This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZvWgbcXFQ4dBZ8dulyya7VCcbgM.roa File: ZvWgbcXFQ4dBZ8dulyya7VCcbgM.roa (raw, json) Hash identifier: 4AE8WhM84HtdeC+a1r5y7tccbPJVnzLBQyflRI6/fzE= Subject key identifier: 66:F5:A0:6D:C5:C5:43:87:41:67:C7:6E:97:2C:9A:ED:50:9C:6E:03 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8472D3DDF0B099932D2613D1DE5A88 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZvWgbcXFQ4dBZ8dulyya7VCcbgM.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61138 IP address blocks: 31.57.72.0/22 maxlen: 24 31.58.12.0/22 maxlen: 24 31.59.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:72:d3:dd:f0:b0:99:93:2d:26:13:d1:de:5a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66f5a06dc5c543874167c76e972c9aed509c6e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:c7:be:d7:20:08:c9:c9:b0:0c:3e:58:65: 38:cd:a9:97:ec:7b:1f:dc:27:34:75:1a:90:d2:a1: d2:34:25:c2:ff:91:77:8e:08:d4:40:40:51:d1:6c: 02:1b:81:66:30:fe:4f:82:ad:65:2d:9d:3a:0f:e3: d1:54:1d:ed:e7:ce:cf:c3:69:0d:15:9f:00:f1:60: 74:e2:e7:3a:06:b9:e5:cd:60:77:43:3a:cd:43:99: a1:14:b1:ae:3d:7d:38:17:71:78:67:ec:b7:86:81: 54:ac:b6:bd:51:bd:4c:b2:4b:28:47:a4:a7:91:d7: cf:d9:a3:93:87:9b:67:a5:40:58:5a:77:a9:67:40: ce:8c:1d:f2:30:19:70:4f:77:e3:fe:79:be:c0:9b: 19:fc:a4:b1:4f:8c:b4:00:23:2e:69:55:c5:a9:1b: b7:b4:47:65:41:86:0c:49:62:ba:57:82:f1:cd:c5: d7:30:53:f0:8e:15:6d:f8:b8:ab:f6:2e:b9:98:80: 6e:1c:c7:24:11:b6:18:46:0a:44:cf:69:19:38:7b: e9:87:22:24:b6:ad:67:95:9f:02:05:d4:b6:87:d4: e2:f2:39:eb:fd:27:b3:4a:0e:29:07:f9:e4:b9:1f: 1f:99:7e:f7:c7:2e:f8:ee:47:7e:a3:a6:97:65:b8: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F5:A0:6D:C5:C5:43:87:41:67:C7:6E:97:2C:9A:ED:50:9C:6E:03 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZvWgbcXFQ4dBZ8dulyya7VCcbgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.72.0/22 31.58.12.0/22 31.59.240.0/22 Signature Algorithm: sha256WithRSAEncryption 46:3a:2d:a1:bf:85:f1:59:9b:fe:96:d2:05:55:88:54:7d:df: 04:66:7e:6d:03:84:99:d8:ff:83:9e:9a:25:c2:cb:2e:fb:e5: bb:6c:92:b6:57:24:02:1f:e2:0a:50:d9:0f:b9:e0:6e:37:b3: b9:7c:a2:33:a3:a2:fc:dd:3f:49:49:8b:4e:37:98:6a:f7:89: b5:34:b4:0c:53:c6:90:4f:61:83:00:fd:56:fd:86:88:10:6c: 86:c3:8f:37:81:38:15:e8:51:28:c3:e1:e0:b1:3a:db:95:d8: 5e:40:4b:b4:0c:b2:8e:39:f6:d1:ef:32:c2:d9:54:7d:5e:e6: 39:f5:55:96:d7:57:0d:79:2c:b9:a3:b4:96:96:b8:6e:41:f1: 6e:7f:52:11:78:89:ce:40:ee:7e:74:78:61:49:3e:06:36:b7: 6e:20:6a:7e:0e:fb:a5:5c:dd:31:e8:81:91:e2:5b:ca:1e:f9: 7a:54:45:bd:5c:25:0d:88:cd:c6:87:13:66:8e:04:e2:b2:a1: 14:e6:ac:d4:b6:9d:1b:52:28:f4:4f:c3:43:e9:88:a7:6d:23: 51:64:14:48:27:f7:e2:8a:1d:3e:f7:b8:f0:ef:89:0d:b6:00: 1b:fa:77:08:57:34:01:ee:a5:6a:b6:3e:61:3d:eb:26:6b:2d: 3c:9f:0c:8d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hHLT3fCwmZMtJhPR3lqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmY1YTA2ZGM1YzU0Mzg3NDE2N2M3NmU5NzJjOWFlZDUwOWM2ZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGXHvtcgCMnJsAw+WGU4zamX7Hsf 3Cc0dRqQ0qHSNCXC/5F3jgjUQEBR0WwCG4FmMP5Pgq1lLZ06D+PRVB3t587Pw2kN FZ8A8WB04uc6BrnlzWB3QzrNQ5mhFLGuPX04F3F4Z+y3hoFUrLa9Ub1MsksoR6Sn kdfP2aOTh5tnpUBYWnepZ0DOjB3yMBlwT3fj/nm+wJsZ/KSxT4y0ACMuaVXFqRu3 tEdlQYYMSWK6V4LxzcXXMFPwjhVt+Lir9i65mIBuHMckEbYYRgpEz2kZOHvphyIk tq1nlZ8CBdS2h9Ti8jnr/SezSg4pB/nkuR8fmX73xy747kd+o6aXZbiTGwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGb1oG3FxUOHQWfHbpcsmu1QnG4DMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWnZXZ2JjWEZRNGRCWjhkdWx5eWE3VkNjYmdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHzlIAwQC HzoMAwQCHzvwMA0GCSqGSIb3DQEBCwUAA4IBAQBGOi2hv4XxWZv+ltIFVYhUfd8E Zn5tA4SZ2P+Dnpolwssu++W7bJK2VyQCH+IKUNkPueBuN7O5fKIzo6L83T9JSYtO N5hq94m1NLQMU8aQT2GDAP1W/YaIEGyGw483gTgV6FEow+HgsTrbldheQEu0DLKO OfbR7zLC2VR9XuY59VWW11cNeSy5o7SWlrhuQfFuf1IReInOQO5+dHhhST4GNrdu IGp+DvulXN0x6IGR4lvKHvl6VEW9XCUNiM3GhxNmjgTisqEU5qzUtp0bUij0T8ND 6YinbSNRZBRIJ/fiih0+97jw74kNtgAb+ncIVzQB7qVqtj5hPesmay08nwyN -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:51 2026 by rpki-client