This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0eHvM9ImzoE8OCmYy63xAdjjCM.roa File: Z0eHvM9ImzoE8OCmYy63xAdjjCM.roa (raw, json) Hash identifier: AT+wlIeLOoJ5qgzcjUKGpOzLw85LOVw2K2D3yyU7oV8= Subject key identifier: 67:47:87:BC:CF:48:9B:3A:04:F0:E0:A6:63:2E:B7:C4:07:63:8C:23 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8467B4E1CB8EB4E5370D56628709AA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0eHvM9ImzoE8OCmYy63xAdjjCM.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 31.58.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:67:b4:e1:cb:8e:b4:e5:37:0d:56:62:87:09:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=674787bccf489b3a04f0e0a6632eb7c407638c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:8d:ea:30:45:87:b4:72:16:41:10:f9:98: 97:7e:cb:0a:fc:11:25:08:11:46:1c:f0:9c:c7:b3: b7:73:c7:9f:30:ce:96:41:04:d3:d8:00:b8:e2:b3: eb:95:c9:d1:ea:0f:30:d4:4f:1b:49:df:18:f7:8d: 39:40:aa:7b:08:b7:72:2e:49:af:6e:a0:64:c0:e6: 35:eb:70:f6:fe:cc:ec:5e:84:bd:19:a1:63:24:3f: 21:f6:7f:11:a0:25:c2:bb:e1:d8:b0:c6:0c:f6:b6: 1d:38:14:d2:3d:64:d7:94:41:86:94:6f:60:bb:08: 6d:04:b6:0f:be:8f:da:27:e9:f1:26:b4:0f:b2:40: 67:34:11:c7:1c:79:c8:ec:9b:fa:c2:c4:68:01:0c: 1d:2f:f4:67:48:0b:e9:66:8c:81:f7:b8:27:3b:5e: 27:bb:b6:03:51:c3:56:df:af:51:c2:c1:7d:2d:57: da:a6:b7:0a:54:e0:d0:f9:71:52:2c:d1:4e:3d:20: 00:eb:2d:e9:21:78:5c:2f:e2:f8:dc:aa:7a:ed:07: 86:cd:b3:ef:85:12:5e:c9:5c:2a:3d:8d:fb:47:01: e0:a8:65:4b:0f:18:cd:09:90:92:b6:f6:07:de:60: 7f:ae:7b:47:63:b0:5e:ad:b9:83:df:47:11:f0:e2: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:87:BC:CF:48:9B:3A:04:F0:E0:A6:63:2E:B7:C4:07:63:8C:23 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0eHvM9ImzoE8OCmYy63xAdjjCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.211.0/24 Signature Algorithm: sha256WithRSAEncryption 31:f2:a2:c5:c5:61:97:af:d0:47:35:64:49:3e:fa:f2:4d:a0: 2f:e4:1d:94:2c:4d:60:96:6d:83:ea:7f:69:ea:de:83:3c:6a: c9:93:e0:ce:cc:7f:bd:b0:12:62:db:ca:6b:e7:a9:7d:c5:14: e4:3b:30:33:d1:85:9f:68:5e:01:90:4e:15:06:66:2f:42:6a: 50:f3:18:8a:96:1a:eb:c2:ff:65:d0:58:66:8c:65:44:02:b1: 3c:62:33:af:a9:48:4e:18:ed:f9:12:04:43:92:d7:38:20:b5: ee:49:4f:8b:1c:87:df:c9:b2:ae:73:3c:91:04:ad:7d:4d:94: 74:0c:fd:06:af:94:bd:29:d6:92:da:26:5e:53:17:73:df:02: a2:3f:9b:72:89:1b:9f:1e:53:0a:38:f1:96:01:18:df:0f:d5: 6a:06:e3:38:25:a1:24:8d:c1:04:9e:c9:3d:b5:d4:6b:43:df: e5:4e:c7:6f:eb:1f:11:25:3e:04:34:88:4f:a4:af:6c:58:d7: 34:82:77:31:a2:68:49:e2:dc:f2:8b:44:48:05:12:c4:74:f5: 9e:be:e7:e0:37:67:5d:bd:2e:fc:47:f9:b5:90:70:5f:78:b5: e1:b3:d6:90:64:30:dd:24:3b:52:c8:d9:9e:4d:f5:cf:55:4c: f4:f1:bf:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGe04cuOtOU3DVZihwmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzQ3ODdiY2NmNDg5YjNhMDRmMGUwYTY2MzJlYjdjNDA3NjM4YzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEON6jBFh7RyFkEQ+ZiXfssK/BEl CBFGHPCcx7O3c8efMM6WQQTT2AC44rPrlcnR6g8w1E8bSd8Y9405QKp7CLdyLkmv bqBkwOY163D2/szsXoS9GaFjJD8h9n8RoCXCu+HYsMYM9rYdOBTSPWTXlEGGlG9g uwhtBLYPvo/aJ+nxJrQPskBnNBHHHHnI7Jv6wsRoAQwdL/RnSAvpZoyB97gnO14n u7YDUcNW369RwsF9LVfaprcKVODQ+XFSLNFOPSAA6y3pIXhcL+L43Kp67QeGzbPv hRJeyVwqPY37RwHgqGVLDxjNCZCStvYH3mB/rntHY7BerbmD30cR8OKMKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGdHh7zPSJs6BPDgpmMut8QHY4wjMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWjBlSHZNOUltem9FOE9DbVl5NjN4QWRqakNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrTMA0G CSqGSIb3DQEBCwUAA4IBAQAx8qLFxWGXr9BHNWRJPvryTaAv5B2ULE1glm2D6n9p 6t6DPGrJk+DOzH+9sBJi28pr56l9xRTkOzAz0YWfaF4BkE4VBmYvQmpQ8xiKlhrr wv9l0FhmjGVEArE8YjOvqUhOGO35EgRDktc4ILXuSU+LHIffybKuczyRBK19TZR0 DP0Gr5S9KdaS2iZeUxdz3wKiP5tyiRufHlMKOPGWARjfD9VqBuM4JaEkjcEEnsk9 tdRrQ9/lTsdv6x8RJT4ENIhPpK9sWNc0gncxomhJ4tzyi0RIBRLEdPWevufgN2dd vS78R/m1kHBfeLXhs9aQZDDdJDtSyNmeTfXPVUz08b8f -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:37 2026 by rpki-client