This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ax1NSe7ahkEx2vfXx0XnQDSIxXU.roa File: ax1NSe7ahkEx2vfXx0XnQDSIxXU.roa (raw, json) Hash identifier: bKTpg5fiiUC7QucQ1hkRrK/j1mjJYUulzWJFWdNhPcU= Subject key identifier: 6B:1D:4D:49:EE:DA:86:41:31:DA:F7:D7:C7:45:E7:40:34:88:C5:75 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BF475CF77D19CBDE09BCAB9CC16A93AC8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ax1NSe7ahkEx2vfXx0XnQDSIxXU.roa Signing time: Sun 25 Jan 2026 09:22:00 +0000 ROA not before: Sun 25 Jan 2026 09:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 31.58.231.0/24 maxlen: 24 31.59.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:75:cf:77:d1:9c:bd:e0:9b:ca:b9:cc:16:a9:3a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 25 09:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1d4d49eeda864131daf7d7c745e7403488c575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:5f:93:ad:56:d7:b7:49:c8:0f:94:0f:12: 5f:9f:32:bf:fb:0a:d2:e3:7f:6d:d5:3a:95:0d:a9: 44:7d:2e:0e:67:b5:64:d6:09:3a:da:65:59:c1:4b: c7:ab:d2:a8:86:4d:44:80:c9:f0:a5:32:b1:ae:be: b4:ea:74:22:00:32:13:97:42:d3:c8:40:10:db:82: 0c:f4:dc:cf:a9:55:d2:84:ab:2d:6d:05:2f:2a:79: 1f:05:9a:43:ef:22:47:46:23:2b:2e:fe:8a:f1:1c: fb:66:d9:78:b8:90:29:79:81:b4:67:5e:e4:31:6d: 83:4a:8e:da:7e:7d:fb:de:a4:ec:01:cf:11:01:7f: c7:c2:8e:a8:c0:33:73:a1:75:a3:60:ea:c6:ed:c9: c9:b4:af:a8:42:18:b2:01:f3:50:6f:95:6a:dc:e0: 4d:aa:db:99:60:73:8b:81:cd:cf:45:cd:1b:51:5d: 34:72:19:26:c0:60:e0:e9:c9:17:30:83:d1:09:56: a8:3f:b1:9e:67:52:39:79:b7:c5:82:8a:8b:8a:97: de:8a:66:1f:23:14:4c:44:c3:2b:bc:b4:c7:91:16: f2:1f:ab:2b:f8:40:60:0f:3a:53:3b:43:5f:08:a3: 46:e9:b0:97:48:3f:2b:27:e3:ce:b2:7e:88:62:ac: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1D:4D:49:EE:DA:86:41:31:DA:F7:D7:C7:45:E7:40:34:88:C5:75 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ax1NSe7ahkEx2vfXx0XnQDSIxXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.231.0/24 31.59.84.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:8d:c8:af:70:16:66:28:df:a0:2d:e5:f8:a0:b1:20:0d:a3: 48:b5:4e:50:07:d5:4d:1c:f7:f4:42:b2:4e:6b:c0:51:3d:73: 64:90:98:00:10:e1:66:81:e8:ce:ec:c2:12:ee:99:f6:7b:4c: 1e:2b:fd:1b:67:7e:55:88:47:a2:37:e1:e6:6c:8c:08:ee:4b: 5a:37:60:fe:c7:ee:06:84:1a:e9:34:ad:8c:13:f9:c8:30:7e: 4c:7f:7b:8c:22:0a:e2:35:07:09:97:cd:e2:8c:7d:81:9c:be: 96:16:77:73:df:7a:b5:8c:4f:45:c5:31:ba:f5:9f:62:1b:1b: 38:96:82:08:10:f4:4d:fc:99:23:d8:86:91:4c:d8:b0:a9:e4: f8:b6:e5:02:53:bc:39:4f:3f:27:fb:bb:4e:e3:20:bd:db:4e: 22:52:47:ce:f2:7e:fb:d6:05:d7:21:fd:84:f2:3d:7b:ed:cc: 67:85:50:7a:50:aa:04:b0:5f:70:ac:00:55:0f:57:aa:b0:7c: 5d:08:57:55:90:f2:89:02:b7:3e:e3:79:a1:50:41:b6:c4:ce: c8:9c:80:a3:7d:b9:2d:df:4a:0f:7f:43:33:e9:81:02:6e:dd: c7:1e:ef:b4:ed:f1:66:4a:67:47:75:d1:aa:9a:a4:d5:ce:e8: 47:2c:de:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv0dc930Zy94JvKucwWqTrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI1MDkyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFkNGQ0OWVlZGE4NjQxMzFkYWY3ZDdjNzQ1ZTc0MDM0ODhjNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfBfk61W17dJyA+UDxJfnzK/+wrS 439t1TqVDalEfS4OZ7Vk1gk62mVZwUvHq9Kohk1EgMnwpTKxrr606nQiADITl0LT yEAQ24IM9NzPqVXShKstbQUvKnkfBZpD7yJHRiMrLv6K8Rz7Ztl4uJApeYG0Z17k MW2DSo7afn373qTsAc8RAX/Hwo6owDNzoXWjYOrG7cnJtK+oQhiyAfNQb5Vq3OBN qtuZYHOLgc3PRc0bUV00chkmwGDg6ckXMIPRCVaoP7GeZ1I5ebfFgoqLipfeimYf IxRMRMMrvLTHkRbyH6sr+EBgDzpTO0NfCKNG6bCXSD8rJ+POsn6IYqxL5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGsdTUnu2oZBMdr318dF50A0iMV1MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYXgxTlNlN2Foa0V4MnZmWHgwWG5RRFNJeFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzrnAwQB HztUMA0GCSqGSIb3DQEBCwUAA4IBAQAvjcivcBZmKN+gLeX4oLEgDaNItU5QB9VN HPf0QrJOa8BRPXNkkJgAEOFmgejO7MIS7pn2e0weK/0bZ35ViEeiN+HmbIwI7kta N2D+x+4GhBrpNK2ME/nIMH5Mf3uMIgriNQcJl83ijH2BnL6WFndz33q1jE9FxTG6 9Z9iGxs4loIIEPRN/Jkj2IaRTNiwqeT4tuUCU7w5Tz8n+7tO4yC9204iUkfO8n77 1gXXIf2E8j177cxnhVB6UKoEsF9wrABVD1eqsHxdCFdVkPKJArc+43mhUEG2xM7I nICjfbkt30oPf0Mz6YECbt3HHu+07fFmSmdHddGqmqTVzuhHLN5l -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:29 2026 by rpki-client