This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f8IugaEREBQcpAiqsF5Jg-JXy5c.roa File: f8IugaEREBQcpAiqsF5Jg-JXy5c.roa (raw, json) Hash identifier: WaIcjm05uIvkpICQPuX0S7B3aGk4+yB9kgNAe8pUoBo= Subject key identifier: 7F:C2:2E:81:A1:11:10:14:1C:A4:08:AA:B0:5E:49:83:E2:57:CB:97 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B755896D0A104E86DAC1AFF20BE48BF45 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f8IugaEREBQcpAiqsF5Jg-JXy5c.roa Signing time: Wed 31 Dec 2025 16:58:18 +0000 ROA not before: Wed 31 Dec 2025 16:58:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203057 IP address blocks: 31.59.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:58:96:d0:a1:04:e8:6d:ac:1a:ff:20:be:48:bf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 31 16:58:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7fc22e81a11110141ca408aab05e4983e257cb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:0f:cc:d0:43:ec:03:cf:ef:d1:80:05:a3: 44:dd:5d:70:37:95:b6:91:16:f0:43:85:1c:cb:2e: 50:7f:2d:11:92:2c:4e:50:53:cf:69:8a:da:db:ca: 89:0a:d0:8d:3f:c7:80:c1:1a:cd:cb:39:e6:0a:1d: 21:ba:71:71:67:7f:7c:d8:bc:b1:20:01:fe:af:aa: a9:6f:e6:39:b5:52:27:9a:f3:a7:a3:48:52:c6:42: 28:45:ca:75:f5:c6:27:29:e7:87:8d:58:f4:8f:72: ac:96:b2:ad:16:8f:09:a9:61:bd:2b:f5:fd:13:ac: b4:49:7a:9e:d5:b8:3b:18:eb:75:76:30:ea:30:fc: 31:cc:3d:bb:07:5c:38:63:91:0c:51:9d:31:72:ea: cc:12:5e:7b:c5:ca:8e:31:ae:b5:6f:c4:84:2c:41: d6:9f:b9:08:f0:f9:f2:c2:4b:42:15:03:80:2d:5b: 90:11:5e:e0:28:46:e3:07:dd:4a:0a:83:66:6c:ab: ce:ae:cb:e5:47:29:f8:39:df:58:ae:cf:a6:c9:88: 95:7b:a9:ac:91:77:4f:f6:69:89:bc:4c:84:d0:c4: 5e:a9:4d:c9:65:2c:98:8c:56:b0:86:4a:29:4f:99: 0f:07:55:4d:14:25:8e:d3:ac:85:d8:45:02:9e:51: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:2E:81:A1:11:10:14:1C:A4:08:AA:B0:5E:49:83:E2:57:CB:97 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f8IugaEREBQcpAiqsF5Jg-JXy5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.223.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:24:df:79:5d:a2:10:aa:99:c9:08:22:ce:bb:47:5a:ed:fc: 88:f7:db:7c:1c:af:88:9e:b8:80:0c:12:de:68:7c:53:54:bf: 5e:b3:dc:19:b4:03:29:b6:a2:c5:39:fe:6d:ed:9a:9b:72:a0: 0c:81:a0:5e:ef:f3:f5:c1:6e:c4:f6:d0:4a:e2:26:1d:fc:c3: ed:9a:d8:18:92:ae:e8:53:81:85:b7:31:57:1d:23:bc:b3:72: 78:58:f0:ee:69:b4:2c:11:04:8c:8b:49:39:2c:d3:bb:67:f6: b7:a2:49:58:d3:c5:93:c8:51:51:12:a0:f0:aa:99:65:12:8e: 29:59:c2:be:36:5b:be:62:8b:26:07:6c:f3:e7:0f:7c:78:59: 84:04:01:fb:5a:04:2e:ec:3d:ca:42:5c:bb:67:e0:86:53:3a: 6d:9f:04:63:72:a1:1c:f7:76:ce:6f:c1:96:15:ee:9b:54:25: 14:66:60:f3:e7:49:e2:f0:84:6f:eb:8a:bb:08:bc:df:0e:25: 8d:4a:de:72:e9:d3:67:f1:b6:6a:19:0c:b0:ad:bf:68:c6:e2: 1a:f3:9d:2f:a7:e0:bc:f6:4f:cd:b8:33:d6:dc:43:94:1a:1f: 56:0f:8e:a8:b7:d0:6a:d3:cd:18:0c:ac:53:ec:4e:5c:44:cb: fd:3f:db:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt1WJbQoQTobawa/yC+SL9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjMxMTY1ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmMyMmU4MWExMTExMDE0MWNhNDA4YWFiMDVlNDk4M2UyNTdjYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q8PzNBD7APP79GABaNE3V1wN5W2 kRbwQ4Ucyy5Qfy0RkixOUFPPaYra28qJCtCNP8eAwRrNyznmCh0hunFxZ3982Lyx IAH+r6qpb+Y5tVInmvOno0hSxkIoRcp19cYnKeeHjVj0j3KslrKtFo8JqWG9K/X9 E6y0SXqe1bg7GOt1djDqMPwxzD27B1w4Y5EMUZ0xcurMEl57xcqOMa61b8SELEHW n7kI8PnywktCFQOALVuQEV7gKEbjB91KCoNmbKvOrsvlRyn4Od9Yrs+myYiVe6ms kXdP9mmJvEyE0MReqU3JZSyYjFawhkopT5kPB1VNFCWO06yF2EUCnlGdcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/CLoGhERAUHKQIqrBeSYPiV8uXMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZjhJdWdhRVJFQlFjcEFpcXNGNUpnLUpYeTVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzvfMA0G CSqGSIb3DQEBCwUAA4IBAQAbJN95XaIQqpnJCCLOu0da7fyI99t8HK+InriADBLe aHxTVL9es9wZtAMptqLFOf5t7ZqbcqAMgaBe7/P1wW7E9tBK4iYd/MPtmtgYkq7o U4GFtzFXHSO8s3J4WPDuabQsEQSMi0k5LNO7Z/a3oklY08WTyFFREqDwqpllEo4p WcK+Nlu+YosmB2zz5w98eFmEBAH7WgQu7D3KQly7Z+CGUzptnwRjcqEc93bOb8GW Fe6bVCUUZmDz50ni8IRv64q7CLzfDiWNSt5y6dNn8bZqGQywrb9oxuIa850vp+C8 9k/NuDPW3EOUGh9WD46ot9Bq080YDKxT7E5cRMv9P9u7 -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:49 2026 by rpki-client