This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cDiBqceLVL_J_MgoGf0K0kVlk1Y.roa File: cDiBqceLVL_J_MgoGf0K0kVlk1Y.roa (raw, json) Hash identifier: 2V/XFaRwjiW36B/y6mSdW0I7jMw+CW/YWwTiZ7deZi4= Subject key identifier: 70:38:81:A9:C7:8B:54:BF:C9:FC:C8:28:19:FD:0A:D2:45:65:93:56 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84641D529429084FEFCAAA7BE0B719 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cDiBqceLVL_J_MgoGf0K0kVlk1Y.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36530 IP address blocks: 31.56.84.0/24 maxlen: 24 31.56.91.0/24 maxlen: 24 31.57.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:64:1d:52:94:29:08:4f:ef:ca:aa:7b:e0:b7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=703881a9c78b54bfc9fcc82819fd0ad245659356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:e5:a7:c6:5f:8a:83:f7:7c:73:3a:b4:df: d1:3f:66:bf:2b:4a:cc:b4:89:39:84:02:43:2e:ec: b1:25:41:8f:78:9a:01:11:73:99:36:bc:1d:63:95: ea:11:f9:48:0d:a2:e2:99:04:e4:d7:64:9b:be:2c: 37:62:23:fc:7c:1a:65:0d:ca:3f:f1:fd:2d:b2:75: 25:56:a9:5b:48:e9:1e:5b:5e:df:44:a9:fd:68:cc: e7:dd:df:a8:5b:0b:79:88:98:f2:1d:7b:f7:89:87: 96:09:88:56:d8:37:a3:7e:51:dc:6e:74:7c:df:23: b9:5c:a7:bd:ae:05:71:44:a3:ce:b4:e4:17:13:84: 7f:6f:3d:54:d7:b7:82:08:c5:0a:c9:17:3b:28:3f: 66:0c:cb:a8:94:4f:7f:e6:ef:a9:ab:b3:97:ae:45: ce:63:0e:ad:01:dd:d6:67:33:fc:cb:b4:b5:3d:23: 0e:a0:57:35:1c:b3:06:41:d6:6a:37:ab:7b:64:f0: 19:3a:55:e6:68:1d:b2:e0:70:72:56:23:5d:57:a6: b6:09:fd:79:7a:27:e6:48:06:67:31:9f:12:e9:aa: 8b:81:36:00:40:15:47:fe:c3:fd:4e:7c:d5:b4:be: 7b:1f:1a:cd:40:72:06:55:b8:7a:74:fa:d0:bb:60: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:81:A9:C7:8B:54:BF:C9:FC:C8:28:19:FD:0A:D2:45:65:93:56 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cDiBqceLVL_J_MgoGf0K0kVlk1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.84.0/24 31.56.91.0/24 31.57.104.0/24 Signature Algorithm: sha256WithRSAEncryption 27:9c:7c:82:08:e2:97:f5:2c:52:8b:c7:44:db:d7:15:42:56: 0c:ec:7e:b5:e7:a6:93:a2:8a:a8:94:ba:0e:50:0c:03:6e:68: 12:e2:19:18:ef:a2:f0:41:ab:8c:ef:5b:7d:74:ef:90:42:4f: d1:ef:25:4f:60:e6:6f:89:47:12:3b:4a:4c:0a:ea:ed:34:d7: 95:b4:71:23:05:11:fb:b8:d0:f8:5a:71:09:58:29:2e:3e:2f: c4:5a:ef:f3:16:7a:4a:e4:64:1a:ea:9a:2b:04:e9:8a:f6:9e: a9:1c:57:c3:28:03:8c:16:82:e9:a0:45:35:a0:50:ae:35:e6: 22:0c:62:c6:70:5a:e7:0c:fe:5c:40:50:b3:14:ea:45:29:56: 8b:eb:9c:f0:9f:8d:32:34:b7:a9:ea:7b:3c:84:24:9f:17:41: a5:6e:fa:c2:8f:04:8f:7d:03:28:50:69:e2:90:5e:44:16:60: 55:c1:35:d8:71:fb:d3:8b:5d:18:09:b5:65:e3:b2:34:68:c0: 77:31:7c:51:ec:67:5f:0c:13:79:11:4c:36:9c:9e:a3:8d:f2: ef:77:2d:3c:d2:af:6c:47:d3:5a:18:cf:54:9c:0e:9c:ff:f8: ad:2c:73:d0:84:c9:53:2d:ce:d3:30:c1:46:a1:a3:c5:c5:65: 51:dd:e3:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hGQdUpQpCE/vyqp74LcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDM4ODFhOWM3OGI1NGJmYzlmY2M4MjgxOWZkMGFkMjQ1NjU5MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNXlp8ZfioP3fHM6tN/RP2a/K0rM tIk5hAJDLuyxJUGPeJoBEXOZNrwdY5XqEflIDaLimQTk12Sbviw3YiP8fBplDco/ 8f0tsnUlVqlbSOkeW17fRKn9aMzn3d+oWwt5iJjyHXv3iYeWCYhW2DejflHcbnR8 3yO5XKe9rgVxRKPOtOQXE4R/bz1U17eCCMUKyRc7KD9mDMuolE9/5u+pq7OXrkXO Yw6tAd3WZzP8y7S1PSMOoFc1HLMGQdZqN6t7ZPAZOlXmaB2y4HByViNdV6a2Cf15 eifmSAZnMZ8S6aqLgTYAQBVH/sP9TnzVtL57HxrNQHIGVbh6dPrQu2AhIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHA4ganHi1S/yfzIKBn9CtJFZZNWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvY0RpQnFjZUxWTF9KX01nb0dmMEswa1ZsazFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhUAwQA HzhbAwQAHzloMA0GCSqGSIb3DQEBCwUAA4IBAQAnnHyCCOKX9SxSi8dE29cVQlYM 7H6156aTooqolLoOUAwDbmgS4hkY76LwQauM71t9dO+QQk/R7yVPYOZviUcSO0pM CurtNNeVtHEjBRH7uND4WnEJWCkuPi/EWu/zFnpK5GQa6porBOmK9p6pHFfDKAOM FoLpoEU1oFCuNeYiDGLGcFrnDP5cQFCzFOpFKVaL65zwn40yNLep6ns8hCSfF0Gl bvrCjwSPfQMoUGnikF5EFmBVwTXYcfvTi10YCbVl47I0aMB3MXxR7GdfDBN5EUw2 nJ6jjfLvdy080q9sR9NaGM9UnA6c//itLHPQhMlTLc7TMMFGoaPFxWVR3ePw -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:32 2026 by rpki-client