This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f_l8vhGXx1-rsAkQM4ElSCZUygs.roa File: f_l8vhGXx1-rsAkQM4ElSCZUygs.roa (raw, json) Hash identifier: Oyb9AJlU8FPfmxcVY54bcERThVKtona0xs7MU0Ip9sM= Subject key identifier: 7F:F9:7C:BE:11:97:C7:5F:AB:B0:09:10:33:81:25:48:26:54:CA:0B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DF07BAA430186914A0571C3F9A09 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f_l8vhGXx1-rsAkQM4ElSCZUygs.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395839 IP address blocks: 31.57.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:df:07:ba:a4:30:18:69:14:a0:57:1c:3f:9a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ff97cbe1197c75fabb00910338125482654ca0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:e9:1a:7f:1b:a6:d7:06:8c:0a:4c:da:87: 39:e2:0c:47:db:27:f1:7a:18:b0:f9:bb:02:a6:d5: f6:d7:1d:c6:bf:e1:a8:d2:00:bd:dc:8a:56:58:dc: 2a:ee:1b:04:40:26:50:c4:c1:f9:73:a7:ff:f0:44: 40:15:ad:c5:ad:ae:eb:8e:8c:f6:65:5e:65:1a:61: b5:9e:4a:f9:e8:04:dc:b7:42:ad:ed:a2:2b:86:47: 52:05:a9:06:41:03:12:0a:d4:ba:db:b6:95:cc:89: aa:13:18:a3:7c:49:36:d5:49:b9:9d:ae:0d:9a:e2: 8a:3a:df:84:dd:c4:42:12:c4:26:a8:79:b6:e1:4e: 80:4c:52:ef:0d:0f:52:02:9d:d9:ec:db:4a:94:5c: 35:8f:82:96:3f:0a:87:d8:06:21:ef:38:a5:ce:fa: 45:b0:d7:2c:e1:ab:b6:83:46:3d:df:03:d7:f8:dd: 67:25:d7:74:b9:7a:f3:c6:04:cf:ee:0a:7c:f5:ab: a7:37:ce:6f:58:de:7c:e7:32:eb:e5:2d:b5:bf:d9: ac:c0:57:74:e2:39:db:5e:b0:eb:c8:66:9a:cf:c6: fb:77:0e:45:5b:4e:8d:97:d8:fc:5e:71:40:5c:11: 29:c5:e4:46:a8:cf:bb:97:41:77:8e:34:96:c6:d5: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F9:7C:BE:11:97:C7:5F:AB:B0:09:10:33:81:25:48:26:54:CA:0B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f_l8vhGXx1-rsAkQM4ElSCZUygs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.255.0/24 Signature Algorithm: sha256WithRSAEncryption 40:b9:7e:17:27:ad:eb:a3:45:1d:26:09:a1:8c:ce:32:2b:89: 4c:b7:c7:7b:23:ee:0e:3b:37:de:42:06:04:25:95:12:db:04: c5:29:45:39:b1:74:73:66:be:37:04:26:55:f4:4c:42:4a:3e: 41:f9:40:9b:7b:7b:9b:1d:9e:c5:35:45:a6:ca:a5:fe:1e:7d: 5a:a7:2d:fb:34:27:74:83:77:97:60:46:f1:a5:5d:32:7e:b2: f6:0c:0d:e0:ab:d5:ab:be:64:e7:b1:c3:1c:6c:44:f2:01:80: b9:84:46:08:96:01:0f:03:c9:30:ed:c7:3d:09:10:ca:32:a0: 2f:95:05:48:20:81:d9:6a:8b:b3:fa:3f:c2:98:59:83:49:b9: 58:9d:2c:24:75:12:89:ad:aa:d1:b6:28:52:9c:46:6a:dd:21: 9c:10:bc:88:ba:7c:cb:b7:ae:df:37:67:c7:c9:d0:00:22:da: 88:c2:80:a0:ee:d1:9d:79:d9:dd:ed:68:bb:70:23:4e:ad:23: de:df:b3:58:70:8e:aa:13:c6:86:92:eb:6d:25:f8:12:47:95: 41:b5:ec:b6:d6:9f:9f:26:3d:af:d9:8f:f4:ca:f3:a1:b0:f2: e4:2a:81:da:85:e6:79:80:dc:89:31:8e:d0:bc:21:00:40:7c: eb:93:d6:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hN8HuqQwGGkUoFccP5oJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmY5N2NiZTExOTdjNzVmYWJiMDA5MTAzMzgxMjU0ODI2NTRjYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VPpGn8bptcGjApM2oc54gxH2yfx ehiw+bsCptX21x3Gv+Go0gC93IpWWNwq7hsEQCZQxMH5c6f/8ERAFa3Fra7rjoz2 ZV5lGmG1nkr56ATct0Kt7aIrhkdSBakGQQMSCtS627aVzImqExijfEk21Um5na4N muKKOt+E3cRCEsQmqHm24U6ATFLvDQ9SAp3Z7NtKlFw1j4KWPwqH2AYh7zilzvpF sNcs4au2g0Y93wPX+N1nJdd0uXrzxgTP7gp89aunN85vWN585zLr5S21v9mswFd0 4jnbXrDryGaaz8b7dw5FW06Nl9j8XnFAXBEpxeRGqM+7l0F3jjSWxtXthwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/5fL4Rl8dfq7AJEDOBJUgmVMoLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZl9sOHZoR1h4MS1yc0FrUU00RWxTQ1pVeWdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzn/MA0G CSqGSIb3DQEBCwUAA4IBAQBAuX4XJ63ro0UdJgmhjM4yK4lMt8d7I+4OOzfeQgYE JZUS2wTFKUU5sXRzZr43BCZV9ExCSj5B+UCbe3ubHZ7FNUWmyqX+Hn1apy37NCd0 g3eXYEbxpV0yfrL2DA3gq9WrvmTnscMcbETyAYC5hEYIlgEPA8kw7cc9CRDKMqAv lQVIIIHZaouz+j/CmFmDSblYnSwkdRKJrarRtihSnEZq3SGcELyIunzLt67fN2fH ydAAItqIwoCg7tGdednd7Wi7cCNOrSPe37NYcI6qE8aGkuttJfgSR5VBtey21p+f Jj2v2Y/0yvOhsPLkKoHaheZ5gNyJMY7QvCEAQHzrk9bx -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:36 2026 by rpki-client