This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eI51rwhBNg2Azo9uX5SSaqMrUh0.roa File: eI51rwhBNg2Azo9uX5SSaqMrUh0.roa (raw, json) Hash identifier: qwmm8EovP4TpJ1Qqa0WQXs94vfVoJbROEPUddYT/IVw= Subject key identifier: 78:8E:75:AF:08:41:36:0D:80:CE:8F:6E:5F:94:92:6A:A3:2B:52:1D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84721FEA2AE7ED5F299829E08150B1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eI51rwhBNg2Azo9uX5SSaqMrUh0.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60431 IP address blocks: 31.58.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:72:1f:ea:2a:e7:ed:5f:29:98:29:e0:81:50:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788e75af0841360d80ce8f6e5f94926aa32b521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:f0:92:b2:61:82:fa:fb:01:e4:5c:16:53: d8:12:49:ae:a6:bc:e1:cd:45:d1:aa:fd:ec:8e:46: 2e:c4:b2:98:aa:24:5d:91:18:39:0f:fd:91:d4:55: 36:7f:95:80:02:94:da:83:f1:a0:f1:ce:60:9c:67: f3:aa:f8:9a:3a:cb:3f:6d:59:22:19:32:e7:0b:43: 01:fd:35:08:39:32:76:25:74:de:15:64:e8:08:6e: 19:27:5b:01:04:ff:2b:b5:cb:6e:4f:f5:ed:78:e9: 51:61:e4:95:b4:52:cf:39:ba:81:62:2a:7f:76:07: ab:62:3d:5c:5e:70:c7:06:ca:b7:58:1c:4e:2e:66: 7c:b1:f4:80:3e:12:34:54:f4:03:e9:be:c6:e0:e1: e8:48:1f:75:10:3f:15:5d:f0:a3:ea:c4:45:9b:b9: 42:40:6b:3e:b5:96:d3:5d:96:63:bd:4b:9c:d6:92: d6:ab:cc:25:db:f2:b8:cf:de:0f:8d:e2:28:2f:78: 62:63:54:a9:76:af:ad:cd:12:cc:2a:be:a1:bc:b8: ba:cb:9d:e1:d5:5d:36:3c:d3:24:dc:e1:25:41:b1: cd:2c:57:4f:84:1d:bd:13:e6:19:af:32:a4:c0:33: ee:9d:77:a0:84:a3:55:32:eb:02:45:42:74:a1:3f: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8E:75:AF:08:41:36:0D:80:CE:8F:6E:5F:94:92:6A:A3:2B:52:1D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eI51rwhBNg2Azo9uX5SSaqMrUh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.70.0/24 Signature Algorithm: sha256WithRSAEncryption b4:a0:c1:dc:b7:8e:50:97:c8:01:42:fd:82:5e:f9:04:ca:b8: 79:c8:17:6b:51:fa:95:ad:2f:d5:94:c2:d8:44:26:ae:0f:f1: e7:56:bc:38:de:c3:95:78:06:a5:a8:c5:12:52:88:b7:70:dd: 07:b4:3b:01:25:be:87:97:fd:51:8f:31:ff:df:da:42:55:89: 07:fa:a9:98:54:03:35:0b:5b:f2:70:d0:02:c5:80:6e:35:f3: af:0b:6f:f6:6d:fb:73:7a:9f:90:7f:ab:88:8b:a0:d7:f7:93: 83:91:e2:bd:9e:2a:81:c1:01:10:bc:c8:9e:42:88:7b:f9:24: f3:8e:16:95:bc:04:c5:64:29:7a:26:e7:da:f7:c6:d5:ce:74: f7:32:c4:d2:03:ae:09:50:28:fa:dd:b9:b4:d7:a5:c0:29:f1: 1a:8d:95:ce:c8:3f:3d:f0:f6:a7:b9:01:56:80:6d:cf:25:7f: 00:16:ff:35:b2:ba:ba:91:6c:3b:e5:0b:ba:bb:a5:a1:4b:07: db:34:28:6c:b8:b9:76:95:ae:53:a0:34:3c:8b:bc:74:a0:e8: bf:58:9b:06:b7:07:2e:30:b7:e6:85:0b:ea:60:6f:fe:9d:2e: aa:2a:89:f1:94:1c:6a:10:a5:b8:4f:38:97:e3:1f:e2:87:43: 13:5d:ee:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHIf6irn7V8pmCnggVCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhlNzVhZjA4NDEzNjBkODBjZThmNmU1Zjk0OTI2YWEzMmI1MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz7wkrJhgvr7AeRcFlPYEkmuprzh zUXRqv3sjkYuxLKYqiRdkRg5D/2R1FU2f5WAApTag/Gg8c5gnGfzqviaOss/bVki GTLnC0MB/TUIOTJ2JXTeFWToCG4ZJ1sBBP8rtctuT/XteOlRYeSVtFLPObqBYip/ dgerYj1cXnDHBsq3WBxOLmZ8sfSAPhI0VPQD6b7G4OHoSB91ED8VXfCj6sRFm7lC QGs+tZbTXZZjvUuc1pLWq8wl2/K4z94PjeIoL3hiY1Spdq+tzRLMKr6hvLi6y53h 1V02PNMk3OElQbHNLFdPhB29E+YZrzKkwDPunXeghKNVMusCRUJ0oT8gSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHiOda8IQTYNgM6Pbl+UkmqjK1IdMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZUk1MXJ3aEJOZzJBem85dVg1U1NhcU1yVWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpGMA0G CSqGSIb3DQEBCwUAA4IBAQC0oMHct45Ql8gBQv2CXvkEyrh5yBdrUfqVrS/VlMLY RCauD/HnVrw43sOVeAalqMUSUoi3cN0HtDsBJb6Hl/1RjzH/39pCVYkH+qmYVAM1 C1vycNACxYBuNfOvC2/2bftzep+Qf6uIi6DX95ODkeK9niqBwQEQvMieQoh7+STz jhaVvATFZCl6Jufa98bVznT3MsTSA64JUCj63bm016XAKfEajZXOyD898PanuQFW gG3PJX8AFv81srq6kWw75Qu6u6WhSwfbNChsuLl2la5ToDQ8i7x0oOi/WJsGtwcu MLfmhQvqYG/+nS6qKonxlBxqEKW4TziX4x/ih0MTXe6E -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:21 2026 by rpki-client