This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Tu06E7fVSH2Msl0HfUyHDZbDsJU.roa File: Tu06E7fVSH2Msl0HfUyHDZbDsJU.roa (raw, json) Hash identifier: 8gbE2bIk8zXzezmCLO5MoUjQzu78H82mPEZJCplzzkg= Subject key identifier: 4E:ED:3A:13:B7:D5:48:7D:8C:B2:5D:07:7D:4C:87:0D:96:C3:B0:95 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F847924D4ACBB544586E4AEF5EA2A7F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Tu06E7fVSH2Msl0HfUyHDZbDsJU.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132335 IP address blocks: 31.59.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:79:24:d4:ac:bb:54:45:86:e4:ae:f5:ea:2a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eed3a13b7d5487d8cb25d077d4c870d96c3b095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:e2:11:93:15:98:c5:3d:c1:e1:41:a5:fe: c7:bb:3d:79:2e:2d:8c:4f:bb:84:a9:f1:df:34:f0: c6:3c:93:07:1e:74:79:31:ab:ed:35:2e:ee:dd:25: 05:8c:f1:24:dd:a9:d2:17:4a:26:17:7e:3c:37:46: fe:2e:50:3f:e4:f9:fd:29:0b:4a:9f:a3:ee:32:1f: 5c:dc:21:f3:66:21:f9:5e:34:26:58:db:56:73:5d: fa:38:7e:51:c5:63:d5:63:55:37:85:42:0e:a3:3a: 7b:06:a3:a1:bb:fd:88:ad:dd:7f:29:b8:11:1a:ae: f2:c0:04:27:c2:74:e6:90:e7:54:04:22:5d:34:ae: 90:9a:ca:97:b1:de:46:ea:9f:af:47:b7:ba:61:b1: 4d:d4:46:70:f8:18:f5:5d:75:5b:85:ae:f3:d9:ce: 92:95:8b:22:72:1a:79:fc:3b:f8:df:67:16:15:95: e1:b9:53:15:43:00:5b:a3:60:3c:44:5f:23:e9:10: 0a:12:e6:b3:e6:3e:1c:28:d4:76:69:42:69:5f:1e: 0e:39:65:2a:3d:b7:b0:96:e4:de:15:55:c3:b3:4d: 0b:7b:9f:2c:2f:a1:56:57:67:3f:3a:06:8a:13:70: 2c:33:8c:78:da:54:77:3d:8b:a9:2f:b2:bb:3d:7e: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:ED:3A:13:B7:D5:48:7D:8C:B2:5D:07:7D:4C:87:0D:96:C3:B0:95 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Tu06E7fVSH2Msl0HfUyHDZbDsJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.184.0/24 Signature Algorithm: sha256WithRSAEncryption a4:85:fa:20:b5:78:fe:23:80:08:32:68:90:74:e7:35:28:22: d8:04:49:e3:1a:19:55:3a:59:8c:2e:4c:a8:0c:c0:d7:27:0c: ed:e1:f0:23:39:b4:fe:fa:cc:da:18:28:6c:15:a7:29:be:17: e3:8a:86:29:f4:aa:27:40:61:03:62:af:d0:cf:be:28:76:e6: c3:56:2d:88:b5:39:66:7d:d7:56:67:c3:d8:b1:db:4b:04:49: 54:6d:4c:8e:9b:f8:6c:33:58:c0:fc:e6:f2:85:66:e2:29:63: 51:71:fb:66:55:1c:81:be:91:3d:91:37:76:a7:37:98:c0:1e: e9:72:f7:4c:38:a4:47:34:81:b2:1f:08:23:91:53:ad:64:3c: 52:7a:a2:89:a9:07:2d:fa:c5:cf:9a:a4:d3:79:cf:60:ce:1c: a0:e0:c2:3d:c3:fe:37:00:cf:64:f9:f0:88:14:6d:c0:61:aa: ae:9f:37:09:dd:9f:e1:1f:c5:7e:f7:a6:af:7f:98:95:4d:e1: 20:57:4e:e5:92:40:e1:29:d6:04:ce:95:f3:77:04:9a:1b:50: 8e:25:be:37:69:fa:0d:a3:29:43:e8:b0:e6:69:84:50:93:df: b9:a0:ba:5e:92:30:d7:af:60:bf:2b:79:90:0f:af:f3:6f:72: 62:4f:05:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHkk1Ky7VEWG5K716ip/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWVkM2ExM2I3ZDU0ODdkOGNiMjVkMDc3ZDRjODcwZDk2YzNiMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgXiEZMVmMU9weFBpf7Huz15Li2M T7uEqfHfNPDGPJMHHnR5MavtNS7u3SUFjPEk3anSF0omF348N0b+LlA/5Pn9KQtK n6PuMh9c3CHzZiH5XjQmWNtWc136OH5RxWPVY1U3hUIOozp7BqOhu/2Ird1/KbgR Gq7ywAQnwnTmkOdUBCJdNK6QmsqXsd5G6p+vR7e6YbFN1EZw+Bj1XXVbha7z2c6S lYsichp5/Dv432cWFZXhuVMVQwBbo2A8RF8j6RAKEuaz5j4cKNR2aUJpXx4OOWUq PbewluTeFVXDs00Le58sL6FWV2c/OgaKE3AsM4x42lR3PYupL7K7PX5ekwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7tOhO31Uh9jLJdB31Mhw2Ww7CVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVHUwNkU3ZlZTSDJNc2wwSGZVeUhEWmJEc0pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzu4MA0G CSqGSIb3DQEBCwUAA4IBAQCkhfogtXj+I4AIMmiQdOc1KCLYBEnjGhlVOlmMLkyo DMDXJwzt4fAjObT++szaGChsFacpvhfjioYp9KonQGEDYq/Qz74odubDVi2ItTlm fddWZ8PYsdtLBElUbUyOm/hsM1jA/ObyhWbiKWNRcftmVRyBvpE9kTd2pzeYwB7p cvdMOKRHNIGyHwgjkVOtZDxSeqKJqQct+sXPmqTTec9gzhyg4MI9w/43AM9k+fCI FG3AYaqunzcJ3Z/hH8V+96avf5iVTeEgV07lkkDhKdYEzpXzdwSaG1COJb43afoN oylD6LDmaYRQk9+5oLpekjDXr2C/K3mQD6/zb3JiTwU9 -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:26 2026 by rpki-client