This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y3-ildI7JwYRH2X8PK2Xz0utolU.roa File: Y3-ildI7JwYRH2X8PK2Xz0utolU.roa (raw, json) Hash identifier: MIcVfJJcv4N9GRO4FepOxrJ1ijeZwBZuBYRr6YaF/KA= Subject key identifier: 63:7F:A2:95:D2:3B:27:06:11:1F:65:FC:3C:AD:97:CF:4B:AD:A2:55 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DC982D371682079D7599946D4009 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y3-ildI7JwYRH2X8PK2Xz0utolU.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 31.56.238.0/24 maxlen: 24 31.58.69.0/24 maxlen: 24 31.59.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dc:98:2d:37:16:82:07:9d:75:99:94:6d:40:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=637fa295d23b2706111f65fc3cad97cf4bada255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:7c:c9:eb:1d:2c:fd:a3:6b:4c:b2:6f:e9: f6:ee:da:d8:c4:20:f0:82:4b:48:66:e6:c7:e7:9b: 82:db:56:82:53:b7:25:71:57:90:83:c6:bb:8e:fb: c7:8e:37:f1:60:3f:61:48:2d:60:6f:8b:69:ad:86: 8d:82:97:d9:73:04:2e:a9:2c:9c:69:1c:d8:fc:55: 10:42:f3:17:a6:f7:c6:02:be:09:1c:dc:59:87:e0: f8:0c:92:6f:0d:2f:9a:49:1e:b3:50:4a:12:bc:4b: 9c:4b:b1:4b:ff:8e:79:7e:3d:da:b4:30:d2:57:2d: e4:dc:72:5c:98:06:9d:c1:46:05:a9:53:6c:95:8d: b5:c8:37:e2:3c:39:64:c0:39:8d:85:cc:ec:31:41: 67:b0:9a:87:aa:38:c4:6c:ad:fd:be:e5:f7:af:02: 7f:d6:8e:2e:f6:50:23:ba:bc:df:43:d7:e4:a6:6d: 5b:be:86:59:f9:1c:0a:28:72:f2:2d:71:37:14:ff: 74:6f:01:8c:00:81:ff:4f:56:11:44:88:1f:8b:04: 74:76:e1:b1:c9:68:86:11:df:0a:19:b9:9f:d4:72: 2a:71:33:9d:bb:aa:a7:11:c3:21:d9:bb:b7:37:81: 8e:6d:cc:62:8c:3c:5d:d9:b2:5b:61:a0:ef:35:ce: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7F:A2:95:D2:3B:27:06:11:1F:65:FC:3C:AD:97:CF:4B:AD:A2:55 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y3-ildI7JwYRH2X8PK2Xz0utolU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.238.0/24 31.58.69.0/24 31.59.116.0/24 Signature Algorithm: sha256WithRSAEncryption c0:4e:a4:f6:dc:77:da:0a:e7:2d:a4:95:2a:16:a3:a6:0b:39: ff:10:fa:be:a1:10:73:6b:2a:35:65:e4:b7:6d:9a:a0:30:43: a2:48:e1:76:70:43:e1:9f:7a:bc:c1:3d:62:bd:06:84:c1:b2: 87:30:c6:2c:fd:45:59:66:f5:cc:6b:00:be:3e:ee:cc:3f:23: bb:40:0e:04:7b:b4:91:7b:b4:69:5c:62:af:bc:9f:37:e1:41: 7b:7d:e7:ec:a4:f0:72:68:22:13:cf:cc:f4:1f:f6:93:20:0e: 93:b1:6c:ca:a3:01:20:c1:c3:bc:a7:4a:85:98:91:81:68:91: ba:50:6f:a3:93:06:95:6c:d8:e2:29:30:2a:ae:c4:cc:36:72: d0:09:81:5f:26:fd:0e:e2:fe:f4:e9:ac:d9:4b:f1:c3:ed:10: a0:1e:93:c0:54:35:9c:5d:3d:e0:49:78:8f:7e:04:45:e7:72: 46:d8:4c:fc:34:7d:d8:96:81:5c:f3:97:dc:1c:13:23:ac:cb: df:02:77:89:41:f6:cf:31:7a:ba:57:33:d9:c7:24:87:57:40: 44:5d:a2:fb:32:fc:4f:03:51:c3:4e:6b:c9:8a:d3:47:c2:f9: 85:7f:54:a1:cd:07:b3:29:5b:d9:51:22:dd:36:d5:32:02:0d: 03:88:ca:0e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hNyYLTcWggeddZmUbUAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzdmYTI5NWQyM2IyNzA2MTExZjY1ZmMzY2FkOTdjZjRiYWRhMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8J8yesdLP2ja0yyb+n27trYxCDw gktIZubH55uC21aCU7clcVeQg8a7jvvHjjfxYD9hSC1gb4tprYaNgpfZcwQuqSyc aRzY/FUQQvMXpvfGAr4JHNxZh+D4DJJvDS+aSR6zUEoSvEucS7FL/455fj3atDDS Vy3k3HJcmAadwUYFqVNslY21yDfiPDlkwDmNhczsMUFnsJqHqjjEbK39vuX3rwJ/ 1o4u9lAjurzfQ9fkpm1bvoZZ+RwKKHLyLXE3FP90bwGMAIH/T1YRRIgfiwR0duGx yWiGEd8KGbmf1HIqcTOdu6qnEcMh2bu3N4GObcxijDxd2bJbYaDvNc43wQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGN/opXSOycGER9l/Dytl89LraJVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWTMtaWxkSTdKd1lSSDJYOFBLMlh6MHV0b2xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjuAwQA HzpFAwQAHzt0MA0GCSqGSIb3DQEBCwUAA4IBAQDATqT23HfaCuctpJUqFqOmCzn/ EPq+oRBzayo1ZeS3bZqgMEOiSOF2cEPhn3q8wT1ivQaEwbKHMMYs/UVZZvXMawC+ Pu7MPyO7QA4Ee7SRe7RpXGKvvJ834UF7fefspPByaCITz8z0H/aTIA6TsWzKowEg wcO8p0qFmJGBaJG6UG+jkwaVbNjiKTAqrsTMNnLQCYFfJv0O4v706azZS/HD7RCg HpPAVDWcXT3gSXiPfgRF53JG2Ez8NH3YloFc85fcHBMjrMvfAneJQfbPMXq6VzPZ xySHV0BEXaL7MvxPA1HDTmvJitNHwvmFf1ShzQezKVvZUSLdNtUyAg0DiMoO -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:06 2026 by rpki-client