This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SkgIt-GhcW_IhAyt1Y8959lvQ34.roa File: SkgIt-GhcW_IhAyt1Y8959lvQ34.roa (raw, json) Hash identifier: 9pQXxdgYmgPaTwJXSPgjWsHxKMkhh7ms30JwLXUHNak= Subject key identifier: 4A:48:08:B7:E1:A1:71:6F:C8:84:0C:AD:D5:8F:3D:E7:D9:6F:43:7E Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BA9830757A04881E97F9CF3B3080C2399 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SkgIt-GhcW_IhAyt1Y8959lvQ34.roa Signing time: Sat 10 Jan 2026 20:04:55 +0000 ROA not before: Sat 10 Jan 2026 20:04:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.57.190.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 31.58.138.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 31.59.59.0/24 maxlen: 24 31.59.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a9:83:07:57:a0:48:81:e9:7f:9c:f3:b3:08:0c:23:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 10 20:04:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a4808b7e1a1716fc8840cadd58f3de7d96f437e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:f5:99:0c:ce:bf:eb:54:86:91:ca:59:36: a2:52:2c:1f:19:9d:63:8e:32:0b:f7:1f:9c:07:19: 4b:76:16:06:0a:5a:fe:d5:07:3e:83:5b:34:26:f0: a0:5f:f8:ff:56:ca:f6:73:ca:86:6f:66:a1:f3:36: 8d:0c:a3:e7:91:6f:63:8a:b5:5a:9e:29:6f:00:8f: 9d:5e:6b:c6:de:ef:a5:5a:02:e5:1f:51:cf:5c:51: 04:01:56:6d:a6:85:28:95:17:46:43:9b:6b:ee:c7: fd:30:98:6a:76:03:b3:bc:f4:e0:82:02:76:a5:81: f6:e8:34:43:92:df:4e:0f:4c:1e:1e:d8:08:5a:a5: 58:e4:f6:8a:4d:33:03:19:af:26:da:96:d9:de:8e: 2b:58:df:af:eb:40:43:68:25:28:4c:c6:f3:88:fc: 46:ca:6d:15:d6:a5:06:fb:63:99:fc:59:70:42:2b: 39:d1:10:d1:b0:0b:2f:a3:b1:8a:25:64:49:a7:e7: e7:89:2d:bc:d1:4e:7f:a6:73:ee:0b:22:48:f5:ee: 1a:cb:56:ee:43:a2:ea:17:4d:b9:47:69:37:a9:3a: 7d:b7:c7:bc:84:a9:f2:93:c0:42:b8:a3:d1:b4:54: 8e:7b:ec:4b:5b:ec:5e:28:8b:d0:48:24:f1:21:37: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:48:08:B7:E1:A1:71:6F:C8:84:0C:AD:D5:8F:3D:E7:D9:6F:43:7E X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SkgIt-GhcW_IhAyt1Y8959lvQ34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.141.0/24 31.57.190.0/23 31.57.221.0/24 31.58.131.0/24 31.58.138.0/24 31.58.231.0/24 31.59.59.0/24 31.59.208.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:53:82:f7:9a:84:38:06:a6:76:c1:70:33:44:a7:91:a2:94: 3f:75:5d:6a:7b:f6:46:1c:a8:ca:c8:db:3f:f0:80:d4:32:30: 2b:0f:07:3e:3c:af:16:3f:14:35:68:41:7c:7d:5b:1d:32:36: da:e6:ca:bc:5e:c1:c6:a0:35:f9:da:a5:92:b0:72:35:d8:e9: 8d:ba:b6:b6:37:42:20:34:6f:a2:2f:02:45:fe:b0:5b:2d:cc: 47:3f:96:bb:ba:48:ee:d4:06:07:6e:05:d2:f6:61:e8:0e:50: cc:c2:52:8c:e8:e3:90:2e:2a:93:bf:c4:d4:2b:d7:de:41:30: e2:c6:79:bc:1a:f6:25:d7:9a:46:3e:6c:c9:e4:42:8b:5d:e2: 75:8c:d8:fc:ce:1f:4e:d1:0a:a4:ec:54:ca:f8:93:34:71:e9: 50:6d:7e:a6:59:61:8c:cd:9c:05:c7:03:7d:96:41:64:da:39: f0:6c:42:cc:eb:61:92:94:b9:8b:99:41:d0:30:c3:ba:ba:b7: 8f:f9:10:2a:d9:3e:27:4f:ae:97:32:f9:80:28:84:ad:b3:a3: af:0f:35:e5:70:2b:bf:fb:33:a3:c9:2c:d9:86:af:69:11:64: 62:e3:43:8d:a2:34:3b:f5:18:36:0c:dc:7a:87:9d:12:1a:9e: cb:a1:fc:8f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZupgwdXoEiB6X+c87MIDCOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTEwMjAwNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTQ4MDhiN2UxYTE3MTZmYzg4NDBjYWRkNThmM2RlN2Q5NmY0MzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKv1mQzOv+tUhpHKWTaiUiwfGZ1j jjIL9x+cBxlLdhYGClr+1Qc+g1s0JvCgX/j/Vsr2c8qGb2ah8zaNDKPnkW9jirVa nilvAI+dXmvG3u+lWgLlH1HPXFEEAVZtpoUolRdGQ5tr7sf9MJhqdgOzvPTgggJ2 pYH26DRDkt9OD0weHtgIWqVY5PaKTTMDGa8m2pbZ3o4rWN+v60BDaCUoTMbziPxG ym0V1qUG+2OZ/FlwQis50RDRsAsvo7GKJWRJp+fniS280U5/pnPuCyJI9e4ay1bu Q6LqF025R2k3qTp9t8e8hKnyk8BCuKPRtFSOe+xLW+xeKIvQSCTxITdUvQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFEpICLfhoXFvyIQMrdWPPefZb0N+MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU2tnSXQtR2hjV19JaEF5dDFZODk1OWx2UTM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAHzh9AwQA HziNAwQBHzm+AwQAHzndAwQAHzqDAwQAHzqKAwQAHzrnAwQAHzs7AwQAHzvQMA0G CSqGSIb3DQEBCwUAA4IBAQCfU4L3moQ4BqZ2wXAzRKeRopQ/dV1qe/ZGHKjKyNs/ 8IDUMjArDwc+PK8WPxQ1aEF8fVsdMjba5sq8XsHGoDX52qWSsHI12OmNura2N0Ig NG+iLwJF/rBbLcxHP5a7ukju1AYHbgXS9mHoDlDMwlKM6OOQLiqTv8TUK9feQTDi xnm8GvYl15pGPmzJ5EKLXeJ1jNj8zh9O0Qqk7FTK+JM0celQbX6mWWGMzZwFxwN9 lkFk2jnwbELM62GSlLmLmUHQMMO6ureP+RAq2T4nT66XMvmAKISts6OvDzXlcCu/ +zOjySzZhq9pEWRi40ONojQ79Rg2DNx6h50SGp7LofyP -----END CERTIFICATE-----Generated at Tue Jan 13 06:59:25 2026 by rpki-client