This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_JPzfVlxklpDn9rBb3u8nsGSy6g.roa File: _JPzfVlxklpDn9rBb3u8nsGSy6g.roa (raw, json) Hash identifier: DVhl+aA2C09jfikQ3bRpoWVZQtGD/iSBdcfzkLo8RA8= Subject key identifier: FC:93:F3:7D:59:71:92:5A:43:9F:DA:C1:6F:7B:BC:9E:C1:92:CB:A8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845F15FFF91686F755CDB8C5FAD940 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_JPzfVlxklpDn9rBb3u8nsGSy6g.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 31.56.138.0/24 maxlen: 24 31.57.43.0/24 maxlen: 24 31.57.76.0/24 maxlen: 24 31.57.83.0/24 maxlen: 24 31.57.84.0/24 maxlen: 24 31.57.88.0/24 maxlen: 24 31.57.91.0/24 maxlen: 24 31.58.9.0/24 maxlen: 24 31.58.23.0/24 maxlen: 24 31.58.24.0/24 maxlen: 24 31.59.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5f:15:ff:f9:16:86:f7:55:cd:b8:c5:fa:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc93f37d5971925a439fdac16f7bbc9ec192cba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:6f:4c:cb:8c:44:97:e3:53:a0:49:77:13: 2f:09:6f:78:6f:4b:11:46:75:23:b6:b5:a9:7c:bb: d1:51:6d:29:f6:e6:a9:e3:c5:06:ae:92:4b:ed:15: 95:3f:ee:a2:e0:b5:ce:70:13:c2:f2:e2:23:11:96: b4:46:33:a4:df:2b:b5:66:1b:40:9e:62:d1:33:02: 8b:26:d6:c7:c9:3b:07:0f:fa:95:2a:2b:a1:96:63: d5:a5:8a:65:e5:be:87:8c:22:9c:8f:c9:91:28:21: 56:d2:7a:66:d3:56:46:02:b9:b5:5e:5f:3a:fd:65: 50:17:b2:92:45:57:01:8f:d5:f1:69:8c:ea:8f:63: b4:17:44:8b:9a:8e:ae:18:85:12:ff:41:97:9a:ff: 89:f4:d1:73:38:f8:71:84:16:a6:77:20:5f:1c:44: 54:79:e8:3f:9e:9e:1d:9a:73:22:86:1f:9e:55:37: 6a:fe:15:7f:01:b4:91:d8:6b:c3:6e:6e:8a:c3:c4: b5:3e:92:eb:d9:0e:d5:8c:f7:11:61:a4:69:31:f6: fb:eb:2d:0d:4d:c0:2c:a2:2d:ef:bf:04:b8:71:03: bb:63:8b:d8:e6:12:8f:3d:c3:b6:59:13:42:4e:85: 06:4d:6a:6c:f9:26:3f:5c:2f:90:50:27:e7:c5:ca: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:93:F3:7D:59:71:92:5A:43:9F:DA:C1:6F:7B:BC:9E:C1:92:CB:A8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_JPzfVlxklpDn9rBb3u8nsGSy6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.138.0/24 31.57.43.0/24 31.57.76.0/24 31.57.83.0-31.57.84.255 31.57.88.0/24 31.57.91.0/24 31.58.9.0/24 31.58.23.0-31.58.24.255 31.59.10.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:c1:9f:81:8c:de:f2:5a:17:ea:b4:bc:9b:7e:c2:97:22:c8: 3d:61:0f:59:f6:b8:d8:dc:33:55:3c:06:92:44:87:4b:f7:35: 42:cb:f5:23:58:9a:0f:bd:8e:bf:65:4c:bd:de:b0:00:89:c9: 84:99:3d:72:95:fc:79:eb:cf:93:86:1a:fe:ab:ac:eb:1a:51: 1c:f3:c8:57:52:d1:39:6c:70:83:fb:ec:44:48:22:c0:91:ab: 41:d6:47:18:09:f6:54:44:84:45:38:b0:a1:e5:b8:a8:36:3e: 12:3f:98:e9:40:68:6f:4f:e6:d7:c9:63:e7:7b:43:2d:01:51: 12:f9:27:c3:5a:bb:0c:90:df:ec:47:21:f3:05:60:35:95:6a: 99:bd:a6:b9:46:71:7d:84:5c:05:64:0c:07:2b:ec:cd:ed:f5: ae:7f:91:f5:e3:3e:b4:81:ea:1c:f8:1c:69:ad:43:54:83:68: 20:0b:47:2d:1e:4a:99:40:f6:e5:2c:c8:00:9f:ce:7b:70:08: e5:1b:42:7f:76:86:ac:73:bb:05:8f:3c:ae:bf:e8:9a:de:81: d2:23:ea:ca:72:10:07:fa:34:1f:35:2b:08:1b:7a:8b:4e:55: 33:48:83:79:e0:16:de:16:68:70:ef:19:2e:38:15:86:45:e8: ef:c2:4c:38 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt/hF8V//kWhvdVzbjF+tlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzkzZjM3ZDU5NzE5MjVhNDM5ZmRhYzE2ZjdiYmM5ZWMxOTJjYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/pvTMuMRJfjU6BJdxMvCW94b0sR RnUjtrWpfLvRUW0p9uap48UGrpJL7RWVP+6i4LXOcBPC8uIjEZa0RjOk3yu1ZhtA nmLRMwKLJtbHyTsHD/qVKiuhlmPVpYpl5b6HjCKcj8mRKCFW0npm01ZGArm1Xl86 /WVQF7KSRVcBj9XxaYzqj2O0F0SLmo6uGIUS/0GXmv+J9NFzOPhxhBamdyBfHERU eeg/np4dmnMihh+eVTdq/hV/AbSR2GvDbm6Kw8S1PpLr2Q7VjPcRYaRpMfb76y0N TcAsoi3vvwS4cQO7Y4vY5hKPPcO2WRNCToUGTWps+SY/XC+QUCfnxcp/JwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPyT831ZcZJaQ5/awW97vJ7BksuoMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvX0pQemZWbHhrbHBEbjlyQmIzdThuc0dTeTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAHziKAwQA HzkrAwQAHzlMMAwDBAAfOVMDBAAfOVQDBAAfOVgDBAAfOVsDBAAfOgkwDAMEAB86 FwMEAB86GAMEAB87CjANBgkqhkiG9w0BAQsFAAOCAQEADMGfgYze8loX6rS8m37C lyLIPWEPWfa42NwzVTwGkkSHS/c1Qsv1I1iaD72Ov2VMvd6wAInJhJk9cpX8eevP k4Ya/qus6xpRHPPIV1LROWxwg/vsREgiwJGrQdZHGAn2VESERTiwoeW4qDY+Ej+Y 6UBob0/m18lj53tDLQFREvknw1q7DJDf7Ech8wVgNZVqmb2muUZxfYRcBWQMByvs ze31rn+R9eM+tIHqHPgcaa1DVINoIAtHLR5KmUD25SzIAJ/Oe3AI5RtCf3aGrHO7 BY88rr/omt6B0iPqynIQB/o0HzUrCBt6i05VM0iDeeAW3hZocO8ZLjgVhkXo78JM OA== -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:54 2026 by rpki-client