This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SES3EuMa7tmsXFfJ3tM3wBSHhMg.roa File: SES3EuMa7tmsXFfJ3tM3wBSHhMg.roa (raw, json) Hash identifier: fvysO3pa2nKEsfqdwSc/jClfQienj/4Y7RHMxRMi1dQ= Subject key identifier: 48:44:B7:12:E3:1A:EE:D9:AC:5C:57:C9:DE:D3:37:C0:14:87:84:C8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844876F401F14430239D466A2A6A74 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SES3EuMa7tmsXFfJ3tM3wBSHhMg.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 843 IP address blocks: 31.56.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:48:76:f4:01:f1:44:30:23:9d:46:6a:2a:6a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4844b712e31aeed9ac5c57c9ded337c0148784c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:aa:bb:77:65:d3:bb:3c:91:42:68:e5:ab: 23:d2:e4:e8:ed:85:b7:c1:46:5d:10:31:b7:c5:fe: e0:97:5f:7f:91:8b:76:28:79:c0:05:5a:52:81:ac: 42:b7:ff:4e:96:34:05:19:b9:f5:5d:c3:9f:0d:39: 4b:cb:b8:1f:40:14:c5:9d:d1:db:52:ad:73:ba:d4: 9e:16:74:c2:33:15:39:31:d8:b9:92:7e:eb:0c:e8: 78:7c:c7:70:c0:71:9d:27:37:75:7b:4e:84:ac:73: 38:27:e7:69:28:4c:4a:46:6f:19:4d:18:c1:53:1c: 74:ba:33:20:a4:fe:a3:ca:0c:b1:a5:86:c3:b5:8a: 5c:8a:22:b7:7e:9f:03:6f:e8:9e:d3:50:a1:54:5e: 70:73:81:39:8f:c3:8c:c4:df:04:03:72:fa:32:35: 53:35:88:eb:1f:08:1b:4e:4e:bc:82:fd:15:bf:03: 9b:a4:13:6b:af:e1:db:0f:f1:80:cc:a2:31:c0:c0: c5:8b:f9:74:dc:44:1f:54:49:eb:07:0c:10:ed:70: 96:32:9c:b1:a2:19:40:27:62:24:0f:0a:5b:f5:1f: d5:5f:9a:cc:cd:73:bd:2d:80:0a:b5:55:ea:b3:ca: 39:1a:ee:4e:e9:91:84:77:09:f5:1c:30:1a:67:51: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:44:B7:12:E3:1A:EE:D9:AC:5C:57:C9:DE:D3:37:C0:14:87:84:C8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SES3EuMa7tmsXFfJ3tM3wBSHhMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.42.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:2c:a7:0e:19:f9:6e:26:3b:67:db:51:7d:b5:b1:a7:5a:c0: b3:fa:55:83:d1:4b:65:4a:6a:56:44:81:7b:9f:32:4a:6b:76: af:dc:0e:d8:85:dc:e0:9a:fd:90:1e:ee:eb:e8:4e:73:c7:06: 3f:04:e2:34:fb:95:35:db:28:7c:e1:a2:47:1a:9f:b8:1d:26: 68:71:1a:b0:2f:49:88:64:02:75:d2:b0:5c:76:39:0e:34:3d: 32:cc:50:ef:2c:7d:f1:44:5c:a7:a6:53:62:11:6e:c9:ee:01: db:d6:b7:50:06:73:d9:7d:41:48:84:60:ae:11:a8:37:72:18: 8e:80:e4:b5:93:33:2e:b4:93:11:dd:9f:2e:2b:dc:42:44:67: 45:cf:a2:5e:c7:9f:e1:37:a7:a8:84:3b:49:61:19:3b:72:65: 6f:ac:9d:fe:1b:57:15:ff:05:7f:48:73:bb:2e:2a:bf:a6:56: 13:c6:64:33:cc:4a:ee:24:f1:e2:1c:fb:36:b5:52:7a:76:d8: 4e:8d:37:00:e2:a1:3c:26:a2:e0:d2:7b:26:85:9b:6e:83:4a: df:33:6a:eb:4c:e9:4a:b7:ee:a2:99:44:6b:cf:d9:50:99:1d: 09:01:8b:4e:fa:2d:96:c6:3d:c8:e7:55:9f:26:44:26:30:eb: 81:a1:d9:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hEh29AHxRDAjnUZqKmp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODQ0YjcxMmUzMWFlZWQ5YWM1YzU3YzlkZWQzMzdjMDE0ODc4NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkqqu3dl07s8kUJo5asj0uTo7YW3 wUZdEDG3xf7gl19/kYt2KHnABVpSgaxCt/9OljQFGbn1XcOfDTlLy7gfQBTFndHb Uq1zutSeFnTCMxU5Mdi5kn7rDOh4fMdwwHGdJzd1e06ErHM4J+dpKExKRm8ZTRjB Uxx0ujMgpP6jygyxpYbDtYpciiK3fp8Db+ie01ChVF5wc4E5j8OMxN8EA3L6MjVT NYjrHwgbTk68gv0VvwObpBNrr+HbD/GAzKIxwMDFi/l03EQfVEnrBwwQ7XCWMpyx ohlAJ2IkDwpb9R/VX5rMzXO9LYAKtVXqs8o5Gu5O6ZGEdwn1HDAaZ1HjoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEhEtxLjGu7ZrFxXyd7TN8AUh4TIMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU0VTM0V1TWE3dG1zWEZmSjN0TTN3QlNIaE1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzgqMA0G CSqGSIb3DQEBCwUAA4IBAQALLKcOGfluJjtn21F9tbGnWsCz+lWD0UtlSmpWRIF7 nzJKa3av3A7Yhdzgmv2QHu7r6E5zxwY/BOI0+5U12yh84aJHGp+4HSZocRqwL0mI ZAJ10rBcdjkOND0yzFDvLH3xRFynplNiEW7J7gHb1rdQBnPZfUFIhGCuEag3chiO gOS1kzMutJMR3Z8uK9xCRGdFz6Jex5/hN6eohDtJYRk7cmVvrJ3+G1cV/wV/SHO7 Liq/plYTxmQzzEruJPHiHPs2tVJ6dthOjTcA4qE8JqLg0nsmhZtug0rfM2rrTOlK t+6imURrz9lQmR0JAYtO+i2Wxj3I51WfJkQmMOuBodlt -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client