This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bz33UMjCpwT8RArhuqKhmltxWmA.roa File: bz33UMjCpwT8RArhuqKhmltxWmA.roa (raw, json) Hash identifier: YbppHdXTaOANd3ZuG5lyaZ+NKyVrpJ1ls2ebJKT/VkM= Subject key identifier: 6F:3D:F7:50:C8:C2:A7:04:FC:44:0A:E1:BA:A2:A1:9A:5B:71:5A:60 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BE5969CE65E1D1F371BDFB7597D175B28 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bz33UMjCpwT8RArhuqKhmltxWmA.roa Signing time: Thu 22 Jan 2026 12:03:31 +0000 ROA not before: Thu 22 Jan 2026 12:03:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208483 IP address blocks: 31.57.135.0/24 maxlen: 24 31.58.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:96:9c:e6:5e:1d:1f:37:1b:df:b7:59:7d:17:5b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 22 12:03:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f3df750c8c2a704fc440ae1baa2a19a5b715a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:6d:5e:64:d0:19:9d:e7:29:60:5a:e4:6e: e7:27:62:e2:c7:77:2a:16:6f:da:55:58:0d:85:fe: e3:6f:ea:8a:e6:9b:50:84:2e:2f:35:5e:6e:9e:f1: fe:83:56:f5:03:1a:10:58:66:d4:2f:c6:b1:c9:15: df:d8:95:20:bb:6c:51:3d:01:1f:8b:74:51:49:12: 49:26:0a:80:ff:d7:d7:e5:dc:13:96:34:75:26:a0: 82:f4:aa:6e:ed:7c:1d:b9:df:50:09:53:5a:15:a2: df:03:98:fc:49:0c:31:3f:f0:f7:da:36:6c:17:6f: 07:a9:fc:a5:1f:ef:32:28:73:5a:01:3c:ab:ba:44: c1:a6:cd:21:6f:ea:c8:3b:70:4e:0e:f9:8a:87:36: 9f:23:79:73:0c:80:04:01:e5:cf:b0:dd:ed:b0:3c: 77:68:c3:e3:36:06:b4:b1:e8:54:ed:aa:74:7d:1f: 9f:93:70:41:04:ee:fb:60:64:84:18:44:3d:69:90: b6:3c:2d:b7:7f:1c:e3:1f:7e:c7:30:ad:29:5e:eb: 17:3e:c9:81:fc:17:69:f4:03:9a:98:85:d3:8d:2c: bd:ff:69:aa:9b:b3:ce:89:3e:30:f4:8f:23:20:46: b0:d7:13:76:1a:83:5d:fe:cf:4e:fd:c9:9e:d7:48: 75:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:F7:50:C8:C2:A7:04:FC:44:0A:E1:BA:A2:A1:9A:5B:71:5A:60 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bz33UMjCpwT8RArhuqKhmltxWmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.135.0/24 31.58.59.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:3c:f8:20:e6:a5:a3:08:f9:0e:7d:6b:30:79:79:07:17:72: 07:46:19:0c:61:01:68:1d:7b:97:5e:ae:f2:05:99:b5:64:fd: 48:2c:d7:2f:5f:be:96:d5:95:90:62:6b:07:54:44:3e:4a:94: 79:7e:dc:62:35:58:59:94:8d:e9:d2:37:bb:db:50:dc:d5:c5: ee:9d:ae:48:95:46:27:5a:fa:e9:f5:2c:7f:75:f7:e4:c0:39: 04:a0:21:61:2a:94:82:85:56:db:d5:2f:dc:b6:ed:b5:42:0d: 74:a1:4e:a9:fc:69:77:01:18:9d:fa:03:d8:37:80:a2:21:73: bc:b7:a4:3b:b1:33:65:4c:d8:21:54:db:c6:14:a1:24:85:49: 02:40:76:49:6a:9d:68:7d:1d:7d:44:b0:bb:50:3f:87:68:c6: 0e:8e:54:e4:56:04:b1:eb:30:9c:25:f6:6f:ea:6e:84:2a:29: 91:b1:75:95:9a:99:b8:80:4f:35:67:38:0a:e0:5b:3a:8c:c6: ff:a0:50:5c:46:da:37:9f:b0:bc:56:49:22:74:c9:2b:fc:fd: aa:2c:55:6c:bc:e4:fd:76:90:99:81:57:ef:d8:d0:ec:9b:ec: 83:8c:72:ed:12:bd:f9:2b:13:e2:2d:ab:0d:88:6f:e7:4a:a4: 23:49:3b:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvllpzmXh0fNxvft1l9F1soMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIyMTIwMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjNkZjc1MGM4YzJhNzA0ZmM0NDBhZTFiYWEyYTE5YTViNzE1YTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCdtXmTQGZ3nKWBa5G7nJ2Lix3cq Fm/aVVgNhf7jb+qK5ptQhC4vNV5unvH+g1b1AxoQWGbUL8axyRXf2JUgu2xRPQEf i3RRSRJJJgqA/9fX5dwTljR1JqCC9Kpu7Xwdud9QCVNaFaLfA5j8SQwxP/D32jZs F28HqfylH+8yKHNaATyrukTBps0hb+rIO3BODvmKhzafI3lzDIAEAeXPsN3tsDx3 aMPjNga0sehU7ap0fR+fk3BBBO77YGSEGEQ9aZC2PC23fxzjH37HMK0pXusXPsmB /Bdp9AOamIXTjSy9/2mqm7POiT4w9I8jIEaw1xN2GoNd/s9O/cme10h1sQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG8991DIwqcE/EQK4bqioZpbcVpgMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYnozM1VNakNwd1Q4UkFyaHVxS2htbHR4V21BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmHAwQA Hzo7MA0GCSqGSIb3DQEBCwUAA4IBAQAsPPgg5qWjCPkOfWsweXkHF3IHRhkMYQFo HXuXXq7yBZm1ZP1ILNcvX76W1ZWQYmsHVEQ+SpR5ftxiNVhZlI3p0je721Dc1cXu na5IlUYnWvrp9Sx/dffkwDkEoCFhKpSChVbb1S/ctu21Qg10oU6p/Gl3ARid+gPY N4CiIXO8t6Q7sTNlTNghVNvGFKEkhUkCQHZJap1ofR19RLC7UD+HaMYOjlTkVgSx 6zCcJfZv6m6EKimRsXWVmpm4gE81ZzgK4Fs6jMb/oFBcRto3n7C8VkkidMkr/P2q LFVsvOT9dpCZgVfv2NDsm+yDjHLtEr35KxPiLasNiG/nSqQjSTvO -----END CERTIFICATE-----Generated at Sat Jan 24 03:48:32 2026 by rpki-client