This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ToQG70z9916rkxRmz6HGskAtw8Q.roa File: ToQG70z9916rkxRmz6HGskAtw8Q.roa (raw, json) Hash identifier: MXO5PRvqEIhtp7MHwheNaLcxTaYDzMdx+ef/ABDc4fI= Subject key identifier: 4E:84:06:EF:4C:FD:F7:5E:AB:93:14:66:CF:A1:C6:B2:40:2D:C3:C4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B51546F47AED2616FF38718FE518 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ToQG70z9916rkxRmz6HGskAtw8Q.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213633 IP address blocks: 31.57.117.0/24 maxlen: 24 31.58.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b5:15:46:f4:7a:ed:26:16:ff:38:71:8f:e5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e8406ef4cfdf75eab931466cfa1c6b2402dc3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:48:99:5c:ea:41:3a:7f:55:87:44:8e:be: a2:8f:b0:60:82:4a:56:af:a2:39:d7:da:5a:ab:78: 14:b9:ae:51:bd:2c:b5:f4:85:12:f5:c8:05:bb:8f: 2f:e8:56:6a:2e:89:93:bc:e6:a4:0c:a4:31:b7:21: c9:e5:f6:fb:57:06:5c:1c:94:b7:8c:c9:af:59:9e: ea:66:ad:f6:08:b5:3b:5f:b5:a3:48:12:7c:63:bd: 98:ee:0c:e7:1d:83:35:19:7b:c9:38:67:88:b0:98: 59:2a:42:58:cf:4c:2f:d1:94:ee:bc:d2:41:7f:ef: 5b:f2:70:b2:34:0f:89:10:1a:30:47:f8:dd:ce:7f: 62:ad:61:ac:24:6b:de:92:72:86:c0:83:4a:b0:8f: 20:d9:cc:1d:32:fd:5e:ef:2d:1c:d3:51:a5:38:db: 61:a9:2c:86:f5:d8:8f:cb:13:2f:4c:2e:11:59:27: 4d:b2:4d:f9:8c:d9:64:71:8c:67:39:83:b7:e6:03: 56:d5:0f:f2:77:7d:98:9f:7f:63:21:43:24:f7:8b: dd:f7:14:68:2d:3a:55:25:68:46:55:34:46:aa:b3: 6d:56:3d:ee:4a:9a:ed:c6:24:af:5a:58:60:a0:58: ef:16:2f:8b:3e:f4:96:f7:19:78:a0:f7:ab:73:57: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:84:06:EF:4C:FD:F7:5E:AB:93:14:66:CF:A1:C6:B2:40:2D:C3:C4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ToQG70z9916rkxRmz6HGskAtw8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.117.0/24 31.58.85.0/24 Signature Algorithm: sha256WithRSAEncryption aa:0f:dd:29:d8:b8:b4:d1:bb:9a:5e:10:93:3c:ce:fd:4f:b5: 9d:b2:6e:ee:5f:ac:93:b9:80:d8:1d:94:88:6c:a3:3e:c2:07: de:c5:dd:5f:ca:90:b8:53:ab:ed:89:9c:b3:bb:3e:79:c6:f2: 08:78:59:8f:a1:a2:d6:bf:4e:13:cc:3e:ff:09:da:99:00:3b: 80:ff:38:b4:af:b7:2a:fc:4e:6c:26:d5:cb:c3:4f:43:05:70: 6e:ac:ec:80:41:5c:92:7c:a6:12:55:25:58:f3:8c:79:01:d8: cc:6b:80:3b:f9:33:46:ea:e8:38:18:a2:2f:87:c8:f5:69:e9: 29:b2:b3:2f:26:24:13:e0:f7:82:03:b3:42:53:3a:7c:b3:c8: 06:df:1c:9c:76:0b:ca:94:94:a6:67:97:23:06:f3:52:e1:ff: 59:e0:72:14:d8:af:06:21:a0:06:07:e6:46:e1:23:24:ff:bd: 18:96:f5:53:c2:7c:8f:66:7d:dc:db:14:f3:a7:40:92:16:57: 8f:b8:6f:b7:42:31:d8:8a:66:a3:6f:41:4a:48:46:58:1b:65: 04:50:a2:04:55:71:38:9a:b6:67:2e:fd:65:ed:e6:20:8d:93: de:cf:05:eb:a2:37:50:6a:47:a0:1e:81:d3:35:cc:0f:50:19: 7f:a0:82:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hLUVRvR67SYW/zhxj+UYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTg0MDZlZjRjZmRmNzVlYWI5MzE0NjZjZmExYzZiMjQwMmRjM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPtImVzqQTp/VYdEjr6ij7BggkpW r6I519paq3gUua5RvSy19IUS9cgFu48v6FZqLomTvOakDKQxtyHJ5fb7VwZcHJS3 jMmvWZ7qZq32CLU7X7WjSBJ8Y72Y7gznHYM1GXvJOGeIsJhZKkJYz0wv0ZTuvNJB f+9b8nCyNA+JEBowR/jdzn9irWGsJGveknKGwINKsI8g2cwdMv1e7y0c01GlONth qSyG9diPyxMvTC4RWSdNsk35jNlkcYxnOYO35gNW1Q/yd32Yn39jIUMk94vd9xRo LTpVJWhGVTRGqrNtVj3uSprtxiSvWlhgoFjvFi+LPvSW9xl4oPerc1eIvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE6EBu9M/fdeq5MUZs+hxrJALcPEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVG9RRzcwejk5MTZya3hSbXo2SEdza0F0dzhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzl1AwQA HzpVMA0GCSqGSIb3DQEBCwUAA4IBAQCqD90p2Li00buaXhCTPM79T7Wdsm7uX6yT uYDYHZSIbKM+wgfexd1fypC4U6vtiZyzuz55xvIIeFmPoaLWv04TzD7/CdqZADuA /zi0r7cq/E5sJtXLw09DBXBurOyAQVySfKYSVSVY84x5AdjMa4A7+TNG6ug4GKIv h8j1aekpsrMvJiQT4PeCA7NCUzp8s8gG3xycdgvKlJSmZ5cjBvNS4f9Z4HIU2K8G IaAGB+ZG4SMk/70YlvVTwnyPZn3c2xTzp0CSFlePuG+3QjHYimajb0FKSEZYG2UE UKIEVXE4mrZnLv1l7eYgjZPezwXrojdQakegHoHTNcwPUBl/oIKz -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:36 2026 by rpki-client