This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S41swyD0Y96ezqnHBPhKtrO9xqk.roa File: S41swyD0Y96ezqnHBPhKtrO9xqk.roa (raw, json) Hash identifier: pbzsr3zWOHRP07H1RKBkA6CfPtGEgMlAQ4KgyAI2n7A= Subject key identifier: 4B:8D:6C:C3:20:F4:63:DE:9E:CE:A9:C7:04:F8:4A:B6:B3:BD:C6:A9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8479C973014EC3244B25E21500BE24 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S41swyD0Y96ezqnHBPhKtrO9xqk.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133296 IP address blocks: 31.57.68.0/22 maxlen: 24 31.58.0.0/24 maxlen: 24 31.58.1.0/24 maxlen: 24 31.58.2.0/24 maxlen: 24 31.58.3.0/24 maxlen: 24 31.58.4.0/24 maxlen: 24 31.58.5.0/24 maxlen: 24 31.58.6.0/24 maxlen: 24 31.58.7.0/24 maxlen: 24 31.58.8.0/24 maxlen: 24 31.58.80.0/22 maxlen: 24 31.58.104.0/22 maxlen: 24 31.58.112.0/22 maxlen: 24 31.58.120.0/22 maxlen: 24 31.59.48.0/22 maxlen: 24 31.59.60.0/22 maxlen: 24 31.59.248.0/24 maxlen: 24 31.59.249.0/24 maxlen: 24 31.59.250.0/24 maxlen: 24 31.59.251.0/24 maxlen: 24 31.59.252.0/24 maxlen: 24 31.59.253.0/24 maxlen: 24 31.59.254.0/24 maxlen: 24 31.59.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:79:c9:73:01:4e:c3:24:4b:25:e2:15:00:be:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b8d6cc320f463de9ecea9c704f84ab6b3bdc6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:46:53:47:48:bd:60:72:19:12:4d:24:f2: 27:b8:b1:ba:4f:fc:8f:f1:0c:11:13:2c:60:26:b2: 45:56:f7:15:0b:1f:1f:17:91:c9:8e:50:0a:1d:0f: ae:f9:1f:97:d1:06:3f:6c:7c:8d:77:af:9a:a2:f2: 69:07:b6:ff:af:29:70:10:8b:9c:53:66:be:ff:20: 9a:51:27:84:1b:9f:4c:71:ed:43:40:1e:a2:a3:8c: 54:2d:6a:53:50:6f:61:4a:ca:1b:86:39:0b:8c:c0: c8:ea:39:6f:de:6f:50:4d:93:fa:21:4a:d5:26:b0: 02:dc:4c:bd:4e:29:a8:8f:6a:88:f0:fb:60:71:73: 99:03:2c:69:a4:c3:0f:45:08:62:57:1b:63:a7:86: 17:82:ba:7c:87:8e:12:8a:e7:d9:2b:c2:fb:46:7c: 6d:a5:0d:e1:f2:71:da:b4:a1:21:0f:ab:2f:6e:0e: 17:45:42:d3:47:d5:a9:f0:3d:69:dc:a1:e6:ff:35: 1d:9a:82:2d:28:aa:f1:a2:ca:69:a8:39:6b:f5:e6: 1d:40:3d:36:4b:c4:15:8a:14:dd:74:b6:95:f1:2d: e4:63:d3:5f:7f:5e:e5:d6:b2:9b:11:8e:d8:8d:5e: 22:4e:63:84:7e:11:f0:c9:3f:bf:3f:59:8e:06:7f: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:6C:C3:20:F4:63:DE:9E:CE:A9:C7:04:F8:4A:B6:B3:BD:C6:A9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S41swyD0Y96ezqnHBPhKtrO9xqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.68.0/22 31.58.0.0-31.58.8.255 31.58.80.0/22 31.58.104.0/22 31.58.112.0/22 31.58.120.0/22 31.59.48.0/22 31.59.60.0/22 31.59.248.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:b4:28:07:6c:d6:ab:9f:85:d1:e8:4c:b5:fb:67:73:8c:14: d1:08:95:e4:d4:74:ae:e7:33:0a:cc:25:bb:d4:43:12:35:f5: 02:30:cd:48:2f:01:8e:89:8c:29:a7:3f:43:d4:61:a1:44:9c: 57:f6:85:37:c7:ef:67:01:ad:c9:28:2c:35:3e:6e:21:66:32: d0:d3:2d:3b:22:31:bc:89:50:13:82:f9:79:d4:f0:d0:68:9c: f3:6a:7e:0f:62:14:5c:f5:28:db:bf:0d:1c:6b:96:c1:a5:dc: 83:ad:2d:89:28:9a:4b:cb:e0:43:28:c5:2e:1b:9f:67:ce:68: 2f:f6:e8:86:92:16:50:32:29:93:95:18:91:14:a7:2a:8b:c9: 2a:e0:b3:90:78:c2:ac:87:62:8d:a2:42:5d:8a:53:7f:a3:3d: 6d:05:cd:04:44:61:c5:4c:8f:6a:23:e8:fe:46:6e:8c:57:ae: 05:e6:cc:9e:b2:e4:1f:a3:80:2a:aa:8f:15:97:3f:9d:be:ba: 6a:51:82:91:fc:07:db:fc:9f:fb:2c:5c:4b:9a:e6:27:8b:73: 81:cd:69:85:3e:d2:e6:a3:03:f1:ec:f8:0e:78:f4:10:7c:cd: 36:24:05:81:7b:d1:be:ba:1f:97:df:5b:e8:c2:f0:3d:74:50: 0f:77:d1:e7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt/hHnJcwFOwyRLJeIVAL4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjhkNmNjMzIwZjQ2M2RlOWVjZWE5YzcwNGY4NGFiNmIzYmRjNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA439GU0dIvWByGRJNJPInuLG6T/yP 8QwREyxgJrJFVvcVCx8fF5HJjlAKHQ+u+R+X0QY/bHyNd6+aovJpB7b/rylwEIuc U2a+/yCaUSeEG59Mce1DQB6io4xULWpTUG9hSsobhjkLjMDI6jlv3m9QTZP6IUrV JrAC3Ey9Timoj2qI8PtgcXOZAyxppMMPRQhiVxtjp4YXgrp8h44SiufZK8L7Rnxt pQ3h8nHatKEhD6svbg4XRULTR9Wp8D1p3KHm/zUdmoItKKrxosppqDlr9eYdQD02 S8QVihTddLaV8S3kY9Nff17l1rKbEY7YjV4iTmOEfhHwyT+/P1mOBn/d2wIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFEuNbMMg9GPens6pxwT4SrazvcapMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUzQxc3d5RDBZOTZlenFuSEJQaEt0ck85eHFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAATA9AwQCHzlEMAsD AwEfOgMEAB86CAMEAh86UAMEAh86aAMEAh86cAMEAh86eAMEAh87MAMEAh87PAME Ax87+DANBgkqhkiG9w0BAQsFAAOCAQEADLQoB2zWq5+F0ehMtftnc4wU0QiV5NR0 ruczCswlu9RDEjX1AjDNSC8BjomMKac/Q9RhoUScV/aFN8fvZwGtySgsNT5uIWYy 0NMtOyIxvIlQE4L5edTw0Gic82p+D2IUXPUo278NHGuWwaXcg60tiSiaS8vgQyjF LhufZ85oL/bohpIWUDIpk5UYkRSnKovJKuCzkHjCrIdijaJCXYpTf6M9bQXNBERh xUyPaiPo/kZujFeuBebMnrLkH6OAKqqPFZc/nb66alGCkfwH2/yf+yxcS5rmJ4tz gc1phT7S5qMD8ez4Dnj0EHzNNiQFgXvRvrofl99b6MLwPXRQD3fR5w== -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:34 2026 by rpki-client