This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T0e-n5Dd27J2AEw-0RTj632JWtM.roa File: T0e-n5Dd27J2AEw-0RTj632JWtM.roa (raw, json) Hash identifier: gwcUXDOSvLSBqU2+/huT3C4mz18+DOqaTDd6b/bjb6w= Subject key identifier: 4F:47:BE:9F:90:DD:DB:B2:76:00:4C:3E:D1:14:E3:EB:7D:89:5A:D3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849BA45C0F3454EF2F343338F9C741 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T0e-n5Dd27J2AEw-0RTj632JWtM.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207075 IP address blocks: 31.57.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9b:a4:5c:0f:34:54:ef:2f:34:33:38:f9:c7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f47be9f90dddbb276004c3ed114e3eb7d895ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:cf:f3:c7:59:92:29:1c:48:4f:44:00:56: 24:af:b5:0a:67:09:3a:70:1f:43:14:99:6f:3a:16: c6:46:d4:b3:6e:64:ed:22:05:6d:8e:48:18:2f:47: 6c:b2:28:38:be:5b:f7:bc:c8:c5:88:a8:70:56:07: cc:15:f2:cb:e3:5c:65:cd:0e:2b:97:98:4b:e1:b3: 55:aa:43:7c:dd:6b:52:de:9b:9f:56:f5:fe:83:c8: 9e:6b:d2:aa:b8:7b:5b:96:0c:1d:f2:84:81:df:fd: a9:00:f0:a0:ab:c9:eb:53:70:3d:09:e4:b3:e3:2e: 2f:f5:b8:30:57:4e:75:3e:d8:a3:1d:6e:8b:ec:a0: cb:16:7d:81:40:09:7f:99:b5:17:27:73:01:5c:35: 89:9d:f3:a0:3a:08:4e:a5:20:fa:71:f2:e4:b5:e0: 9b:6a:16:24:44:a2:56:4d:e8:30:fb:3d:20:d7:bc: d3:4e:3a:23:c4:e3:af:8e:f8:c5:f2:db:3a:a2:93: 6d:75:53:6c:ce:f2:28:48:69:b5:44:10:1b:e2:e3: 2d:05:c5:a8:c1:c4:dd:0d:a7:d2:7e:b6:cf:9d:f1: d4:2c:64:86:4a:00:ff:77:03:a6:39:24:bf:8d:32: 13:fa:37:cb:ee:5b:f2:f6:e5:85:db:e5:9b:a8:02: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:47:BE:9F:90:DD:DB:B2:76:00:4C:3E:D1:14:E3:EB:7D:89:5A:D3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T0e-n5Dd27J2AEw-0RTj632JWtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.32.0/24 Signature Algorithm: sha256WithRSAEncryption 37:da:83:96:26:50:ea:95:12:07:f0:08:88:9a:a8:0c:32:c8: fb:92:90:ab:d8:31:db:8b:35:ef:48:68:30:3d:8b:0b:67:69: af:7f:8e:de:f8:b1:e0:ad:26:aa:13:43:45:3e:ee:08:00:96: ff:6b:54:d4:3a:5e:54:6a:c1:82:4f:50:12:84:40:78:9d:90: ca:78:72:4e:1f:2f:67:c5:36:a3:f8:1a:08:76:1f:7f:11:78: d6:9b:23:07:75:89:b1:bf:ae:8d:ae:07:60:fa:f7:24:4d:7a: 8e:10:e6:0b:d9:10:be:79:1c:75:cb:ae:db:e9:e1:8a:ce:5e: 41:62:c8:89:31:7f:af:30:09:95:a0:67:7f:92:52:2d:8a:87: f5:b7:7e:e4:f1:5b:98:c3:9b:f8:e9:f8:f5:b6:fc:2e:33:76: 76:12:4b:69:a9:af:48:07:71:5e:7b:12:c7:cc:b4:24:9c:cb: 15:8a:88:70:3d:51:e6:91:69:8d:cc:77:b7:25:6b:a4:1d:de: 99:09:2e:27:0d:ff:31:c8:5e:eb:71:1a:0d:91:bc:41:dd:31: b7:84:db:68:ae:03:0c:e0:8d:26:71:58:ed:de:a8:6f:04:3b: d8:02:f1:49:e1:5d:07:3a:fd:08:d2:08:28:9f:fa:f9:b1:b6: 38:00:9b:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJukXA80VO8vNDM4+cdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQ3YmU5ZjkwZGRkYmIyNzYwMDRjM2VkMTE0ZTNlYjdkODk1YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZjP88dZkikcSE9EAFYkr7UKZwk6 cB9DFJlvOhbGRtSzbmTtIgVtjkgYL0dssig4vlv3vMjFiKhwVgfMFfLL41xlzQ4r l5hL4bNVqkN83WtS3pufVvX+g8iea9KquHtblgwd8oSB3/2pAPCgq8nrU3A9CeSz 4y4v9bgwV051PtijHW6L7KDLFn2BQAl/mbUXJ3MBXDWJnfOgOghOpSD6cfLkteCb ahYkRKJWTegw+z0g17zTTjojxOOvjvjF8ts6opNtdVNszvIoSGm1RBAb4uMtBcWo wcTdDafSfrbPnfHULGSGSgD/dwOmOSS/jTIT+jfL7lvy9uWF2+WbqAIqjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9Hvp+Q3duydgBMPtEU4+t9iVrTMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVDBlLW41RGQyN0oyQUV3LTBSVGo2MzJKV3RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkgMA0G CSqGSIb3DQEBCwUAA4IBAQA32oOWJlDqlRIH8AiImqgMMsj7kpCr2DHbizXvSGgw PYsLZ2mvf47e+LHgrSaqE0NFPu4IAJb/a1TUOl5UasGCT1AShEB4nZDKeHJOHy9n xTaj+BoIdh9/EXjWmyMHdYmxv66Nrgdg+vckTXqOEOYL2RC+eRx1y67b6eGKzl5B YsiJMX+vMAmVoGd/klItiof1t37k8VuYw5v46fj1tvwuM3Z2Ektpqa9IB3FeexLH zLQknMsViohwPVHmkWmNzHe3JWukHd6ZCS4nDf8xyF7rcRoNkbxB3TG3hNtorgMM 4I0mcVjt3qhvBDvYAvFJ4V0HOv0I0ggon/r5sbY4AJvV -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:46 2026 by rpki-client