This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cHy2vVZYLo-mg2F_ekb0LtoK-mE.roa File: cHy2vVZYLo-mg2F_ekb0LtoK-mE.roa (raw, json) Hash identifier: tzAWi23Wc1SEb0MVj8m1UF9d8WniX/ofexn9ZRALSPQ= Subject key identifier: 70:7C:B6:BD:56:58:2E:8F:A6:83:61:7F:7A:46:F4:2E:DA:0A:FA:61 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CC4318832E6FC75A5A835607A6B1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cHy2vVZYLo-mg2F_ekb0LtoK-mE.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215242 IP address blocks: 31.56.213.0/24 maxlen: 24 31.56.214.0/24 maxlen: 24 31.58.211.0/24 maxlen: 24 31.58.235.0/24 maxlen: 24 31.58.236.0/24 maxlen: 24 31.58.238.0/24 maxlen: 24 31.58.246.0/24 maxlen: 24 31.58.247.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 217.60.251.0/24 maxlen: 24 217.60.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cc:43:18:83:2e:6f:c7:5a:5a:83:56:07:a6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=707cb6bd56582e8fa683617f7a46f42eda0afa61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f2:5c:47:7d:91:61:91:08:87:5d:da:0b:71: a7:a8:f3:3f:fc:cc:f1:59:9d:49:15:dd:68:85:f1: 22:b7:1c:37:cd:d1:d3:96:28:d3:8d:a7:12:9f:1f: a2:60:70:5f:6a:0d:b0:4d:fa:4b:b8:a3:6d:66:8d: 29:22:02:bc:aa:ea:6b:5f:01:af:7d:9d:d4:15:62: 94:ca:60:eb:7b:aa:a6:b9:d6:c1:9d:0b:c1:e3:68: 99:f5:be:7f:72:4a:1f:73:3a:b8:0a:34:0b:2a:a4: 53:68:46:f0:be:8c:7e:d2:9d:79:80:d3:c5:2b:07: d1:c0:b9:77:61:f3:34:e3:d1:5a:23:75:db:46:92: 31:22:b9:86:66:c7:41:12:00:39:ac:1a:1b:f7:a6: 7a:48:bc:f1:99:40:ed:ca:56:08:ad:1f:b2:5e:bc: 5f:2c:91:0a:98:43:dd:52:c2:ee:4f:ea:01:8c:3d: d4:68:5c:1c:2f:86:ed:d5:5c:aa:3a:82:97:cf:2d: 31:95:24:a2:9d:1c:44:34:79:ab:1d:87:ef:8e:ff: c2:c2:c1:fb:d8:a6:43:7e:58:5e:3e:cf:4a:2f:41: ab:a1:fe:b1:e9:28:74:7d:0b:56:21:87:9f:f8:f5: e6:b6:75:f6:cc:33:a6:25:d1:4f:ba:99:ac:9a:82: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:B6:BD:56:58:2E:8F:A6:83:61:7F:7A:46:F4:2E:DA:0A:FA:61 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cHy2vVZYLo-mg2F_ekb0LtoK-mE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.213.0-31.56.214.255 31.58.211.0/24 31.58.235.0-31.58.236.255 31.58.238.0/24 31.58.246.0/23 31.58.249.0-31.58.251.255 217.60.251.0/24 217.60.254.0/24 Signature Algorithm: sha256WithRSAEncryption a8:80:18:b9:20:b1:6f:1b:64:4c:67:4c:0d:36:ef:c0:03:01: 5b:55:9c:67:56:6f:9c:51:54:1d:fe:71:d3:d5:ff:7b:58:3b: 13:3a:f7:43:0b:d9:93:ab:34:b8:96:ba:97:c2:d4:0b:83:56: d1:cf:de:63:7a:fa:b1:9b:3a:f6:c5:c9:18:13:27:ff:cc:a2: 1c:64:f3:3c:5e:60:de:38:f4:af:21:09:f0:9a:64:77:ec:8c: e5:3f:59:bf:91:17:1a:cc:7e:ae:ab:80:72:ec:a3:bd:5a:99: 66:06:53:5f:e9:f6:5c:96:e6:7a:d5:f6:a1:93:1f:48:ca:92: cb:65:81:2b:33:c8:c4:5d:da:40:3a:30:16:60:11:28:8a:ef: 3f:8e:8b:07:7c:a5:de:ad:9d:14:32:23:ef:09:f1:4f:27:f2: 08:dd:f2:15:02:63:e7:89:a4:a3:c2:47:22:43:6a:9c:11:72: ee:a0:98:69:33:d8:bb:8f:99:91:07:14:ac:1c:7b:2b:e5:af: 26:00:e4:cc:2b:03:82:67:53:22:0f:0d:53:6a:71:66:01:3b: 40:35:b6:ac:1e:42:2f:a7:17:0d:98:1d:9d:ee:7c:e7:fa:5d: cd:0b:6d:51:f9:20:dd:ca:e3:f7:68:8c:e9:be:69:ba:9c:7e: e9:dd:c6:95 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/hMxDGIMub8daWoNWB6axMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDdjYjZiZDU2NTgyZThmYTY4MzYxN2Y3YTQ2ZjQyZWRhMGFmYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fJcR32RYZEIh13aC3GnqPM//Mzx WZ1JFd1ohfEitxw3zdHTlijTjacSnx+iYHBfag2wTfpLuKNtZo0pIgK8quprXwGv fZ3UFWKUymDre6qmudbBnQvB42iZ9b5/ckofczq4CjQLKqRTaEbwvox+0p15gNPF KwfRwLl3YfM049FaI3XbRpIxIrmGZsdBEgA5rBob96Z6SLzxmUDtylYIrR+yXrxf LJEKmEPdUsLuT+oBjD3UaFwcL4bt1VyqOoKXzy0xlSSinRxENHmrHYfvjv/CwsH7 2KZDflhePs9KL0Grof6x6Sh0fQtWIYef+PXmtnX2zDOmJdFPupmsmoKmjwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHB8tr1WWC6PpoNhf3pG9C7aCvphMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvY0h5MnZWWllMby1tZzJGX2VrYjBMdG9LLW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAAfONUD BAAfONYDBAAfOtMwDAMEAB866wMEAB867AMEAB867gMEAR869jAMAwQAHzr5AwQC Hzr4AwQA2Tz7AwQA2Tz+MA0GCSqGSIb3DQEBCwUAA4IBAQCogBi5ILFvG2RMZ0wN Nu/AAwFbVZxnVm+cUVQd/nHT1f97WDsTOvdDC9mTqzS4lrqXwtQLg1bRz95jevqx mzr2xckYEyf/zKIcZPM8XmDeOPSvIQnwmmR37IzlP1m/kRcazH6uq4By7KO9Wplm BlNf6fZcluZ61fahkx9IypLLZYErM8jEXdpAOjAWYBEoiu8/josHfKXerZ0UMiPv CfFPJ/II3fIVAmPniaSjwkciQ2qcEXLuoJhpM9i7j5mRBxSsHHsr5a8mAOTMKwOC Z1MiDw1TanFmATtANbasHkIvpxcNmB2d7nzn+l3NC21R+SDdyuP3aIzpvmm6nH7p 3caV -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:39 2026 by rpki-client