This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zue9I7mL-yIV31axECDwRosSX5E.roa File: Zue9I7mL-yIV31axECDwRosSX5E.roa (raw, json) Hash identifier: Wcb+Nj451SAMQqBIfUojz1vwiJUY6Dj3ynKtdjCuRzw= Subject key identifier: 66:E7:BD:23:B9:8B:FB:22:15:DF:56:B1:10:20:F0:46:8B:12:5F:91 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84BD450A97A249DB99AFF61AE401F0 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zue9I7mL-yIV31axECDwRosSX5E.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214083 IP address blocks: 31.56.38.0/24 maxlen: 24 31.58.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bd:45:0a:97:a2:49:db:99:af:f6:1a:e4:01:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66e7bd23b98bfb2215df56b11020f0468b125f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:c4:f9:c4:9a:71:c2:a9:00:9d:18:26:59: 3c:dc:68:da:aa:4c:f4:50:7b:40:13:c6:12:f0:f3: ff:c5:d9:17:e7:be:6b:d4:7a:a8:30:71:24:cf:f7: ea:96:1f:37:db:b8:7d:41:d1:14:7e:1c:12:7a:30: 1c:3e:46:9a:95:65:0c:43:3e:02:7d:64:f6:19:ea: 20:29:11:b5:7b:fb:57:07:dd:f7:f9:7c:68:48:7c: e2:aa:d0:5b:f1:a7:e6:7f:9f:ae:ed:31:00:6a:70: 1e:c2:c4:64:45:6a:e7:9e:de:29:86:8d:47:be:eb: 19:7e:3c:5b:64:97:88:cd:71:27:ce:9c:bd:5a:e9: 8d:5b:75:6d:e6:a9:57:42:e0:2e:4a:f8:f4:89:51: 2b:8b:21:1e:b2:67:f4:8e:72:2f:c7:da:29:52:b1: 7b:59:68:69:66:7a:60:81:cb:2e:d8:77:67:a6:c9: 1b:c9:c4:5c:31:19:05:5d:2e:fd:59:d1:e6:7f:f8: 25:33:fd:d5:5a:11:c8:ba:49:60:d9:95:b9:20:a2: 25:d2:d9:74:dd:f1:4b:95:8f:66:fa:95:74:9f:cc: 67:db:df:90:cb:5a:99:55:7e:28:03:e4:92:13:d6: 07:f9:c9:21:27:4a:bd:51:fd:7b:03:73:b0:c7:e0: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E7:BD:23:B9:8B:FB:22:15:DF:56:B1:10:20:F0:46:8B:12:5F:91 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Zue9I7mL-yIV31axECDwRosSX5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.38.0/24 31.58.170.0/24 Signature Algorithm: sha256WithRSAEncryption ba:71:f8:6b:1a:c9:18:3c:d1:bf:5d:58:11:ca:9a:e2:8f:a4: 90:01:7b:a8:fd:65:ce:55:fa:2d:74:b5:05:bb:0f:4b:2d:e2: 01:46:fe:c7:39:2d:40:44:e0:53:bb:ea:3c:ea:b6:8f:e3:6b: 34:da:c8:67:48:2f:65:51:9b:56:bf:ef:db:e2:0d:e6:b1:0b: e1:b8:58:ae:3a:03:7b:85:ce:76:2b:41:ab:a6:a2:9e:11:7b: 2d:24:f2:65:38:fd:48:61:a1:45:74:d0:80:eb:6e:ab:61:2a: 93:c3:40:24:ff:90:25:1d:9e:3c:d0:2e:60:fc:aa:d0:8d:ab: 3e:3f:0a:03:7a:fb:1f:26:2e:fd:3b:af:8d:df:ea:04:8e:c6: 59:1c:8e:b7:f5:ed:46:d2:ed:f3:28:aa:e8:3d:a3:2d:a5:27: b4:3a:21:18:e5:80:53:e3:8f:ab:6d:d1:38:5a:3c:a4:00:17: 0d:77:f8:5a:87:d8:fb:19:e1:1f:95:b8:ee:f5:9c:a5:ff:0b: 82:4d:9d:31:d2:bb:89:43:4f:2d:21:91:d8:74:62:18:0d:fc: 11:1d:76:75:ae:1a:17:6e:60:e0:93:17:b1:b0:4b:6b:02:05: 74:d4:5f:a2:10:4b:4f:dc:11:2b:6a:ca:ba:58:59:24:ea:ee: 15:b3:d9:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hL1FCpeiSduZr/Ya5AHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmU3YmQyM2I5OGJmYjIyMTVkZjU2YjExMDIwZjA0NjhiMTI1ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxPE+cSaccKpAJ0YJlk83Gjaqkz0 UHtAE8YS8PP/xdkX575r1HqoMHEkz/fqlh8327h9QdEUfhwSejAcPkaalWUMQz4C fWT2GeogKRG1e/tXB933+XxoSHziqtBb8afmf5+u7TEAanAewsRkRWrnnt4pho1H vusZfjxbZJeIzXEnzpy9WumNW3Vt5qlXQuAuSvj0iVEriyEesmf0jnIvx9opUrF7 WWhpZnpggcsu2HdnpskbycRcMRkFXS79WdHmf/glM/3VWhHIuklg2ZW5IKIl0tl0 3fFLlY9m+pV0n8xn29+Qy1qZVX4oA+SSE9YH+ckhJ0q9Uf17A3Owx+AC2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGbnvSO5i/siFd9WsRAg8EaLEl+RMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWnVlOUk3bUwteUlWMzFheEVDRHdSb3NTWDVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgmAwQA HzqqMA0GCSqGSIb3DQEBCwUAA4IBAQC6cfhrGskYPNG/XVgRyprij6SQAXuo/WXO VfotdLUFuw9LLeIBRv7HOS1AROBTu+o86raP42s02shnSC9lUZtWv+/b4g3msQvh uFiuOgN7hc52K0GrpqKeEXstJPJlOP1IYaFFdNCA626rYSqTw0Ak/5AlHZ480C5g /KrQjas+PwoDevsfJi79O6+N3+oEjsZZHI639e1G0u3zKKroPaMtpSe0OiEY5YBT 44+rbdE4WjykABcNd/hah9j7GeEflbju9Zyl/wuCTZ0x0ruJQ08tIZHYdGIYDfwR HXZ1rhoXbmDgkxexsEtrAgV01F+iEEtP3BErasq6WFkk6u4Vs9ll -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:07 2026 by rpki-client