This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Toeo5isBLbYcGH9eX59I8oaQaHg.roa File: Toeo5isBLbYcGH9eX59I8oaQaHg.roa (raw, json) Hash identifier: DFUOp3lTJGpElK7ghX9jwA4QcwNzKv9UN6YYq9W2Hzo= Subject key identifier: 4E:87:A8:E6:2B:01:2D:B6:1C:18:7F:5E:5F:9F:48:F2:86:90:68:78 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8452E403B4AB01862ED2C0A38502CE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Toeo5isBLbYcGH9eX59I8oaQaHg.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 31.56.8.0/21 maxlen: 24 31.56.107.0/24 maxlen: 24 31.56.126.0/24 maxlen: 24 31.56.142.0/23 maxlen: 24 31.56.148.0/22 maxlen: 24 31.57.114.0/24 maxlen: 24 31.57.116.0/24 maxlen: 24 31.59.79.0/24 maxlen: 24 31.59.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:52:e4:03:b4:ab:01:86:2e:d2:c0:a3:85:02:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e87a8e62b012db61c187f5e5f9f48f286906878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:88:e0:3d:41:ee:7c:9d:33:75:42:e0:df: ee:f1:73:bc:1b:55:09:bc:ce:cb:9d:c2:5c:85:d0: 6a:6c:ae:71:2a:ab:28:5c:47:fe:57:c7:b9:15:0e: 90:e2:7f:6e:d1:28:76:69:ba:29:e6:61:ec:30:08: 39:69:88:ae:32:a8:c0:b9:2d:89:a8:d7:f1:a8:84: f7:3e:aa:c0:f1:d5:e3:ce:7d:c2:4c:ca:ca:47:df: 8c:e9:50:7f:73:8b:2e:bf:7d:57:0f:2a:66:ef:2c: 27:a1:75:62:64:31:b5:fd:ac:dc:ff:c8:64:11:28: c7:3d:3e:47:ba:61:9a:a1:a3:22:e4:3a:34:3d:98: 68:80:7a:ac:40:31:39:e5:87:05:b4:a3:a0:0f:f3: cc:47:8c:fd:ac:ec:34:f6:d9:9f:6c:dd:ab:f1:f2: 2a:4e:62:79:7b:a5:d0:5e:e2:a1:7c:13:55:38:2a: 95:03:06:f6:6c:cb:21:2d:b6:13:02:90:b0:09:58: 06:00:d0:02:62:22:c8:5e:62:65:b9:a5:2c:36:3b: 4f:41:76:3b:55:b9:d3:73:20:d1:f6:59:0d:d5:23: cf:32:d6:dd:32:27:c9:92:70:e7:9a:a6:ff:55:2f: f8:4e:eb:f7:69:92:ea:32:7f:ef:21:b7:34:38:49: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:87:A8:E6:2B:01:2D:B6:1C:18:7F:5E:5F:9F:48:F2:86:90:68:78 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Toeo5isBLbYcGH9eX59I8oaQaHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.8.0/21 31.56.107.0/24 31.56.126.0/24 31.56.142.0/23 31.56.148.0/22 31.57.114.0/24 31.57.116.0/24 31.59.79.0/24 31.59.228.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:93:a9:16:23:59:f2:36:12:82:9d:f3:79:28:f5:e8:58:8e: 6d:b9:62:48:56:25:65:cf:3a:fc:04:ae:78:cf:59:e2:d0:ee: 6a:12:9c:6c:2b:42:e2:17:71:7e:f4:2a:e7:93:84:35:77:b3: 84:e6:1a:b4:8e:70:8d:2a:77:a0:85:e4:22:c4:77:ae:f5:fa: 84:9c:76:01:66:e9:14:40:38:2d:51:58:36:06:4d:f6:02:55: 0e:f8:cf:94:84:91:c6:d5:3d:69:86:a4:be:32:e7:29:54:35: fa:a6:8b:ab:71:14:07:63:f2:45:15:2e:19:e5:41:52:50:58: 5b:fe:27:08:97:94:85:dd:59:a0:df:31:0c:e3:76:3f:33:f4: dd:34:85:47:7f:ea:a4:76:0c:7c:d9:ea:88:d2:d7:93:db:16: d8:54:d0:b1:de:f0:7e:d5:7a:ce:34:05:2d:46:2c:c1:de:56: 26:a8:42:9c:01:9b:af:3f:bf:a2:6c:4d:71:84:34:25:dc:c6: 10:e6:6d:69:12:7f:f3:86:41:2d:36:5d:4b:1d:a2:cd:11:e0: ea:83:67:fb:08:97:9a:2e:1a:ca:53:57:f4:76:05:77:5f:9f: 58:e4:4b:6c:1c:91:f6:5f:31:cd:3a:6f:f1:0d:2c:d4:db:12: 9a:8a:94:33 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/hFLkA7SrAYYu0sCjhQLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTg3YThlNjJiMDEyZGI2MWMxODdmNWU1ZjlmNDhmMjg2OTA2ODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T+I4D1B7nydM3VC4N/u8XO8G1UJ vM7LncJchdBqbK5xKqsoXEf+V8e5FQ6Q4n9u0Sh2abop5mHsMAg5aYiuMqjAuS2J qNfxqIT3PqrA8dXjzn3CTMrKR9+M6VB/c4suv31XDypm7ywnoXViZDG1/azc/8hk ESjHPT5HumGaoaMi5Do0PZhogHqsQDE55YcFtKOgD/PMR4z9rOw09tmfbN2r8fIq TmJ5e6XQXuKhfBNVOCqVAwb2bMshLbYTApCwCVgGANACYiLIXmJluaUsNjtPQXY7 VbnTcyDR9lkN1SPPMtbdMifJknDnmqb/VS/4Tuv3aZLqMn/vIbc0OEmUtQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFE6HqOYrAS22HBh/Xl+fSPKGkGh4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVG9lbzVpc0JMYlljR0g5ZVg1OUk4b2FRYUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQDHzgIAwQA HzhrAwQAHzh+AwQBHziOAwQCHziUAwQAHzlyAwQAHzl0AwQAHztPAwQAHzvkMA0G CSqGSIb3DQEBCwUAA4IBAQA8k6kWI1nyNhKCnfN5KPXoWI5tuWJIViVlzzr8BK54 z1ni0O5qEpxsK0LiF3F+9Crnk4Q1d7OE5hq0jnCNKnegheQixHeu9fqEnHYBZukU QDgtUVg2Bk32AlUO+M+UhJHG1T1phqS+MucpVDX6pourcRQHY/JFFS4Z5UFSUFhb /icIl5SF3Vmg3zEM43Y/M/TdNIVHf+qkdgx82eqI0teT2xbYVNCx3vB+1XrONAUt RizB3lYmqEKcAZuvP7+ibE1xhDQl3MYQ5m1pEn/zhkEtNl1LHaLNEeDqg2f7CJea LhrKU1f0dgV3X59Y5EtsHJH2XzHNOm/xDSzU2xKaipQz -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:02 2026 by rpki-client