This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YrtdQBt7A4hj3ViwMSonwOvs2JE.roa File: YrtdQBt7A4hj3ViwMSonwOvs2JE.roa (raw, json) Hash identifier: YCxHR6hoEJLHYZefyv3xLnjBDUMRpEb3Lpp+B7KTJDY= Subject key identifier: 62:BB:5D:40:1B:7B:03:88:63:DD:58:B0:31:2A:27:C0:EB:EC:D8:91 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8473816C1B707643F16054CA1A8F0C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YrtdQBt7A4hj3ViwMSonwOvs2JE.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 31.57.131.0/24 maxlen: 24 31.57.150.0/24 maxlen: 24 31.58.52.0/24 maxlen: 24 31.58.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:73:81:6c:1b:70:76:43:f1:60:54:ca:1a:8f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62bb5d401b7b038863dd58b0312a27c0ebecd891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:46:ac:e9:24:f2:f8:37:d2:f7:84:f8:b4: d9:b7:cc:4a:b8:15:48:f5:fe:72:4e:03:f8:5a:8c: 66:02:17:c9:f1:d9:b5:10:18:4d:97:90:26:2c:00: b8:d2:b0:07:07:85:ad:94:7f:29:74:f9:63:17:92: 9d:d5:9b:4a:d3:ce:ce:7d:3b:0a:bd:36:7c:89:88: e5:39:16:3c:bf:ee:93:d9:e9:ed:ea:2a:c8:13:ce: ff:4d:a4:cd:5c:05:8f:f5:7b:9d:f5:ad:2b:f3:07: 20:b7:19:66:cf:5c:d5:42:8a:e0:3f:7d:c3:b7:b4: 15:5c:8a:43:da:bd:d6:be:63:71:52:42:46:eb:07: 91:5f:c9:0f:b8:c4:a3:8f:5a:a3:5f:cc:c4:57:56: fa:a3:9a:de:5e:c7:1e:d7:cc:80:d6:e5:73:65:d8: f9:02:55:e6:36:4c:22:cd:c4:81:0e:d5:a6:99:e8: ab:de:49:da:fe:d9:93:db:cd:63:91:66:4d:d1:d9: 09:e9:de:86:61:2c:22:73:b7:37:22:55:f9:bd:ef: aa:31:1b:79:60:43:7c:05:ba:e9:fb:8c:48:6d:1f: 29:1b:d8:e0:36:f5:61:1c:8b:7a:c0:37:c5:60:64: 8a:85:d9:66:8a:37:8d:53:5c:13:78:63:e9:ee:ba: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BB:5D:40:1B:7B:03:88:63:DD:58:B0:31:2A:27:C0:EB:EC:D8:91 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YrtdQBt7A4hj3ViwMSonwOvs2JE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.131.0/24 31.57.150.0/24 31.58.52.0/24 31.58.147.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:3e:85:50:bb:d0:bf:d3:a9:3b:ac:d6:34:fb:81:b1:97:82: 6c:74:91:91:bb:2f:89:a6:46:6d:2f:42:18:62:cd:b8:b6:5e: 38:0c:be:39:52:d3:3e:77:56:8c:8b:fa:34:09:5e:19:84:8e: 98:f5:b0:76:98:dc:6b:ad:38:36:2c:65:17:64:cf:d0:9c:63: 24:bd:a4:79:ea:3c:db:49:2e:ce:95:d8:83:43:50:74:8a:1b: 44:fb:b9:cf:b0:f2:45:8b:1b:66:8b:b0:ef:87:7e:4b:57:98: 9d:6c:82:63:db:1e:04:c7:e7:30:29:3f:e6:5a:9b:6c:c1:13: 9a:f2:f7:b4:2d:33:e4:97:78:ed:85:0d:10:6b:4f:40:1e:aa: ab:b2:a2:ec:0d:3f:6e:19:f9:50:15:70:fd:10:30:2d:ae:a9: 18:91:be:fa:0c:ba:f8:73:bc:b8:59:75:25:1a:53:15:98:ec: 10:e0:c1:fc:18:74:93:48:29:22:ed:bc:c5:6f:d2:70:cd:99: 96:72:10:67:ad:03:b5:e4:4e:ac:c5:63:73:2e:17:50:dc:d0: 5d:cd:d4:f1:b3:ba:cd:e3:78:da:96:93:b6:e3:11:69:a9:34: 24:f3:e7:f2:3e:0f:71:e7:49:5c:23:1d:be:18:70:0f:26:b9: 3d:df:7b:b7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hHOBbBtwdkPxYFTKGo8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmJiNWQ0MDFiN2IwMzg4NjNkZDU4YjAzMTJhMjdjMGViZWNkODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ZGrOkk8vg30veE+LTZt8xKuBVI 9f5yTgP4WoxmAhfJ8dm1EBhNl5AmLAC40rAHB4WtlH8pdPljF5Kd1ZtK087OfTsK vTZ8iYjlORY8v+6T2ent6irIE87/TaTNXAWP9Xud9a0r8wcgtxlmz1zVQorgP33D t7QVXIpD2r3WvmNxUkJG6weRX8kPuMSjj1qjX8zEV1b6o5reXsce18yA1uVzZdj5 AlXmNkwizcSBDtWmmeir3kna/tmT281jkWZN0dkJ6d6GYSwic7c3IlX5ve+qMRt5 YEN8Bbrp+4xIbR8pG9jgNvVhHIt6wDfFYGSKhdlmijeNU1wTeGPp7roUSwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGK7XUAbewOIY91YsDEqJ8Dr7NiRMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWXJ0ZFFCdDdBNGhqM1Zpd01Tb253T3ZzMkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzmDAwQA HzmWAwQAHzo0AwQAHzqTMA0GCSqGSIb3DQEBCwUAA4IBAQAdPoVQu9C/06k7rNY0 +4Gxl4JsdJGRuy+JpkZtL0IYYs24tl44DL45UtM+d1aMi/o0CV4ZhI6Y9bB2mNxr rTg2LGUXZM/QnGMkvaR56jzbSS7OldiDQ1B0ihtE+7nPsPJFixtmi7Dvh35LV5id bIJj2x4Ex+cwKT/mWptswROa8ve0LTPkl3jthQ0Qa09AHqqrsqLsDT9uGflQFXD9 EDAtrqkYkb76DLr4c7y4WXUlGlMVmOwQ4MH8GHSTSCki7bzFb9JwzZmWchBnrQO1 5E6sxWNzLhdQ3NBdzdTxs7rN43jalpO24xFpqTQk8+fyPg9x50lcIx2+GHAPJrk9 33u3 -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:07 2026 by rpki-client