This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vi5ToDbpyJEZZuZlFnlrJJkwZPw.roa File: Vi5ToDbpyJEZZuZlFnlrJJkwZPw.roa (raw, json) Hash identifier: p/MPHfA6dopjjHy01mlbOnjfD5bcZcFpdup5stpT7J8= Subject key identifier: 56:2E:53:A0:36:E9:C8:91:19:66:E6:65:16:79:6B:24:99:30:64:FC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B8ED23825341DE3A53F21FDA5E97E3F9B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vi5ToDbpyJEZZuZlFnlrJJkwZPw.roa Signing time: Mon 05 Jan 2026 15:41:40 +0000 ROA not before: Mon 05 Jan 2026 15:41:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 31.57.152.0/24 maxlen: 24 31.59.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:d2:38:25:34:1d:e3:a5:3f:21:fd:a5:e9:7e:3f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 5 15:41:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=562e53a036e9c8911966e66516796b24993064fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:d4:16:21:b3:a1:50:4f:0f:63:db:8e:57: f4:01:1d:89:76:1d:ba:0e:45:27:96:8b:f3:9f:4b: 32:89:95:be:8f:03:33:0c:05:a8:8e:42:d3:49:eb: b9:50:37:c8:06:fa:01:ab:b7:e7:4b:bb:e0:a4:26: 1b:01:f9:ef:31:be:40:3b:dc:76:d8:f2:1f:a8:4a: e9:87:7c:31:86:50:a3:a0:ed:52:8d:78:85:80:11: d4:5c:00:cc:c9:de:b7:73:a2:9d:89:a2:8e:18:64: 4b:2b:0d:62:13:fa:af:0c:ef:f5:07:5b:3c:6d:f3: 45:79:3c:64:8a:29:1d:b9:6c:5a:71:29:d7:77:82: ff:22:d7:ea:82:6d:c9:62:e8:01:60:85:9a:01:85: 82:0d:b7:c4:2a:c3:dd:f8:c4:0c:28:55:7c:7c:e7: 90:8a:99:9e:73:67:3c:82:1f:c5:ac:2b:52:f9:8c: 01:c6:94:37:c3:45:e8:7c:44:d3:0c:16:ac:c9:3c: d1:45:b3:8d:75:41:b9:9b:63:40:72:7d:86:33:55: b3:0d:e9:c6:5e:ad:9b:4c:83:25:a9:24:0d:fc:77: 61:f4:b9:8f:33:8f:00:2e:dc:16:3b:45:71:71:8f: ca:03:1c:f3:67:7c:d3:74:d2:fb:0d:5c:9a:50:b4: 07:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2E:53:A0:36:E9:C8:91:19:66:E6:65:16:79:6B:24:99:30:64:FC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vi5ToDbpyJEZZuZlFnlrJJkwZPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.152.0/24 31.59.59.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:6f:8b:ae:5e:7a:00:0f:5a:45:ba:a7:65:79:03:b9:e4:1d: 42:7e:74:2b:71:25:ff:1e:5e:93:10:4f:bb:ab:43:ee:02:ac: 5a:41:1f:d2:01:a0:38:50:ca:7c:10:0b:4e:1f:e8:d5:bf:1c: a0:b0:95:e8:c3:e9:cf:b2:f0:b8:f3:b2:96:d0:f1:f8:6f:3b: 24:d8:9f:81:a1:58:e3:dc:d8:09:24:96:f3:85:bb:7a:36:9d: 05:22:91:43:4d:1f:03:3f:f8:48:5f:68:72:fb:6a:7c:71:67: 8a:24:1d:b7:5f:77:d0:d6:79:34:a4:ee:92:a9:2f:3d:7e:4d: be:f1:91:08:7c:e5:23:17:93:c3:2a:be:5b:55:36:47:52:f7: 27:89:e2:01:b8:8b:da:0e:c0:54:87:8d:bb:6f:21:45:73:44: 7c:a4:19:2f:a0:3a:56:44:5c:fc:54:b2:16:6a:cf:a4:3a:94: fc:60:a2:4e:7e:e3:1c:ef:8e:8f:e0:e1:bb:4e:37:42:c9:8c: 94:08:4b:c8:98:bf:30:fa:40:00:d1:8b:02:71:8b:56:3e:c6: ad:dc:66:41:a8:eb:6e:75:85:49:e4:54:3c:00:cc:0d:33:78: 36:bb:f9:1d:a3:f8:84:da:a8:17:c3:fe:c4:be:1e:dc:41:71: d4:d2:a6:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuO0jglNB3jpT8h/aXpfj+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA1MTU0MTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjJlNTNhMDM2ZTljODkxMTk2NmU2NjUxNjc5NmIyNDk5MzA2NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCvUFiGzoVBPD2Pbjlf0AR2Jdh26 DkUnlovzn0syiZW+jwMzDAWojkLTSeu5UDfIBvoBq7fnS7vgpCYbAfnvMb5AO9x2 2PIfqErph3wxhlCjoO1SjXiFgBHUXADMyd63c6KdiaKOGGRLKw1iE/qvDO/1B1s8 bfNFeTxkiikduWxacSnXd4L/Itfqgm3JYugBYIWaAYWCDbfEKsPd+MQMKFV8fOeQ ipmec2c8gh/FrCtS+YwBxpQ3w0XofETTDBasyTzRRbONdUG5m2NAcn2GM1WzDenG Xq2bTIMlqSQN/Hdh9LmPM48ALtwWO0VxcY/KAxzzZ3zTdNL7DVyaULQHWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFYuU6A26ciRGWbmZRZ5aySZMGT8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVmk1VG9EYnB5SkVaWnVabEZubHJKSmt3WlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmYAwQA Hzs7MA0GCSqGSIb3DQEBCwUAA4IBAQCcb4uuXnoAD1pFuqdleQO55B1CfnQrcSX/ Hl6TEE+7q0PuAqxaQR/SAaA4UMp8EAtOH+jVvxygsJXow+nPsvC487KW0PH4bzsk 2J+BoVjj3NgJJJbzhbt6Np0FIpFDTR8DP/hIX2hy+2p8cWeKJB23X3fQ1nk0pO6S qS89fk2+8ZEIfOUjF5PDKr5bVTZHUvcnieIBuIvaDsBUh427byFFc0R8pBkvoDpW RFz8VLIWas+kOpT8YKJOfuMc746P4OG7TjdCyYyUCEvImL8w+kAA0YsCcYtWPsat 3GZBqOtudYVJ5FQ8AMwNM3g2u/kdo/iE2qgXw/7Evh7cQXHU0qbi -----END CERTIFICATE-----Generated at Sat Jan 10 09:44:22 2026 by rpki-client