This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dF-HD-Z5usQOQ_MYL18pT1NPtDI.roa File: dF-HD-Z5usQOQ_MYL18pT1NPtDI.roa (raw, json) Hash identifier: PjrncQy+4GVXCN/0T1xYzIeuNftoXYq0EMaVYsF29pg= Subject key identifier: 74:5F:87:0F:E6:79:BA:C4:0E:43:F3:18:2F:5F:29:4F:53:4F:B4:32 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BDFC538EB4E01FD92924A4B4AC6F54376 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dF-HD-Z5usQOQ_MYL18pT1NPtDI.roa Signing time: Wed 21 Jan 2026 08:56:42 +0000 ROA not before: Wed 21 Jan 2026 08:56:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 31.57.221.0/24 maxlen: 24 31.58.139.0/24 maxlen: 24 31.59.199.0/24 maxlen: 24 31.59.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:c5:38:eb:4e:01:fd:92:92:4a:4b:4a:c6:f5:43:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 21 08:56:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=745f870fe679bac40e43f3182f5f294f534fb432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:ec:ce:6b:ba:aa:86:b2:bd:fa:f3:98:62: 54:46:c4:dc:ca:61:5a:d1:a4:e9:f7:fc:eb:df:99: 04:b1:52:92:05:bb:36:ba:b5:2e:64:4d:78:71:d4: 85:3a:e9:4c:9b:88:4b:ef:0f:7d:ee:f1:31:8b:de: 82:cd:22:47:34:83:b2:17:eb:e1:be:07:be:49:ce: 4f:f4:73:bb:3e:09:98:08:4c:b0:43:8f:c2:1d:6f: 8d:29:b6:05:fe:a2:fa:15:61:b8:e9:7f:21:1f:1a: 91:12:8f:73:09:15:6f:d6:10:8a:b4:96:f3:16:73: d7:ed:7e:38:31:cd:b3:31:b5:a3:e3:c6:f4:13:9e: 16:f2:c8:b4:e5:82:01:02:39:a5:dc:f2:ea:fa:71: 9b:f7:d9:88:99:41:06:b1:85:04:ab:22:05:0b:ca: ff:d6:17:35:d7:0d:da:fa:4b:fb:70:98:fe:9d:02: 67:04:a9:76:d7:73:7c:25:1d:4e:74:5d:83:0c:94: bb:b9:ae:f4:6b:3e:a2:46:a2:b3:6e:de:d4:f2:c9: fe:4f:77:42:e3:d9:c1:fb:13:5d:86:3c:4d:ae:bd: 07:b7:90:dd:f9:e5:7e:9d:7b:be:a4:75:d8:32:44: 8c:79:ff:a5:de:e9:f4:b2:77:95:61:c3:95:84:e3: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5F:87:0F:E6:79:BA:C4:0E:43:F3:18:2F:5F:29:4F:53:4F:B4:32 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dF-HD-Z5usQOQ_MYL18pT1NPtDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.221.0/24 31.58.139.0/24 31.59.199.0/24 31.59.208.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:96:90:16:cf:7d:a2:76:04:11:5e:49:bd:ef:16:2e:67:a7: 06:07:2c:ad:b8:14:f5:1c:f4:9f:4b:f5:5d:05:46:8a:78:95: 08:45:b2:2b:5b:5b:c6:a5:69:e1:96:a5:6f:20:03:dd:3f:59: a5:36:74:06:9a:d8:27:81:40:19:ca:8f:07:79:70:c5:3e:3c: 71:c3:ed:f3:7f:20:c0:f9:87:48:30:09:c9:d3:a5:a4:59:eb: e0:3b:5b:4a:80:b0:64:aa:41:64:63:f6:b0:84:94:b5:b6:d3: e3:0b:f9:29:4a:af:46:04:f3:4f:43:4d:fe:49:89:1d:98:73: 44:c5:da:4c:01:e1:a1:5d:3a:1a:a9:e6:38:e2:d6:0d:53:92: db:f0:4a:b0:3d:f9:be:3b:45:47:be:fb:87:e3:53:24:2f:07: 96:db:4d:bb:0d:a2:7d:31:cf:97:ad:0f:30:e5:19:23:13:7b: 6f:f0:f7:de:eb:e2:29:96:01:87:d5:8c:d1:09:9a:b9:0d:ad: c3:d9:6e:d8:b9:a8:41:9d:8e:a8:dc:70:8b:01:08:b1:f7:7f: 52:39:1b:c6:4a:53:19:63:cb:b3:1b:fd:ba:dc:94:b5:40:12: 9c:20:73:f2:05:20:e1:96:0f:b4:41:dd:d1:87:55:14:82:da: 26:4a:31:4d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvfxTjrTgH9kpJKS0rG9UN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIxMDg1NjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDVmODcwZmU2NzliYWM0MGU0M2YzMTgyZjVmMjk0ZjUzNGZiNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ3szmu6qoayvfrzmGJURsTcymFa 0aTp9/zr35kEsVKSBbs2urUuZE14cdSFOulMm4hL7w997vExi96CzSJHNIOyF+vh vge+Sc5P9HO7PgmYCEywQ4/CHW+NKbYF/qL6FWG46X8hHxqREo9zCRVv1hCKtJbz FnPX7X44Mc2zMbWj48b0E54W8si05YIBAjml3PLq+nGb99mImUEGsYUEqyIFC8r/ 1hc11w3a+kv7cJj+nQJnBKl213N8JR1OdF2DDJS7ua70az6iRqKzbt7U8sn+T3dC 49nB+xNdhjxNrr0Ht5Dd+eV+nXu+pHXYMkSMef+l3un0sneVYcOVhOMInwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHRfhw/mebrEDkPzGC9fKU9TT7QyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZEYtSEQtWjV1c1FPUV9NWUwxOHBUMU5QdERJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzndAwQA HzqLAwQAHzvHAwQAHzvQMA0GCSqGSIb3DQEBCwUAA4IBAQBPlpAWz32idgQRXkm9 7xYuZ6cGByytuBT1HPSfS/VdBUaKeJUIRbIrW1vGpWnhlqVvIAPdP1mlNnQGmtgn gUAZyo8HeXDFPjxxw+3zfyDA+YdIMAnJ06WkWevgO1tKgLBkqkFkY/awhJS1ttPj C/kpSq9GBPNPQ03+SYkdmHNExdpMAeGhXToaqeY44tYNU5Lb8EqwPfm+O0VHvvuH 41MkLweW2027DaJ9Mc+XrQ8w5RkjE3tv8Pfe6+IplgGH1YzRCZq5Da3D2W7YuahB nY6o3HCLAQix939SORvGSlMZY8uzG/263JS1QBKcIHPyBSDhlg+0Qd3Rh1UUgtom SjFN -----END CERTIFICATE-----Generated at Thu Jan 22 00:45:14 2026 by rpki-client