This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dLXTDx2TQRQPCKlYLlt8ECk8oPc.roa File: dLXTDx2TQRQPCKlYLlt8ECk8oPc.roa (raw, json) Hash identifier: qmAuVgn1y22FlBi1rezQwV/DL8tLloHf0Hp8wFgQ63U= Subject key identifier: 74:B5:D3:0F:1D:93:41:14:0F:08:A9:58:2E:5B:7C:10:29:3C:A0:F7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846B7C4ABD3DD9B4DEE1BE04F4483F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dLXTDx2TQRQPCKlYLlt8ECk8oPc.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49123 IP address blocks: 31.56.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6b:7c:4a:bd:3d:d9:b4:de:e1:be:04:f4:48:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b5d30f1d9341140f08a9582e5b7c10293ca0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:25:61:d4:04:42:6c:e9:b6:5a:ad:81:81: 75:3d:34:21:d4:e4:e4:47:28:ca:44:30:c1:9e:9d: b7:51:40:16:aa:1a:0e:3e:5f:d0:72:7e:15:fc:2e: 95:ed:c1:23:2b:2e:f6:83:48:6f:94:50:3b:c7:e4: 93:17:e8:4b:fd:76:a0:2d:80:b4:d2:a0:bb:d4:a6: 48:83:bf:56:e5:36:68:44:98:40:b1:60:b4:12:54: 69:a6:85:c2:f2:40:00:19:42:d2:03:ce:25:ee:27: 80:43:04:7f:c6:2f:08:9f:04:f3:89:db:32:f5:75: 52:fb:47:c0:d7:c2:47:15:48:74:39:66:73:25:1b: af:5e:ad:a3:ef:6f:8a:20:0e:c3:70:a5:29:cf:8b: 9f:0b:cc:fe:48:86:3f:93:59:b3:45:e0:ae:80:f3: 13:f2:4e:42:69:e5:af:e9:2c:6d:03:54:90:11:1c: bf:08:b1:12:68:77:99:55:ff:c1:b1:35:f4:28:bc: e3:03:f7:1e:50:ff:20:5a:86:e7:4a:22:7e:a8:86: 73:76:2a:98:24:51:99:03:d8:24:4f:d8:42:5e:e1: d0:11:35:94:bb:32:2f:45:5d:9a:17:df:13:a4:17: 39:0a:a5:84:11:93:43:27:0f:0b:87:0f:dc:c2:23: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B5:D3:0F:1D:93:41:14:0F:08:A9:58:2E:5B:7C:10:29:3C:A0:F7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dLXTDx2TQRQPCKlYLlt8ECk8oPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.155.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:de:88:9c:6d:29:5f:aa:31:79:e7:bd:de:52:25:33:01:74: fa:b2:8c:c8:58:65:d4:95:20:74:ae:5b:42:67:95:46:51:ff: 9d:1e:83:36:ae:e8:12:40:15:39:8d:42:7c:71:80:12:83:89: db:25:07:9b:b6:a3:0a:36:e3:47:4e:3b:41:d9:fc:b1:00:09: 9f:41:21:cf:c5:9d:8e:62:42:86:be:2e:a0:79:53:9c:50:b4: e1:6e:1e:43:2b:ed:01:63:02:78:a4:f6:e2:87:b6:c7:5c:22: 81:10:a6:df:31:d8:a0:86:0f:42:34:3a:1a:25:bc:85:41:36: 58:f2:06:00:52:1f:2c:df:7e:48:46:62:5b:da:09:8f:0b:77: 99:e1:e9:df:ff:e3:5e:ca:47:59:fc:4f:8f:ee:92:38:25:7d: 6f:37:1a:b6:30:96:52:91:80:b7:3e:b1:38:b2:a1:9c:af:66: 52:c7:0e:03:46:36:f9:1d:0c:f0:e6:a9:49:4d:45:c6:00:17: 94:43:9a:99:27:bd:f7:f0:73:2a:53:0e:cb:85:0d:e5:fe:ff: 38:f1:5d:1e:68:dc:a4:d1:7e:7e:90:bf:3a:ca:92:28:c2:1f: a5:d9:bd:dd:44:96:24:d4:00:ed:78:25:2a:99:b2:5c:95:78: a5:53:d0:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGt8Sr092bTe4b4E9Eg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI1ZDMwZjFkOTM0MTE0MGYwOGE5NTgyZTViN2MxMDI5M2NhMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9MlYdQEQmzptlqtgYF1PTQh1OTk RyjKRDDBnp23UUAWqhoOPl/Qcn4V/C6V7cEjKy72g0hvlFA7x+STF+hL/XagLYC0 0qC71KZIg79W5TZoRJhAsWC0ElRppoXC8kAAGULSA84l7ieAQwR/xi8InwTzidsy 9XVS+0fA18JHFUh0OWZzJRuvXq2j72+KIA7DcKUpz4ufC8z+SIY/k1mzReCugPMT 8k5CaeWv6SxtA1SQERy/CLESaHeZVf/BsTX0KLzjA/ceUP8gWobnSiJ+qIZzdiqY JFGZA9gkT9hCXuHQETWUuzIvRV2aF98TpBc5CqWEEZNDJw8Lhw/cwiNpIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHS10w8dk0EUDwipWC5bfBApPKD3MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZExYVER4MlRRUlFQQ0tsWUxsdDhFQ2s4b1BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzibMA0G CSqGSIb3DQEBCwUAA4IBAQB83oicbSlfqjF5573eUiUzAXT6sozIWGXUlSB0rltC Z5VGUf+dHoM2rugSQBU5jUJ8cYASg4nbJQebtqMKNuNHTjtB2fyxAAmfQSHPxZ2O YkKGvi6geVOcULThbh5DK+0BYwJ4pPbih7bHXCKBEKbfMdighg9CNDoaJbyFQTZY 8gYAUh8s335IRmJb2gmPC3eZ4enf/+NeykdZ/E+P7pI4JX1vNxq2MJZSkYC3PrE4 sqGcr2ZSxw4DRjb5HQzw5qlJTUXGABeUQ5qZJ7338HMqUw7LhQ3l/v848V0eaNyk 0X5+kL86ypIowh+l2b3dRJYk1ADteCUqmbJclXilU9DI -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:12 2026 by rpki-client