This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fW2QPiqRwdBJB73QQeQGaeuuy8I.roa File: fW2QPiqRwdBJB73QQeQGaeuuy8I.roa (raw, json) Hash identifier: h3/6f+PHhzQWyHBp7yufpzD8wlrDohAGfMcJ98nnmp8= Subject key identifier: 7D:6D:90:3E:2A:91:C1:D0:49:07:BD:D0:41:E4:06:69:EB:AE:CB:C2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A2ADBD478194F48D1DEFA4380C48 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fW2QPiqRwdBJB73QQeQGaeuuy8I.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209554 IP address blocks: 31.58.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a2:ad:bd:47:81:94:f4:8d:1d:ef:a4:38:0c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d6d903e2a91c1d04907bdd041e40669ebaecbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:84:9a:0d:cc:a6:d8:78:51:13:fa:09:19: 1d:54:42:24:d9:31:0e:7a:b8:f2:90:a9:7a:eb:67: e2:f5:5a:eb:13:7c:6f:95:67:bb:15:fc:6f:1b:46: 96:c8:6c:d2:f1:87:7a:4b:6b:7b:97:cf:cb:2d:1f: 77:b0:7c:88:94:2e:73:51:e3:9e:ab:84:9d:b5:34: c5:4a:36:ee:18:31:08:7b:58:eb:fa:d1:18:ab:17: b1:85:24:f7:4f:8e:18:25:70:b3:15:f1:2c:0b:7c: d5:c8:8b:ef:03:ad:02:cb:25:4c:80:6e:9b:7e:21: 97:02:42:f7:1b:8a:d4:0e:77:27:16:b4:ff:ab:59: 90:ec:5d:82:46:7d:0a:18:8f:ec:98:64:c0:d8:90: f9:81:ce:6f:99:08:0b:5f:98:f7:21:b9:ca:ae:db: bd:01:13:48:cd:ce:25:2e:97:20:58:b5:99:47:d0: e7:4d:20:26:1b:2a:a2:ae:b6:9c:fc:80:2b:f1:d0: 1f:4d:39:66:68:05:f7:70:76:66:45:93:b2:88:8e: ab:dd:24:a9:1b:5b:61:f3:25:01:47:ab:9c:5e:9e: 59:69:f0:05:b2:76:49:88:25:4b:cc:7f:57:6e:be: b6:62:8d:47:f7:74:5e:70:d8:56:8b:48:f3:46:98: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6D:90:3E:2A:91:C1:D0:49:07:BD:D0:41:E4:06:69:EB:AE:CB:C2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fW2QPiqRwdBJB73QQeQGaeuuy8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.222.0/23 Signature Algorithm: sha256WithRSAEncryption 98:0a:dc:9a:dc:76:4b:61:9c:ac:f8:a1:fb:e8:31:78:73:d9: f2:9b:5e:60:d8:37:83:f3:7c:be:b4:ee:e7:2a:f2:6a:68:fc: 14:6e:d0:0e:f4:dd:56:9f:08:3c:c1:11:c7:3d:7d:b1:70:d5: f4:62:c4:2a:d0:01:06:6f:91:ed:6b:9a:76:97:0e:c3:37:93: b7:25:89:05:20:63:78:c0:2d:ed:91:b8:fd:26:bc:b1:3f:a4: 92:11:12:ad:32:e0:71:39:73:fe:83:bd:86:c2:b1:8c:3d:96: f2:17:5f:27:da:45:c2:85:06:22:1d:d7:d0:fb:9b:dd:a0:fa: dc:4f:18:d4:88:25:87:41:12:89:cb:f5:54:93:81:f8:b7:61: f5:8f:29:50:00:e2:86:a9:93:98:fd:14:c8:64:93:a5:bb:58: e1:a0:0c:91:06:99:35:2c:a1:c2:a4:52:be:e9:7f:68:0e:c3: 3a:48:d2:5f:a8:0b:97:d7:66:ef:bf:1e:0c:b6:b9:dc:c6:fa: 96:5e:54:fc:2a:8c:00:e6:10:45:65:01:e0:38:df:64:b8:3b: 19:c7:d1:27:a0:cb:2c:84:71:22:66:92:af:c9:2f:2e:7c:29: b9:d7:9c:5c:c7:95:44:97:32:85:dd:52:0e:37:e4:9d:49:bb: f2:89:f8:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKKtvUeBlPSNHe+kOAxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDZkOTAzZTJhOTFjMWQwNDkwN2JkZDA0MWU0MDY2OWViYWVjYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWSEmg3Mpth4URP6CRkdVEIk2TEO erjykKl662fi9VrrE3xvlWe7FfxvG0aWyGzS8Yd6S2t7l8/LLR93sHyIlC5zUeOe q4SdtTTFSjbuGDEIe1jr+tEYqxexhST3T44YJXCzFfEsC3zVyIvvA60CyyVMgG6b fiGXAkL3G4rUDncnFrT/q1mQ7F2CRn0KGI/smGTA2JD5gc5vmQgLX5j3IbnKrtu9 ARNIzc4lLpcgWLWZR9DnTSAmGyqirrac/IAr8dAfTTlmaAX3cHZmRZOyiI6r3SSp G1th8yUBR6ucXp5ZafAFsnZJiCVLzH9Xbr62Yo1H93RecNhWi0jzRpi0SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1tkD4qkcHQSQe90EHkBmnrrsvCMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZlcyUVBpcVJ3ZEJKQjczUVFlUUdhZXV1eThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzreMA0G CSqGSIb3DQEBCwUAA4IBAQCYCtya3HZLYZys+KH76DF4c9nym15g2DeD83y+tO7n KvJqaPwUbtAO9N1Wnwg8wRHHPX2xcNX0YsQq0AEGb5Hta5p2lw7DN5O3JYkFIGN4 wC3tkbj9JryxP6SSERKtMuBxOXP+g72GwrGMPZbyF18n2kXChQYiHdfQ+5vdoPrc TxjUiCWHQRKJy/VUk4H4t2H1jylQAOKGqZOY/RTIZJOlu1jhoAyRBpk1LKHCpFK+ 6X9oDsM6SNJfqAuX12bvvx4MtrncxvqWXlT8KowA5hBFZQHgON9kuDsZx9EnoMss hHEiZpKvyS8ufCm515xcx5VElzKF3VION+SdSbvyifg+ -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:45 2026 by rpki-client