This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rch-8Ata31P9w8aZa20Npx5RUAY.roa File: Rch-8Ata31P9w8aZa20Npx5RUAY.roa (raw, json) Hash identifier: rskjYje688BBT9Y0DsuSx4XYtS40wHGqEqswNrtnGB4= Subject key identifier: 45:C8:7E:F0:0B:5A:DF:53:FD:C3:C6:99:6B:6D:0D:A7:1E:51:50:06 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849935AD47A5ABF96ABC7A6DAF7512 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rch-8Ata31P9w8aZa20Npx5RUAY.roa Signing time: Fri 02 Jan 2026 16:22:34 +0000 ROA not before: Fri 02 Jan 2026 16:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 31.58.18.0/24 maxlen: 24 31.58.22.0/24 maxlen: 24 31.58.28.0/24 maxlen: 24 31.58.32.0/24 maxlen: 24 31.59.15.0/24 maxlen: 24 31.59.20.0/24 maxlen: 24 31.59.21.0/24 maxlen: 24 31.59.27.0/24 maxlen: 24 31.59.28.0/24 maxlen: 24 31.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:99:35:ad:47:a5:ab:f9:6a:bc:7a:6d:af:75:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45c87ef00b5adf53fdc3c6996b6d0da71e515006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:45:2c:32:a3:5a:ff:7e:ed:f6:a3:a8:8c: c9:98:d9:fa:de:d9:91:02:2b:85:b3:2b:82:7f:d2: 7e:d4:40:68:8e:d2:fc:cc:66:26:4e:6c:ce:5f:43: e4:cb:f6:4c:83:14:0d:89:19:44:f0:b4:c9:c6:69: ed:b3:ca:97:3c:88:7a:4c:22:c9:28:e4:93:85:4e: 1e:41:a9:a0:c3:6a:82:74:14:fb:0f:0d:1e:c5:da: a4:4c:c0:1c:e9:bd:0e:c2:07:fa:86:a8:33:fb:c4: d9:f6:73:cd:c3:d3:a9:d3:01:c3:8b:77:2e:8d:b1: 81:4c:3c:35:22:5d:53:40:85:66:36:3e:76:b2:72: f5:85:80:8d:7d:59:00:81:d8:3d:d5:61:d4:97:67: 1a:f8:6e:53:0a:13:a8:7d:0d:1f:04:aa:d5:65:c6: 0c:6a:54:bd:8a:ff:29:2d:ee:c7:46:42:f7:57:df: 0c:ca:bc:7c:0f:9d:71:1b:96:d5:c5:d7:9e:11:14: 82:bc:92:65:b4:8d:2c:38:7a:f3:15:e6:11:8c:3d: 88:fa:85:30:38:bc:8a:a3:51:68:4c:2c:0d:01:e1: 2d:b1:1e:ad:64:3b:8c:48:68:ef:d1:d6:5d:1d:63: 12:67:b6:a5:ae:ab:05:60:44:ab:05:49:42:09:72: e7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C8:7E:F0:0B:5A:DF:53:FD:C3:C6:99:6B:6D:0D:A7:1E:51:50:06 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rch-8Ata31P9w8aZa20Npx5RUAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.18.0/24 31.58.22.0/24 31.58.28.0/24 31.58.32.0/24 31.59.15.0/24 31.59.20.0/23 31.59.27.0-31.59.28.255 31.59.33.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:25:75:05:09:b6:a4:4c:70:bf:c7:e2:4d:a7:e8:46:70:1c: 57:eb:e8:1a:a2:93:41:56:73:c4:71:ba:ad:8d:cc:47:ff:e2: f8:bd:97:67:8b:1b:cf:0b:9c:b1:1c:80:14:5c:3e:65:c1:66: 17:b1:2a:3d:42:ba:dc:3d:23:f1:66:ec:10:25:b4:87:6e:f2: d0:75:e7:dc:0b:b7:9a:a0:04:19:01:f8:81:33:42:07:fa:9c: 76:ed:1e:b0:64:72:7a:46:15:4b:84:99:9e:10:7d:9a:0a:c6: 93:46:9c:c2:bd:11:cf:2b:3b:a6:6f:af:bc:d4:28:4a:06:88: b9:a5:f9:d4:61:c4:93:06:b5:2d:6a:b7:1f:64:0d:49:26:4c: 2e:fb:c8:af:1d:43:20:29:e1:34:f3:6f:12:d2:07:71:ba:21: 11:07:b4:00:d0:45:34:86:32:79:ec:d8:8f:3b:7c:cc:d2:5a: c2:74:55:a5:3e:28:cb:93:88:7a:94:8a:cd:88:ac:de:46:bb: 18:16:22:07:ee:3c:b7:5b:be:5b:4e:bb:5e:ef:b2:cf:d4:c3: 29:06:95:34:7c:60:d4:3c:09:44:f7:a7:3a:5b:07:86:bd:9a: 09:82:04:57:cf:88:b0:74:9b:39:8e:da:8d:18:e3:dd:88:ef: 04:7e:fd:0a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt/hJk1rUelq/lqvHptr3USMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWM4N2VmMDBiNWFkZjUzZmRjM2M2OTk2YjZkMGRhNzFlNTE1MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJdFLDKjWv9+7fajqIzJmNn63tmR AiuFsyuCf9J+1EBojtL8zGYmTmzOX0Pky/ZMgxQNiRlE8LTJxmnts8qXPIh6TCLJ KOSThU4eQamgw2qCdBT7Dw0exdqkTMAc6b0Owgf6hqgz+8TZ9nPNw9Op0wHDi3cu jbGBTDw1Il1TQIVmNj52snL1hYCNfVkAgdg91WHUl2ca+G5TChOofQ0fBKrVZcYM alS9iv8pLe7HRkL3V98Myrx8D51xG5bVxdeeERSCvJJltI0sOHrzFeYRjD2I+oUw OLyKo1FoTCwNAeEtsR6tZDuMSGjv0dZdHWMSZ7alrqsFYESrBUlCCXLncwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFEXIfvALWt9T/cPGmWttDaceUVAGMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUmNoLThBdGEzMVA5dzhhWmEyME5weDVSVUFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAHzoSAwQA HzoWAwQAHzocAwQAHzogAwQAHzsPAwQBHzsUMAwDBAAfOxsDBAAfOxwDBAAfOyEw DQYJKoZIhvcNAQELBQADggEBAGoldQUJtqRMcL/H4k2n6EZwHFfr6Bqik0FWc8Rx uq2NzEf/4vi9l2eLG88LnLEcgBRcPmXBZhexKj1Cutw9I/Fm7BAltIdu8tB159wL t5qgBBkB+IEzQgf6nHbtHrBkcnpGFUuEmZ4QfZoKxpNGnMK9Ec8rO6Zvr7zUKEoG iLml+dRhxJMGtS1qtx9kDUkmTC77yK8dQyAp4TTzbxLSB3G6IREHtADQRTSGMnns 2I87fMzSWsJ0VaU+KMuTiHqUis2IrN5GuxgWIgfuPLdbvltOu17vss/UwykGlTR8 YNQ8CUT3pzpbB4a9mgmCBFfPiLB0mzmO2o0Y492I7wR+/Qo= -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:45 2026 by rpki-client