This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Twfv3Bp8fIbx6-lKiIo60KIz4uk.roa File: Twfv3Bp8fIbx6-lKiIo60KIz4uk.roa (raw, json) Hash identifier: C6yflnKuNAB+eE6piFxyM+oE2wVZy29i0NjN5nowRTg= Subject key identifier: 4F:07:EF:DC:1A:7C:7C:86:F1:EB:E9:4A:88:8A:3A:D0:A2:33:E2:E9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B4C8433B5CF3605664E09ABD2C38393BF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Twfv3Bp8fIbx6-lKiIo60KIz4uk.roa Signing time: Tue 23 Dec 2025 18:41:30 +0000 ROA not before: Tue 23 Dec 2025 18:41:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 31.59.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:84:33:b5:cf:36:05:66:4e:09:ab:d2:c3:83:93:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 23 18:41:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f07efdc1a7c7c86f1ebe94a888a3ad0a233e2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2d:77:19:18:82:4e:e6:a6:5d:08:f9:08:0b: b1:fa:44:f2:c3:56:a2:fc:bb:47:e5:5a:7e:7e:79: ea:5c:83:48:0b:69:59:08:9d:cd:b3:1e:d0:f9:4d: b3:44:ea:6c:10:0b:f8:4f:ef:92:d0:ae:b7:a4:65: 95:ac:8d:4d:1e:af:78:fa:40:ed:9a:96:7e:ce:e1: a3:0a:68:72:cd:ec:d6:ab:a5:f6:d3:19:89:6e:d1: 91:45:6a:e2:80:0f:7b:17:29:ce:6a:04:f0:3c:1a: 88:85:b3:f6:c4:d7:67:cd:13:a1:a3:d0:46:df:c8: e9:30:17:9c:a4:1e:66:7d:94:3c:a9:90:5e:b7:c1: 2f:6b:51:8d:c0:fc:81:fe:e0:9f:a9:fb:5a:9a:79: c4:70:1d:0b:63:be:65:50:85:d2:c2:01:84:09:5c: 7c:85:80:c0:ef:d8:21:3c:8b:05:f5:03:13:66:6d: 06:63:05:d0:af:ec:b3:2b:e8:82:c8:ef:34:f0:13: 37:44:de:ab:af:c6:1c:b7:3f:d0:d5:be:c8:4e:11: d8:79:f8:36:43:83:0f:b9:cc:19:88:19:1b:78:19: fc:a4:98:46:09:22:8b:87:59:cb:e8:c8:f0:fe:1f: d6:cf:f8:8b:70:8d:6e:df:87:4e:ac:37:c7:62:9e: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:07:EF:DC:1A:7C:7C:86:F1:EB:E9:4A:88:8A:3A:D0:A2:33:E2:E9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Twfv3Bp8fIbx6-lKiIo60KIz4uk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.173.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:a2:b5:9c:da:4b:2b:f7:0c:8f:4c:0a:9d:ce:af:31:03:d3: 25:93:dc:63:c3:7c:0d:a2:7e:88:66:1f:77:90:e6:63:f8:a5: 48:b3:fa:d3:ce:77:0a:6a:76:f0:9b:2d:46:38:eb:6f:f2:e0: 64:e2:5a:e9:c5:72:82:8b:54:dd:90:40:47:47:2f:50:74:53: 9a:d3:9d:ca:5d:4f:e1:0e:bc:d9:f8:b6:f6:7a:2d:d3:46:9e: f7:60:c5:72:d8:b5:c2:c3:4b:84:48:70:c0:46:88:1c:18:71: 6f:39:3b:1a:8c:d6:df:af:0d:57:1e:b0:3d:7b:2f:a7:af:87: 07:85:5d:29:04:66:0a:2c:f8:a8:ba:dc:6a:a1:96:17:02:cb: 31:8b:c1:dd:24:4f:9c:71:0b:47:71:ae:40:83:1a:49:67:55: a2:6b:d1:ac:18:31:2c:10:cb:d5:b9:4b:fd:9c:83:3c:a6:72: 9e:73:8f:ff:8d:4e:8a:05:bf:01:9f:56:74:3d:12:17:90:e9: 07:e9:ce:6f:ee:ed:69:af:c4:d3:be:81:ce:0c:41:da:df:02: b9:cb:cd:50:dd:8f:e0:3b:5a:59:31:0e:16:4c:1f:17:a3:c0: e6:c0:a0:80:91:f0:15:2e:36:bf:58:86:34:89:b4:b1:16:a2: 53:5f:c8:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtMhDO1zzYFZk4Jq9LDg5O/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIzMTg0MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjA3ZWZkYzFhN2M3Yzg2ZjFlYmU5NGE4ODhhM2FkMGEyMzNlMmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+i13GRiCTuamXQj5CAux+kTyw1ai /LtH5Vp+fnnqXINIC2lZCJ3Nsx7Q+U2zROpsEAv4T++S0K63pGWVrI1NHq94+kDt mpZ+zuGjCmhyzezWq6X20xmJbtGRRWrigA97FynOagTwPBqIhbP2xNdnzROho9BG 38jpMBecpB5mfZQ8qZBet8Eva1GNwPyB/uCfqftamnnEcB0LY75lUIXSwgGECVx8 hYDA79ghPIsF9QMTZm0GYwXQr+yzK+iCyO808BM3RN6rr8Yctz/Q1b7IThHYefg2 Q4MPucwZiBkbeBn8pJhGCSKLh1nL6Mjw/h/Wz/iLcI1u34dOrDfHYp4ePQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE8H79wafHyG8evpSoiKOtCiM+LpMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVHdmdjNCcDhmSWJ4Ni1sS2lJbzYwS0l6NHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzutMA0G CSqGSIb3DQEBCwUAA4IBAQCNorWc2ksr9wyPTAqdzq8xA9Mlk9xjw3wNon6IZh93 kOZj+KVIs/rTzncKanbwmy1GOOtv8uBk4lrpxXKCi1TdkEBHRy9QdFOa053KXU/h DrzZ+Lb2ei3TRp73YMVy2LXCw0uESHDARogcGHFvOTsajNbfrw1XHrA9ey+nr4cH hV0pBGYKLPioutxqoZYXAssxi8HdJE+ccQtHca5AgxpJZ1Wia9GsGDEsEMvVuUv9 nIM8pnKec4//jU6KBb8Bn1Z0PRIXkOkH6c5v7u1pr8TTvoHODEHa3wK5y81Q3Y/g O1pZMQ4WTB8Xo8DmwKCAkfAVLja/WIY0ibSxFqJTX8hs -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:00 2025 by rpki-client