This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/geJ4Dxbdy1qGFA2WaA3xczkDt00.roa File: geJ4Dxbdy1qGFA2WaA3xczkDt00.roa (raw, json) Hash identifier: CXNmN6hMWSB6ONAqePENDiLcEzDht1fau5/5L0HKTIY= Subject key identifier: 81:E2:78:0F:16:DD:CB:5A:86:14:0D:96:68:0D:F1:73:39:03:B7:4D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CA23F309EEC2B1DD1B1A80DEA9BE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/geJ4Dxbdy1qGFA2WaA3xczkDt00.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215026 IP address blocks: 31.57.201.0/24 maxlen: 24 31.57.207.0/24 maxlen: 24 31.59.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ca:23:f3:09:ee:c2:b1:dd:1b:1a:80:de:a9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81e2780f16ddcb5a86140d96680df1733903b74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:ee:bf:d8:0a:5c:25:c9:53:6e:db:88:d8: c8:fe:4b:51:ac:f4:34:8e:69:2f:cf:b1:6e:2f:c9: 4d:ec:62:25:bc:5f:6e:e4:3a:ef:7c:0a:ef:45:b6: 4b:8b:8a:83:31:9b:5e:53:73:ac:6e:ff:12:ac:cc: 95:bb:55:60:07:5f:7a:78:e3:b8:5e:4f:73:54:8e: fb:55:07:97:52:74:4b:ad:57:6c:b9:51:51:93:c5: 0b:c7:73:31:f7:74:03:87:78:ff:c1:0a:97:2e:ac: f9:24:f3:79:29:87:19:9d:b4:0e:ee:3e:10:fc:d8: 5a:8c:a4:3a:20:0e:16:9b:2f:37:af:c5:6d:5d:b4: f1:a5:6e:27:96:f7:0c:85:38:e4:2e:aa:8f:46:29: 2d:75:23:a5:df:8d:f8:97:96:bb:5f:75:21:20:bb: 29:50:7d:13:0b:e1:e4:c0:1e:e0:70:03:3d:ba:bf: e7:39:1a:32:4c:ee:c2:f8:fa:5c:10:e8:2b:64:20: a7:56:70:e2:60:f6:48:4b:10:bb:78:5c:f2:12:89: 6f:71:40:2a:05:9a:6a:7f:b7:19:35:a3:46:62:d1: cb:4b:fd:de:3d:11:f3:90:3f:52:9d:48:00:84:f9: e3:51:56:db:88:d2:03:9f:39:b1:0a:e5:5e:5d:84: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E2:78:0F:16:DD:CB:5A:86:14:0D:96:68:0D:F1:73:39:03:B7:4D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/geJ4Dxbdy1qGFA2WaA3xczkDt00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.201.0/24 31.57.207.0/24 31.59.98.0/24 Signature Algorithm: sha256WithRSAEncryption 16:c1:2c:a7:db:fe:db:ee:34:43:08:ba:83:db:9c:b6:e6:d4: 1a:c7:31:8d:98:0e:1e:91:d7:a8:e2:90:fe:9d:a0:6c:3f:36: 45:9a:87:01:fa:81:db:a1:10:1c:08:1e:52:2a:76:83:91:7d: e5:ad:c1:4e:df:93:a2:1c:9b:42:39:93:66:b0:f7:4b:5a:7a: f9:c1:ad:08:4b:25:8c:de:56:9c:47:d5:7a:73:be:90:f0:60: ed:86:e7:bd:5e:ae:11:d3:2b:2c:dd:bc:e6:cc:a0:83:68:9f: fe:4e:0f:53:36:64:86:a0:42:2f:a0:ee:53:6c:d3:6c:a5:c4: bd:f4:dd:7e:9d:48:24:f7:df:6d:75:46:33:b7:f4:25:f7:86: 7c:1f:57:9d:5a:b2:95:0c:4a:48:7c:4f:ba:6c:5c:79:d2:9a: 55:68:d3:74:29:dd:d7:a7:f1:df:25:50:48:0c:7e:0c:db:fe: 94:10:83:ef:4a:f2:25:7b:b3:e8:34:e0:9e:ab:54:de:14:b5: 7f:c2:1b:68:78:a4:fd:e7:0e:07:a8:70:d7:8e:f9:a6:1a:ac: af:82:66:1e:a8:fc:1e:f3:d6:a6:d3:84:be:89:4d:df:f0:2f: 17:10:d1:c3:36:2e:f8:a1:e5:eb:2f:1f:e9:39:52:c2:0c:af: 5c:e8:b8:4b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hMoj8wnuwrHdGxqA3qm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWUyNzgwZjE2ZGRjYjVhODYxNDBkOTY2ODBkZjE3MzM5MDNiNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm93uv9gKXCXJU27biNjI/ktRrPQ0 jmkvz7FuL8lN7GIlvF9u5DrvfArvRbZLi4qDMZteU3Osbv8SrMyVu1VgB196eOO4 Xk9zVI77VQeXUnRLrVdsuVFRk8ULx3Mx93QDh3j/wQqXLqz5JPN5KYcZnbQO7j4Q /NhajKQ6IA4Wmy83r8VtXbTxpW4nlvcMhTjkLqqPRiktdSOl3434l5a7X3UhILsp UH0TC+HkwB7gcAM9ur/nORoyTO7C+PpcEOgrZCCnVnDiYPZISxC7eFzyEolvcUAq BZpqf7cZNaNGYtHLS/3ePRHzkD9SnUgAhPnjUVbbiNIDnzmxCuVeXYSlKwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIHieA8W3ctahhQNlmgN8XM5A7dNMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZ2VKNER4YmR5MXFHRkEyV2FBM3hjemtEdDAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHznJAwQA HznPAwQAHztiMA0GCSqGSIb3DQEBCwUAA4IBAQAWwSyn2/7b7jRDCLqD25y25tQa xzGNmA4ekdeo4pD+naBsPzZFmocB+oHboRAcCB5SKnaDkX3lrcFO35OiHJtCOZNm sPdLWnr5wa0ISyWM3lacR9V6c76Q8GDthue9Xq4R0yss3bzmzKCDaJ/+Tg9TNmSG oEIvoO5TbNNspcS99N1+nUgk999tdUYzt/Ql94Z8H1edWrKVDEpIfE+6bFx50ppV aNN0Kd3Xp/HfJVBIDH4M2/6UEIPvSvIle7PoNOCeq1TeFLV/whtoeKT95w4HqHDX jvmmGqyvgmYeqPwe89am04S+iU3f8C8XENHDNi74oeXrLx/pOVLCDK9c6LhL -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:34 2026 by rpki-client