This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X4xue3QqmOSpqyXisccbWJpjJ88.roa File: X4xue3QqmOSpqyXisccbWJpjJ88.roa (raw, json) Hash identifier: X/9wJ2vDBBu7TZ+iG57YMLQt1SxqEUNqSrlJd2KQtX8= Subject key identifier: 5F:8C:6E:7B:74:2A:98:E4:A9:AB:25:E2:B1:C7:1B:58:9A:63:27:CF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CC781166AB4D7856851CC8A5150C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X4xue3QqmOSpqyXisccbWJpjJ88.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215286 IP address blocks: 31.59.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cc:78:11:66:ab:4d:78:56:85:1c:c8:a5:15:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f8c6e7b742a98e4a9ab25e2b1c71b589a6327cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:91:08:26:a4:e7:bd:ba:0b:fa:35:af:26: ac:1c:53:e6:77:23:8f:74:4b:26:08:9d:2c:b1:6a: 19:c4:3d:64:3a:9f:ae:5f:99:14:92:f3:1c:94:42: b1:3b:ca:35:7b:d6:8c:e6:b8:84:bb:6b:7a:30:49: 7b:f8:fd:89:b3:8c:4a:66:19:d3:c8:b1:f8:a8:8b: 66:cb:1f:d9:fb:b8:6a:b6:42:dd:36:37:91:c2:18: d1:e8:09:6b:a1:a9:e9:bf:da:be:79:05:2d:bc:76: 54:28:f8:15:98:26:dc:63:fe:2f:54:97:54:16:e5: 04:86:d8:c7:90:7e:79:b3:e4:fd:6a:76:07:26:eb: bc:78:2e:b4:e9:82:bc:85:1a:4a:5d:8f:8b:ba:35: 8c:e4:dd:b0:ed:49:ad:aa:52:34:d5:5d:21:a2:5e: 11:ea:d7:6f:2e:b2:c5:63:84:8f:ad:5b:a8:9f:08: ca:da:e8:ee:86:1f:ed:8f:ba:b6:55:4d:d4:19:6f: 31:fd:54:51:fe:79:9e:03:96:ee:a0:2d:41:04:17: db:5a:a1:29:50:42:1f:a7:ca:8b:9d:17:7c:3c:e8: 19:93:8f:9f:f1:ec:60:86:a6:8f:ab:8c:a6:01:58: b9:d5:ab:cb:33:3c:5a:53:8f:2c:b2:7e:ce:01:01: e0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8C:6E:7B:74:2A:98:E4:A9:AB:25:E2:B1:C7:1B:58:9A:63:27:CF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/X4xue3QqmOSpqyXisccbWJpjJ88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.137.0/24 Signature Algorithm: sha256WithRSAEncryption 96:df:1f:c4:13:41:49:c1:d9:9d:50:85:de:1d:83:3b:93:64: f8:83:a1:1e:88:1c:98:22:db:0b:24:08:9c:47:c1:e8:12:f8: b5:94:c7:bd:cb:3b:ae:74:1c:36:6d:e6:45:38:e2:3c:fc:86: bd:6d:b4:53:e9:46:fa:e9:a8:bf:4a:3a:e7:6c:31:a6:d5:9f: cb:de:14:46:32:43:df:96:2e:7e:51:6b:30:a4:ff:f4:78:8f: 5e:98:55:af:f2:52:ff:03:35:55:78:e3:db:37:7c:e2:82:c1: 05:d6:3a:3d:08:b2:c7:b7:e3:02:d6:12:c5:4a:bb:1d:f8:24: bb:19:25:68:2c:71:52:0f:8b:de:8f:6a:ca:51:71:54:85:be: b5:c9:3a:ee:9e:28:29:f0:a0:8c:de:2a:a1:ad:2d:10:02:9c: 3c:39:93:b1:70:fc:f0:8e:7e:64:a4:6d:e7:ff:84:4a:e7:92: 9c:22:da:1d:5a:c7:38:c8:8f:62:2a:98:fb:84:51:5e:df:f5: 2c:3b:c1:28:90:19:66:8c:03:92:a6:35:83:e9:e2:19:3e:84: 48:b3:b1:a6:60:9a:ff:4c:09:12:ae:cc:1f:03:c6:ed:18:1f: e6:56:61:2d:f5:1b:56:86:f6:eb:d2:26:79:1f:d2:41:3e:b4: 9b:78:2e:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMx4EWarTXhWhRzIpRUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjhjNmU3Yjc0MmE5OGU0YTlhYjI1ZTJiMWM3MWI1ODlhNjMyN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYmRCCak5726C/o1ryasHFPmdyOP dEsmCJ0ssWoZxD1kOp+uX5kUkvMclEKxO8o1e9aM5riEu2t6MEl7+P2Js4xKZhnT yLH4qItmyx/Z+7hqtkLdNjeRwhjR6Alroanpv9q+eQUtvHZUKPgVmCbcY/4vVJdU FuUEhtjHkH55s+T9anYHJuu8eC606YK8hRpKXY+LujWM5N2w7UmtqlI01V0hol4R 6tdvLrLFY4SPrVuonwjK2ujuhh/tj7q2VU3UGW8x/VRR/nmeA5buoC1BBBfbWqEp UEIfp8qLnRd8POgZk4+f8exghqaPq4ymAVi51avLMzxaU48ssn7OAQHg+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+Mbnt0Kpjkqasl4rHHG1iaYyfPMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWDR4dWUzUXFtT1NwcXlYaXNjY2JXSnBqSjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzuJMA0G CSqGSIb3DQEBCwUAA4IBAQCW3x/EE0FJwdmdUIXeHYM7k2T4g6EeiByYItsLJAic R8HoEvi1lMe9yzuudBw2beZFOOI8/Ia9bbRT6Ub66ai/SjrnbDGm1Z/L3hRGMkPf li5+UWswpP/0eI9emFWv8lL/AzVVeOPbN3zigsEF1jo9CLLHt+MC1hLFSrsd+CS7 GSVoLHFSD4vej2rKUXFUhb61yTrunigp8KCM3iqhrS0QApw8OZOxcPzwjn5kpG3n /4RK55KcItodWsc4yI9iKpj7hFFe3/UsO8EokBlmjAOSpjWD6eIZPoRIs7GmYJr/ TAkSrswfA8btGB/mVmEt9RtWhvbr0iZ5H9JBPrSbeC6F -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:05 2026 by rpki-client