This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fxkYcH-DJISnwmy7Epndq8N-WFY.roa File: fxkYcH-DJISnwmy7Epndq8N-WFY.roa (raw, json) Hash identifier: OUybE0C5ji0C//HySW8KQ9zgz7giwH0m1iNF9vjymcI= Subject key identifier: 7F:19:18:70:7F:83:24:84:A7:C2:6C:BB:12:99:DD:AB:C3:7E:58:56 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8469C4746FC4A087DAFE62C560540C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fxkYcH-DJISnwmy7Epndq8N-WFY.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48014 IP address blocks: 31.56.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:69:c4:74:6f:c4:a0:87:da:fe:62:c5:60:54:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f1918707f832484a7c26cbb1299ddabc37e5856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f9:4a:ad:0f:6b:01:25:61:4e:a0:95:cb:31: 48:86:51:f0:c2:19:79:a0:3c:5a:44:ed:49:dd:ad: 6d:e6:5f:7f:bb:cf:7b:9b:6a:d6:d5:6e:c8:cb:f0: 62:a5:d1:5a:5a:b7:b6:36:76:99:4c:45:d8:df:45: fc:40:f4:b3:9e:a7:99:ae:09:9a:26:0d:25:11:e7: 5d:a5:af:df:e8:bb:1e:df:42:b2:f0:c0:57:14:30: 7e:97:78:48:00:22:e6:f5:3e:cf:e2:9c:3c:f9:29: b7:34:d9:52:e1:7a:16:46:57:83:a8:f9:6f:46:45: c6:69:ce:c8:46:b1:eb:62:3b:b5:43:26:10:10:98: 5f:db:0a:d1:d8:02:ce:0a:54:7e:ca:c3:41:58:94: 5b:cd:45:1a:12:c5:a6:49:3e:22:5d:f6:2a:59:30: 54:d6:7e:9b:17:82:15:4d:64:c9:89:3f:ed:ca:33: c1:01:30:6c:5f:cf:6c:6e:ce:31:b3:32:83:3b:e7: f7:da:4c:ef:ca:3c:bd:3a:77:1e:3c:cf:05:f2:97: ad:38:85:de:f7:59:5e:2a:af:26:13:99:01:b4:af: e6:80:70:8d:45:28:04:47:d8:a3:f8:65:c6:7c:46: fb:2d:d4:de:d1:5a:59:72:91:fe:7c:a5:cf:ff:14: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:19:18:70:7F:83:24:84:A7:C2:6C:BB:12:99:DD:AB:C3:7E:58:56 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fxkYcH-DJISnwmy7Epndq8N-WFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.100.0/24 Signature Algorithm: sha256WithRSAEncryption 43:67:e7:a5:37:26:63:8d:f7:5e:06:a7:42:0d:3c:9e:ba:1d: 8d:31:60:44:e4:95:5f:4f:d9:34:f4:01:ac:06:90:77:c5:f6: b6:3c:b4:6f:e1:e3:91:30:50:e8:ec:6d:0f:e1:68:b6:38:e9: 66:c9:cf:dd:f0:b9:a4:01:fc:46:0b:36:ba:23:81:cd:c9:e5: 4b:b0:4e:63:13:30:ab:2e:18:f3:54:3a:f8:74:83:96:94:73: 11:30:11:ee:42:76:84:be:0b:b8:6b:ef:1f:75:81:5f:dc:2e: cb:be:86:e3:1a:79:c3:4b:79:00:d2:d1:7c:04:c7:8b:02:29: cb:8d:7b:6d:40:c1:3f:ad:0d:9e:ed:0f:d2:46:90:c5:a8:b2: f9:17:df:19:1f:27:0d:b2:a0:94:09:fe:66:f2:99:53:7b:4d: ce:13:09:27:33:35:38:95:bd:23:29:87:59:d1:60:2c:d6:71: b7:bb:2f:a6:42:7a:74:81:53:55:31:ab:34:01:4e:e4:d2:12: a0:74:3a:23:70:8e:f5:d4:3f:3b:24:d2:15:cf:ea:e3:d6:15: 88:a2:93:57:22:9e:11:cb:8f:f1:56:32:99:ba:99:8c:06:61: 32:e3:87:2a:70:d0:d3:73:f2:58:83:fd:5e:c6:f7:72:94:08: 31:4a:5c:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGnEdG/EoIfa/mLFYFQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjE5MTg3MDdmODMyNDg0YTdjMjZjYmIxMjk5ZGRhYmMzN2U1ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vlKrQ9rASVhTqCVyzFIhlHwwhl5 oDxaRO1J3a1t5l9/u897m2rW1W7Iy/BipdFaWre2NnaZTEXY30X8QPSznqeZrgma Jg0lEeddpa/f6Lse30Ky8MBXFDB+l3hIACLm9T7P4pw8+Sm3NNlS4XoWRleDqPlv RkXGac7IRrHrYju1QyYQEJhf2wrR2ALOClR+ysNBWJRbzUUaEsWmST4iXfYqWTBU 1n6bF4IVTWTJiT/tyjPBATBsX89sbs4xszKDO+f32kzvyjy9OncePM8F8petOIXe 91leKq8mE5kBtK/mgHCNRSgER9ij+GXGfEb7LdTe0VpZcpH+fKXP/xSjTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8ZGHB/gySEp8JsuxKZ3avDflhWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZnhrWWNILURKSVNud215N0VwbmRxOE4tV0ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhkMA0G CSqGSIb3DQEBCwUAA4IBAQBDZ+elNyZjjfdeBqdCDTyeuh2NMWBE5JVfT9k09AGs BpB3xfa2PLRv4eORMFDo7G0P4Wi2OOlmyc/d8LmkAfxGCza6I4HNyeVLsE5jEzCr LhjzVDr4dIOWlHMRMBHuQnaEvgu4a+8fdYFf3C7LvobjGnnDS3kA0tF8BMeLAinL jXttQME/rQ2e7Q/SRpDFqLL5F98ZHycNsqCUCf5m8plTe03OEwknMzU4lb0jKYdZ 0WAs1nG3uy+mQnp0gVNVMas0AU7k0hKgdDojcI711D87JNIVz+rj1hWIopNXIp4R y4/xVjKZupmMBmEy44cqcNDTc/JYg/1exvdylAgxSlz8 -----END CERTIFICATE-----Generated at Mon Jan 5 14:39:15 2026 by rpki-client