This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q96-CvZS1RqMRtMoEnrxqlc0dPo.roa File: Q96-CvZS1RqMRtMoEnrxqlc0dPo.roa (raw, json) Hash identifier: aG8BX09kN24G4tEhhLf6jskeNWxvzaghjNiQ+4oKW3Q= Subject key identifier: 43:DE:BE:0A:F6:52:D5:1A:8C:46:D3:28:12:7A:F1:AA:57:34:74:FA Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B8F84BF1E2747A17E2B6D2A0783011C14 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q96-CvZS1RqMRtMoEnrxqlc0dPo.roa Signing time: Mon 05 Jan 2026 18:56:39 +0000 ROA not before: Mon 05 Jan 2026 18:56:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 31.56.84.0/24 maxlen: 24 31.57.190.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 31.59.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:84:bf:1e:27:47:a1:7e:2b:6d:2a:07:83:01:1c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 5 18:56:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43debe0af652d51a8c46d328127af1aa573474fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:f4:43:54:67:fe:f0:19:85:d9:ac:92:9f: 86:9b:cc:cf:69:24:2e:f2:3a:f7:b0:ba:e9:f0:d5: db:48:6d:5d:16:77:73:cf:12:c6:9d:bb:74:05:e4: 54:57:08:0c:33:b1:bc:62:01:c9:a9:61:0d:63:d5: 2c:67:30:a2:49:92:4d:01:c8:f9:21:cd:24:4c:72: 44:ec:18:ed:cc:43:ea:eb:3c:24:6b:2c:99:c2:53: 0a:a5:13:89:c1:30:e6:f2:4d:77:3a:ff:c7:b7:66: 8e:58:61:6b:51:71:4a:74:e0:a6:13:6a:45:70:38: a2:f1:02:db:8a:e0:c2:53:b7:a8:4d:63:ed:f0:37: 22:b1:d8:b8:76:a2:7d:38:f0:dd:54:47:76:af:6d: d5:b2:77:21:4f:66:1e:6e:1c:87:62:db:09:2a:45: 51:f8:6a:cf:68:a5:e1:1d:72:0e:78:96:d7:75:bc: e8:b0:1d:a8:87:c4:7c:eb:22:8c:5b:36:ae:98:af: 7a:43:33:36:a0:71:6f:8a:60:39:41:03:5f:0f:87: d3:2c:44:e1:dd:12:ef:0a:d4:ce:cf:5c:e5:4c:04: 98:98:e7:5b:5e:4d:01:a8:68:57:88:76:2f:f4:72: 33:a6:8d:ca:94:da:04:8f:26:36:65:43:19:2d:3e: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DE:BE:0A:F6:52:D5:1A:8C:46:D3:28:12:7A:F1:AA:57:34:74:FA X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q96-CvZS1RqMRtMoEnrxqlc0dPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.84.0/24 31.57.190.0/24 31.58.131.0/24 31.59.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:94:6e:e0:e6:6a:75:2f:18:5d:d1:82:e0:85:d6:43:22:3d: 73:41:23:da:12:0a:f4:49:b0:12:2b:32:9c:2b:b3:70:49:3f: 1e:d2:c8:4b:02:86:9a:c3:04:3e:1d:79:1a:70:7b:b8:6b:d2: 7d:ab:db:19:12:aa:78:cb:94:2a:27:05:6a:ec:ae:31:c6:93: eb:ea:28:ac:0a:d6:fb:d2:f7:74:4a:db:db:71:44:49:ea:7e: c8:ea:d6:24:50:40:12:01:4d:b0:47:0e:9a:f7:45:1a:1d:29: 0e:d8:8f:ee:9d:12:c0:4c:ab:48:7a:74:2f:84:7a:ab:dd:e2: de:68:a8:38:92:c8:3c:ae:4e:0a:fe:44:b3:5c:0e:cc:65:7b: f4:51:b2:37:2f:cf:f6:45:19:49:87:9e:d4:b9:85:d3:88:a2: 0a:c9:48:40:11:bd:68:74:23:b0:02:35:d4:ec:07:20:77:09: e1:87:c3:3f:19:b7:7d:6e:07:a0:77:44:09:25:ad:7c:9a:85: 08:83:21:c9:28:fb:45:cd:d1:b9:dd:5a:2f:82:6e:82:78:63: 7b:e2:b0:fb:0a:71:38:63:20:b3:86:71:98:24:8f:51:7d:99: dd:a6:94:3e:bf:a5:32:51:62:e1:a6:f3:61:89:fb:a6:3e:81: 86:12:c3:46 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuPhL8eJ0ehfittKgeDARwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA1MTg1NjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2RlYmUwYWY2NTJkNTFhOGM0NmQzMjgxMjdhZjFhYTU3MzQ3NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox30Q1Rn/vAZhdmskp+Gm8zPaSQu 8jr3sLrp8NXbSG1dFndzzxLGnbt0BeRUVwgMM7G8YgHJqWENY9UsZzCiSZJNAcj5 Ic0kTHJE7BjtzEPq6zwkayyZwlMKpROJwTDm8k13Ov/Ht2aOWGFrUXFKdOCmE2pF cDii8QLbiuDCU7eoTWPt8Dcisdi4dqJ9OPDdVEd2r23VsnchT2YebhyHYtsJKkVR +GrPaKXhHXIOeJbXdbzosB2oh8R86yKMWzaumK96QzM2oHFvimA5QQNfD4fTLETh 3RLvCtTOz1zlTASYmOdbXk0BqGhXiHYv9HIzpo3KlNoEjyY2ZUMZLT6MkQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEPevgr2UtUajEbTKBJ68apXNHT6MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUTk2LUN2WlMxUnFNUnRNb0VucnhxbGMwZFBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhUAwQA Hzm+AwQAHzqDAwQAHzvGMA0GCSqGSIb3DQEBCwUAA4IBAQAclG7g5mp1Lxhd0YLg hdZDIj1zQSPaEgr0SbASKzKcK7NwST8e0shLAoaawwQ+HXkacHu4a9J9q9sZEqp4 y5QqJwVq7K4xxpPr6iisCtb70vd0StvbcURJ6n7I6tYkUEASAU2wRw6a90UaHSkO 2I/unRLATKtIenQvhHqr3eLeaKg4ksg8rk4K/kSzXA7MZXv0UbI3L8/2RRlJh57U uYXTiKIKyUhAEb1odCOwAjXU7Acgdwnhh8M/Gbd9bgegd0QJJa18moUIgyHJKPtF zdG53Vovgm6CeGN74rD7CnE4YyCzhnGYJI9RfZndppQ+v6UyUWLhpvNhifumPoGG EsNG -----END CERTIFICATE-----Generated at Sat Jan 10 09:45:18 2026 by rpki-client