This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WVxZI7bHfEhbzQVWtrOotjsWzZQ.roa File: WVxZI7bHfEhbzQVWtrOotjsWzZQ.roa (raw, json) Hash identifier: AJ2sv9MbP8Liy7XpHqu8KV5oYP/+Kd0bfhzUMwJWeCQ= Subject key identifier: 59:5C:59:23:B6:C7:7C:48:5B:CD:05:56:B6:B3:A8:B6:3B:16:CD:94 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B6F6D662DF13785218C301A6D02E596C1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WVxZI7bHfEhbzQVWtrOotjsWzZQ.roa Signing time: Tue 30 Dec 2025 13:23:19 +0000 ROA not before: Tue 30 Dec 2025 13:23:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401818 IP address blocks: 31.56.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:6d:66:2d:f1:37:85:21:8c:30:1a:6d:02:e5:96:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 30 13:23:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=595c5923b6c77c485bcd0556b6b3a8b63b16cd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:13:15:98:0f:ac:02:93:f3:ba:7f:b6:bf: 28:18:2f:da:11:9e:93:5d:1b:76:f6:47:c9:75:5f: b4:ae:67:6d:5e:19:da:fa:6e:5d:3a:51:f9:b0:a9: da:5d:77:7d:91:68:a7:39:c5:56:65:f9:19:2e:02: 0c:7d:92:16:c0:59:0a:73:18:07:37:be:56:f3:69: f4:f7:94:e3:9f:01:54:6d:4a:60:28:85:74:44:b2: ae:fc:0f:13:a7:d1:e1:fc:af:62:98:69:7f:e4:cb: 38:c8:c0:8f:6d:a6:16:d3:c6:95:f0:7f:a2:66:65: 3a:06:45:bc:79:f0:c8:52:3a:9a:26:e0:67:de:db: 6b:fb:16:2b:4c:94:e5:26:ae:db:93:32:f0:3f:78: b5:f0:60:34:83:4f:35:1b:c9:42:d3:10:01:1e:32: 9b:2c:93:41:31:62:a6:c4:8d:f9:2d:c4:60:5d:54: 1d:c2:9b:c0:24:6a:c9:66:8e:34:31:9b:67:b9:ac: 87:b5:02:0a:e8:39:d0:83:ca:3f:90:ae:74:8b:70: a4:9c:b5:a0:01:ff:96:11:97:6c:08:55:f1:df:0e: 4e:65:ae:9f:3f:04:a3:ab:07:bc:fd:4c:81:8c:90: ff:29:d6:3e:77:55:09:7b:19:16:3d:32:c6:cf:61: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5C:59:23:B6:C7:7C:48:5B:CD:05:56:B6:B3:A8:B6:3B:16:CD:94 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WVxZI7bHfEhbzQVWtrOotjsWzZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.87.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:e6:b7:57:df:2b:4e:e4:f6:bb:d9:2c:46:c2:b5:03:f6:8a: d5:1f:c5:73:fc:3d:cb:90:95:5c:fa:48:5c:0e:10:76:a1:6e: 39:9a:6f:a9:85:3c:4f:3a:d7:65:8e:52:83:c3:af:17:ce:c7: 38:b8:51:22:87:d9:9f:14:58:8b:90:a3:6f:0b:44:07:54:f0: 35:f8:3f:db:97:21:06:89:87:50:54:ee:b3:a0:3a:8a:9a:91: 3e:c2:82:6b:d1:75:17:de:95:f8:bf:b7:f9:7b:a5:d0:75:95: 05:80:eb:cc:92:cd:d5:24:f5:16:e5:94:63:2a:bf:c0:d3:16: 45:9f:37:54:92:ae:c6:17:ef:11:ce:e3:18:f6:14:d6:a2:fb: 21:ff:55:3d:e2:ed:2c:fd:1a:4f:5a:00:b2:2a:de:87:8b:f8: 1b:0f:ad:b4:fa:75:a7:75:47:a4:2e:45:66:8c:3c:e5:31:6b: ba:b4:a0:b5:cd:2e:57:78:42:6b:a2:1c:49:86:2c:b9:73:54: 98:40:e3:cc:e7:28:4f:6d:b7:60:70:79:ac:06:f3:45:ff:6e: e2:93:de:ec:8d:1e:17:c5:ef:fd:f7:5a:0b:12:e8:bb:38:c7: 44:da:37:1c:e4:b0:01:2b:11:6a:f3:0c:f6:6e:47:15:35:96: 92:24:f4:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtvbWYt8TeFIYwwGm0C5ZbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjMwMTMyMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTVjNTkyM2I2Yzc3YzQ4NWJjZDA1NTZiNmIzYThiNjNiMTZjZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq8TFZgPrAKT87p/tr8oGC/aEZ6T XRt29kfJdV+0rmdtXhna+m5dOlH5sKnaXXd9kWinOcVWZfkZLgIMfZIWwFkKcxgH N75W82n095TjnwFUbUpgKIV0RLKu/A8Tp9Hh/K9imGl/5Ms4yMCPbaYW08aV8H+i ZmU6BkW8efDIUjqaJuBn3ttr+xYrTJTlJq7bkzLwP3i18GA0g081G8lC0xABHjKb LJNBMWKmxI35LcRgXVQdwpvAJGrJZo40MZtnuayHtQIK6DnQg8o/kK50i3CknLWg Af+WEZdsCFXx3w5OZa6fPwSjqwe8/UyBjJD/KdY+d1UJexkWPTLGz2GqHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlcWSO2x3xIW80FVrazqLY7Fs2UMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvV1Z4Wkk3YkhmRWhielFWV3RyT290anNXelpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhXMA0G CSqGSIb3DQEBCwUAA4IBAQBq5rdX3ytO5Pa72SxGwrUD9orVH8Vz/D3LkJVc+khc DhB2oW45mm+phTxPOtdljlKDw68Xzsc4uFEih9mfFFiLkKNvC0QHVPA1+D/blyEG iYdQVO6zoDqKmpE+woJr0XUX3pX4v7f5e6XQdZUFgOvMks3VJPUW5ZRjKr/A0xZF nzdUkq7GF+8RzuMY9hTWovsh/1U94u0s/RpPWgCyKt6Hi/gbD620+nWndUekLkVm jDzlMWu6tKC1zS5XeEJrohxJhiy5c1SYQOPM5yhPbbdgcHmsBvNF/27ik97sjR4X xe/991oLEui7OMdE2jcc5LABKxFq8wz2bkcVNZaSJPSe -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:57 2025 by rpki-client