUk2SG1FTy03b1g5VTJNbmRUbTBBejFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAHzh0AwQA Hzh/AwQBHznAAwQAHznDAwQCHznoAwQAHzqNAwQAHzqRAwQBHzqUAwQAHzqXMA0G CSqGSIb3DQEBCwUAA4IBAQBhHW7vp7EzVbu5igVo1owOEkvurcUtFo/wjtDOvo0Z k8xxCOHDrOzg2+A3KNKQQws65WCxc0S/B/S79uo3ubQhcols9B3f/6cuOK6U4nue Svwtr9gCQXVs7imS1LYHRrClCFzrES2JC4WwnaHpbNmwWf40O9xJzX7IvW+8E84t C0k28iZZF/79s+T9vfJo7Hb1adykREnnIQDD2nK6Qeubr43wR8URFBiUwdeueHup iXjYN6hId/NTnOX+wOi9CJ3OhpoHmo8H3NKPqDQrViJQPED/dE0rEIJQSrC3s5X0 t6i/FrWS0bTj7Qg1taz+XMDrCA681fvbErinr7uLNZd4 -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:49 2026 by rpki-client