This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/drft4r2UPwzdO0PbOoMFnr2rRnM.roa File: drft4r2UPwzdO0PbOoMFnr2rRnM.roa (raw, json) Hash identifier: 1Z22P5Xgiwjj0bl/iDkMdSK3YboQyU5xG6t0M5U1GY4= Subject key identifier: 76:B7:ED:E2:BD:94:3F:0C:DD:3B:43:DB:3A:83:05:9E:BD:AB:46:73 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8489F6C468F9321771D358D0719B16 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/drft4r2UPwzdO0PbOoMFnr2rRnM.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153497 IP address blocks: 31.57.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:89:f6:c4:68:f9:32:17:71:d3:58:d0:71:9b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76b7ede2bd943f0cdd3b43db3a83059ebdab4673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:79:25:6f:7c:af:af:f4:93:92:ff:3c:11: e3:61:40:5b:c7:27:b0:b8:43:59:09:71:f7:c0:10: 1d:7f:8b:22:17:d3:f0:c4:e0:8b:78:c9:c5:08:b2: 8d:db:9e:53:05:2c:d4:0b:a6:f0:45:e0:31:e8:f4: d7:79:88:50:23:d7:a5:27:b4:d6:8e:a1:e5:84:0d: 63:6b:c3:b0:94:79:48:26:37:82:b4:ff:e0:a9:25: 1c:a2:e3:1b:32:01:01:0d:af:72:35:a9:c0:22:ea: 4a:92:9b:a6:5c:29:53:32:75:4d:4e:37:a2:d3:91: d3:fd:c6:64:26:e8:2e:41:b1:35:b4:e2:00:37:7b: 23:4a:1a:1c:be:10:34:31:c6:b4:5e:71:02:c7:c8: 6a:1d:c5:71:72:ec:6a:5d:f6:e1:c2:ee:0a:f9:eb: 66:8c:b5:7f:98:49:68:fa:e1:72:31:0b:4b:49:36: 30:31:3c:c6:3e:ff:f2:36:90:9c:8e:43:4d:5b:05: 76:fc:f9:95:14:a7:37:47:9b:9f:ae:5d:6c:de:f8: 5a:4f:f4:17:3f:db:32:30:5d:a4:d0:ed:54:c0:a0: 4d:8c:e6:93:7a:af:99:f1:29:c8:d9:15:18:c7:f5: 38:01:36:40:84:6e:ee:4b:29:54:7b:9a:fb:7c:71: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B7:ED:E2:BD:94:3F:0C:DD:3B:43:DB:3A:83:05:9E:BD:AB:46:73 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/drft4r2UPwzdO0PbOoMFnr2rRnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.248.0/24 Signature Algorithm: sha256WithRSAEncryption a9:6e:05:fe:24:05:f0:5b:07:95:0e:34:53:d8:4f:d8:45:48: 7a:c1:62:d4:ca:49:58:1e:26:4d:92:51:03:d5:4e:7b:3f:67: ed:4b:94:c6:d0:7a:3d:3d:09:1b:7f:3b:e2:77:cf:4b:c8:09: c2:13:16:36:b8:01:46:c4:0f:cb:42:cb:f2:f7:d8:8b:9a:d2: 57:9d:a6:13:3a:ea:4a:f8:08:06:7a:1a:9f:a4:78:1f:5d:e4: 9a:fe:5f:27:58:bd:14:fb:0a:5e:86:c5:b7:c8:94:65:9b:f7: e3:c9:2a:a1:61:38:2a:85:af:ff:35:ff:51:93:0d:09:6e:97: b2:71:cb:86:13:77:f2:6e:7e:b6:e0:5f:01:4e:aa:e0:9a:f3: 64:57:38:ea:f0:c7:60:c3:6a:15:d0:0a:1a:9c:06:4e:2e:32: fc:50:04:a2:0f:7b:46:49:37:cd:a3:12:f0:10:04:c2:fc:66: ff:af:98:19:94:10:9d:ca:a8:40:17:e4:a0:27:2b:89:cd:62: be:49:42:49:9a:87:d0:91:80:23:60:57:2e:a3:4d:25:2e:a3: 2a:ba:42:5b:cf:c2:75:eb:46:81:89:79:31:82:83:8d:fe:53: 96:7f:f0:45:63:8d:1f:c3:2d:29:b1:cb:38:50:06:c8:b6:72: d3:35:bc:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIn2xGj5Mhdx01jQcZsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmI3ZWRlMmJkOTQzZjBjZGQzYjQzZGIzYTgzMDU5ZWJkYWI0NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwid5JW98r6/0k5L/PBHjYUBbxyew uENZCXH3wBAdf4siF9PwxOCLeMnFCLKN255TBSzUC6bwReAx6PTXeYhQI9elJ7TW jqHlhA1ja8OwlHlIJjeCtP/gqSUcouMbMgEBDa9yNanAIupKkpumXClTMnVNTjei 05HT/cZkJuguQbE1tOIAN3sjShocvhA0Mca0XnECx8hqHcVxcuxqXfbhwu4K+etm jLV/mElo+uFyMQtLSTYwMTzGPv/yNpCcjkNNWwV2/PmVFKc3R5ufrl1s3vhaT/QX P9syMF2k0O1UwKBNjOaTeq+Z8SnI2RUYx/U4ATZAhG7uSylUe5r7fHGQRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHa37eK9lD8M3TtD2zqDBZ69q0ZzMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZHJmdDRyMlVQd3pkTzBQYk9vTUZucjJyUm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzn4MA0G CSqGSIb3DQEBCwUAA4IBAQCpbgX+JAXwWweVDjRT2E/YRUh6wWLUyklYHiZNklED 1U57P2ftS5TG0Ho9PQkbfzvid89LyAnCExY2uAFGxA/LQsvy99iLmtJXnaYTOupK +AgGehqfpHgfXeSa/l8nWL0U+wpehsW3yJRlm/fjySqhYTgqha//Nf9Rkw0Jbpey ccuGE3fybn624F8BTqrgmvNkVzjq8Mdgw2oV0AoanAZOLjL8UASiD3tGSTfNoxLw EATC/Gb/r5gZlBCdyqhAF+SgJyuJzWK+SUJJmofQkYAjYFcuo00lLqMqukJbz8J1 60aBiXkxgoON/lOWf/BFY40fwy0pscs4UAbItnLTNbwo -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:25 2026 by rpki-client