This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YjfmuYdtKZwXkvhx0dMadm2ZH0M.roa File: YjfmuYdtKZwXkvhx0dMadm2ZH0M.roa (raw, json) Hash identifier: ji1MI6dXVRR+HvVmsyRX6Lmi1dYQhciQWNbTttHFDD8= Subject key identifier: 62:37:E6:B9:87:6D:29:9C:17:92:F8:71:D1:D3:1A:76:6D:99:1F:43 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845312E12581C66BA5597E2821A52C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YjfmuYdtKZwXkvhx0dMadm2ZH0M.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15440 IP address blocks: 31.57.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:53:12:e1:25:81:c6:6b:a5:59:7e:28:21:a5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6237e6b9876d299c1792f871d1d31a766d991f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:a9:95:62:fe:6b:14:60:4a:14:5f:44:4d: 95:44:bd:4f:57:b7:7e:30:27:20:de:84:af:b6:bb: 5b:f6:af:5b:01:06:9f:19:db:c7:24:9f:65:9c:04: f7:0c:3e:a9:e4:86:9c:75:bf:a0:a9:27:08:75:6a: bf:66:ec:e7:cc:22:19:d4:de:69:a0:3d:aa:fd:58: a1:20:92:c0:d3:a5:b7:0e:96:67:9b:78:a9:fc:47: d4:a3:66:cc:67:b4:f4:a2:17:58:bc:34:21:a5:07: 62:de:71:ce:58:b5:72:1f:b2:38:b2:84:b9:87:1a: 79:a4:1f:1d:0a:5a:fa:42:70:ec:c9:57:48:0f:c8: 58:b4:2b:e1:58:29:eb:65:38:87:22:72:fd:3a:7b: ba:86:64:88:e3:a4:48:21:97:1a:fa:c5:1a:73:31: c7:7b:4b:9d:a3:14:12:14:d3:45:ed:20:68:c5:2f: ba:57:d2:a3:31:6b:84:0f:c0:b2:74:b3:e8:d3:05: 64:b3:b0:12:bb:f3:cb:d3:40:33:1d:18:9f:ef:de: 25:03:7d:30:00:c8:f9:05:70:3b:60:6d:1b:2d:3e: 8b:20:05:b6:9c:2b:c5:8c:ea:83:82:70:43:ab:d9: 66:00:38:a0:3a:c8:4e:92:38:55:28:b8:47:7c:50: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:37:E6:B9:87:6D:29:9C:17:92:F8:71:D1:D3:1A:76:6D:99:1F:43 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YjfmuYdtKZwXkvhx0dMadm2ZH0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.102.0/24 Signature Algorithm: sha256WithRSAEncryption 72:91:90:77:18:c0:36:0b:e7:f5:8c:36:53:7f:e4:89:b2:72: 6e:65:9e:8c:81:b3:ae:74:cc:cf:49:79:1a:c1:74:07:fa:2f: 10:db:81:4e:bc:01:13:dd:7b:68:bc:a6:68:85:9f:d3:31:70: 6d:2d:f3:8b:36:9f:49:54:cc:3e:f1:b2:41:26:a8:f8:1d:c8: ef:8c:04:33:e8:e4:4d:d7:06:33:db:47:c2:64:59:a1:4f:9d: 78:b6:08:12:01:6a:f5:7f:7f:b2:b5:c1:06:e0:5b:d3:15:74: ca:fc:f0:c6:04:f0:25:12:e0:36:17:38:d5:dc:41:a5:10:f5: 5d:93:fb:2d:87:87:8e:ae:1c:dc:3b:b5:1e:0a:0d:f9:50:39: 72:1e:28:e3:3e:9c:dc:44:4a:51:23:46:4f:ec:5b:bd:73:34: 97:94:e9:20:df:ee:dc:13:ce:ec:64:a7:0c:d6:c7:16:19:db: 5f:8a:68:7b:1f:e4:ab:b2:e2:fe:7c:fe:31:d1:b7:9d:5a:9d: a0:77:37:2a:42:6b:f3:c2:e4:dc:e9:74:c5:23:79:1b:9f:4d: b0:a1:63:0f:01:9a:1b:fd:0b:43:2f:2a:ac:34:15:48:00:57: 6a:66:3d:3a:ba:bb:44:a7:79:61:ed:8f:3a:af:cc:52:2d:1e: bd:fd:de:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFMS4SWBxmulWX4oIaUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjM3ZTZiOTg3NmQyOTljMTc5MmY4NzFkMWQzMWE3NjZkOTkxZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPKplWL+axRgShRfRE2VRL1PV7d+ MCcg3oSvtrtb9q9bAQafGdvHJJ9lnAT3DD6p5Iacdb+gqScIdWq/ZuznzCIZ1N5p oD2q/VihIJLA06W3DpZnm3ip/EfUo2bMZ7T0ohdYvDQhpQdi3nHOWLVyH7I4soS5 hxp5pB8dClr6QnDsyVdID8hYtCvhWCnrZTiHInL9Onu6hmSI46RIIZca+sUaczHH e0udoxQSFNNF7SBoxS+6V9KjMWuED8CydLPo0wVks7ASu/PL00AzHRif794lA30w AMj5BXA7YG0bLT6LIAW2nCvFjOqDgnBDq9lmADigOshOkjhVKLhHfFChhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGI35rmHbSmcF5L4cdHTGnZtmR9DMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWWpmbXVZZHRLWndYa3ZoeDBkTWFkbTJaSDBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzlmMA0G CSqGSIb3DQEBCwUAA4IBAQBykZB3GMA2C+f1jDZTf+SJsnJuZZ6MgbOudMzPSXka wXQH+i8Q24FOvAET3XtovKZohZ/TMXBtLfOLNp9JVMw+8bJBJqj4HcjvjAQz6ORN 1wYz20fCZFmhT514tggSAWr1f3+ytcEG4FvTFXTK/PDGBPAlEuA2FzjV3EGlEPVd k/sth4eOrhzcO7UeCg35UDlyHijjPpzcREpRI0ZP7Fu9czSXlOkg3+7cE87sZKcM 1scWGdtfimh7H+SrsuL+fP4x0bedWp2gdzcqQmvzwuTc6XTFI3kbn02woWMPAZob /QtDLyqsNBVIAFdqZj06urtEp3lh7Y86r8xSLR69/d4W -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:05 2026 by rpki-client