This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/acjeKOIyyJ-CkGV46uIs7wqFUFY.roa File: acjeKOIyyJ-CkGV46uIs7wqFUFY.roa (raw, json) Hash identifier: FiJK1V/l+N+rVq8oU0ZM6IGrYwR0RnvG6gC91TwILS4= Subject key identifier: 69:C8:DE:28:E2:32:C8:9F:82:90:65:78:EA:E2:2C:EF:0A:85:50:56 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845A9DF5ABD89FEC9FE1CFCB515947 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/acjeKOIyyJ-CkGV46uIs7wqFUFY.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22418 IP address blocks: 31.58.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5a:9d:f5:ab:d8:9f:ec:9f:e1:cf:cb:51:59:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69c8de28e232c89f82906578eae22cef0a855056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:b2:51:b2:81:e4:93:d8:f9:15:c5:50:2b: ad:6c:4c:12:64:7e:10:0d:45:b3:28:4d:82:57:6b: 4d:70:15:8f:62:67:f6:4b:72:7e:ca:70:62:e0:7f: 20:f8:21:2c:30:56:cd:b7:38:e6:f7:f8:0b:bf:10: 1a:15:49:ce:9e:06:76:e7:56:9a:2a:81:64:47:32: 5a:3d:71:df:22:1f:5f:9a:bc:02:2d:56:0a:b9:b0: 55:65:c9:76:17:e8:81:70:9e:ea:d0:a0:8e:60:fd: 8d:48:67:33:44:8e:d7:80:19:f6:81:df:a5:78:d1: 02:fb:0b:6f:a2:27:f8:e0:b0:72:16:31:37:26:53: ce:05:1c:c3:3c:6b:53:32:ee:3d:ea:7f:78:88:66: 45:fd:0c:f6:50:dc:dc:82:f9:ec:19:68:5d:e0:fc: c5:b6:08:ad:91:e1:3b:ea:f2:cc:79:e4:cd:34:e2: db:cc:a2:db:13:d2:72:df:70:94:3d:ad:5b:55:d6: 2d:e6:3f:84:95:28:52:ec:7f:cd:84:2e:e1:ed:3b: 79:af:82:41:11:32:8d:f9:10:05:a8:a2:90:02:38: da:b5:d2:6d:37:25:44:38:f6:da:ee:32:1f:50:30: de:1d:e2:a4:ab:7b:49:30:4b:8e:bb:b3:bf:25:c5: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C8:DE:28:E2:32:C8:9F:82:90:65:78:EA:E2:2C:EF:0A:85:50:56 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/acjeKOIyyJ-CkGV46uIs7wqFUFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.135.0/24 Signature Algorithm: sha256WithRSAEncryption 64:47:cb:13:7b:33:46:2d:1e:62:5b:85:39:94:5b:96:aa:7f: d0:69:5d:1a:f5:33:fd:04:8b:63:bf:45:ff:e5:6a:13:f0:a8: 6d:a7:03:ad:cc:05:f8:c8:25:e7:86:9b:75:da:97:69:9b:76: 58:53:ac:62:f2:77:7a:bb:6a:16:d1:3e:28:5d:62:94:13:a3: 8c:de:94:11:37:1c:1d:66:2c:25:25:72:15:ce:c9:a2:4e:52: 3f:66:5a:54:94:66:56:38:94:38:5d:82:38:c2:ce:97:9e:15: 2b:c8:4e:14:44:91:52:2c:8d:ec:f2:88:f1:c4:12:24:3c:1e: de:76:3d:4a:6f:38:19:7e:7e:10:e4:2f:b5:45:a2:09:54:51: 03:63:5f:e5:07:71:66:76:88:28:c8:70:e2:24:87:2c:46:88: 1f:db:5e:25:70:fe:43:f4:75:9d:85:12:38:84:e8:b6:39:bf: 50:0e:c1:d3:c0:c5:cc:54:f0:15:a1:7a:7d:38:96:f6:c2:62: 9d:d2:18:0c:9d:a0:e1:aa:e1:9b:18:5e:37:a0:2d:62:29:9f: 0b:09:ef:53:1e:22:5f:60:07:e6:b0:80:33:6f:3a:af:d1:b8: d4:64:8d:48:dc:b3:2f:90:91:88:54:ad:0e:46:96:ac:03:ff: 28:97:86:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFqd9avYn+yf4c/LUVlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWM4ZGUyOGUyMzJjODlmODI5MDY1NzhlYWUyMmNlZjBhODU1MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYKyUbKB5JPY+RXFUCutbEwSZH4Q DUWzKE2CV2tNcBWPYmf2S3J+ynBi4H8g+CEsMFbNtzjm9/gLvxAaFUnOngZ251aa KoFkRzJaPXHfIh9fmrwCLVYKubBVZcl2F+iBcJ7q0KCOYP2NSGczRI7XgBn2gd+l eNEC+wtvoif44LByFjE3JlPOBRzDPGtTMu496n94iGZF/Qz2UNzcgvnsGWhd4PzF tgitkeE76vLMeeTNNOLbzKLbE9Jy33CUPa1bVdYt5j+ElShS7H/NhC7h7Tt5r4JB ETKN+RAFqKKQAjjatdJtNyVEOPba7jIfUDDeHeKkq3tJMEuOu7O/JcWEXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGnI3ijiMsifgpBleOriLO8KhVBWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYWNqZUtPSXl5Si1Da0dWNDZ1SXM3d3FGVUZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqHMA0G CSqGSIb3DQEBCwUAA4IBAQBkR8sTezNGLR5iW4U5lFuWqn/QaV0a9TP9BItjv0X/ 5WoT8KhtpwOtzAX4yCXnhpt12pdpm3ZYU6xi8nd6u2oW0T4oXWKUE6OM3pQRNxwd ZiwlJXIVzsmiTlI/ZlpUlGZWOJQ4XYI4ws6XnhUryE4URJFSLI3s8ojxxBIkPB7e dj1KbzgZfn4Q5C+1RaIJVFEDY1/lB3FmdogoyHDiJIcsRogf214lcP5D9HWdhRI4 hOi2Ob9QDsHTwMXMVPAVoXp9OJb2wmKd0hgMnaDhquGbGF43oC1iKZ8LCe9THiJf YAfmsIAzbzqv0bjUZI1I3LMvkJGIVK0ORpasA/8ol4at -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client