This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z3VDm-d7weyubCfadwNbnu4SZpo.roa File: Z3VDm-d7weyubCfadwNbnu4SZpo.roa (raw, json) Hash identifier: bYPe8jxLSpCc4ZYYUArfBJWEd6USuHUhK6gKCUs9pto= Subject key identifier: 67:75:43:9B:E7:7B:C1:EC:AE:6C:27:DA:77:03:5B:9E:EE:12:66:9A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849C8B8421A711C2DC25123783F870 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z3VDm-d7weyubCfadwNbnu4SZpo.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207267 IP address blocks: 31.56.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9c:8b:84:21:a7:11:c2:dc:25:12:37:83:f8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6775439be77bc1ecae6c27da77035b9eee12669a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:01:0a:93:e0:a2:b3:ca:9a:94:96:fd:b5:32: 30:36:02:41:fb:40:40:64:d7:22:6b:65:ea:d1:3f: 24:3b:8e:b5:af:c9:e4:e2:18:cb:89:b6:b1:4e:e0: d7:c4:86:49:a1:67:c8:00:fe:48:9b:e6:83:72:bc: 21:9b:ec:ae:6c:6f:37:62:0e:87:f4:7a:65:7b:7c: ea:d0:55:cd:b9:2d:67:47:9c:e2:7c:a4:ec:b0:4a: af:89:b0:db:bb:9b:24:87:71:63:dd:96:5c:a4:61: eb:0a:fe:b1:b0:3b:bf:c3:97:31:16:cb:c2:b4:77: d8:13:5b:30:d9:a4:fd:23:f7:56:ae:76:64:1f:7a: da:1f:ed:fd:09:98:86:42:ea:df:d1:a2:db:cc:3e: 30:df:97:3a:fb:82:0b:a3:fd:9c:db:bd:0b:59:e2: a5:72:14:88:98:71:15:93:45:a9:e2:99:34:16:c6: 0a:7d:0a:a3:06:8e:5a:40:25:f9:2e:35:58:42:f7: 92:b9:a2:09:48:8b:a7:76:f0:67:bf:e3:c5:97:49: 5b:b4:a4:91:8d:dc:22:a1:b3:d4:ca:35:a3:52:03: c5:c1:80:59:a2:82:9e:a8:7c:83:68:f1:9b:00:ac: 10:92:4e:ba:80:43:21:d8:ec:3c:14:47:1b:82:54: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:75:43:9B:E7:7B:C1:EC:AE:6C:27:DA:77:03:5B:9E:EE:12:66:9A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z3VDm-d7weyubCfadwNbnu4SZpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.47.0/24 Signature Algorithm: sha256WithRSAEncryption 54:49:46:02:d5:c5:40:c9:5f:7d:b4:c4:1f:6d:02:7a:9c:ff: a8:0e:f8:e9:57:25:59:cb:b7:f7:5f:82:3f:76:05:74:ba:16: 9a:5c:c3:3e:a9:e7:b7:83:f2:55:ab:3c:2d:07:1f:9b:47:1c: cb:c0:70:63:2b:f2:95:1e:72:73:1f:f5:04:9e:cc:e6:c3:1c: e5:a6:2d:b2:12:36:be:fe:ab:9c:b2:49:ce:48:82:82:aa:ee: 8c:e2:37:63:20:d9:62:d6:6f:96:fa:67:04:5a:b6:a5:3f:ba: 4f:fd:fa:5e:08:b1:58:ae:fb:d4:37:8d:51:30:0e:82:c9:b3: 75:29:48:7f:93:27:6b:98:b8:ee:71:6f:12:d8:41:77:1f:e9: 62:7b:83:e9:c8:2a:49:ec:d4:4e:f8:79:6d:c1:b5:8f:33:b9: 3f:f0:99:f5:d1:31:18:17:c9:37:03:af:03:f2:03:ce:ce:26: 50:1a:87:3b:f9:db:8b:b4:a7:2e:7f:ab:b8:db:bc:7c:a8:8f: 0f:27:6c:38:be:58:38:13:90:b5:a4:ba:21:53:e0:40:2a:e8: 20:20:49:6c:48:04:d7:e3:b9:83:0e:3a:83:5f:88:d4:aa:22: e4:3c:0b:df:33:73:6f:99:1d:60:5d:80:11:ac:93:f1:6c:5a: e2:13:87:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJyLhCGnEcLcJRI3g/hwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzc1NDM5YmU3N2JjMWVjYWU2YzI3ZGE3NzAzNWI5ZWVlMTI2NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AEKk+Cis8qalJb9tTIwNgJB+0BA ZNcia2Xq0T8kO461r8nk4hjLibaxTuDXxIZJoWfIAP5Im+aDcrwhm+yubG83Yg6H 9Hple3zq0FXNuS1nR5zifKTssEqvibDbu5skh3Fj3ZZcpGHrCv6xsDu/w5cxFsvC tHfYE1sw2aT9I/dWrnZkH3raH+39CZiGQurf0aLbzD4w35c6+4ILo/2c270LWeKl chSImHEVk0Wp4pk0FsYKfQqjBo5aQCX5LjVYQveSuaIJSIundvBnv+PFl0lbtKSR jdwiobPUyjWjUgPFwYBZooKeqHyDaPGbAKwQkk66gEMh2Ow8FEcbglTMlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGd1Q5vne8Hsrmwn2ncDW57uEmaaMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWjNWRG0tZDd3ZXl1YkNmYWR3TmJudTRTWnBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgvMA0G CSqGSIb3DQEBCwUAA4IBAQBUSUYC1cVAyV99tMQfbQJ6nP+oDvjpVyVZy7f3X4I/ dgV0uhaaXMM+qee3g/JVqzwtBx+bRxzLwHBjK/KVHnJzH/UEnszmwxzlpi2yEja+ /qucsknOSIKCqu6M4jdjINli1m+W+mcEWralP7pP/fpeCLFYrvvUN41RMA6CybN1 KUh/kydrmLjucW8S2EF3H+lie4PpyCpJ7NRO+HltwbWPM7k/8Jn10TEYF8k3A68D 8gPOziZQGoc7+duLtKcuf6u427x8qI8PJ2w4vlg4E5C1pLohU+BAKuggIElsSATX 47mDDjqDX4jUqiLkPAvfM3NvmR1gXYARrJPxbFriE4e1 -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:50 2026 by rpki-client