This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eItFSjSG1LtHphaUI3A9Gatz7pM.roa File: eItFSjSG1LtHphaUI3A9Gatz7pM.roa (raw, json) Hash identifier: bZky8UaqHlQseTEQEQjYRUvoJLVzLA6ucj/Oye06DmU= Subject key identifier: 78:8B:45:4A:34:86:D4:BB:47:A6:16:94:23:70:3D:19:AB:73:EE:93 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8461EDC3DC84DDC975DAFA7DF421FB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eItFSjSG1LtHphaUI3A9Gatz7pM.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33329 IP address blocks: 31.57.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:61:ed:c3:dc:84:dd:c9:75:da:fa:7d:f4:21:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788b454a3486d4bb47a6169423703d19ab73ee93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:a8:cd:59:10:22:f7:d6:0a:94:75:ce:3a: df:6d:d1:3c:58:b8:d9:38:cb:9a:e9:92:8a:21:a2: 93:d4:d0:1d:4f:65:b8:36:8b:d3:3d:cd:53:c6:0b: 1c:32:43:7c:f6:93:40:a4:af:74:d1:df:38:97:7b: 4d:48:9d:66:bf:d1:c1:a3:99:00:d2:14:de:37:8b: 5a:54:2c:3c:56:1e:ef:c2:f6:5a:2e:72:34:e2:60: 86:02:17:28:e1:89:ff:95:14:5c:99:43:ec:59:3f: d3:81:9b:1c:12:27:2a:28:59:61:1c:01:bb:59:ff: 24:34:dd:c5:de:9a:fe:1e:b4:70:20:82:b3:4a:6e: dd:ae:0e:4a:64:90:61:4c:c1:ea:2c:fa:dc:92:6a: 9f:b7:64:94:d4:21:bc:81:4b:e3:6c:7d:eb:fc:8b: b2:bb:dd:7f:7a:f1:e2:8e:d1:20:b7:ae:60:fa:06: fc:58:32:69:7f:fc:a2:8d:fc:ab:e1:50:30:79:10: 71:52:89:62:3f:58:9a:ad:43:aa:7b:85:5c:52:98: 68:e1:e6:b7:29:de:13:f8:00:4c:61:d5:c5:6e:c5: a6:54:f0:9c:24:41:00:1d:11:b8:57:55:7e:05:2f: 58:b6:82:b0:72:83:58:60:5d:36:a6:34:7f:17:53: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:45:4A:34:86:D4:BB:47:A6:16:94:23:70:3D:19:AB:73:EE:93 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eItFSjSG1LtHphaUI3A9Gatz7pM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.254.0/24 Signature Algorithm: sha256WithRSAEncryption 31:d5:cc:61:bb:28:55:5b:fe:1b:b8:1c:7d:25:fa:b2:1e:de: 72:e7:4f:b5:58:24:a3:17:0d:7c:76:ea:a6:05:a3:b6:5c:ee: 78:42:37:12:8b:45:e0:00:39:c8:55:13:05:69:b3:d0:4b:08: 0b:b5:f3:13:57:84:59:05:c7:25:62:09:57:39:0d:80:62:70: e1:e0:27:29:07:36:93:d6:19:e5:29:0e:f1:b6:c9:3b:98:83: 0c:d5:42:0f:b7:81:6c:2f:34:ff:f6:71:52:af:3c:9c:ab:6a: af:c1:e0:c8:30:65:ed:c3:e8:2e:47:56:98:db:ed:a2:cf:0d: 1b:b3:97:4f:aa:40:28:ea:45:dd:f0:e1:b2:c2:4b:12:fc:ee: 76:28:de:e4:fa:3e:42:2a:25:d9:5e:6f:0c:a2:24:86:af:13: ad:43:03:f9:3c:58:29:70:f9:4e:31:8f:06:0b:07:4f:e5:25: 98:84:3f:06:f4:96:d8:2f:3d:de:e7:0f:2c:91:98:65:d2:fd: 89:f0:22:ba:79:1c:d0:29:04:0e:de:92:48:b4:c7:58:90:14: 5e:2f:e3:0f:08:6a:ac:9b:15:92:14:df:ed:a0:88:f1:02:99: b1:e7:d9:01:bf:ca:02:8b:a5:58:c9:4f:08:7e:2f:b6:4d:1f: 31:d9:0d:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGHtw9yE3cl12vp99CH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhiNDU0YTM0ODZkNGJiNDdhNjE2OTQyMzcwM2QxOWFiNzNlZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu2ozVkQIvfWCpR1zjrfbdE8WLjZ OMua6ZKKIaKT1NAdT2W4NovTPc1TxgscMkN89pNApK900d84l3tNSJ1mv9HBo5kA 0hTeN4taVCw8Vh7vwvZaLnI04mCGAhco4Yn/lRRcmUPsWT/TgZscEicqKFlhHAG7 Wf8kNN3F3pr+HrRwIIKzSm7drg5KZJBhTMHqLPrckmqft2SU1CG8gUvjbH3r/Iuy u91/evHijtEgt65g+gb8WDJpf/yijfyr4VAweRBxUoliP1iarUOqe4VcUpho4ea3 Kd4T+ABMYdXFbsWmVPCcJEEAHRG4V1V+BS9YtoKwcoNYYF02pjR/F1Ng/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHiLRUo0htS7R6YWlCNwPRmrc+6TMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZUl0RlNqU0cxTHRIcGhhVUkzQTlHYXR6N3BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzn+MA0G CSqGSIb3DQEBCwUAA4IBAQAx1cxhuyhVW/4buBx9JfqyHt5y50+1WCSjFw18duqm BaO2XO54QjcSi0XgADnIVRMFabPQSwgLtfMTV4RZBcclYglXOQ2AYnDh4CcpBzaT 1hnlKQ7xtsk7mIMM1UIPt4FsLzT/9nFSrzycq2qvweDIMGXtw+guR1aY2+2izw0b s5dPqkAo6kXd8OGywksS/O52KN7k+j5CKiXZXm8MoiSGrxOtQwP5PFgpcPlOMY8G CwdP5SWYhD8G9JbYLz3e5w8skZhl0v2J8CK6eRzQKQQO3pJItMdYkBReL+MPCGqs mxWSFN/toIjxApmx59kBv8oCi6VYyU8Ifi+2TR8x2Q33 -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:52 2026 by rpki-client