This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i354puB5qeU_RCietSPSJcmwM2U.roa File: i354puB5qeU_RCietSPSJcmwM2U.roa (raw, json) Hash identifier: Vz3Zwt9SXdbUZzC/hDhEB/3U/fMpwjteuFx9EGL1GT0= Subject key identifier: 8B:7E:78:A6:E0:79:A9:E5:3F:44:28:9E:B5:23:D2:25:C9:B0:33:65 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BB0D51F44E25FF4EB39A6A55592261566 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i354puB5qeU_RCietSPSJcmwM2U.roa Signing time: Mon 12 Jan 2026 06:11:55 +0000 ROA not before: Mon 12 Jan 2026 06:11:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 31.58.169.0/24 maxlen: 24 31.59.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:d5:1f:44:e2:5f:f4:eb:39:a6:a5:55:92:26:15:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 12 06:11:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7e78a6e079a9e53f44289eb523d225c9b03365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:e1:ca:6b:ee:54:3f:fe:03:b6:d3:e5:26: 0e:5d:3c:4a:c4:7c:aa:4d:7c:90:fb:77:4a:7d:26: 21:cf:cf:5b:7b:7e:87:1a:d2:4f:1c:0c:0a:f3:01: 4a:d2:7b:7a:fb:0a:b1:59:ea:47:b0:08:42:86:10: ce:f3:30:45:ef:3f:61:f7:7e:a9:2d:87:56:8f:19: 2b:c2:07:67:fa:86:2e:ad:0c:e1:4e:fe:55:33:af: ef:41:19:93:f7:5c:a4:ae:ac:9c:58:0b:8a:2a:76: cc:0c:fd:b8:9a:13:f6:58:1e:4e:ae:37:71:43:96: 19:3f:22:83:3c:3f:c3:30:92:a9:49:a2:c2:1b:ec: 6f:d1:2f:f9:6f:bf:26:91:19:40:ac:56:01:07:ed: 34:88:20:89:79:c1:bd:86:b5:3c:7b:59:57:91:48: 79:6d:0b:13:b7:44:3d:32:bc:65:07:50:d9:6a:4d: 07:83:4f:2e:f9:b7:2c:62:2a:f3:71:e0:3f:da:1e: 15:c1:60:60:71:e4:a9:13:ee:01:91:d4:67:84:be: 86:6a:64:47:3d:0e:15:11:1a:09:0f:12:2e:49:fc: c4:b9:91:43:3c:2e:74:4c:5e:b9:ca:d6:0a:f5:fb: 1c:78:5d:4e:22:73:49:ff:6c:cd:29:dc:05:d5:f6: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:78:A6:E0:79:A9:E5:3F:44:28:9E:B5:23:D2:25:C9:B0:33:65 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i354puB5qeU_RCietSPSJcmwM2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.169.0/24 31.59.172.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:c8:e6:21:0d:ce:ce:0a:6c:28:96:28:25:39:92:9a:9d:3c: f0:31:60:6c:d4:21:06:f4:1a:68:ce:1a:3d:da:34:da:e0:a2: cf:53:13:15:b9:37:a9:97:e0:b6:79:4a:68:f1:96:30:4a:06: 8e:dc:a3:8b:c9:c6:36:f6:88:30:5b:27:3c:3d:02:a6:6b:3c: 49:6f:b9:7c:5f:bc:43:a6:a8:09:73:64:fc:25:d9:8b:85:fd: 7c:06:5a:b9:af:70:42:20:c5:95:b5:78:d5:a0:9d:a0:fb:f0: 28:ec:3f:95:3b:d3:51:86:c0:05:e4:35:4a:a8:d2:f0:78:f1: 86:7a:04:88:d1:49:fb:24:c0:4a:5c:55:a7:bc:85:94:ec:50: 3e:87:fd:5c:97:06:e0:02:0e:54:2b:bd:34:37:95:83:de:70: 89:57:ef:79:c1:1f:16:56:6a:bd:5d:a9:57:95:8c:36:91:2f: 6d:cd:9b:57:42:87:5f:98:a8:6c:aa:79:9f:80:df:db:7f:21: 8e:11:d1:f3:88:8f:ae:0c:37:07:ab:f8:b8:a6:79:e2:cd:47: 8d:13:47:cd:9d:be:1e:a5:97:83:d6:41:aa:a1:f4:6f:9d:d4: 8a:da:ee:c7:de:64:89:a6:fc:0d:ae:7f:11:7f:f7:44:48:1e: d2:89:2c:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuw1R9E4l/06zmmpVWSJhVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTEyMDYxMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdlNzhhNmUwNzlhOWU1M2Y0NDI4OWViNTIzZDIyNWM5YjAzMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4jhymvuVD/+A7bT5SYOXTxKxHyq TXyQ+3dKfSYhz89be36HGtJPHAwK8wFK0nt6+wqxWepHsAhChhDO8zBF7z9h936p LYdWjxkrwgdn+oYurQzhTv5VM6/vQRmT91ykrqycWAuKKnbMDP24mhP2WB5Orjdx Q5YZPyKDPD/DMJKpSaLCG+xv0S/5b78mkRlArFYBB+00iCCJecG9hrU8e1lXkUh5 bQsTt0Q9MrxlB1DZak0Hg08u+bcsYirzceA/2h4VwWBgceSpE+4BkdRnhL6GamRH PQ4VERoJDxIuSfzEuZFDPC50TF65ytYK9fsceF1OInNJ/2zNKdwF1fZilQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIt+eKbgeanlP0QonrUj0iXJsDNlMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaTM1NHB1QjVxZVVfUkNpZXRTUFNKY213TTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzqpAwQA HzusMA0GCSqGSIb3DQEBCwUAA4IBAQALyOYhDc7OCmwoliglOZKanTzwMWBs1CEG 9Bpozho92jTa4KLPUxMVuTepl+C2eUpo8ZYwSgaO3KOLycY29ogwWyc8PQKmazxJ b7l8X7xDpqgJc2T8JdmLhf18Blq5r3BCIMWVtXjVoJ2g+/Ao7D+VO9NRhsAF5DVK qNLwePGGegSI0Un7JMBKXFWnvIWU7FA+h/1clwbgAg5UK700N5WD3nCJV+95wR8W Vmq9XalXlYw2kS9tzZtXQodfmKhsqnmfgN/bfyGOEdHziI+uDDcHq/i4pnnizUeN E0fNnb4epZeD1kGqofRvndSK2u7H3mSJpvwNrn8Rf/dESB7SiSyw -----END CERTIFICATE-----Generated at Tue Jan 13 06:59:24 2026 by rpki-client