This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XCeBxMAQ_Xj4ceOF41DT7Apin5I.roa File: XCeBxMAQ_Xj4ceOF41DT7Apin5I.roa (raw, json) Hash identifier: Vt7SODGdKml684u5y6oxa41uxD5pZlCvyECuU5WXbcE= Subject key identifier: 5C:27:81:C4:C0:10:FD:78:F8:71:E3:85:E3:50:D3:EC:0A:62:9F:92 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84809BA0FCCF0647E07986C23573D7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XCeBxMAQ_Xj4ceOF41DT7Apin5I.roa Signing time: Fri 02 Jan 2026 16:22:28 +0000 ROA not before: Fri 02 Jan 2026 16:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138156 IP address blocks: 31.56.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:80:9b:a0:fc:cf:06:47:e0:79:86:c2:35:73:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c2781c4c010fd78f871e385e350d3ec0a629f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:fc:ac:43:56:fb:24:17:5d:90:39:a3:42: 5b:9c:20:6b:a6:bf:de:62:b6:d9:7c:b7:e4:fb:6e: cc:2b:3d:0d:39:4d:f4:16:97:3c:6d:b1:db:47:86: 3f:bc:ca:86:2f:79:22:40:bd:f1:e0:8a:69:fa:05: 3a:3a:67:d4:d3:68:fc:b0:38:07:8c:ff:34:4c:a5: 42:87:f5:6b:61:7e:c0:05:fe:5e:b5:c0:b6:ec:18: cb:4c:fc:0c:c3:0d:46:fd:7f:da:7d:b3:25:79:07: c9:25:4c:72:ce:7f:a1:20:15:df:2c:71:76:67:b1: b0:1e:d5:2c:02:b0:03:f5:28:b9:85:cd:dd:4a:92: 21:56:83:83:db:15:b3:1c:bc:06:09:b0:da:c5:6c: f1:4f:07:88:93:2b:cb:6b:57:36:e0:9b:ff:bb:d6: 3a:96:f6:22:80:a3:0e:e1:c8:88:d0:96:9f:bb:e3: 90:ee:3b:d9:e6:c9:56:08:e8:f8:b8:76:80:30:6b: 6a:78:7c:f6:5f:be:98:d8:d1:b7:74:67:cc:94:47: 38:b9:39:78:a8:e2:5d:88:32:1d:7c:60:71:49:73: 45:28:94:9b:ad:64:b8:30:b0:b9:96:7e:80:73:0b: d9:00:77:b4:37:cc:33:db:ae:e8:ac:d8:26:77:bc: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:27:81:C4:C0:10:FD:78:F8:71:E3:85:E3:50:D3:EC:0A:62:9F:92 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XCeBxMAQ_Xj4ceOF41DT7Apin5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.79.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:08:1c:4e:7c:30:03:70:3a:20:8b:a1:8e:f8:e7:e3:43:a0: f0:82:82:fc:15:f6:17:bb:16:7f:fe:74:c7:4c:76:e8:de:c4: 9f:4a:83:35:49:34:54:62:53:44:42:02:d7:e9:6a:6e:22:f9: c7:4e:2e:ae:47:85:3f:ba:89:1a:37:21:e9:75:54:50:70:89: 88:8f:9f:45:f3:2e:5e:3d:5a:5c:90:0d:1e:3d:4f:80:f4:25: d8:ff:2e:e7:ff:37:30:ee:68:be:37:fd:da:23:e6:d0:90:d4: f3:76:70:70:65:7b:df:18:a0:77:e9:ca:03:de:b0:9c:5b:85: b4:ca:6d:77:f8:73:2e:c2:6d:4d:3c:1d:96:fb:cd:9d:a3:82: c3:16:51:10:44:77:a0:dc:f2:bf:0a:d3:7f:31:9e:59:aa:11: 44:a5:f2:c2:9f:3a:ef:3b:c9:9c:d0:ce:79:99:87:c5:e0:a6: 62:e3:8f:ea:69:f1:35:23:36:2e:a9:fd:d6:b6:3c:32:f9:b4: 85:8b:c3:13:ed:c2:e9:a8:06:84:53:2c:83:ae:76:3c:b2:80: ab:b6:1c:d0:a5:ac:84:1e:d2:58:23:62:64:3e:61:37:e8:71: 55:61:c3:bc:d7:14:76:2f:82:87:30:d4:70:6f:f7:9f:92:09: 57:87:d7:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hICboPzPBkfgeYbCNXPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzI3ODFjNGMwMTBmZDc4Zjg3MWUzODVlMzUwZDNlYzBhNjI5ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MP8rENW+yQXXZA5o0JbnCBrpr/e YrbZfLfk+27MKz0NOU30Fpc8bbHbR4Y/vMqGL3kiQL3x4Ipp+gU6OmfU02j8sDgH jP80TKVCh/VrYX7ABf5etcC27BjLTPwMww1G/X/afbMleQfJJUxyzn+hIBXfLHF2 Z7GwHtUsArAD9Si5hc3dSpIhVoOD2xWzHLwGCbDaxWzxTweIkyvLa1c24Jv/u9Y6 lvYigKMO4ciI0Jafu+OQ7jvZ5slWCOj4uHaAMGtqeHz2X76Y2NG3dGfMlEc4uTl4 qOJdiDIdfGBxSXNFKJSbrWS4MLC5ln6AcwvZAHe0N8wz267orNgmd7zSuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFwngcTAEP14+HHjheNQ0+wKYp+SMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWENlQnhNQVFfWGo0Y2VPRjQxRFQ3QXBpbjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhPMA0G CSqGSIb3DQEBCwUAA4IBAQBfCBxOfDADcDogi6GO+OfjQ6DwgoL8FfYXuxZ//nTH THbo3sSfSoM1STRUYlNEQgLX6WpuIvnHTi6uR4U/uokaNyHpdVRQcImIj59F8y5e PVpckA0ePU+A9CXY/y7n/zcw7mi+N/3aI+bQkNTzdnBwZXvfGKB36coD3rCcW4W0 ym13+HMuwm1NPB2W+82do4LDFlEQRHeg3PK/CtN/MZ5ZqhFEpfLCnzrvO8mc0M55 mYfF4KZi44/qafE1IzYuqf3Wtjwy+bSFi8MT7cLpqAaEUyyDrnY8soCrthzQpayE HtJYI2JkPmE36HFVYcO81xR2L4KHMNRwb/efkglXh9dV -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:13 2026 by rpki-client