This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SYYZsOVsAS_voCj2B5nJY8oPNx8.roa File: SYYZsOVsAS_voCj2B5nJY8oPNx8.roa (raw, json) Hash identifier: QBE+zuiGE6LRheEk4+BAA9k5/LCNTmlJPYVaSREp1Dk= Subject key identifier: 49:86:19:B0:E5:6C:01:2F:EF:A0:28:F6:07:99:C9:63:CA:0F:37:1F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D9DCAD12742F62B8B0B3296B8469 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SYYZsOVsAS_voCj2B5nJY8oPNx8.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273034 IP address blocks: 31.56.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d9:dc:ad:12:74:2f:62:b8:b0:b3:29:6b:84:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=498619b0e56c012fefa028f60799c963ca0f371f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:2e:b9:a2:6a:20:f4:26:b3:d1:49:25:0a: b5:25:4e:94:5f:db:00:d0:ab:78:cf:3c:1d:d7:d8: db:cb:87:02:ae:dd:57:25:67:0d:3f:94:af:dd:e7: b2:a0:f0:f8:2e:fe:62:b9:8e:e6:10:94:e8:6c:15: e5:55:2f:ff:1d:a9:7f:d6:f5:05:47:a4:48:7b:31: 3e:c1:db:0c:c2:65:48:3a:29:c2:74:3e:c1:cc:bb: 82:25:fd:ca:6e:23:c8:f9:d8:e0:cc:a9:5d:8b:34: 26:bb:70:87:96:5d:bf:9f:4f:ab:a9:5f:ec:ac:9b: ec:ff:54:91:dc:59:f7:b1:5a:0c:7c:82:0e:f2:e5: fd:47:4a:2a:b8:76:14:51:70:ad:65:e0:08:65:a8: a0:b7:0f:6b:67:41:c8:73:52:83:44:31:9b:ae:1c: 5c:f9:f9:ba:f5:b3:ca:be:41:0d:3e:8a:05:4b:44: 4b:fe:49:5c:a1:c9:6a:4e:aa:a0:b7:4f:0f:76:80: f8:88:be:35:6c:c2:94:79:62:aa:82:0e:b7:38:92: 49:10:26:a4:d9:09:33:23:6b:ec:58:16:03:3d:56: d7:fc:7a:f2:c8:82:88:9c:1c:04:d8:51:a6:d0:87: 69:fe:6e:b6:97:28:39:cd:69:78:fb:8f:82:81:c6: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:19:B0:E5:6C:01:2F:EF:A0:28:F6:07:99:C9:63:CA:0F:37:1F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SYYZsOVsAS_voCj2B5nJY8oPNx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.152.0/23 Signature Algorithm: sha256WithRSAEncryption 52:92:c9:bc:91:fd:92:1c:00:a2:08:ed:c6:46:33:e2:48:3e: 19:07:b7:0e:1d:f6:87:54:46:af:2c:f6:ae:99:7b:21:82:cc: 4c:a1:35:80:3d:be:c9:c6:22:11:77:97:b2:6b:93:fb:39:2f: 85:52:7e:ad:c7:d6:81:da:68:76:76:ab:9e:de:22:9d:d2:d3: ae:cc:c2:cd:56:09:bc:f5:22:9e:53:80:d1:9c:7b:a7:ff:c8: 85:e8:e6:f3:12:ab:be:b8:88:93:19:2c:05:39:ef:8d:50:96: bb:0a:7e:94:2f:28:dd:11:25:02:f3:d9:94:fb:88:49:df:96: b7:d9:d4:da:6f:54:e2:bb:bd:18:33:75:36:ff:6d:00:45:bb: c0:8a:0d:b5:de:71:db:a1:fe:25:8a:67:4b:47:33:f9:15:99: c4:61:27:5e:99:bd:e4:0a:02:92:5d:8e:04:17:cd:e1:40:ca: a9:2f:df:6f:ac:ca:ec:17:11:8a:52:f2:3a:8b:23:73:ff:7e: b4:c5:bc:d6:c6:b4:35:bf:46:5e:14:15:e9:f1:f6:11:03:9d: 28:d3:2a:af:ef:b5:85:d2:5f:b7:0e:1f:6f:87:49:96:04:b4: de:6b:30:2c:89:78:cf:68:18:a8:e3:3b:5e:55:9c:d9:e9:c8: ac:9c:1d:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNncrRJ0L2K4sLMpa4RpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTg2MTliMGU1NmMwMTJmZWZhMDI4ZjYwNzk5Yzk2M2NhMGYzNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zIuuaJqIPQms9FJJQq1JU6UX9sA 0Kt4zzwd19jby4cCrt1XJWcNP5Sv3eeyoPD4Lv5iuY7mEJTobBXlVS//Hal/1vUF R6RIezE+wdsMwmVIOinCdD7BzLuCJf3KbiPI+djgzKldizQmu3CHll2/n0+rqV/s rJvs/1SR3Fn3sVoMfIIO8uX9R0oquHYUUXCtZeAIZaigtw9rZ0HIc1KDRDGbrhxc +fm69bPKvkENPooFS0RL/klcoclqTqqgt08PdoD4iL41bMKUeWKqgg63OJJJECak 2QkzI2vsWBYDPVbX/HryyIKInBwE2FGm0Idp/m62lyg5zWl4+4+CgcbnHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmGGbDlbAEv76Ao9geZyWPKDzcfMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU1lZWnNPVnNBU192b0NqMkI1bkpZOG9QTng4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHziYMA0G CSqGSIb3DQEBCwUAA4IBAQBSksm8kf2SHACiCO3GRjPiSD4ZB7cOHfaHVEavLPau mXshgsxMoTWAPb7JxiIRd5eya5P7OS+FUn6tx9aB2mh2dque3iKd0tOuzMLNVgm8 9SKeU4DRnHun/8iF6ObzEqu+uIiTGSwFOe+NUJa7Cn6ULyjdESUC89mU+4hJ35a3 2dTab1Tiu70YM3U2/20ARbvAig213nHbof4limdLRzP5FZnEYSdemb3kCgKSXY4E F83hQMqpL99vrMrsFxGKUvI6iyNz/360xbzWxrQ1v0ZeFBXp8fYRA50o0yqv77WF 0l+3Dh9vh0mWBLTeazAsiXjPaBio4zteVZzZ6cisnB0E -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:41 2026 by rpki-client