This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bQLx2u21ojwyK3sHVc54ZfhyYC8.roa File: bQLx2u21ojwyK3sHVc54ZfhyYC8.roa (raw, json) Hash identifier: 1RZndalhoEtuTsSWfMHYdY0kw3GoGYL3nRQ36aGQKOc= Subject key identifier: 6D:02:F1:DA:ED:B5:A2:3C:32:2B:7B:07:55:CE:78:65:F8:72:60:2F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D1DD562754C49A578D40083047CD Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bQLx2u21ojwyK3sHVc54ZfhyYC8.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215761 IP address blocks: 31.58.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d1:dd:56:27:54:c4:9a:57:8d:40:08:30:47:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d02f1daedb5a23c322b7b0755ce7865f872602f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:f3:6c:af:54:78:fe:75:b3:f4:3f:72:26: 33:ba:cf:87:f8:00:ec:7b:30:9a:b9:da:30:b1:a8: 68:97:cf:77:4f:8a:68:2c:ed:d6:26:fc:48:ca:be: ca:9d:d5:37:55:f2:cf:cb:a0:a8:c0:cd:93:76:91: df:cc:74:05:88:0a:57:9f:e1:43:ef:b1:15:60:41: e3:e7:da:40:7d:cc:15:e2:5d:14:85:73:2d:df:4a: ce:28:4a:88:ec:8b:c2:6c:3f:5b:89:06:9c:20:8d: e3:e4:e0:d5:59:e9:5b:a3:b9:5d:f8:e7:86:6f:84: 21:28:8e:ce:2a:bc:6e:40:5b:56:f2:5f:ce:61:a1: 1c:be:5c:da:50:e4:58:08:c0:f7:3b:85:35:75:96: 60:e3:5b:d3:2c:55:47:d7:0b:2f:4d:ee:3f:ef:97: f6:1e:ef:7f:4d:de:35:9d:b4:cc:b7:1d:3d:1b:a4: 3f:ff:24:3e:52:8b:95:d4:6b:fb:d9:28:14:0e:05: f9:36:4e:8a:a4:d8:5a:0b:ea:04:cc:83:52:aa:38: fe:ab:ec:fe:a9:14:a4:83:d8:e9:06:b1:f0:65:35: f6:3d:f0:d1:29:b6:a6:19:9b:c8:54:03:e4:d3:07: 3e:7c:a3:f7:b1:84:4c:5a:42:f4:2a:ed:6b:37:b8: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:02:F1:DA:ED:B5:A2:3C:32:2B:7B:07:55:CE:78:65:F8:72:60:2F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bQLx2u21ojwyK3sHVc54ZfhyYC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.250.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:bb:dc:24:36:90:e2:3c:2a:5e:54:3e:dc:c5:ab:6d:91:c5: a9:f5:71:8c:f5:40:f1:57:f2:d8:08:7f:88:2f:45:7e:1c:4f: 57:eb:2e:b5:40:3e:fa:86:f7:d6:ec:0a:60:ba:18:80:17:fd: 4f:45:8a:6b:a4:12:47:fb:f5:0a:dd:24:87:da:12:37:7e:85: 85:f9:e7:49:78:c0:7b:69:43:6a:b2:cc:f0:c8:82:2d:fb:a1: d8:44:ef:7f:ce:77:30:de:c7:bd:0f:f7:5c:8a:54:d7:1b:47: 7b:ad:39:be:80:68:37:04:24:fa:50:f3:f1:6b:fb:1b:06:c5: 22:08:69:c8:89:a4:5b:54:d1:50:fe:5a:64:34:76:b9:89:35: a4:a8:71:ca:f7:43:91:9d:ac:a0:12:9d:a3:9c:95:5e:60:67: 43:0b:fb:80:26:e2:d8:85:9a:63:89:f9:a9:4a:cf:fb:95:32: e3:28:22:67:5b:ff:54:2f:79:a4:f1:2f:65:85:a8:2b:98:db: 50:3f:c3:71:df:2a:d0:9d:90:3e:44:b5:0a:28:8e:a2:5b:b7: ba:98:ca:28:a1:cc:a8:df:2b:38:53:fc:3c:a8:92:3e:06:ee: 68:2b:5c:16:ca:f0:b3:3f:80:1d:e2:df:b5:45:a1:fe:c9:8b: 80:1d:e9:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNHdVidUxJpXjUAIMEfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDAyZjFkYWVkYjVhMjNjMzIyYjdiMDc1NWNlNzg2NWY4NzI2MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFzzbK9UeP51s/Q/ciYzus+H+ADs ezCaudowsahol893T4poLO3WJvxIyr7KndU3VfLPy6CowM2TdpHfzHQFiApXn+FD 77EVYEHj59pAfcwV4l0UhXMt30rOKEqI7IvCbD9biQacII3j5ODVWelbo7ld+OeG b4QhKI7OKrxuQFtW8l/OYaEcvlzaUORYCMD3O4U1dZZg41vTLFVH1wsvTe4/75f2 Hu9/Td41nbTMtx09G6Q//yQ+UouV1Gv72SgUDgX5Nk6KpNhaC+oEzINSqjj+q+z+ qRSkg9jpBrHwZTX2PfDRKbamGZvIVAPk0wc+fKP3sYRMWkL0Ku1rN7jqCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0C8drttaI8Mit7B1XOeGX4cmAvMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYlFMeDJ1MjFvand5SzNzSFZjNTRaZmh5WUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzr6MA0G CSqGSIb3DQEBCwUAA4IBAQAcu9wkNpDiPCpeVD7cxattkcWp9XGM9UDxV/LYCH+I L0V+HE9X6y61QD76hvfW7ApguhiAF/1PRYprpBJH+/UK3SSH2hI3foWF+edJeMB7 aUNqsszwyIIt+6HYRO9/zncw3se9D/dcilTXG0d7rTm+gGg3BCT6UPPxa/sbBsUi CGnIiaRbVNFQ/lpkNHa5iTWkqHHK90ORnaygEp2jnJVeYGdDC/uAJuLYhZpjifmp Ss/7lTLjKCJnW/9UL3mk8S9lhagrmNtQP8Nx3yrQnZA+RLUKKI6iW7e6mMooocyo 3ys4U/w8qJI+Bu5oK1wWyvCzP4Ad4t+1RaH+yYuAHel3 -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:45 2026 by rpki-client