This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XssVlOgBGaDWEEoZQAhy6YufEvw.roa File: XssVlOgBGaDWEEoZQAhy6YufEvw.roa (raw, json) Hash identifier: itDP+Hp6xPfnsCeffbEbFD/ikMnNs6Wbz9gcFMe/4wI= Subject key identifier: 5E:CB:15:94:E8:01:19:A0:D6:10:4A:19:40:08:72:E9:8B:9F:12:FC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E3EAAFA7741B1F89E144996E8876 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XssVlOgBGaDWEEoZQAhy6YufEvw.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 31.56.125.0/24 maxlen: 24 31.57.44.0/23 maxlen: 23 31.57.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e3:ea:af:a7:74:1b:1f:89:e1:44:99:6e:88:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ecb1594e80119a0d6104a19400872e98b9f12fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:b3:ed:d2:e6:ec:cf:37:ea:f4:e8:86:6a: 9d:4f:14:97:e9:36:31:19:00:46:de:17:d6:f9:fd: 5c:7b:e2:25:6b:b2:c9:0f:19:5d:80:38:f9:b7:f4: b7:3b:ff:70:35:5a:3c:13:6d:10:a2:ad:8d:53:f7: dc:d5:14:85:1e:75:56:93:5d:b3:15:e9:e5:81:f9: ad:7e:34:f9:b8:7b:36:96:89:b7:b7:77:37:63:dd: 5b:75:3c:ef:ef:e0:61:2b:60:45:e1:8a:44:34:47: 4e:32:3b:10:77:e7:85:58:38:e8:13:31:3b:f3:76: ce:23:37:79:a9:88:0d:4d:a5:23:63:01:ef:44:b2: c9:95:0e:14:cf:d3:e4:b3:45:9e:4d:ba:d2:76:78: 6c:c7:17:9e:02:bc:f7:94:c0:84:87:cf:f9:30:7e: 78:0f:e4:ec:83:b9:b1:ab:56:b9:77:2b:10:a4:37: cb:36:dd:aa:3b:34:d1:6f:18:10:58:94:b9:e7:bc: f0:22:ab:72:d9:cc:99:b8:a5:60:5f:0e:41:93:55: 71:78:89:21:09:4a:73:64:bc:7d:70:d0:5b:a2:00: c9:82:43:c8:09:18:80:5d:68:09:75:ee:be:cf:2f: 04:ec:cf:bf:19:6b:8f:71:c0:a7:33:36:f9:5a:b8: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CB:15:94:E8:01:19:A0:D6:10:4A:19:40:08:72:E9:8B:9F:12:FC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XssVlOgBGaDWEEoZQAhy6YufEvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.57.44.0/23 31.57.148.0/23 Signature Algorithm: sha256WithRSAEncryption b5:2d:b7:70:d5:09:35:f9:3b:c4:a8:a6:71:31:25:04:09:07: ee:c9:26:36:7c:75:3c:88:1e:d3:5f:54:a3:fd:ef:44:9b:71: 81:62:f9:bf:d6:73:0e:83:5e:12:17:d6:49:b2:cc:1b:b7:99: 8a:7e:22:2f:2a:4f:03:74:a6:65:53:f8:99:35:f4:aa:05:9d: 44:91:05:54:d7:57:09:8c:11:4e:1d:d1:f9:de:d4:18:c1:d9: 15:4e:8b:9a:9d:24:6f:7b:28:10:89:a7:54:44:0b:f0:b3:db: 3b:58:41:c6:12:83:21:d4:f3:3e:47:dc:39:6f:79:d2:df:9b: 01:7d:8d:df:0b:18:2b:4d:00:ce:86:21:d5:89:02:e7:e8:d0: 4a:40:9e:c0:5e:f1:ee:15:bd:aa:35:90:e0:de:58:7e:ad:fe: a8:fd:46:6f:79:56:66:90:2e:b8:53:07:97:04:3b:f5:65:c2: b4:b3:48:d8:19:e1:23:63:52:92:06:bc:8a:c3:cd:df:7d:0c: 9d:f4:5d:f1:73:3b:9f:89:aa:e7:4d:57:4b:e2:83:ff:29:03: 5c:e4:9b:72:ee:f8:3a:19:a0:14:75:0e:61:3e:a3:47:fe:c3: ee:f2:93:60:d6:27:1e:d0:6e:db:ce:d8:32:f1:cb:9e:7a:ed: c8:60:1b:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hOPqr6d0Gx+J4USZboh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWNiMTU5NGU4MDExOWEwZDYxMDRhMTk0MDA4NzJlOThiOWYxMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQez7dLm7M836vTohmqdTxSX6TYx GQBG3hfW+f1ce+Ila7LJDxldgDj5t/S3O/9wNVo8E20Qoq2NU/fc1RSFHnVWk12z FenlgfmtfjT5uHs2lom3t3c3Y91bdTzv7+BhK2BF4YpENEdOMjsQd+eFWDjoEzE7 83bOIzd5qYgNTaUjYwHvRLLJlQ4Uz9Pks0WeTbrSdnhsxxeeArz3lMCEh8/5MH54 D+Tsg7mxq1a5dysQpDfLNt2qOzTRbxgQWJS557zwIqty2cyZuKVgXw5Bk1VxeIkh CUpzZLx9cNBbogDJgkPICRiAXWgJde6+zy8E7M+/GWuPccCnMzb5WrhvQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF7LFZToARmg1hBKGUAIcumLnxL8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWHNzVmxPZ0JHYURXRUVvWlFBaHk2WXVmRXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzh9AwQB HzksAwQBHzmUMA0GCSqGSIb3DQEBCwUAA4IBAQC1Lbdw1Qk1+TvEqKZxMSUECQfu ySY2fHU8iB7TX1Sj/e9Em3GBYvm/1nMOg14SF9ZJsswbt5mKfiIvKk8DdKZlU/iZ NfSqBZ1EkQVU11cJjBFOHdH53tQYwdkVTouanSRveygQiadURAvws9s7WEHGEoMh 1PM+R9w5b3nS35sBfY3fCxgrTQDOhiHViQLn6NBKQJ7AXvHuFb2qNZDg3lh+rf6o /UZveVZmkC64UweXBDv1ZcK0s0jYGeEjY1KSBryKw83ffQyd9F3xczufiarnTVdL 4oP/KQNc5Jty7vg6GaAUdQ5hPqNH/sPu8pNg1ice0G7bztgy8cueeu3IYBvm -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:36 2026 by rpki-client