This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eAAawNo7ggRnwj4gRAE2ME4YH8A.roa File: eAAawNo7ggRnwj4gRAE2ME4YH8A.roa (raw, json) Hash identifier: yx4Ushl9CxNj7QP7fGbDJS/RyrJn6IJMCux7n8Y0V64= Subject key identifier: 78:00:1A:C0:DA:3B:82:04:67:C2:3E:20:44:01:36:30:4E:18:1F:C0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B54BC141A0C4F63E5D3069531F5AD6043 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eAAawNo7ggRnwj4gRAE2ME4YH8A.roa Signing time: Thu 25 Dec 2025 08:59:30 +0000 ROA not before: Thu 25 Dec 2025 08:59:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 269986 IP address blocks: 31.58.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bc:14:1a:0c:4f:63:e5:d3:06:95:31:f5:ad:60:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 25 08:59:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=78001ac0da3b820467c23e20440136304e181fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:60:02:db:3a:af:60:e6:68:ec:e4:fc:11: 1c:ab:82:7b:0f:c1:87:11:93:02:a4:d9:64:36:2c: 20:fa:6f:f3:29:41:e5:72:51:8e:e0:99:bd:5c:9d: 7d:31:94:12:f1:da:1b:2d:ab:ff:3a:c2:a1:f2:d3: 61:c9:8c:a6:2b:71:e3:42:5e:5e:75:45:42:78:9d: 19:f8:b7:95:e2:f8:76:35:52:65:c2:61:7a:c4:9d: f2:f8:4c:2a:3a:89:fc:c9:3a:14:07:a1:c0:77:a3: e9:82:49:84:60:08:6e:4c:c7:15:0b:c4:20:88:16: 32:1a:d8:b6:b7:09:a2:ca:21:96:d3:62:47:4a:13: 01:e5:93:99:0b:ac:ec:77:01:e6:3e:20:0f:21:d7: 86:0f:1e:1f:7f:4f:52:3f:04:0a:26:ed:e9:3b:a9: f8:4c:e7:a3:1f:1b:7f:f4:bc:ae:c3:da:c6:f3:ea: 02:45:1e:1e:3d:24:6b:cf:f1:ae:42:ce:5a:1a:af: 42:c2:b1:99:18:8b:10:3a:2c:15:b8:f6:c7:13:d8: 30:be:f2:ca:68:93:5a:f2:af:9c:e9:3a:e4:97:f3: e6:21:62:eb:a8:2f:ec:f8:a0:b4:54:a9:96:71:7d: 8f:81:3b:c4:af:d6:d0:e9:55:4d:b3:58:96:47:c0: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:00:1A:C0:DA:3B:82:04:67:C2:3E:20:44:01:36:30:4E:18:1F:C0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eAAawNo7ggRnwj4gRAE2ME4YH8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.89.0/24 Signature Algorithm: sha256WithRSAEncryption 91:32:63:2d:fc:ca:11:23:c2:f3:f7:fa:a1:a9:30:be:f8:e1: a4:77:be:8f:d3:a9:b0:8d:0f:3d:97:63:b0:85:c2:f4:ca:00: 8a:30:b9:96:bf:c8:d6:17:c6:2d:87:05:85:fa:64:fd:be:9f: 0b:b8:ec:a0:12:b6:2e:af:3b:cf:b0:2f:16:9b:97:15:6b:7a: 31:c8:98:af:08:ab:8e:02:fd:65:5c:cc:1e:e6:61:3f:6f:71: 8d:a8:f2:f4:e4:2d:e8:d7:53:4c:b2:e9:53:26:a3:3c:92:78: e4:4f:2e:74:ad:cf:69:f0:0c:21:69:f1:86:c4:e4:c7:5f:49: 1f:2f:d1:89:ae:e8:d3:1e:3b:ed:bd:1f:43:c0:e5:50:09:57: c3:c9:6d:c8:07:f7:0a:05:0f:50:a7:77:ad:42:1b:fd:22:ce: da:28:c5:08:1b:e5:81:8d:66:25:70:c2:de:df:85:65:fe:e2: 1d:10:d4:ab:47:f4:11:4e:c9:2c:51:1b:59:ae:72:72:49:f2: 2d:a0:a5:f9:22:f7:a7:a6:db:56:71:1e:c0:8c:4c:d0:24:9e: e6:f0:ea:7a:b6:0d:e3:c3:fe:01:0c:6b:f5:85:89:49:a6:ca: 46:23:54:2e:22:c5:d9:3d:4e:79:34:4e:6e:24:10:5f:c7:0b: 9d:5c:9f:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtUvBQaDE9j5dMGlTH1rWBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI1MDg1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODAwMWFjMGRhM2I4MjA0NjdjMjNlMjA0NDAxMzYzMDRlMTgxZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuolgAts6r2DmaOzk/BEcq4J7D8GH EZMCpNlkNiwg+m/zKUHlclGO4Jm9XJ19MZQS8dobLav/OsKh8tNhyYymK3HjQl5e dUVCeJ0Z+LeV4vh2NVJlwmF6xJ3y+EwqOon8yToUB6HAd6PpgkmEYAhuTMcVC8Qg iBYyGti2twmiyiGW02JHShMB5ZOZC6zsdwHmPiAPIdeGDx4ff09SPwQKJu3pO6n4 TOejHxt/9Lyuw9rG8+oCRR4ePSRrz/GuQs5aGq9CwrGZGIsQOiwVuPbHE9gwvvLK aJNa8q+c6Trkl/PmIWLrqC/s+KC0VKmWcX2PgTvEr9bQ6VVNs1iWR8ApxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHgAGsDaO4IEZ8I+IEQBNjBOGB/AMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZUFBYXdObzdnZ1Jud2o0Z1JBRTJNRTRZSDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpZMA0G CSqGSIb3DQEBCwUAA4IBAQCRMmMt/MoRI8Lz9/qhqTC++OGkd76P06mwjQ89l2Ow hcL0ygCKMLmWv8jWF8YthwWF+mT9vp8LuOygErYurzvPsC8Wm5cVa3oxyJivCKuO Av1lXMwe5mE/b3GNqPL05C3o11NMsulTJqM8knjkTy50rc9p8AwhafGGxOTHX0kf L9GJrujTHjvtvR9DwOVQCVfDyW3IB/cKBQ9Qp3etQhv9Is7aKMUIG+WBjWYlcMLe 34Vl/uIdENSrR/QRTsksURtZrnJySfItoKX5IvenpttWcR7AjEzQJJ7m8Op6tg3j w/4BDGv1hYlJpspGI1QuIsXZPU55NE5uJBBfxwudXJ+b -----END CERTIFICATE-----Generated at Sat Dec 27 10:43:57 2025 by rpki-client