This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eSnKQR60kHNMR-rfJ0Go8Yc4rBo.roa File: eSnKQR60kHNMR-rfJ0Go8Yc4rBo.roa (raw, json) Hash identifier: mJEODqseDmZl8PzZW65i1XDW/mPpjTpDYWLsRD76BTs= Subject key identifier: 79:29:CA:41:1E:B4:90:73:4C:47:EA:DF:27:41:A8:F1:87:38:AC:1A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845B7953A7E8C98C73A840D144ED80 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eSnKQR60kHNMR-rfJ0Go8Yc4rBo.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 31.58.49.0/24 maxlen: 24 31.58.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5b:79:53:a7:e8:c9:8c:73:a8:40:d1:44:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7929ca411eb490734c47eadf2741a8f18738ac1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:0d:93:e9:5c:bb:d0:31:33:f2:d5:cc:2c: cb:7f:e7:56:3f:df:c8:bd:d4:b6:09:a1:e1:7a:9c: 49:70:c6:64:16:fd:ad:57:38:a6:75:a2:a2:8b:70: 80:c0:e3:17:27:82:2e:f8:e6:26:f0:c0:cd:02:95: 52:00:8d:86:02:7a:fd:76:25:e5:ab:48:98:4a:ee: 2d:d3:af:40:ba:54:2a:4e:80:0c:f3:88:40:16:e5: c9:8a:01:d7:96:89:d2:96:b6:7b:09:9e:4e:2b:f0: 7a:fb:89:e6:a6:8d:cc:e3:e7:d4:2f:2d:5b:7d:bf: 15:77:d6:63:2f:74:f6:b0:73:cd:83:63:74:2e:dd: 01:76:bb:42:ae:22:d6:82:47:bb:86:d6:fc:69:f2: 5b:c1:c9:e0:84:10:1e:54:ed:8b:d3:cb:3c:48:b1: a6:7b:6c:ab:aa:c3:1a:51:2c:da:7b:82:25:3d:3a: 73:f7:4a:d1:db:a2:64:b1:6d:c7:18:fa:1f:bf:18: 83:f8:dc:14:5f:69:8a:ed:da:52:95:8b:ff:8a:68: fa:6b:82:2f:cd:81:dc:c0:bf:63:90:93:bb:2a:3c: 6d:35:e9:a1:4e:d8:f0:3f:0b:57:61:b2:93:61:e0: 9b:57:17:55:64:6c:e7:a2:be:7e:99:06:a4:11:e4: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:29:CA:41:1E:B4:90:73:4C:47:EA:DF:27:41:A8:F1:87:38:AC:1A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eSnKQR60kHNMR-rfJ0Go8Yc4rBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.49.0/24 31.58.169.0/24 Signature Algorithm: sha256WithRSAEncryption a3:6b:c1:5f:1e:53:b8:00:be:4a:b2:44:e9:fb:02:05:8d:3d: 0b:90:92:f1:4d:7d:5d:b0:f5:f3:fc:6a:3a:0d:22:d9:64:90: eb:cf:38:ae:31:ad:46:d9:47:06:56:03:80:84:c1:a6:26:d4: 3d:9d:46:be:28:6f:63:c6:25:f2:d2:e7:ca:28:05:fe:9d:86: 24:66:c2:78:e0:7c:a1:9e:32:1b:2c:69:69:67:79:4d:f9:88: 06:53:b9:db:7b:ec:38:de:f6:29:8d:68:f3:ec:00:31:27:ef: cf:e5:7f:0f:a6:9c:20:98:04:dc:1c:19:ac:09:86:39:e4:85: 0e:2a:ba:82:82:56:3f:96:40:3d:b8:33:9c:ab:27:a8:7d:96: 64:2a:34:ee:ca:aa:05:24:e4:88:de:7c:0c:01:35:36:d8:37: 51:b2:ce:28:ed:d8:f5:75:35:c1:cc:b3:6e:f3:1f:59:ee:a8: c5:eb:2c:e6:58:98:23:e0:3e:d7:2c:9a:6b:92:f1:02:c1:cc: 7c:e8:a1:87:03:2a:8b:e7:73:db:3c:56:67:a8:9a:51:71:eb: 6e:d7:ca:85:31:0c:26:0d:24:ea:b1:a1:56:13:69:f7:27:c8: d3:45:a8:a9:10:89:1f:b2:9d:8a:3b:f1:a6:f0:b6:5e:3a:e4: 49:c5:05:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hFt5U6foyYxzqEDRRO2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTI5Y2E0MTFlYjQ5MDczNGM0N2VhZGYyNzQxYThmMTg3MzhhYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypENk+lcu9AxM/LVzCzLf+dWP9/I vdS2CaHhepxJcMZkFv2tVzimdaKii3CAwOMXJ4Iu+OYm8MDNApVSAI2GAnr9diXl q0iYSu4t069AulQqToAM84hAFuXJigHXlonSlrZ7CZ5OK/B6+4nmpo3M4+fULy1b fb8Vd9ZjL3T2sHPNg2N0Lt0BdrtCriLWgke7htb8afJbwcnghBAeVO2L08s8SLGm e2yrqsMaUSzae4IlPTpz90rR26JksW3HGPofvxiD+NwUX2mK7dpSlYv/imj6a4Iv zYHcwL9jkJO7KjxtNemhTtjwPwtXYbKTYeCbVxdVZGznor5+mQakEeSKiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHkpykEetJBzTEfq3ydBqPGHOKwaMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZVNuS1FSNjBrSE5NUi1yZkowR284WWM0ckJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzoxAwQA HzqpMA0GCSqGSIb3DQEBCwUAA4IBAQCja8FfHlO4AL5KskTp+wIFjT0LkJLxTX1d sPXz/Go6DSLZZJDrzziuMa1G2UcGVgOAhMGmJtQ9nUa+KG9jxiXy0ufKKAX+nYYk ZsJ44HyhnjIbLGlpZ3lN+YgGU7nbe+w43vYpjWjz7AAxJ+/P5X8PppwgmATcHBms CYY55IUOKrqCglY/lkA9uDOcqyeofZZkKjTuyqoFJOSI3nwMATU22DdRss4o7dj1 dTXBzLNu8x9Z7qjF6yzmWJgj4D7XLJprkvECwcx86KGHAyqL53PbPFZnqJpRcetu 18qFMQwmDSTqsaFWE2n3J8jTRaipEIkfsp2KO/Gm8LZeOuRJxQXj -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:27 2026 by rpki-client