This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pws8nAKegNPIealNWgXwmMqWpAc.roa File: Pws8nAKegNPIealNWgXwmMqWpAc.roa (raw, json) Hash identifier: w8gCh6UtbahlYjiycX7eTWcR+GIVWSoIuEbWSMZudas= Subject key identifier: 3F:0B:3C:9C:02:9E:80:D3:C8:79:A9:4D:5A:05:F0:98:CA:96:A4:07 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D5095ECFC0FA978A8A68D3050D30 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pws8nAKegNPIealNWgXwmMqWpAc.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 31.57.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d5:09:5e:cf:c0:fa:97:8a:8a:68:d3:05:0d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f0b3c9c029e80d3c879a94d5a05f098ca96a407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:9d:f0:f9:9e:c0:cf:c8:de:4b:75:4a:43: dd:a2:bd:27:63:59:58:32:b6:a3:20:66:69:e8:7f: a5:ad:50:1e:85:45:ce:6d:07:09:6a:e1:16:b5:1f: 99:30:18:0c:af:f8:ee:30:2f:7b:14:5c:f1:1d:42: 20:cf:6f:5c:30:47:9b:7c:1c:37:a5:f2:52:f4:0a: 17:a8:3b:76:d4:8a:d0:e8:a0:55:ad:e7:fc:62:9d: 7b:cd:9b:4c:55:72:7c:01:67:0e:8c:43:57:c8:72: 85:4f:94:7a:0b:ee:3e:95:ba:55:32:60:6a:e9:e9: ca:32:3c:ef:dd:76:22:be:de:41:69:a1:d9:56:88: 28:80:e0:6d:d8:32:c0:9a:1e:f5:31:67:99:ca:3b: 86:9f:96:c7:bf:31:cb:c4:2a:23:02:9c:dd:38:a4: 85:cc:ba:6d:56:6e:d1:42:6e:3a:41:43:23:9d:20: 2f:da:f6:98:49:76:a7:2e:95:37:d7:98:ce:5d:e1: bc:8b:a3:03:11:36:ba:9d:5f:84:d4:8e:2e:55:b7: 3f:49:ff:4b:08:ad:00:1a:3e:a4:3f:6e:9f:8b:b2: c9:b6:be:e8:24:0a:5b:80:15:f1:5a:a0:b2:6a:7c: e6:5b:c2:c6:ed:87:dd:3f:ae:7e:d3:cf:cb:2e:cd: 2d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:3C:9C:02:9E:80:D3:C8:79:A9:4D:5A:05:F0:98:CA:96:A4:07 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Pws8nAKegNPIealNWgXwmMqWpAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.243.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:d3:1d:d6:fc:9a:d9:1c:55:ce:f3:25:5b:aa:22:0d:d6:3c: a7:39:47:b4:2e:cc:3f:4f:4f:7f:45:25:cb:df:af:87:01:ea: 8a:89:b5:0e:1d:f8:93:14:8f:65:4b:ac:b8:6f:d6:e5:f5:91: 8c:e5:26:3c:2c:be:82:76:b8:29:1c:35:b6:2e:fc:72:7b:d7: 5e:29:7d:21:ff:30:18:d5:42:da:37:27:48:5a:de:c7:04:bf: 71:cd:6b:fe:0c:ac:08:47:19:4f:5b:c1:73:f6:c4:87:93:52: 7f:93:c3:d1:e3:3d:cd:a9:9d:03:7b:37:cf:50:38:02:14:5a: 35:35:44:e4:1d:99:89:da:b5:2e:d7:8c:2a:5b:3d:e7:7d:06: 25:7e:89:09:ca:0d:77:58:82:4e:37:de:9d:cf:da:e0:78:03: 4b:5f:bf:8b:52:46:e1:ed:5f:8e:96:20:a2:a0:38:89:8f:a2: 4e:83:b0:dc:62:c4:44:c5:39:91:da:02:fa:0b:c7:49:34:37: 2b:71:ee:1c:20:48:e4:1b:45:0e:68:af:ac:c6:bf:84:46:c1: 3f:5c:3a:8e:cc:03:a6:2c:4e:28:2a:71:38:56:35:fe:de:54: 6a:33:38:fa:2d:7e:75:22:35:4c:9d:24:ee:ce:db:ee:84:51: 3c:a7:dd:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNUJXs/A+peKimjTBQ0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjBiM2M5YzAyOWU4MGQzYzg3OWE5NGQ1YTA1ZjA5OGNhOTZhNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Kd8PmewM/I3kt1SkPdor0nY1lY MrajIGZp6H+lrVAehUXObQcJauEWtR+ZMBgMr/juMC97FFzxHUIgz29cMEebfBw3 pfJS9AoXqDt21IrQ6KBVref8Yp17zZtMVXJ8AWcOjENXyHKFT5R6C+4+lbpVMmBq 6enKMjzv3XYivt5BaaHZVogogOBt2DLAmh71MWeZyjuGn5bHvzHLxCojApzdOKSF zLptVm7RQm46QUMjnSAv2vaYSXanLpU315jOXeG8i6MDETa6nV+E1I4uVbc/Sf9L CK0AGj6kP26fi7LJtr7oJApbgBXxWqCyanzmW8LG7YfdP65+08/LLs0taQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8LPJwCnoDTyHmpTVoF8JjKlqQHMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUHdzOG5BS2VnTlBJZWFsTldnWHdtTXFXcEFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznzMA0G CSqGSIb3DQEBCwUAA4IBAQAu0x3W/JrZHFXO8yVbqiIN1jynOUe0Lsw/T09/RSXL 36+HAeqKibUOHfiTFI9lS6y4b9bl9ZGM5SY8LL6CdrgpHDW2Lvxye9deKX0h/zAY 1ULaNydIWt7HBL9xzWv+DKwIRxlPW8Fz9sSHk1J/k8PR4z3NqZ0DezfPUDgCFFo1 NUTkHZmJ2rUu14wqWz3nfQYlfokJyg13WIJON96dz9rgeANLX7+LUkbh7V+OliCi oDiJj6JOg7DcYsRExTmR2gL6C8dJNDcrce4cIEjkG0UOaK+sxr+ERsE/XDqOzAOm LE4oKnE4VjX+3lRqMzj6LX51IjVMnSTuztvuhFE8p92V -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:51 2026 by rpki-client