This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/goWneTy8EdAmTrkusw991njvmlU.roa File: goWneTy8EdAmTrkusw991njvmlU.roa (raw, json) Hash identifier: YPEvc6f4VOBUp5thH9HtMqpoAkg7P+HNPgB2lUShkSc= Subject key identifier: 82:85:A7:79:3C:BC:11:D0:26:4E:B9:2E:B3:0F:7D:D6:78:EF:9A:55 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A9CC2B81B809D47B31B1FB4AE6A5CE478 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/goWneTy8EdAmTrkusw991njvmlU.roa Signing time: Wed 19 Nov 2025 15:36:37 +0000 ROA not before: Wed 19 Nov 2025 15:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 31.56.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:c2:b8:1b:80:9d:47:b3:1b:1f:b4:ae:6a:5c:e4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 19 15:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8285a7793cbc11d0264eb92eb30f7dd678ef9a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:3c:83:13:69:df:a0:06:59:8b:79:48:87: 3f:ab:06:7a:74:d8:eb:99:40:52:04:ab:dd:ca:18: c4:9d:99:04:88:98:db:e9:7f:02:bc:08:ad:10:e7: 97:ac:b5:dc:f3:ec:17:50:9f:82:b6:0d:01:6c:e1: 16:bf:96:a4:18:b9:75:62:dd:dc:b5:80:97:69:78: 86:7a:7d:5c:10:b0:80:83:de:de:bc:8c:91:20:75: 11:d4:1b:b0:df:27:84:ff:bc:ca:02:b4:ef:61:ef: 80:10:d2:2c:8c:a9:3c:42:a5:f9:d3:7c:b6:0d:0c: 81:9b:4c:15:42:de:76:ec:02:54:b1:19:7d:50:ff: b2:b4:01:06:29:84:3f:31:4c:56:06:b8:8f:94:01: f2:75:62:bb:6b:1f:75:c8:98:c8:3a:29:f3:10:57: 12:f0:ef:cd:8b:11:63:36:1a:83:f0:22:67:3f:4b: 92:db:9a:aa:98:97:39:9d:fa:9a:66:19:33:19:4a: bf:03:54:9e:10:3c:d6:37:35:4f:e9:f7:4d:90:c4: 49:ce:42:5d:42:84:c7:55:ec:01:ce:9a:a0:68:02: ea:47:26:7a:5b:5a:23:c7:03:b7:43:93:5a:b6:7f: a7:da:1f:8c:04:f1:51:c5:27:78:60:0a:97:8c:73: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:85:A7:79:3C:BC:11:D0:26:4E:B9:2E:B3:0F:7D:D6:78:EF:9A:55 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/goWneTy8EdAmTrkusw991njvmlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.218.0/24 Signature Algorithm: sha256WithRSAEncryption 42:2c:59:75:29:d8:ef:7c:32:37:0f:3d:03:e2:73:83:05:87: a5:59:52:95:d9:ef:4f:0e:50:0d:04:e4:53:26:86:33:56:0b: 74:ec:95:ca:e8:24:05:3d:56:9d:27:1f:30:79:65:eb:fc:07: 34:c7:f1:71:8c:3a:38:87:73:57:1c:a4:f8:80:36:f7:ef:a8: ae:dd:04:d8:ca:32:2d:e9:04:70:92:1b:69:6f:67:e4:29:3b: 01:2c:fd:4d:aa:30:f0:e0:9b:ef:74:1d:a1:f2:76:4b:92:02: 6d:ce:74:84:fe:53:8b:00:b8:d6:f3:64:57:7e:8a:15:f3:0a: 75:c3:f9:37:b8:cb:66:be:34:33:f7:dd:8e:02:e7:33:e8:67: bd:fd:dd:95:09:c5:3f:82:1c:ff:d7:d6:7d:d7:f2:09:52:b4: 89:02:7d:e0:a6:b9:ee:a5:3a:c0:fd:61:46:8a:47:95:b4:43: 25:4c:90:a9:53:cc:c7:a8:da:7d:64:a9:c2:79:7d:ee:1f:bb: ea:a7:d1:4b:d1:59:a3:c4:d5:f2:1d:a1:ca:b7:49:5d:a4:41: 93:13:af:15:72:6a:cd:b3:8e:28:4f:3a:80:c6:4b:ae:c0:a0: f8:15:f8:1c:ad:b6:05:c2:a9:8f:92:a3:69:eb:15:0f:88:60: 78:0e:a2:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcwrgbgJ1HsxsftK5qXOR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE5MTUzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjg1YTc3OTNjYmMxMWQwMjY0ZWI5MmViMzBmN2RkNjc4ZWY5YTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLo8gxNp36AGWYt5SIc/qwZ6dNjr mUBSBKvdyhjEnZkEiJjb6X8CvAitEOeXrLXc8+wXUJ+Ctg0BbOEWv5akGLl1Yt3c tYCXaXiGen1cELCAg97evIyRIHUR1Buw3yeE/7zKArTvYe+AENIsjKk8QqX503y2 DQyBm0wVQt527AJUsRl9UP+ytAEGKYQ/MUxWBriPlAHydWK7ax91yJjIOinzEFcS 8O/NixFjNhqD8CJnP0uS25qqmJc5nfqaZhkzGUq/A1SeEDzWNzVP6fdNkMRJzkJd QoTHVewBzpqgaALqRyZ6W1ojxwO3Q5Natn+n2h+MBPFRxSd4YAqXjHNPxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIKFp3k8vBHQJk65LrMPfdZ475pVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZ29XbmVUeThFZEFtVHJrdXN3OTkxbmp2bWxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzjaMA0G CSqGSIb3DQEBCwUAA4IBAQBCLFl1KdjvfDI3Dz0D4nODBYelWVKV2e9PDlANBORT JoYzVgt07JXK6CQFPVadJx8weWXr/Ac0x/FxjDo4h3NXHKT4gDb376iu3QTYyjIt 6QRwkhtpb2fkKTsBLP1NqjDw4JvvdB2h8nZLkgJtznSE/lOLALjW82RXfooV8wp1 w/k3uMtmvjQz992OAucz6Ge9/d2VCcU/ghz/19Z91/IJUrSJAn3gprnupTrA/WFG ikeVtEMlTJCpU8zHqNp9ZKnCeX3uH7vqp9FL0VmjxNXyHaHKt0ldpEGTE68VcmrN s44oTzqAxkuuwKD4FfgcrbYFwqmPkqNp6xUPiGB4DqIo -----END CERTIFICATE-----Generated at Fri Nov 21 07:29:11 2025 by rpki-client