This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gnsoffNp3DZAfde1LiZR7lGdwH4.roa File: gnsoffNp3DZAfde1LiZR7lGdwH4.roa (raw, json) Hash identifier: YX4QowrH/Px7Nz6s+PbHY4dOY1schJn1y/TNhTXt93g= Subject key identifier: 82:7B:28:7D:F3:69:DC:36:40:7D:D7:B5:2E:26:51:EE:51:9D:C0:7E Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84820FC888950A889B4AB54C0FE7D1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gnsoffNp3DZAfde1LiZR7lGdwH4.roa Signing time: Fri 02 Jan 2026 16:22:28 +0000 ROA not before: Fri 02 Jan 2026 16:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140042 IP address blocks: 31.57.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:82:0f:c8:88:95:0a:88:9b:4a:b5:4c:0f:e7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827b287df369dc36407dd7b52e2651ee519dc07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:ed:a6:f9:19:7b:73:25:24:35:72:96:ac: c4:a0:4f:e4:67:f3:6d:cd:81:11:32:eb:72:19:a8: 68:de:ae:aa:4a:cb:3d:78:51:9c:9e:7a:6d:f3:43: eb:d3:53:1d:bc:fb:01:55:8c:f0:0c:49:92:cf:0b: 2d:7d:81:6e:52:94:81:4a:11:24:de:0e:82:2d:2e: e0:0c:83:f6:2b:01:a7:c9:80:f9:b2:44:f1:7b:98: e4:e6:4e:70:cf:97:8f:37:0b:bb:99:75:9f:2a:32: 85:cd:40:36:7d:02:17:c1:b1:03:1c:3e:0a:29:4d: 1b:11:88:45:84:89:93:24:70:35:05:42:72:88:24: 41:ea:a5:da:97:b9:a8:df:10:ce:21:c7:ff:b9:67: 9a:ed:ea:58:e4:a3:91:94:59:c9:3e:c8:3a:8b:4a: fd:2f:b5:a1:8f:69:f6:15:c9:ca:15:a3:d2:4d:9d: 05:0a:37:61:90:bc:0c:d1:23:bd:ae:b7:06:43:7d: 2e:e2:22:93:03:d7:d0:a0:66:ba:42:b0:ab:9a:6c: 7d:c6:9d:76:11:1d:27:1a:ee:e2:f1:a7:aa:12:03: cf:ce:12:ba:45:de:64:a8:2b:ee:a2:d1:60:7b:3f: 25:7d:6c:ac:fa:a9:32:eb:2a:bc:8f:d0:ad:4b:78: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7B:28:7D:F3:69:DC:36:40:7D:D7:B5:2E:26:51:EE:51:9D:C0:7E X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gnsoffNp3DZAfde1LiZR7lGdwH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.137.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:76:53:da:eb:ac:ee:42:d4:e1:f4:55:ea:00:81:13:18:2e: 2d:11:b8:c5:98:9b:26:39:3c:c5:a6:b7:52:3b:a4:4f:05:40: 22:ef:60:e7:35:35:89:51:aa:5d:3a:b0:7e:2e:2c:5e:b6:90: 4b:40:70:ea:d0:d0:6f:c1:bb:55:61:23:76:ca:a9:08:28:0f: 5f:38:67:6a:70:cf:d7:65:eb:70:4e:d7:5c:3f:5f:27:96:15: 7b:60:50:d7:0c:9c:6d:60:6b:f1:9b:b6:f2:5d:c2:3f:81:d1: 1c:5b:6b:d5:5d:5d:60:2a:11:a7:9a:e0:4e:5c:3b:34:7b:67: 8a:24:0b:ff:b6:54:17:5f:1c:c7:e2:22:c9:d3:b7:7c:a1:43: 83:74:79:62:27:aa:d4:eb:28:5d:e2:d5:e3:6f:68:66:52:1e: 33:b1:2d:26:f8:8a:13:7e:8e:26:66:df:57:82:f8:6c:3a:f6: 8b:01:05:d4:a0:a6:e3:84:fe:c8:c6:86:14:59:7a:ea:60:6b: 4f:40:ac:dd:0c:60:05:c3:ab:45:a3:23:ad:d3:af:9f:d1:91: f6:02:70:c5:63:9c:90:f8:b7:fe:e7:b6:67:2f:9e:a1:f6:f0: 84:4a:c5:40:68:08:ae:28:d7:58:8b:fe:e4:7d:dd:00:a9:43: 40:1c:32:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIIPyIiVCoibSrVMD+fRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjdiMjg3ZGYzNjlkYzM2NDA3ZGQ3YjUyZTI2NTFlZTUxOWRjMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr17tpvkZe3MlJDVylqzEoE/kZ/Nt zYERMutyGaho3q6qSss9eFGcnnpt80Pr01MdvPsBVYzwDEmSzwstfYFuUpSBShEk 3g6CLS7gDIP2KwGnyYD5skTxe5jk5k5wz5ePNwu7mXWfKjKFzUA2fQIXwbEDHD4K KU0bEYhFhImTJHA1BUJyiCRB6qXal7mo3xDOIcf/uWea7epY5KORlFnJPsg6i0r9 L7Whj2n2FcnKFaPSTZ0FCjdhkLwM0SO9rrcGQ30u4iKTA9fQoGa6QrCrmmx9xp12 ER0nGu7i8aeqEgPPzhK6Rd5kqCvuotFgez8lfWys+qky6yq8j9CtS3jNiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJ7KH3zadw2QH3XtS4mUe5RncB+MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZ25zb2ZmTnAzRFpBZmRlMUxpWlI3bEdkd0g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmJMA0G CSqGSIb3DQEBCwUAA4IBAQBOdlPa66zuQtTh9FXqAIETGC4tEbjFmJsmOTzFprdS O6RPBUAi72DnNTWJUapdOrB+LixetpBLQHDq0NBvwbtVYSN2yqkIKA9fOGdqcM/X ZetwTtdcP18nlhV7YFDXDJxtYGvxm7byXcI/gdEcW2vVXV1gKhGnmuBOXDs0e2eK JAv/tlQXXxzH4iLJ07d8oUODdHliJ6rU6yhd4tXjb2hmUh4zsS0m+IoTfo4mZt9X gvhsOvaLAQXUoKbjhP7IxoYUWXrqYGtPQKzdDGAFw6tFoyOt06+f0ZH2AnDFY5yQ +Lf+57ZnL56h9vCESsVAaAiuKNdYi/7kfd0AqUNAHDLi -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:13 2026 by rpki-client