This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TWIBAk0OJkysRckTF2MnPOQ8k_8.roa File: TWIBAk0OJkysRckTF2MnPOQ8k_8.roa (raw, json) Hash identifier: /HZCU338gQ1M5Cl1Y4fs5WFRT1bFgWbZ8svn9wefdd0= Subject key identifier: 4D:62:01:02:4D:0E:26:4C:AC:45:C9:13:17:63:27:3C:E4:3C:93:FF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D02D42CE04B846CE4F0F99D80034 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TWIBAk0OJkysRckTF2MnPOQ8k_8.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215599 IP address blocks: 31.56.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d0:2d:42:ce:04:b8:46:ce:4f:0f:99:d8:00:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d6201024d0e264cac45c9131763273ce43c93ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:2d:b4:ef:fe:e4:15:b5:40:67:b5:7c:a9: b4:bf:0c:b4:e3:a4:c8:15:fe:a6:54:a2:7c:29:bb: ea:c6:85:22:9e:ba:ea:4d:56:9b:86:c9:4c:ff:3d: ce:f8:a6:7c:14:b8:68:72:50:b7:31:9a:89:3e:dd: 3a:10:b6:d9:d0:cf:25:d2:05:43:77:1c:3e:a4:48: ae:d9:1c:ba:d4:b4:a2:6e:8e:cc:58:9c:6b:2d:6f: dc:a2:b8:27:ae:34:1f:c1:03:48:f4:f8:a5:b3:b0: 3b:12:27:bd:69:64:e8:19:4c:a5:8b:1c:2a:60:9e: 6a:94:a0:7a:c9:12:23:2d:50:ea:85:99:fb:88:a7: de:79:b5:33:8f:dc:ff:c9:a0:60:8a:d7:8e:cb:2c: f1:71:41:1f:a0:bf:13:b0:61:34:f4:bc:cc:4f:5f: f6:65:62:cd:b9:fb:5d:16:cd:0f:75:09:80:8b:67: 9e:27:f4:4a:eb:ad:44:37:dd:c3:a7:00:f0:1a:0e: 23:7f:e5:93:d2:27:ff:79:73:42:04:11:d9:b1:41: 18:de:08:2e:08:a6:49:01:69:f2:c7:5f:e3:f3:0a: 4e:fc:0e:df:90:e7:cb:0d:aa:64:14:75:f7:92:82: c5:fa:0b:4a:c1:4c:68:3b:64:4a:45:e2:56:c1:4c: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:62:01:02:4D:0E:26:4C:AC:45:C9:13:17:63:27:3C:E4:3C:93:FF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TWIBAk0OJkysRckTF2MnPOQ8k_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.58.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ab:f5:29:fe:f8:ea:b2:ed:8e:90:8b:b6:21:75:a7:a4:06: 4d:11:11:99:46:9d:a9:25:da:7d:36:a0:ff:d8:a4:8b:ab:83: ab:64:f3:55:2f:17:b7:74:60:d9:fb:5c:aa:0b:1b:1f:5c:02: 11:65:da:b6:c8:16:0b:6f:0c:28:3e:3e:c5:54:05:2c:71:d7: 04:f1:f8:3d:c1:08:f7:7e:d7:99:16:d5:49:22:3b:2c:86:c9: ef:cd:c6:a3:77:53:0e:99:dc:6a:d1:22:d5:2c:b5:73:3d:03: 04:e8:e1:28:68:12:99:7a:37:01:6c:0b:91:34:0e:3f:18:df: 5a:95:c6:7c:a6:d0:e8:3c:76:c0:30:5c:f2:93:33:fa:78:5b: 06:d6:d1:98:d2:bb:b1:40:f6:7f:9d:d9:9e:06:62:20:2c:68: 8d:da:74:2d:44:6a:57:86:a4:ff:17:74:40:6d:22:a2:88:9d: 4b:8e:bb:68:46:45:97:c2:5f:fd:a2:4a:fa:04:21:ca:bc:7c: 65:7c:f9:c8:6f:7f:24:81:90:92:ce:9e:a9:c0:c9:fb:60:b8: 0d:5c:db:18:c9:f5:a8:18:64:11:e6:5a:43:71:a4:73:3d:30: 07:b3:dc:d8:72:1f:7c:47:f7:76:41:21:c9:fc:13:0f:2e:ae: 1c:17:f0:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNAtQs4EuEbOTw+Z2AA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDYyMDEwMjRkMGUyNjRjYWM0NWM5MTMxNzYzMjczY2U0M2M5M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/cttO/+5BW1QGe1fKm0vwy046TI Ff6mVKJ8KbvqxoUinrrqTVabhslM/z3O+KZ8FLhoclC3MZqJPt06ELbZ0M8l0gVD dxw+pEiu2Ry61LSibo7MWJxrLW/corgnrjQfwQNI9Pils7A7Eie9aWToGUylixwq YJ5qlKB6yRIjLVDqhZn7iKfeebUzj9z/yaBgiteOyyzxcUEfoL8TsGE09LzMT1/2 ZWLNuftdFs0PdQmAi2eeJ/RK661EN93DpwDwGg4jf+WT0if/eXNCBBHZsUEY3ggu CKZJAWnyx1/j8wpO/A7fkOfLDapkFHX3koLF+gtKwUxoO2RKReJWwUzH9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1iAQJNDiZMrEXJExdjJzzkPJP/MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVFdJQkFrME9Ka3lzUmNrVEYyTW5QT1E4a184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg6MA0G CSqGSIb3DQEBCwUAA4IBAQAzq/Up/vjqsu2OkIu2IXWnpAZNERGZRp2pJdp9NqD/ 2KSLq4OrZPNVLxe3dGDZ+1yqCxsfXAIRZdq2yBYLbwwoPj7FVAUscdcE8fg9wQj3 fteZFtVJIjsshsnvzcajd1MOmdxq0SLVLLVzPQME6OEoaBKZejcBbAuRNA4/GN9a lcZ8ptDoPHbAMFzykzP6eFsG1tGY0ruxQPZ/ndmeBmIgLGiN2nQtRGpXhqT/F3RA bSKiiJ1LjrtoRkWXwl/9okr6BCHKvHxlfPnIb38kgZCSzp6pwMn7YLgNXNsYyfWo GGQR5lpDcaRzPTAHs9zYch98R/d2QSHJ/BMPLq4cF/BH -----END CERTIFICATE-----Generated at Mon Jan 5 14:39:15 2026 by rpki-client