This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rgs42VbhFs03Bj5mpyixyccMAdA.roa File: Rgs42VbhFs03Bj5mpyixyccMAdA.roa (raw, json) Hash identifier: MaUdIb9Ymlge3DK9tcYNniT35IN5P/5vvQVar0x5X9k= Subject key identifier: 46:0B:38:D9:56:E1:16:CD:37:06:3E:66:A7:28:B1:C9:C7:0C:01:D0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BD2B649F93635770DE68257DB76291FDC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rgs42VbhFs03Bj5mpyixyccMAdA.roa Signing time: Sun 18 Jan 2026 20:05:20 +0000 ROA not before: Sun 18 Jan 2026 20:05:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 31.57.221.0/24 maxlen: 24 31.58.139.0/24 maxlen: 24 31.59.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:b6:49:f9:36:35:77:0d:e6:82:57:db:76:29:1f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 18 20:05:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=460b38d956e116cd37063e66a728b1c9c70c01d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:58:d6:77:ae:ff:3d:ab:fa:43:32:2c:c7: 73:6c:31:80:ec:2f:66:47:f6:27:d7:b6:2d:ec:28: 02:12:89:20:c9:54:b9:a8:e3:a9:a1:6c:7b:0b:31: c2:e1:cb:0e:1b:19:09:ce:7e:5d:81:ba:8e:f6:83: 28:d9:f2:5f:0b:17:78:38:d0:b4:e6:d4:fc:7b:8e: 03:d6:0a:18:bc:f8:c7:ef:f7:94:9a:97:c9:ec:d5: 15:03:d7:1f:5b:4b:3a:0d:a7:21:bf:04:50:a1:2b: 18:e4:7b:dc:2a:a7:1b:4a:c3:ca:0e:a4:54:e7:90: fe:c0:ab:1f:bb:ff:bf:a2:33:20:65:02:39:04:6a: 84:9c:2a:70:96:e8:ae:50:07:38:20:55:f0:c3:1a: 45:cf:87:15:1c:bf:30:5f:7d:0d:23:9d:fc:9a:ee: de:d2:be:89:b0:3c:2c:48:31:9c:46:b3:0a:76:83: 79:72:4d:91:81:9f:07:f2:13:32:e2:67:52:f5:9c: e3:50:3c:f0:39:4b:11:ee:ff:c0:43:17:5b:eb:a7: a9:5c:d2:5d:55:75:4b:1a:5c:dd:ca:61:ab:c8:67: 67:87:b4:9e:f3:df:96:c1:94:fb:08:c7:54:fb:ac: b4:68:fe:5d:76:a3:d6:96:9c:c4:0e:8c:65:8a:2c: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:38:D9:56:E1:16:CD:37:06:3E:66:A7:28:B1:C9:C7:0C:01:D0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rgs42VbhFs03Bj5mpyixyccMAdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.221.0/24 31.58.139.0/24 31.59.199.0/24 Signature Algorithm: sha256WithRSAEncryption 96:a9:a0:ff:c8:e5:a2:c2:d0:de:fc:d9:50:ef:40:e0:d7:6f: d1:af:b9:63:12:bd:07:67:e7:ae:00:dc:32:d0:68:fb:61:52: 46:f5:3d:fc:4b:a8:9e:9b:1a:4c:00:d1:0f:c5:5e:c5:a8:1b: 19:b6:08:0c:47:02:db:9a:38:b8:b7:4d:f0:02:fe:1e:df:16: 04:47:c1:be:ce:e1:70:23:cb:01:b9:c5:d7:32:34:c8:fb:df: 9e:00:50:80:5c:6e:27:56:51:65:94:f2:98:bb:1c:c7:03:06: 7c:2c:90:bc:70:b2:04:a0:7a:2d:5a:a7:ce:98:e8:73:da:c6: f8:81:34:81:e2:71:4b:69:99:42:9f:bb:c5:21:5d:80:f6:cb: b0:80:ac:fa:2b:d9:8b:ff:fd:f9:9d:fe:45:c5:73:65:c1:36: 81:fd:5f:19:d4:0a:27:29:4f:fd:01:7a:4a:a8:a3:b6:48:74: dc:f2:f7:ab:32:47:f7:01:1a:17:5f:92:59:7a:aa:73:aa:7e: 51:b4:24:f7:51:a3:09:fe:a1:ec:5e:19:f2:a4:ea:65:a5:23: dd:b6:95:38:e7:a8:8e:e0:c7:f6:de:6f:8a:b9:b9:52:6a:85: 3e:2f:7f:b3:eb:ce:61:b7:19:c6:8a:e6:fb:33:7a:bb:49:8d: c9:0b:d1:f7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvStkn5NjV3DeaCV9t2KR/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE4MjAwNTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBiMzhkOTU2ZTExNmNkMzcwNjNlNjZhNzI4YjFjOWM3MGMwMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuJY1neu/z2r+kMyLMdzbDGA7C9m R/Yn17Yt7CgCEokgyVS5qOOpoWx7CzHC4csOGxkJzn5dgbqO9oMo2fJfCxd4ONC0 5tT8e44D1goYvPjH7/eUmpfJ7NUVA9cfW0s6DachvwRQoSsY5HvcKqcbSsPKDqRU 55D+wKsfu/+/ojMgZQI5BGqEnCpwluiuUAc4IFXwwxpFz4cVHL8wX30NI538mu7e 0r6JsDwsSDGcRrMKdoN5ck2RgZ8H8hMy4mdS9ZzjUDzwOUsR7v/AQxdb66epXNJd VXVLGlzdymGryGdnh7Se89+WwZT7CMdU+6y0aP5ddqPWlpzEDoxliiwmHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEYLONlW4RbNNwY+ZqcoscnHDAHQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUmdzNDJWYmhGczAzQmo1bXB5aXh5Y2NNQWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzndAwQA HzqLAwQAHzvHMA0GCSqGSIb3DQEBCwUAA4IBAQCWqaD/yOWiwtDe/NlQ70Dg12/R r7ljEr0HZ+euANwy0Gj7YVJG9T38S6iemxpMANEPxV7FqBsZtggMRwLbmji4t03w Av4e3xYER8G+zuFwI8sBucXXMjTI+9+eAFCAXG4nVlFllPKYuxzHAwZ8LJC8cLIE oHotWqfOmOhz2sb4gTSB4nFLaZlCn7vFIV2A9suwgKz6K9mL//35nf5FxXNlwTaB /V8Z1AonKU/9AXpKqKO2SHTc8verMkf3ARoXX5JZeqpzqn5RtCT3UaMJ/qHsXhny pOplpSPdtpU456iO4Mf23m+KublSaoU+L3+z685htxnGiub7M3q7SY3JC9H3 -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:36 2026 by rpki-client