This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cIBMADT0YWBDxPtCWGOeHXIArFk.roa File: cIBMADT0YWBDxPtCWGOeHXIArFk.roa (raw, json) Hash identifier: rzsT3Uw0j0jkxJOaej/QwXm0mOuCzpGt7QvLvZDi0LM= Subject key identifier: 70:80:4C:00:34:F4:61:60:43:C4:FB:42:58:63:9E:1D:72:00:AC:59 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C2D609ECEBE6B58ABC88DC107F57 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cIBMADT0YWBDxPtCWGOeHXIArFk.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214481 IP address blocks: 31.58.51.0/24 maxlen: 24 31.59.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c2:d6:09:ec:eb:e6:b5:8a:bc:88:dc:10:7f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70804c0034f4616043c4fb4258639e1d7200ac59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:b8:d7:b5:79:30:40:6a:e7:3b:4e:fc:eb: a8:52:fe:b8:4b:c9:f6:8a:75:12:b6:1b:b1:25:f5: a3:9f:b5:7b:1a:a9:de:6f:b5:0a:07:70:85:f2:7b: c9:65:83:84:68:94:9b:89:45:5a:20:82:fd:d1:45: 7e:33:58:74:08:1f:68:e4:00:d6:40:cc:fc:5b:2a: d2:51:d9:74:28:e0:b5:66:a1:ae:4f:1b:1e:41:4c: 3c:1f:cf:b3:21:e8:45:92:c1:d9:69:b2:93:ea:f6: 16:92:45:56:c6:0f:9c:25:f4:2f:f4:9b:19:6d:e6: 68:c6:ab:87:bc:c7:b4:c4:97:c8:f0:a5:f2:54:bd: b5:18:5c:61:ba:d8:cc:3b:28:e5:b5:fe:91:e9:dc: d4:c0:7c:70:e0:f3:96:89:82:14:aa:25:1d:4f:0c: b8:56:eb:cf:c1:0c:5e:16:b5:c5:3a:51:22:25:73: 1f:2e:72:3a:b5:d9:ec:af:c1:8c:9c:9f:59:62:5a: 85:18:6d:d1:98:33:fe:20:50:fa:f6:b5:93:52:c8: 8e:58:a8:33:f2:b9:cf:8a:da:8e:66:50:40:52:e6: 23:45:36:87:0c:97:56:de:52:4e:96:fd:ab:5a:49: 10:06:1f:c4:93:5f:88:aa:e8:08:6d:09:3f:a6:e0: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:4C:00:34:F4:61:60:43:C4:FB:42:58:63:9E:1D:72:00:AC:59 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cIBMADT0YWBDxPtCWGOeHXIArFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.51.0/24 31.59.129.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:f3:bc:4a:36:f2:a3:ae:1e:11:5d:51:fb:e4:34:8a:99:21: 16:cc:83:c2:20:97:74:7c:d5:e0:66:3c:56:a5:dd:c6:63:8b: 70:f3:58:f6:47:21:9a:0b:85:16:41:07:96:f0:a4:ce:60:22: e6:93:8e:2d:d8:7d:81:8d:96:da:9f:22:ea:34:2c:d0:bb:d4: 8e:15:a2:7b:2e:ed:a1:32:c9:5b:0a:1e:cc:f1:7c:f6:02:04: dd:85:7e:17:b6:3b:50:c4:41:02:8a:84:85:49:a2:93:80:11: af:53:85:34:b4:56:d3:b9:07:0c:16:25:dc:23:f1:67:57:3a: f7:eb:b2:6a:10:ce:22:76:a4:dc:83:11:f6:45:c0:db:32:4a: 82:5a:8c:38:7f:3e:15:fe:28:71:bc:37:12:92:8b:ab:b1:5d: 17:31:f6:b0:94:cc:ae:6c:2c:4b:d0:25:65:2c:43:9c:c8:0a: 75:dd:c9:1d:1b:04:9d:92:0d:5e:db:a1:15:e1:38:23:87:b7: d2:b8:33:c7:2f:9e:3b:34:33:97:33:19:c8:f0:36:47:7c:7f: 37:99:04:8a:d6:3d:61:cf:9d:6a:85:65:0e:b2:81:e8:7b:68: 60:51:9f:97:4c:d2:ef:fc:f6:38:69:46:ed:bd:98:16:16:37: f7:71:54:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMLWCezr5rWKvIjcEH9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDgwNGMwMDM0ZjQ2MTYwNDNjNGZiNDI1ODYzOWUxZDcyMDBhYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBu417V5MEBq5ztO/OuoUv64S8n2 inUSthuxJfWjn7V7Gqneb7UKB3CF8nvJZYOEaJSbiUVaIIL90UV+M1h0CB9o5ADW QMz8WyrSUdl0KOC1ZqGuTxseQUw8H8+zIehFksHZabKT6vYWkkVWxg+cJfQv9JsZ beZoxquHvMe0xJfI8KXyVL21GFxhutjMOyjltf6R6dzUwHxw4POWiYIUqiUdTwy4 VuvPwQxeFrXFOlEiJXMfLnI6tdnsr8GMnJ9ZYlqFGG3RmDP+IFD69rWTUsiOWKgz 8rnPitqOZlBAUuYjRTaHDJdW3lJOlv2rWkkQBh/Ek1+IqugIbQk/puBgywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHCATAA09GFgQ8T7Qlhjnh1yAKxZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvY0lCTUFEVDBZV0JEeFB0Q1dHT2VIWElBckZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzozAwQA HzuBMA0GCSqGSIb3DQEBCwUAA4IBAQCO87xKNvKjrh4RXVH75DSKmSEWzIPCIJd0 fNXgZjxWpd3GY4tw81j2RyGaC4UWQQeW8KTOYCLmk44t2H2BjZbanyLqNCzQu9SO FaJ7Lu2hMslbCh7M8Xz2AgTdhX4XtjtQxEECioSFSaKTgBGvU4U0tFbTuQcMFiXc I/FnVzr367JqEM4idqTcgxH2RcDbMkqCWow4fz4V/ihxvDcSkoursV0XMfawlMyu bCxL0CVlLEOcyAp13ckdGwSdkg1e26EV4Tgjh7fSuDPHL547NDOXMxnI8DZHfH83 mQSK1j1hz51qhWUOsoHoe2hgUZ+XTNLv/PY4aUbtvZgWFjf3cVQ5 -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:14 2026 by rpki-client