This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gBXBChd5tS-35ylGTr-Q_ltQ5uQ.roa File: gBXBChd5tS-35ylGTr-Q_ltQ5uQ.roa (raw, json) Hash identifier: ul/3NAWjKxMWmTMidHY5iQ3tqfgTVh7JDS4rnuTvnpE= Subject key identifier: 80:15:C1:0A:17:79:B5:2F:B7:E7:29:46:4E:BF:90:FE:5B:50:E6:E4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8458BE2566661867E9AF8ED919D45B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gBXBChd5tS-35ylGTr-Q_ltQ5uQ.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 31.56.220.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.100.0/24 maxlen: 24 31.57.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:58:be:25:66:66:18:67:e9:af:8e:d9:19:d4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8015c10a1779b52fb7e729464ebf90fe5b50e6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:0a:51:1b:4a:8a:6a:fd:da:b3:1e:c1:8c: e6:24:c6:98:7c:7d:ae:0f:f4:98:ab:3f:d5:81:51: 2a:77:d9:e3:8a:e3:47:09:24:11:99:8d:37:77:a9: 40:9d:ab:93:84:48:73:23:83:47:9d:eb:22:d6:1d: 8a:93:54:a2:4f:ed:30:1c:58:9f:75:c3:17:6c:e3: 42:c3:31:18:50:0a:ab:91:e4:14:de:55:58:f1:d3: 11:6c:2a:0e:25:40:29:24:7c:44:9f:18:a8:4d:77: e1:16:a2:63:cd:da:6f:90:dd:4a:ee:af:70:00:7f: 01:48:ee:55:bf:31:60:5a:e2:08:54:e7:20:46:04: 8a:9e:b9:80:a7:60:11:b6:2d:45:00:eb:a7:45:42: c7:fe:33:58:58:2f:26:55:ea:a4:62:ce:26:a3:bc: f5:ad:f4:8b:a2:de:83:fe:b4:7a:36:4d:ab:21:c4: 4e:cf:7c:4f:c2:d6:f6:5f:08:b9:7a:bd:90:68:fb: af:ad:ba:0e:43:19:82:d5:1b:70:0e:90:94:1c:3f: cd:12:1c:27:9f:16:65:07:7f:5a:fb:c8:64:06:55: 4b:7a:2b:05:65:1f:ab:b4:1a:d8:87:55:d6:76:19: 24:91:4b:96:64:5a:cb:b4:91:0f:77:de:08:f6:1a: 56:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:15:C1:0A:17:79:B5:2F:B7:E7:29:46:4E:BF:90:FE:5B:50:E6:E4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gBXBChd5tS-35ylGTr-Q_ltQ5uQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.220.0/24 31.57.35.0/24 31.57.100.0/24 31.57.228.0/24 Signature Algorithm: sha256WithRSAEncryption ba:3a:66:25:f2:d5:36:46:d3:25:41:6d:fc:42:80:52:57:bd: ea:12:4e:18:a9:5d:f3:6d:d1:90:09:9b:1e:c9:74:cc:7d:e3: 33:2f:8c:c9:ec:46:dd:7c:cd:11:e0:3a:28:8f:25:e5:0d:6f: 55:da:d0:26:f8:17:d3:c1:e8:d2:2b:b3:72:fc:dd:c7:fd:0e: 57:cf:99:17:48:ee:09:fa:ec:c5:bb:6f:37:16:49:8a:90:f0: 22:c7:94:bc:8f:80:9e:e9:1c:c8:90:a5:3c:8e:c4:cc:3d:f6: 83:f0:c8:6d:04:5c:d0:e9:b2:fd:ab:49:d6:03:82:e0:1d:b7: 36:a9:29:02:f6:81:a5:e4:79:b9:74:e6:1e:6e:ac:66:cd:cd: b3:35:2d:91:91:43:33:13:31:8e:c0:7d:9e:1c:cf:9b:a6:86: ed:59:72:b8:2a:5d:d8:5b:5f:fc:27:36:79:4a:bf:81:a0:a6: b0:d6:4f:7a:6c:fa:d9:62:de:fc:7a:73:c7:82:c7:50:bd:ef: 56:57:94:6d:2c:3f:39:d2:43:cc:59:08:ad:b4:34:62:06:d6: 7b:3c:fd:a4:98:08:2b:77:55:15:58:76:9e:87:35:1f:df:4b: d4:a2:a7:22:42:8a:c5:3b:96:d9:d3:ea:62:94:a9:4b:99:40: 05:90:8f:69 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hFi+JWZmGGfpr47ZGdRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDE1YzEwYTE3NzliNTJmYjdlNzI5NDY0ZWJmOTBmZTViNTBlNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMQKURtKimr92rMewYzmJMaYfH2u D/SYqz/VgVEqd9njiuNHCSQRmY03d6lAnauThEhzI4NHnesi1h2Kk1SiT+0wHFif dcMXbONCwzEYUAqrkeQU3lVY8dMRbCoOJUApJHxEnxioTXfhFqJjzdpvkN1K7q9w AH8BSO5VvzFgWuIIVOcgRgSKnrmAp2ARti1FAOunRULH/jNYWC8mVeqkYs4mo7z1 rfSLot6D/rR6Nk2rIcROz3xPwtb2Xwi5er2QaPuvrboOQxmC1RtwDpCUHD/NEhwn nxZlB39a+8hkBlVLeisFZR+rtBrYh1XWdhkkkUuWZFrLtJEPd94I9hpWMQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIAVwQoXebUvt+cpRk6/kP5bUObkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZ0JYQkNoZDV0Uy0zNXlsR1RyLVFfbHRRNXVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzjcAwQA HzkjAwQAHzlkAwQAHznkMA0GCSqGSIb3DQEBCwUAA4IBAQC6OmYl8tU2RtMlQW38 QoBSV73qEk4YqV3zbdGQCZseyXTMfeMzL4zJ7EbdfM0R4DoojyXlDW9V2tAm+BfT wejSK7Ny/N3H/Q5Xz5kXSO4J+uzFu283FkmKkPAix5S8j4Ce6RzIkKU8jsTMPfaD 8MhtBFzQ6bL9q0nWA4LgHbc2qSkC9oGl5Hm5dOYebqxmzc2zNS2RkUMzEzGOwH2e HM+bpobtWXK4Kl3YW1/8JzZ5Sr+BoKaw1k96bPrZYt78enPHgsdQve9WV5RtLD85 0kPMWQittDRiBtZ7PP2kmAgrd1UVWHaehzUf30vUoqciQorFO5bZ0+pilKlLmUAF kI9p -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:05 2026 by rpki-client