This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T6xVBYBGHCMv0Ntsox3QzwpQ3kc.roa File: T6xVBYBGHCMv0Ntsox3QzwpQ3kc.roa (raw, json) Hash identifier: Ua5ZEIF/dQLryjmt69HxParVd+wQjYA9sPox4SiN8rE= Subject key identifier: 4F:AC:55:05:80:46:1C:23:2F:D0:DB:6C:A3:1D:D0:CF:0A:50:DE:47 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84AC7AC3F7A92D74BC309E3B796E75 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T6xVBYBGHCMv0Ntsox3QzwpQ3kc.roa Signing time: Fri 02 Jan 2026 16:22:39 +0000 ROA not before: Fri 02 Jan 2026 16:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211750 IP address blocks: 31.57.101.0/24 maxlen: 24 31.57.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ac:7a:c3:f7:a9:2d:74:bc:30:9e:3b:79:6e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fac550580461c232fd0db6ca31dd0cf0a50de47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a8:ac:76:af:cb:2d:3c:de:b5:15:85:4b:24: 0f:60:77:ba:0c:c9:ec:fc:bc:14:a3:a3:ab:d8:8e: e6:3e:63:fb:7e:83:d6:bb:4a:1a:a5:8e:44:e0:4c: 10:96:0b:a4:3a:b6:d2:ca:30:4e:0a:5f:30:05:f8: 31:59:41:8c:c5:aa:30:4b:5b:68:c5:05:cb:6f:ae: 69:09:2a:e4:0f:6e:0f:9b:33:b4:6b:32:ff:a4:0c: c1:71:ba:4d:e9:ce:a7:80:ca:25:7d:37:19:e6:01: ad:32:65:17:b1:df:83:3b:45:f3:da:dd:9c:01:43: fd:cc:4f:08:f6:ae:52:45:79:23:27:b5:86:66:93: 57:71:5d:a0:07:d3:4f:7b:de:b5:2b:f5:c8:63:78: aa:03:c3:fd:24:5d:56:c7:22:5a:26:e5:63:59:fc: 52:b0:bb:4b:49:2d:1c:b5:7f:4c:c3:1c:19:dc:16: 66:58:f5:3a:50:32:6b:20:ec:f5:2c:c2:41:c5:50: dd:c4:34:9b:96:3f:ec:ae:88:90:bd:27:c2:00:40: 29:89:d1:8f:95:5f:ee:15:9a:61:0a:b6:d9:d3:ab: c2:97:5d:4a:77:33:85:d6:80:72:0d:59:b1:38:3f: f9:a1:6d:44:31:4b:d5:3a:0e:49:6d:8f:8d:7f:87: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AC:55:05:80:46:1C:23:2F:D0:DB:6C:A3:1D:D0:CF:0A:50:DE:47 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T6xVBYBGHCMv0Ntsox3QzwpQ3kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.101.0/24 31.57.245.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:f7:1e:1a:af:b6:fc:98:0f:0a:95:5d:91:6f:ec:28:fc:38: e9:39:25:37:f1:a4:5a:a1:b9:92:3f:25:59:5c:96:6a:b0:0f: 77:ac:a9:ef:77:71:48:5e:a7:80:48:e7:00:b1:aa:ec:14:d9: b3:0e:d8:ba:1d:c5:97:6b:23:ee:95:97:44:91:67:11:f0:5b: 7a:c1:cb:6b:44:53:7e:c1:a7:a5:72:51:3d:d6:cd:73:fa:79: 84:45:a1:7b:f7:9f:ca:fd:ff:3f:26:fe:fd:57:5a:0b:91:ee: 81:e9:61:d1:b3:9a:74:6a:a6:60:9c:89:6d:18:78:ee:68:a8: d5:0e:91:94:92:4f:38:bb:1c:1c:57:2d:14:80:ee:da:5d:9e: dd:3d:05:37:42:08:48:8d:b3:eb:76:f0:8f:8e:b0:24:c9:e5: 37:30:2e:c1:98:d8:c1:b3:15:d3:42:05:9b:c1:ec:40:f4:2c: fa:dc:9f:f0:04:45:79:b4:d3:2f:f4:54:87:9c:8c:2f:73:0c: 43:95:5e:2f:db:0f:ef:8e:04:9b:65:81:61:31:9b:42:15:5d: be:9b:c4:16:60:70:fe:39:88:b4:13:f0:44:80:65:6c:56:26: b2:e9:a5:91:5b:01:b1:a2:b3:62:b5:59:55:87:8a:d8:ab:40: f6:d1:49:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hKx6w/epLXS8MJ47eW51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmFjNTUwNTgwNDYxYzIzMmZkMGRiNmNhMzFkZDBjZjBhNTBkZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaisdq/LLTzetRWFSyQPYHe6DMns /LwUo6Or2I7mPmP7foPWu0oapY5E4EwQlgukOrbSyjBOCl8wBfgxWUGMxaowS1to xQXLb65pCSrkD24PmzO0azL/pAzBcbpN6c6ngMolfTcZ5gGtMmUXsd+DO0Xz2t2c AUP9zE8I9q5SRXkjJ7WGZpNXcV2gB9NPe961K/XIY3iqA8P9JF1WxyJaJuVjWfxS sLtLSS0ctX9MwxwZ3BZmWPU6UDJrIOz1LMJBxVDdxDSblj/sroiQvSfCAEApidGP lV/uFZphCrbZ06vCl11KdzOF1oByDVmxOD/5oW1EMUvVOg5JbY+Nf4dYewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE+sVQWARhwjL9DbbKMd0M8KUN5HMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVDZ4VkJZQkdIQ012ME50c294M1F6d3BRM2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzllAwQA Hzn1MA0GCSqGSIb3DQEBCwUAA4IBAQAf9x4ar7b8mA8KlV2Rb+wo/DjpOSU38aRa obmSPyVZXJZqsA93rKnvd3FIXqeASOcAsarsFNmzDti6HcWXayPulZdEkWcR8Ft6 wctrRFN+waelclE91s1z+nmERaF795/K/f8/Jv79V1oLke6B6WHRs5p0aqZgnIlt GHjuaKjVDpGUkk84uxwcVy0UgO7aXZ7dPQU3QghIjbPrdvCPjrAkyeU3MC7BmNjB sxXTQgWbwexA9Cz63J/wBEV5tNMv9FSHnIwvcwxDlV4v2w/vjgSbZYFhMZtCFV2+ m8QWYHD+OYi0E/BEgGVsViay6aWRWwGxorNitVlVh4rYq0D20Und -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:50 2026 by rpki-client