This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f1u7ZkznsFKDTq9JqObFslnYnP4.roa File: f1u7ZkznsFKDTq9JqObFslnYnP4.roa (raw, json) Hash identifier: iHMthipuD0j1EuFJCHziSkGHylRRXj6+vJDQG4oIEJI= Subject key identifier: 7F:5B:BB:66:4C:E7:B0:52:83:4E:AF:49:A8:E6:C5:B2:59:D8:9C:FE Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CCE4E9BD7CE5EABB404D251049C7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f1u7ZkznsFKDTq9JqObFslnYnP4.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215304 IP address blocks: 31.56.84.0/24 maxlen: 24 31.57.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cc:e4:e9:bd:7c:e5:ea:bb:40:4d:25:10:49:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f5bbb664ce7b052834eaf49a8e6c5b259d89cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:f7:50:ee:1f:de:49:cb:e0:4e:a7:bd:cd: a1:59:ec:4a:71:d3:0c:92:6d:6a:c4:ac:8a:f0:44: a3:37:e8:19:2c:ed:81:fc:85:57:61:4d:76:ae:bf: 51:12:12:42:b0:99:80:df:5c:ef:58:fb:03:4f:98: da:28:11:32:d0:9f:cb:cf:7e:ec:44:79:7e:24:c5: 15:c0:19:ba:9c:3f:3a:c2:d7:02:f6:93:f5:be:e1: 13:7b:1d:d6:1d:d1:1d:ad:67:28:45:bc:09:74:21: 21:8f:36:c2:28:44:08:ed:82:5b:79:33:8b:04:c0: b8:ee:a2:93:78:45:b7:f3:6c:38:e7:e0:2c:62:b3: 61:ec:00:93:33:d1:e2:8f:53:ac:c3:6f:d0:a2:14: fd:cd:70:fb:67:18:94:df:80:59:48:2b:f5:69:bc: fc:22:24:90:0c:2a:de:23:5f:66:ca:96:37:32:d5: 7a:2a:a7:ff:95:d2:0b:fb:ec:ad:a3:40:cd:51:59: 84:27:8f:01:73:67:9a:c7:d9:04:16:3a:48:ba:4e: a1:17:42:d7:35:ae:35:40:1e:63:55:6b:6f:2f:1e: bc:4b:71:e1:58:b2:a4:0b:1e:e4:ea:81:39:cb:d2: 70:0e:eb:19:b2:ba:c4:61:e0:71:bd:e1:4b:5f:2b: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5B:BB:66:4C:E7:B0:52:83:4E:AF:49:A8:E6:C5:B2:59:D8:9C:FE X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f1u7ZkznsFKDTq9JqObFslnYnP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.84.0/24 31.57.104.0/24 Signature Algorithm: sha256WithRSAEncryption be:f3:13:37:9b:20:ba:72:9a:b7:bc:ab:aa:55:0b:37:ff:76: 06:d9:6a:29:d1:aa:7d:7c:9b:78:c9:aa:76:d8:96:29:19:c7: 2d:33:52:a1:34:e8:78:eb:01:c7:c3:39:2b:b4:c7:e1:f2:42: 5a:4c:20:8e:71:e9:e8:ac:c0:90:50:d0:7c:ad:8d:1c:57:31: 95:75:07:40:96:b3:5f:01:e3:9a:e0:c2:ca:85:33:3f:fd:bc: b3:22:fe:a9:63:ad:d9:06:d1:12:f2:85:ff:94:b1:df:4f:47: d4:22:56:07:0a:ab:cd:58:69:11:3a:48:83:4a:90:66:fc:b3: 0b:39:d6:ab:6c:b8:b9:12:7e:e9:07:2a:e9:e1:ca:2f:b0:be: ae:c7:0b:77:39:e9:d0:ae:b7:46:7f:f7:21:1f:ed:5b:43:99: 23:c4:24:ed:b9:04:20:9c:af:26:78:40:c1:ae:f0:59:3d:a3: 86:13:b6:27:6c:1a:6c:e8:37:3b:2c:61:d8:b5:5b:15:f8:8c: 49:1d:7b:2f:23:37:db:6f:72:4c:50:fb:7b:0f:6d:fc:7e:6c: c5:da:ba:ab:00:dc:19:2d:b7:db:18:b5:dc:6f:b8:7a:f2:b1: 12:f2:f8:23:23:22:9f:a1:a8:a4:47:c6:21:5e:54:a8:d8:bc: d9:31:90:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMzk6b185eq7QE0lEEnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjViYmI2NjRjZTdiMDUyODM0ZWFmNDlhOGU2YzViMjU5ZDg5Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2r3UO4f3knL4E6nvc2hWexKcdMM km1qxKyK8ESjN+gZLO2B/IVXYU12rr9REhJCsJmA31zvWPsDT5jaKBEy0J/Lz37s RHl+JMUVwBm6nD86wtcC9pP1vuETex3WHdEdrWcoRbwJdCEhjzbCKEQI7YJbeTOL BMC47qKTeEW382w45+AsYrNh7ACTM9Hij1Osw2/QohT9zXD7ZxiU34BZSCv1abz8 IiSQDCreI19mypY3MtV6Kqf/ldIL++yto0DNUVmEJ48Bc2eax9kEFjpIuk6hF0LX Na41QB5jVWtvLx68S3HhWLKkCx7k6oE5y9JwDusZsrrEYeBxveFLXyvdRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH9bu2ZM57BSg06vSajmxbJZ2Jz+MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZjF1N1prem5zRktEVHE5SnFPYkZzbG5ZblA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhUAwQA HzloMA0GCSqGSIb3DQEBCwUAA4IBAQC+8xM3myC6cpq3vKuqVQs3/3YG2Wop0ap9 fJt4yap22JYpGcctM1KhNOh46wHHwzkrtMfh8kJaTCCOcenorMCQUNB8rY0cVzGV dQdAlrNfAeOa4MLKhTM//byzIv6pY63ZBtES8oX/lLHfT0fUIlYHCqvNWGkROkiD SpBm/LMLOdarbLi5En7pByrp4covsL6uxwt3OenQrrdGf/chH+1bQ5kjxCTtuQQg nK8meEDBrvBZPaOGE7YnbBps6Dc7LGHYtVsV+IxJHXsvIzfbb3JMUPt7D238fmzF 2rqrANwZLbfbGLXcb7h68rES8vgjIyKfoaikR8YhXlSo2LzZMZA1 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:42 2026 by rpki-client