This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XAineJhVFQejZp9JgzE8mxfWhHI.roa File: XAineJhVFQejZp9JgzE8mxfWhHI.roa (raw, json) Hash identifier: 1tbYpn4mj152zrbNrYe1zo4xQ8HsGbYdapvHOivB11w= Subject key identifier: 5C:08:A7:78:98:55:15:07:A3:66:9F:49:83:31:3C:9B:17:D6:84:72 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846635EA4B3907605B0799EFBDBAE7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XAineJhVFQejZp9JgzE8mxfWhHI.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44092 IP address blocks: 31.56.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:66:35:ea:4b:39:07:60:5b:07:99:ef:bd:ba:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c08a77898551507a3669f4983313c9b17d68472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:07:6f:07:00:23:a0:9e:59:97:c5:c1:13: ac:85:66:0c:4e:4c:16:69:ef:e6:e7:ba:ab:00:ee: 23:e6:74:f0:7e:42:bd:0e:e3:32:d3:6a:d4:35:e4: f5:b4:c8:83:25:ce:69:2e:19:f3:ba:b4:4b:11:82: 9d:f5:2d:42:6b:a3:18:1f:50:ed:71:b1:cc:1d:58: 07:1a:d7:1c:97:9c:58:70:9d:69:3f:2b:49:f4:e3: 8a:0e:46:cd:70:11:e9:53:88:7c:e6:00:4f:7c:80: 67:1a:31:89:52:7e:98:77:41:aa:7e:67:71:f9:2e: c5:6a:95:0b:94:3c:66:ed:49:cb:fc:b1:c5:c1:32: fe:9e:99:7f:e1:67:e2:fa:11:f2:00:9d:a9:5e:d2: 6c:65:9b:e4:61:61:3c:f4:3a:96:f6:3f:7a:08:10: a4:55:16:20:3e:23:2f:ba:47:df:65:dd:f6:13:bb: 02:3e:0b:b0:5c:9b:8c:df:44:81:fc:74:06:76:7e: a6:44:07:02:bf:d2:10:f0:7f:b8:27:81:43:ce:ca: 40:45:38:cc:5b:31:7a:fa:4d:94:4b:3c:5f:57:29: 18:4a:65:ce:42:b4:a9:6f:a8:ce:2f:d4:82:08:b8: c2:de:2e:1d:28:fb:1f:1c:d6:63:dd:a5:19:e9:6d: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:08:A7:78:98:55:15:07:A3:66:9F:49:83:31:3C:9B:17:D6:84:72 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XAineJhVFQejZp9JgzE8mxfWhHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.40.0/24 Signature Algorithm: sha256WithRSAEncryption 62:d2:e1:24:5d:50:0a:5c:70:fd:5b:d1:1a:29:cf:3c:d4:2a: e0:12:d2:5e:82:60:01:98:39:ae:9a:84:12:73:22:19:10:31: 14:a8:02:21:c3:1f:f5:7e:0f:01:f4:b9:56:a8:1c:1b:d7:90: ae:ba:1d:eb:99:95:55:1d:f7:48:a8:01:45:9d:e4:2c:31:a8: d9:51:d2:7f:e7:8c:ca:2b:fb:d1:95:30:00:18:e5:40:f4:a5: 16:08:fb:7b:67:d5:93:7e:e9:6e:73:c4:55:e7:55:0e:cf:ef: 11:2e:62:4f:ae:9d:2b:6e:a6:eb:3c:2b:1a:af:18:82:d3:0a: b3:46:b9:8f:2a:6b:b6:35:b1:ae:8f:79:ce:8d:df:3d:2f:60: ce:08:14:16:3c:d5:82:4b:d5:26:c2:00:e9:7e:cf:b8:2b:4b: 24:52:e9:07:0a:36:3e:b7:1d:f3:59:48:93:9a:21:fd:fd:65: 98:b8:27:2f:2f:ab:0e:94:bc:88:d1:14:fd:6d:56:24:b3:5f: f9:fa:a2:19:f7:a8:d6:aa:f6:47:6c:ee:f6:bd:dc:60:0f:1b: 8c:ca:28:3d:d9:7d:a6:a0:6d:e7:bb:1d:a1:99:0d:b1:d3:f4: a5:87:eb:f3:57:7e:27:0c:15:13:3a:48:f4:ad:c4:e3:04:1c: 0d:bd:79:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGY16ks5B2BbB5nvvbrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzA4YTc3ODk4NTUxNTA3YTM2NjlmNDk4MzMxM2M5YjE3ZDY4NDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA4HbwcAI6CeWZfFwROshWYMTkwW ae/m57qrAO4j5nTwfkK9DuMy02rUNeT1tMiDJc5pLhnzurRLEYKd9S1Ca6MYH1Dt cbHMHVgHGtccl5xYcJ1pPytJ9OOKDkbNcBHpU4h85gBPfIBnGjGJUn6Yd0Gqfmdx +S7FapULlDxm7UnL/LHFwTL+npl/4Wfi+hHyAJ2pXtJsZZvkYWE89DqW9j96CBCk VRYgPiMvukffZd32E7sCPguwXJuM30SB/HQGdn6mRAcCv9IQ8H+4J4FDzspARTjM WzF6+k2USzxfVykYSmXOQrSpb6jOL9SCCLjC3i4dKPsfHNZj3aUZ6W2E3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFwIp3iYVRUHo2afSYMxPJsX1oRyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWEFpbmVKaFZGUWVqWnA5Smd6RThteGZXaEhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgoMA0G CSqGSIb3DQEBCwUAA4IBAQBi0uEkXVAKXHD9W9EaKc881CrgEtJegmABmDmumoQS cyIZEDEUqAIhwx/1fg8B9LlWqBwb15Cuuh3rmZVVHfdIqAFFneQsMajZUdJ/54zK K/vRlTAAGOVA9KUWCPt7Z9WTfuluc8RV51UOz+8RLmJPrp0rbqbrPCsarxiC0wqz RrmPKmu2NbGuj3nOjd89L2DOCBQWPNWCS9UmwgDpfs+4K0skUukHCjY+tx3zWUiT miH9/WWYuCcvL6sOlLyI0RT9bVYks1/5+qIZ96jWqvZHbO72vdxgDxuMyig92X2m oG3nux2hmQ2x0/Slh+vzV34nDBUTOkj0rcTjBBwNvXnD -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:59 2026 by rpki-client