This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f02EnzkYVTx6QuTKsXchSafqRJs.roa File: f02EnzkYVTx6QuTKsXchSafqRJs.roa (raw, json) Hash identifier: B5bTwOSX0UsL/AXsb34TxMBEeWWcGXdBpKq49DxHZfI= Subject key identifier: 7F:4D:84:9F:39:18:55:3C:7A:42:E4:CA:B1:77:21:49:A7:EA:44:9B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F847F3B72B37C96FED3BAF42EFBDD2A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f02EnzkYVTx6QuTKsXchSafqRJs.roa Signing time: Fri 02 Jan 2026 16:22:28 +0000 ROA not before: Fri 02 Jan 2026 16:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137517 IP address blocks: 31.57.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7f:3b:72:b3:7c:96:fe:d3:ba:f4:2e:fb:dd:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f4d849f3918553c7a42e4cab1772149a7ea449b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:51:e2:34:47:80:7b:6d:ed:c3:fb:3f:ad: ba:0f:3b:11:50:e0:83:11:ed:6a:1d:8d:67:84:37: ce:5a:c1:01:9f:b3:70:ff:de:04:ff:18:70:96:45: 63:36:a7:53:c9:ca:07:70:15:d8:af:69:7a:a3:c0: 56:bf:77:16:9a:5a:27:6e:6f:fd:b0:54:b5:89:a5: 6b:80:b3:83:fb:91:2e:ec:25:be:27:cb:92:b2:ba: bb:b5:40:28:08:c7:a8:3b:9d:06:9d:82:b7:4e:4f: c5:f3:5a:22:47:c7:38:e2:b4:11:a7:47:58:69:25: b3:19:c4:02:77:dc:c2:27:f4:86:f6:c7:57:c1:ee: 02:d2:93:11:b7:6d:85:55:a5:c6:f1:9b:a9:c7:28: e4:31:8e:ca:e9:ac:aa:66:af:5d:e0:89:5f:c9:19: 52:a3:13:49:9c:80:23:19:7f:52:8d:01:ce:fb:29: 48:6a:ad:fa:ee:f1:e7:64:03:50:76:c1:98:bb:06: df:2b:47:f2:80:20:f2:33:d7:52:d4:66:a5:f8:4e: 66:d4:6d:f5:46:4b:29:99:2d:5c:4a:8b:5b:2f:96: e9:fa:e7:e1:04:f5:59:38:f2:46:8f:88:63:ae:eb: 92:05:d7:ef:f9:97:a0:df:b8:77:4e:3b:65:65:19: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4D:84:9F:39:18:55:3C:7A:42:E4:CA:B1:77:21:49:A7:EA:44:9B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f02EnzkYVTx6QuTKsXchSafqRJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.159.0/24 Signature Algorithm: sha256WithRSAEncryption 30:82:76:74:67:22:1b:46:80:c5:b3:08:9e:40:40:5f:8d:1d: 28:1a:8d:22:6c:da:1c:fa:5e:6a:1b:08:10:8f:b3:42:32:cb: 5c:1d:17:c7:f5:0d:9b:03:7b:3a:df:b9:01:6c:95:29:cb:37: 9c:96:a8:1b:09:44:82:cc:48:ab:cd:5d:4e:b2:f6:8e:bc:12: 48:61:92:f1:31:01:96:43:f6:1c:70:e8:2b:74:85:80:03:51: 69:77:2d:1f:c3:b9:a6:5c:b0:d5:d9:50:23:b8:0d:5e:96:87: 52:34:28:7a:b7:01:83:ad:2a:28:cd:5a:34:8f:db:03:f1:ee: 32:25:03:2e:2c:16:e5:27:d5:e3:42:28:b3:e1:3b:bc:a5:e4: 80:0d:87:ae:9b:18:b7:fe:b6:f6:af:67:3d:94:38:82:15:90: 58:49:c2:8b:77:c3:c8:4f:69:eb:78:d0:f9:3b:19:92:0f:86: b5:45:68:04:77:88:09:1d:09:fe:14:01:d1:af:47:03:d2:9d: 96:e0:a0:90:68:53:a8:aa:2a:23:57:f3:47:ef:5a:60:1c:4f: 19:35:7a:3a:d6:58:7e:3e:3a:2c:41:d2:b1:61:74:b1:64:6b: 76:c7:ae:38:8b:61:00:18:2a:4f:84:ac:62:7c:67:70:ee:74: 67:8b:f2:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hH87crN8lv7TuvQu+90qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjRkODQ5ZjM5MTg1NTNjN2E0MmU0Y2FiMTc3MjE0OWE3ZWE0NDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG5R4jRHgHtt7cP7P626DzsRUOCD Ee1qHY1nhDfOWsEBn7Nw/94E/xhwlkVjNqdTycoHcBXYr2l6o8BWv3cWmlonbm/9 sFS1iaVrgLOD+5Eu7CW+J8uSsrq7tUAoCMeoO50GnYK3Tk/F81oiR8c44rQRp0dY aSWzGcQCd9zCJ/SG9sdXwe4C0pMRt22FVaXG8ZupxyjkMY7K6ayqZq9d4IlfyRlS oxNJnIAjGX9SjQHO+ylIaq367vHnZANQdsGYuwbfK0fygCDyM9dS1Gal+E5m1G31 RkspmS1cSotbL5bp+ufhBPVZOPJGj4hjruuSBdfv+Zeg37h3TjtlZRkvWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9NhJ85GFU8ekLkyrF3IUmn6kSbMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZjAyRW56a1lWVHg2UXVUS3NYY2hTYWZxUkpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmfMA0G CSqGSIb3DQEBCwUAA4IBAQAwgnZ0ZyIbRoDFswieQEBfjR0oGo0ibNoc+l5qGwgQ j7NCMstcHRfH9Q2bA3s637kBbJUpyzeclqgbCUSCzEirzV1OsvaOvBJIYZLxMQGW Q/YccOgrdIWAA1Fpdy0fw7mmXLDV2VAjuA1elodSNCh6twGDrSoozVo0j9sD8e4y JQMuLBblJ9XjQiiz4Tu8peSADYeumxi3/rb2r2c9lDiCFZBYScKLd8PIT2nreND5 OxmSD4a1RWgEd4gJHQn+FAHRr0cD0p2W4KCQaFOoqiojV/NH71pgHE8ZNXo61lh+ PjosQdKxYXSxZGt2x644i2EAGCpPhKxifGdw7nRni/Jk -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:52 2026 by rpki-client