This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SrGdg_K3AovEQAnR5Ahh3Pg2Qhs.roa File: SrGdg_K3AovEQAnR5Ahh3Pg2Qhs.roa (raw, json) Hash identifier: HGRUzt+MGnrMctqmt6n46hq/4nhSA/3Z79cUcB29ymE= Subject key identifier: 4A:B1:9D:83:F2:B7:02:8B:C4:40:09:D1:E4:08:61:DC:F8:36:42:1B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846CD297B8BE35F607195DBADFADF8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SrGdg_K3AovEQAnR5Ahh3Pg2Qhs.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 31.57.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6c:d2:97:b8:be:35:f6:07:19:5d:ba:df:ad:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ab19d83f2b7028bc44009d1e40861dcf836421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:b7:66:bb:4c:5b:21:cb:8a:e2:9b:63:bc: 4d:a9:8e:6a:4c:e9:88:16:e5:4b:78:af:86:14:5f: 34:12:d8:0e:f5:0b:f1:fa:25:37:9c:55:dc:fd:ce: ed:73:8f:22:19:d2:83:63:3c:c8:fd:3a:0e:b8:ec: 16:a1:86:2f:c4:c4:d2:2b:ac:34:57:d0:39:d3:cf: 30:6e:63:51:85:e7:e0:b6:21:7d:56:d4:81:ca:bd: c5:84:e8:82:11:0c:65:40:d0:3c:a7:2d:39:ca:21: 69:cb:bf:cb:36:4e:17:36:b2:17:03:a4:5f:f8:d7: 76:45:03:9a:92:85:6c:8b:ff:59:98:b5:2c:bf:9b: de:5e:a9:6b:c8:83:fe:13:ad:15:7b:9c:9e:fb:53: a7:5c:7e:a2:82:e1:10:92:ae:9e:62:7e:2b:87:3f: 30:29:91:26:82:36:2e:22:ca:48:80:aa:39:58:0f: e6:b5:2a:0c:62:f0:93:e5:f5:47:c1:b9:4b:5a:10: ca:70:1e:98:46:ac:1f:3b:71:b4:38:b9:7d:4b:4a: 61:58:e6:d7:ba:f8:c0:30:aa:01:a3:ce:1e:41:4d: ca:41:57:13:4a:58:b2:d6:f9:6b:8b:69:c8:cd:33: 6d:a6:e6:99:bd:d7:55:74:1e:c4:3e:62:ab:94:76: 03:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:9D:83:F2:B7:02:8B:C4:40:09:D1:E4:08:61:DC:F8:36:42:1B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SrGdg_K3AovEQAnR5Ahh3Pg2Qhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.10.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:e4:39:d7:12:26:f3:ad:cb:c1:4d:75:53:51:39:e4:13:e0: 15:78:c2:a5:02:fa:a3:67:95:b8:ba:08:c3:50:77:ea:52:ca: 71:18:ae:02:27:10:ad:a2:45:c9:c1:01:7e:7e:7b:c7:ab:9a: 4c:d2:85:b2:a1:d5:f9:1b:b9:68:4f:8b:52:66:1e:04:12:61: 4f:43:6e:0c:e0:c8:13:e1:93:ec:88:1b:ae:58:e2:f8:8d:60: 38:df:a2:86:01:77:f1:0a:30:72:6c:5a:95:23:7c:38:bc:19: b6:ff:76:3e:17:4a:e8:f6:70:5e:a1:a3:c3:bd:79:2d:ff:dc: 14:81:32:33:c2:f5:e4:e6:b2:c2:15:fd:ba:9c:77:65:72:6d: b7:7c:45:52:f1:7a:16:07:bf:31:35:f1:82:b2:cb:e8:15:33: 2c:a6:dc:02:3f:55:fd:c3:82:9c:9b:33:90:6b:9b:36:fc:6b: d2:a1:f3:c4:fe:b0:ff:03:ad:a7:c9:07:e3:41:cd:f7:20:50: e9:80:5e:2e:fd:23:ea:c5:70:3f:64:51:27:34:e0:79:06:68: 22:74:d0:c6:8c:9c:9a:72:45:e2:08:3e:36:b5:6b:6b:2c:74: 1a:fb:f0:16:c6:76:af:9e:d9:7f:0b:09:46:ef:62:30:27:91: 6d:c5:95:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGzSl7i+NfYHGV263634MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWIxOWQ4M2YyYjcwMjhiYzQ0MDA5ZDFlNDA4NjFkY2Y4MzY0MjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPC3ZrtMWyHLiuKbY7xNqY5qTOmI FuVLeK+GFF80EtgO9Qvx+iU3nFXc/c7tc48iGdKDYzzI/ToOuOwWoYYvxMTSK6w0 V9A5088wbmNRhefgtiF9VtSByr3FhOiCEQxlQNA8py05yiFpy7/LNk4XNrIXA6Rf +Nd2RQOakoVsi/9ZmLUsv5veXqlryIP+E60Ve5ye+1OnXH6iguEQkq6eYn4rhz8w KZEmgjYuIspIgKo5WA/mtSoMYvCT5fVHwblLWhDKcB6YRqwfO3G0OLl9S0phWObX uvjAMKoBo84eQU3KQVcTSliy1vlri2nIzTNtpuaZvddVdB7EPmKrlHYDOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqxnYPytwKLxEAJ0eQIYdz4NkIbMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU3JHZGdfSzNBb3ZFUUFuUjVBaGgzUGcyUWhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkKMA0G CSqGSIb3DQEBCwUAA4IBAQAq5DnXEibzrcvBTXVTUTnkE+AVeMKlAvqjZ5W4ugjD UHfqUspxGK4CJxCtokXJwQF+fnvHq5pM0oWyodX5G7loT4tSZh4EEmFPQ24M4MgT 4ZPsiBuuWOL4jWA436KGAXfxCjBybFqVI3w4vBm2/3Y+F0ro9nBeoaPDvXkt/9wU gTIzwvXk5rLCFf26nHdlcm23fEVS8XoWB78xNfGCssvoFTMsptwCP1X9w4KcmzOQ a5s2/GvSofPE/rD/A62nyQfjQc33IFDpgF4u/SPqxXA/ZFEnNOB5BmgidNDGjJya ckXiCD42tWtrLHQa+/AWxnavntl/CwlG72IwJ5FtxZXj -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:46 2026 by rpki-client