This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ya1sIQFKO7PSSFxTumSlltcjsPQ.roa File: Ya1sIQFKO7PSSFxTumSlltcjsPQ.roa (raw, json) Hash identifier: lr2kYjrOmdb3vfDQ04V17uJqfN1KG1Et0CCg65b6x10= Subject key identifier: 61:AD:6C:21:01:4A:3B:B3:D2:48:5C:53:BA:64:A5:96:D7:23:B0:F4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8450DE09653936CB728A71A9979859 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ya1sIQFKO7PSSFxTumSlltcjsPQ.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 31.57.89.0/24 maxlen: 24 31.58.11.0/24 maxlen: 24 31.58.17.0/24 maxlen: 24 31.58.25.0/24 maxlen: 24 31.58.27.0/24 maxlen: 24 31.58.31.0/24 maxlen: 24 31.59.12.0/24 maxlen: 24 31.59.16.0/24 maxlen: 24 31.59.17.0/24 maxlen: 24 31.59.23.0/24 maxlen: 24 31.59.26.0/24 maxlen: 24 31.59.31.0/24 maxlen: 24 31.59.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:50:de:09:65:39:36:cb:72:8a:71:a9:97:98:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61ad6c21014a3bb3d2485c53ba64a596d723b0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:6f:0b:d8:68:f0:0c:2d:6d:ad:5a:eb:ae: 7c:f7:15:06:dc:c3:9d:3e:f2:53:c2:78:d6:4b:78: 97:0a:41:f9:48:c9:93:40:1d:8e:7a:17:49:7e:e4: e2:10:ee:48:0c:56:b1:be:9c:70:80:48:ec:40:99: 9c:44:a6:c7:84:59:12:63:56:55:c4:25:16:13:f3: f7:74:60:c3:14:5d:f5:56:ff:5d:44:bd:8f:af:52: e6:4a:8a:97:10:63:c6:23:e5:ed:eb:b8:4e:74:76: 9f:86:84:d2:b7:5f:d8:5a:a9:70:2f:b7:f3:79:e2: 26:8c:d0:ff:54:b5:dd:78:8e:5a:21:c3:f3:47:86: 3e:29:14:e0:48:75:e2:9b:4b:53:e8:c7:02:bd:5a: 55:0d:0f:49:e5:09:21:80:2c:4c:d1:8a:9e:1b:09: 30:ee:28:96:21:68:84:94:24:a2:f0:5d:5b:b7:9c: 08:c8:ad:60:ab:bf:c7:0c:15:61:f1:fd:a5:a3:b1: 9d:c5:98:30:e1:45:4e:6a:19:77:37:32:8e:07:4c: c8:72:5f:fb:66:9b:fd:dd:5f:61:cf:37:47:dd:65: bb:51:b1:af:50:6e:f7:a2:15:42:29:40:d6:eb:83: af:c4:87:51:bc:56:e5:3b:5d:5f:1e:33:fd:38:85: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AD:6C:21:01:4A:3B:B3:D2:48:5C:53:BA:64:A5:96:D7:23:B0:F4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ya1sIQFKO7PSSFxTumSlltcjsPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.89.0/24 31.58.11.0/24 31.58.17.0/24 31.58.25.0/24 31.58.27.0/24 31.58.31.0/24 31.59.12.0/24 31.59.16.0/23 31.59.23.0/24 31.59.26.0/24 31.59.31.0-31.59.32.255 Signature Algorithm: sha256WithRSAEncryption 90:c1:2c:83:a5:e6:54:79:ae:45:8d:0e:2a:a0:8f:3c:94:7a: d7:95:62:6c:0b:5f:b4:70:8a:52:26:5c:08:84:d1:95:07:90: cc:54:18:9f:ef:0d:46:7f:b3:d9:27:04:1f:a0:16:56:e8:ca: 32:3b:7d:69:4a:16:bd:78:1e:d1:33:2f:5e:cf:ba:4a:7b:2a: 50:52:35:46:c8:bf:d5:a2:c4:22:89:f6:2e:de:46:c6:d4:d7: 3d:58:44:31:cc:41:70:5e:d9:51:90:a9:2b:68:db:df:c9:a2: 78:54:68:9b:c9:9e:e1:6f:a9:7e:77:89:9c:67:f4:ce:0d:e9: 7e:fe:43:e8:bb:b4:fb:b5:60:40:12:48:14:37:44:17:f1:90: 77:cd:5b:19:10:ef:dc:34:e3:92:44:24:66:36:77:cc:90:6e: 1d:ea:b5:63:b2:cc:86:ff:d3:3d:1d:ed:dc:9d:99:c1:46:48: 63:80:f6:0a:52:b9:3d:29:c0:e6:16:c7:39:d7:f0:28:0f:b2: 6b:21:8a:95:cc:75:50:a6:02:f0:e2:ea:40:49:54:23:7b:c5: e4:5d:94:e1:6d:0c:1f:1b:79:e6:54:4b:f5:54:f7:48:f3:56: 7e:c9:53:2a:fc:d7:83:b2:12:8c:bc:68:bf:38:7a:08:3b:f0: dc:71:88:cc -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt/hFDeCWU5NstyinGpl5hZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWFkNmMyMTAxNGEzYmIzZDI0ODVjNTNiYTY0YTU5NmQ3MjNiMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtpvC9ho8Awtba1a66589xUG3MOd PvJTwnjWS3iXCkH5SMmTQB2OehdJfuTiEO5IDFaxvpxwgEjsQJmcRKbHhFkSY1ZV xCUWE/P3dGDDFF31Vv9dRL2Pr1LmSoqXEGPGI+Xt67hOdHafhoTSt1/YWqlwL7fz eeImjND/VLXdeI5aIcPzR4Y+KRTgSHXim0tT6McCvVpVDQ9J5QkhgCxM0YqeGwkw 7iiWIWiElCSi8F1bt5wIyK1gq7/HDBVh8f2lo7GdxZgw4UVOahl3NzKOB0zIcl/7 Zpv93V9hzzdH3WW7UbGvUG73ohVCKUDW64OvxIdRvFblO11fHjP9OIUoDwIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFGGtbCEBSjuz0khcU7pkpZbXI7D0MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWWExc0lRRktPN1BTU0Z4VHVtU2xsdGNqc1BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAHzlZAwQA HzoLAwQAHzoRAwQAHzoZAwQAHzobAwQAHzofAwQAHzsMAwQBHzsQAwQAHzsXAwQA HzsaMAwDBAAfOx8DBAAfOyAwDQYJKoZIhvcNAQELBQADggEBAJDBLIOl5lR5rkWN DiqgjzyUeteVYmwLX7RwilImXAiE0ZUHkMxUGJ/vDUZ/s9knBB+gFlboyjI7fWlK Fr14HtEzL17Pukp7KlBSNUbIv9WixCKJ9i7eRsbU1z1YRDHMQXBe2VGQqSto29/J onhUaJvJnuFvqX53iZxn9M4N6X7+Q+i7tPu1YEASSBQ3RBfxkHfNWxkQ79w045JE JGY2d8yQbh3qtWOyzIb/0z0d7dydmcFGSGOA9gpSuT0pwOYWxznX8CgPsmshipXM dVCmAvDi6kBJVCN7xeRdlOFtDB8beeZUS/VU90jzVn7JUyr814OyEoy8aL84egg7 8NxxiMw= -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:46 2026 by rpki-client