This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ib125WwQUki9Hli2mtn7cah4hCw.roa File: ib125WwQUki9Hli2mtn7cah4hCw.roa (raw, json) Hash identifier: i+04RsQpZoe0oiQjCFy+2no9m3c9Udvpl1YjINqFRO8= Subject key identifier: 89:BD:76:E5:6C:10:52:48:BD:1E:58:B6:9A:D9:FB:71:A8:78:84:2C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845DCE038C174E8145D16BCF5D06E4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ib125WwQUki9Hli2mtn7cah4hCw.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 31.56.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5d:ce:03:8c:17:4e:81:45:d1:6b:cf:5d:06:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89bd76e56c105248bd1e58b69ad9fb71a878842c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:07:fb:cc:4e:d0:47:f0:f9:68:2e:93:24: 40:f0:21:f1:da:e9:55:9a:26:27:5f:87:09:a7:91: 52:42:8a:0c:84:f7:c2:da:6a:50:62:b1:c5:44:98: c2:26:b7:9c:82:3a:d1:3f:6e:61:56:87:84:69:0b: 3f:a0:d1:0c:1f:d2:7a:f5:ca:3a:e6:c7:fb:ca:4f: a9:ac:59:1d:62:a3:59:09:ad:a7:c3:5a:36:99:fa: 67:e5:83:33:57:63:32:b7:ad:95:07:d0:ee:2e:a5: 18:73:2e:4a:3e:88:b1:21:df:b0:6a:41:c0:8b:92: cb:d7:52:a1:fa:e9:66:d2:f5:fc:72:c4:12:84:49: 6b:4b:35:5e:13:23:28:3b:4a:5e:29:47:3c:f3:3a: 1b:17:1c:d9:34:8e:02:f5:ee:5c:23:5a:e6:c7:5b: 13:a2:f1:ba:da:18:63:c6:e2:61:4b:e5:04:c1:ee: d2:18:6b:27:c8:23:40:9d:2d:e4:cf:01:f9:e4:1e: ed:f1:53:b8:7b:4f:da:2c:87:4e:bb:89:0b:19:ce: d3:21:dd:a3:bf:65:bc:a1:e1:7a:52:dd:c9:7c:6c: c7:20:f7:af:b7:22:8d:e8:6e:9d:b9:e6:c2:51:d3: d7:c0:66:f6:c5:66:9e:0a:f9:9a:e2:30:b1:ce:bb: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:76:E5:6C:10:52:48:BD:1E:58:B6:9A:D9:FB:71:A8:78:84:2C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ib125WwQUki9Hli2mtn7cah4hCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.1.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:da:28:8b:43:e8:a2:eb:a4:56:0c:ec:7c:72:e5:f7:67:22: a5:c3:8d:49:b7:8e:37:67:bd:7b:1c:34:26:15:8c:81:5a:78: 11:13:51:59:fa:f4:8a:83:3a:64:d7:f1:7e:43:e9:50:c1:29: 93:0a:a2:d7:a9:5a:63:3b:2c:34:bb:14:60:c9:49:e9:c7:14: 40:d3:32:bb:af:f8:b0:13:ed:d5:52:1c:e3:d0:f2:97:61:1e: b8:8d:92:a0:da:3a:11:da:c9:cc:2c:dc:a7:90:d5:7c:3b:6c: 3c:ac:d0:ef:c1:f6:e6:19:55:cb:c3:9c:01:14:fe:7f:2b:3b: 63:84:66:86:69:fc:d0:ad:d9:c0:a2:e2:68:db:e6:99:50:77: 26:f9:5e:31:57:9d:48:ea:31:74:58:ac:c3:ab:33:3c:ca:22: 3d:27:11:c9:47:ec:99:e3:ad:d9:ae:ca:1b:ac:7b:2c:9c:3b: 65:06:58:70:99:35:ba:55:90:47:86:06:59:cc:34:aa:1e:83: 83:f7:1c:ec:f2:26:5b:a1:13:59:9e:98:ed:1b:4e:2d:a9:5f: 54:55:09:41:76:32:c5:54:cc:a6:49:15:ec:21:20:2f:f1:fd: d3:9f:c5:71:6f:b9:84:db:d8:f2:d1:35:fd:b4:d1:5d:6f:c2: 0e:84:cd:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hF3OA4wXToFF0WvPXQbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWJkNzZlNTZjMTA1MjQ4YmQxZTU4YjY5YWQ5ZmI3MWE4Nzg4NDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptYH+8xO0Efw+WgukyRA8CHx2ulV miYnX4cJp5FSQooMhPfC2mpQYrHFRJjCJrecgjrRP25hVoeEaQs/oNEMH9J69co6 5sf7yk+prFkdYqNZCa2nw1o2mfpn5YMzV2Myt62VB9DuLqUYcy5KPoixId+wakHA i5LL11Kh+ulm0vX8csQShElrSzVeEyMoO0peKUc88zobFxzZNI4C9e5cI1rmx1sT ovG62hhjxuJhS+UEwe7SGGsnyCNAnS3kzwH55B7t8VO4e0/aLIdOu4kLGc7TId2j v2W8oeF6Ut3JfGzHIPevtyKN6G6duebCUdPXwGb2xWaeCvma4jCxzrsX8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIm9duVsEFJIvR5YtprZ+3GoeIQsMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaWIxMjVXd1FVa2k5SGxpMm10bjdjYWg0aEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgBMA0G CSqGSIb3DQEBCwUAA4IBAQB/2iiLQ+ii66RWDOx8cuX3ZyKlw41Jt443Z717HDQm FYyBWngRE1FZ+vSKgzpk1/F+Q+lQwSmTCqLXqVpjOyw0uxRgyUnpxxRA0zK7r/iw E+3VUhzj0PKXYR64jZKg2joR2snMLNynkNV8O2w8rNDvwfbmGVXLw5wBFP5/Kztj hGaGafzQrdnAouJo2+aZUHcm+V4xV51I6jF0WKzDqzM8yiI9JxHJR+yZ463Zrsob rHssnDtlBlhwmTW6VZBHhgZZzDSqHoOD9xzs8iZboRNZnpjtG04tqV9UVQlBdjLF VMymSRXsISAv8f3Tn8Vxb7mE29jy0TX9tNFdb8IOhM0A -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:36 2026 by rpki-client