This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/coTuwvnePSZTwkoR08jnXvCw7rE.roa File: coTuwvnePSZTwkoR08jnXvCw7rE.roa (raw, json) Hash identifier: yfJTaBBFDmCBvCJJkGnVhqfhVFW9h0JypWMqdzicgHU= Subject key identifier: 72:84:EE:C2:F9:DE:3D:26:53:C2:4A:11:D3:C8:E7:5E:F0:B0:EE:B1 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84BB9D065A78D77EE4C286E9159940 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/coTuwvnePSZTwkoR08jnXvCw7rE.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 31.56.80.0/24 maxlen: 24 31.56.84.0/24 maxlen: 24 31.57.190.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 31.59.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bb:9d:06:5a:78:d7:7e:e4:c2:86:e9:15:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7284eec2f9de3d2653c24a11d3c8e75ef0b0eeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:9e:b3:65:94:89:8c:2d:90:ca:1d:be:b1: fd:ca:86:bd:ff:3f:09:a2:a7:82:f9:3c:55:59:c7: c6:64:82:47:3e:ca:c7:df:7a:38:f8:d9:82:96:7b: fb:7f:5f:bd:a2:47:93:61:6d:7a:b8:b6:c9:3f:bb: 84:95:7f:10:74:00:9e:f8:c0:d4:33:8a:a4:7a:a6: b4:70:cf:c9:d0:b6:b3:7c:09:b9:18:23:07:67:9d: 4a:47:79:7d:22:53:01:3e:f8:dc:48:7c:47:c1:89: 2c:28:43:2d:46:fe:6d:af:19:88:9b:6d:d0:d1:eb: 34:03:0a:c3:e9:ba:7f:1d:dd:af:66:7c:5f:96:0c: ac:fe:6a:82:60:4c:b4:17:9d:3c:98:b9:02:3e:35: c7:b9:46:ac:c7:6a:95:d4:cf:0a:25:0a:36:43:f6: 77:77:c1:23:90:05:0a:63:e5:b9:d7:aa:f9:d2:4d: 78:b3:c6:b7:e4:9d:97:77:d2:11:6a:36:97:da:1f: 4b:bd:ff:c1:4d:37:26:7e:37:f4:2e:c5:18:40:24: 42:14:87:5b:d8:18:a7:21:64:86:43:a4:80:7d:70: 01:bd:e4:94:09:12:36:d0:64:78:ba:dc:26:a8:f2: 76:5d:00:cc:4a:c8:78:55:15:a8:af:ef:af:d6:eb: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:84:EE:C2:F9:DE:3D:26:53:C2:4A:11:D3:C8:E7:5E:F0:B0:EE:B1 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/coTuwvnePSZTwkoR08jnXvCw7rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.80.0/24 31.56.84.0/24 31.57.190.0/24 31.58.131.0/24 31.59.198.0/24 Signature Algorithm: sha256WithRSAEncryption 61:4e:54:0c:d0:e5:d2:2a:ea:83:98:00:ab:02:76:d5:a5:08: 1a:df:01:33:c9:48:d4:0c:7e:5a:c0:be:d2:2f:da:26:f1:bb: 25:12:de:8d:d9:b6:6d:79:68:6b:12:fa:57:38:fc:6b:ba:ac: 26:8e:93:16:ee:28:19:62:7a:51:c6:f9:ff:a5:3a:1e:ee:69: 90:11:c5:8c:1e:a3:2d:2a:e1:45:cf:90:9c:5d:b6:0b:bb:52: d8:84:9a:5a:bc:f4:bf:31:4a:41:6c:8c:a1:e9:fe:05:b8:91: 53:14:77:94:49:ef:e0:df:41:0b:2a:74:a4:27:ab:6c:6c:62: 41:22:1f:ec:db:54:a3:6c:b6:f4:69:d1:da:9e:51:da:51:a8: 27:3d:ea:81:fc:49:23:f4:10:e4:3a:a2:b5:c8:12:00:03:de: 1a:5a:9e:04:9a:c5:03:0c:68:03:4f:67:cd:1a:22:07:db:ce: 80:40:09:37:6a:d9:6f:7b:af:26:d8:6c:8a:56:36:66:a7:fb: f0:c5:b4:b8:c4:a9:b9:0d:95:16:cd:e2:e5:36:e2:d6:bc:ec: bd:73:1c:75:b5:af:39:7f:1f:89:35:16:2c:87:eb:cc:dd:f6: d9:73:3b:df:f6:f8:74:65:42:7c:13:b5:6a:ca:27:aa:81:9a: b3:04:24:c7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hLudBlp4137kwobpFZlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjg0ZWVjMmY5ZGUzZDI2NTNjMjRhMTFkM2M4ZTc1ZWYwYjBlZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKees2WUiYwtkModvrH9yoa9/z8J oqeC+TxVWcfGZIJHPsrH33o4+NmClnv7f1+9okeTYW16uLbJP7uElX8QdACe+MDU M4qkeqa0cM/J0LazfAm5GCMHZ51KR3l9IlMBPvjcSHxHwYksKEMtRv5trxmIm23Q 0es0AwrD6bp/Hd2vZnxflgys/mqCYEy0F508mLkCPjXHuUasx2qV1M8KJQo2Q/Z3 d8EjkAUKY+W516r50k14s8a35J2Xd9IRajaX2h9Lvf/BTTcmfjf0LsUYQCRCFIdb 2BinIWSGQ6SAfXABveSUCRI20GR4utwmqPJ2XQDMSsh4VRWor++v1uul5QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHKE7sL53j0mU8JKEdPI517wsO6xMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvY29UdXd2bmVQU1pUd2tvUjA4am5YdkN3N3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzhQAwQA HzhUAwQAHzm+AwQAHzqDAwQAHzvGMA0GCSqGSIb3DQEBCwUAA4IBAQBhTlQM0OXS KuqDmACrAnbVpQga3wEzyUjUDH5awL7SL9om8bslEt6N2bZteWhrEvpXOPxruqwm jpMW7igZYnpRxvn/pToe7mmQEcWMHqMtKuFFz5CcXbYLu1LYhJpavPS/MUpBbIyh 6f4FuJFTFHeUSe/g30ELKnSkJ6tsbGJBIh/s21SjbLb0adHanlHaUagnPeqB/Ekj 9BDkOqK1yBIAA94aWp4EmsUDDGgDT2fNGiIH286AQAk3atlve68m2GyKVjZmp/vw xbS4xKm5DZUWzeLlNuLWvOy9cxx1ta85fx+JNRYsh+vM3fbZczvf9vh0ZUJ8E7Vq yieqgZqzBCTH -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:51 2026 by rpki-client