This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R1XZD105F1xKWt_RR993N6DYRlA.roa File: R1XZD105F1xKWt_RR993N6DYRlA.roa (raw, json) Hash identifier: ToRuzgmvbjtt1Ew2NWvflGNsnxrB5OznodJLLwXRnZ0= Subject key identifier: 47:55:D9:0F:5D:39:17:5C:4A:5A:DF:D1:47:DF:77:37:A0:D8:46:50 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D88514D6DD29133C90E18C7B4146 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R1XZD105F1xKWt_RR993N6DYRlA.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272011 IP address blocks: 31.59.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d8:85:14:d6:dd:29:13:3c:90:e1:8c:7b:41:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4755d90f5d39175c4a5adfd147df7737a0d84650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:5b:db:f3:6a:4a:d4:c6:82:c4:83:99:cc: a7:14:8a:1b:7d:08:97:42:94:6a:03:79:97:19:a2: 0b:5d:3c:cd:ff:21:d7:6f:33:1f:55:22:9c:48:77: 89:be:9d:d6:65:11:0e:74:b6:0a:1d:85:2e:f3:e9: da:b2:5b:1c:2f:27:5c:a7:06:53:5f:33:c0:b9:d6: e8:57:98:67:43:16:76:ba:fc:72:8c:c8:b4:fd:52: a1:75:d5:e8:a8:1a:76:8b:14:c7:5e:ae:91:b3:df: 9f:0c:d7:42:2a:58:40:c2:aa:6b:8a:14:89:de:b3: 48:26:4c:d5:4f:c5:11:97:df:8f:6d:17:ed:0e:90: ea:94:c3:44:7f:b0:cf:95:86:33:74:19:e4:01:0f: 17:bc:df:6a:47:e2:92:f2:26:18:fe:72:7f:dd:60: ba:cd:ff:90:42:6c:e7:c6:d6:e4:c8:92:a0:a8:b1: ea:1a:59:e7:cf:d0:85:96:e9:58:68:e7:98:49:01: ef:3c:e6:64:c4:6b:60:21:ff:4e:27:5a:94:14:e6: 4c:68:03:71:42:b8:42:79:8e:17:d9:b5:9d:3c:5b: b5:f8:97:60:b7:f2:d1:99:4b:c0:de:3d:ef:2b:f6: eb:5b:82:e0:57:90:7a:b7:99:ce:f9:cc:be:35:91: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:55:D9:0F:5D:39:17:5C:4A:5A:DF:D1:47:DF:77:37:A0:D8:46:50 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R1XZD105F1xKWt_RR993N6DYRlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.42.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c9:b7:c0:01:0b:1d:a0:41:db:28:40:11:53:c3:fd:08:19: c6:86:35:fb:c8:e2:aa:56:88:18:51:79:91:b2:ac:bd:70:d9: 43:d4:67:3e:51:19:d3:e8:93:7b:44:f0:5b:06:83:8c:f5:b7: 05:f1:1b:01:22:bb:c0:83:36:1b:f5:bc:76:38:69:77:5d:4b: 93:de:58:16:ef:19:7e:fa:28:5e:9c:32:74:be:10:a6:3b:22: 69:40:43:f1:4e:2e:4b:dc:ce:49:01:87:71:29:79:83:55:64: 01:3f:0b:d1:23:d6:c2:fe:37:e2:a4:a1:e5:a6:3b:92:99:99: 0a:b7:d6:fc:a6:cd:c9:e3:f9:d7:c1:c4:f3:c1:49:f0:ec:a2: 04:21:18:40:ef:0c:b7:60:53:f2:42:2a:36:2b:36:28:27:6e: 53:4c:ff:40:65:fd:dc:01:78:98:82:22:06:11:5e:f3:fa:c4: 6e:0e:89:f5:fa:0f:3c:7e:e4:ed:13:b2:8e:9f:af:c5:e8:8e: 7c:bf:c3:8a:2d:ff:86:d7:3c:43:75:d8:b6:6d:68:52:3a:bd: 48:d9:30:52:48:d2:9e:34:9b:d4:d7:9f:c6:94:18:e4:78:f6: 64:b8:a3:b6:74:41:fb:4c:0f:e3:3b:bc:24:95:07:5e:f3:97: 48:68:19:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNiFFNbdKRM8kOGMe0FGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzU1ZDkwZjVkMzkxNzVjNGE1YWRmZDE0N2RmNzczN2EwZDg0NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDhb2/NqStTGgsSDmcynFIobfQiX QpRqA3mXGaILXTzN/yHXbzMfVSKcSHeJvp3WZREOdLYKHYUu8+naslscLydcpwZT XzPAudboV5hnQxZ2uvxyjMi0/VKhddXoqBp2ixTHXq6Rs9+fDNdCKlhAwqprihSJ 3rNIJkzVT8URl9+PbRftDpDqlMNEf7DPlYYzdBnkAQ8XvN9qR+KS8iYY/nJ/3WC6 zf+QQmznxtbkyJKgqLHqGlnnz9CFlulYaOeYSQHvPOZkxGtgIf9OJ1qUFOZMaANx QrhCeY4X2bWdPFu1+Jdgt/LRmUvA3j3vK/brW4LgV5B6t5nO+cy+NZHBxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEdV2Q9dORdcSlrf0Uffdzeg2EZQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUjFYWkQxMDVGMXhLV3RfUlI5OTNONkRZUmxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzsqMA0G CSqGSIb3DQEBCwUAA4IBAQAEybfAAQsdoEHbKEARU8P9CBnGhjX7yOKqVogYUXmR sqy9cNlD1Gc+URnT6JN7RPBbBoOM9bcF8RsBIrvAgzYb9bx2OGl3XUuT3lgW7xl+ +ihenDJ0vhCmOyJpQEPxTi5L3M5JAYdxKXmDVWQBPwvRI9bC/jfipKHlpjuSmZkK t9b8ps3J4/nXwcTzwUnw7KIEIRhA7wy3YFPyQio2KzYoJ25TTP9AZf3cAXiYgiIG EV7z+sRuDon1+g88fuTtE7KOn6/F6I58v8OKLf+G1zxDddi2bWhSOr1I2TBSSNKe NJvU15/GlBjkePZkuKO2dEH7TA/jO7wklQde85dIaBkU -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:06 2026 by rpki-client