This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j0fzI0DIczPUk59T7Lff9t3sIsA.roa File: j0fzI0DIczPUk59T7Lff9t3sIsA.roa (raw, json) Hash identifier: dTEOjdIDXI2sojlOsNw4XKTs8J5aTzS99WcJ5uPnm0A= Subject key identifier: 8F:47:F3:23:40:C8:73:33:D4:93:9F:53:EC:B7:DF:F6:DD:EC:22:C0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BCB49A7D037C81197E5871D9F87772D0A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j0fzI0DIczPUk59T7Lff9t3sIsA.roa Signing time: Sat 17 Jan 2026 09:29:20 +0000 ROA not before: Sat 17 Jan 2026 09:29:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 31.56.52.0/22 maxlen: 22 31.56.219.0/24 maxlen: 24 31.57.161.0/24 maxlen: 24 31.57.199.0/24 maxlen: 24 31.58.88.0/24 maxlen: 24 31.59.68.0/24 maxlen: 24 217.60.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:49:a7:d0:37:c8:11:97:e5:87:1d:9f:87:77:2d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 17 09:29:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f47f32340c87333d4939f53ecb7dff6ddec22c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:e5:8a:b0:29:07:2f:7c:82:d5:0c:2c:e8: ed:50:33:b6:86:82:9d:83:59:2d:39:c5:78:92:78: 51:2e:9f:3b:6e:13:1a:79:aa:0e:39:bc:d1:9a:93: e2:b6:ba:9d:8e:ff:19:a1:1d:63:29:2c:88:dd:7d: 91:74:2b:2a:b4:da:6f:7a:8c:dc:5c:97:7a:de:df: d1:23:a3:7d:ff:48:ec:5f:7b:f3:91:69:70:64:2c: 86:12:d2:2c:5d:ca:ec:58:2a:a4:c8:56:1e:64:68: e9:15:57:f7:1b:1c:34:cb:e7:17:08:7d:42:9d:66: 44:d7:27:49:cf:e1:57:31:72:da:9a:f5:51:9c:0b: 73:ae:a0:c3:3e:91:c0:42:dd:d8:df:53:66:0f:d7: 25:69:4b:19:74:1f:05:e8:42:68:4d:2f:df:26:77: b2:ca:c0:c3:bf:1a:cf:7a:62:58:26:ba:ed:6d:0f: dd:9b:8e:d2:36:0a:d6:0b:8a:d0:ac:4d:eb:88:28: 6d:1c:87:81:44:e3:2a:d8:62:e7:1b:93:a7:9b:39: 3d:df:d1:6b:26:6a:cc:4b:3a:76:0b:95:2c:64:26: be:f3:c6:31:7a:1b:1b:bb:a3:e4:2f:ed:8f:4a:86: f3:bc:20:81:21:d9:20:b7:75:05:c1:5a:e4:4c:93: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:47:F3:23:40:C8:73:33:D4:93:9F:53:EC:B7:DF:F6:DD:EC:22:C0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j0fzI0DIczPUk59T7Lff9t3sIsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.52.0/22 31.56.219.0/24 31.57.161.0/24 31.57.199.0/24 31.58.88.0/24 31.59.68.0/24 217.60.199.0/24 Signature Algorithm: sha256WithRSAEncryption 19:83:f0:4a:04:18:35:cb:24:de:cc:0f:a8:2e:74:eb:5b:ed: e6:cf:60:cb:59:a7:e3:1c:f9:9a:1a:51:27:73:61:14:d0:50: a3:0e:33:4e:83:d9:c8:a2:de:9b:98:7a:68:bb:bf:a6:f8:b1: b7:e9:69:dd:76:26:12:17:da:21:b1:7f:1d:55:58:f9:bd:7f: cc:23:4d:5b:9c:67:17:96:5a:43:89:77:be:c8:9b:04:5f:9e: 2a:e9:78:db:24:d9:a3:a2:85:29:01:5e:ca:aa:ce:3c:f3:72: 71:52:2a:b8:df:17:cf:48:89:46:a3:cd:f9:6b:aa:64:76:2b: a7:43:ea:ff:86:b0:5f:76:78:0d:21:df:ef:62:4c:be:c8:91: f7:a1:8c:9f:3f:d2:0a:25:de:b4:0e:32:a2:1f:7c:93:75:8a: 36:d2:0a:5c:d4:4d:83:32:90:1d:b8:ca:46:fa:f7:e2:b3:cb: b4:fa:1f:74:d2:5f:f7:97:83:64:56:51:65:2b:71:02:0c:d2: c8:48:69:c2:17:9f:66:1d:60:b7:1f:92:86:89:aa:a2:17:93: b4:45:0a:88:59:0f:d9:9c:86:68:c0:33:12:03:a6:ed:22:9f: 8f:e2:85:15:cc:0c:72:f8:e7:25:60:00:1a:e7:73:43:ea:20: bb:47:62:29 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZvLSafQN8gRl+WHHZ+Hdy0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE3MDkyOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjQ3ZjMyMzQwYzg3MzMzZDQ5MzlmNTNlY2I3ZGZmNmRkZWMyMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjzlirApBy98gtUMLOjtUDO2hoKd g1ktOcV4knhRLp87bhMaeaoOObzRmpPitrqdjv8ZoR1jKSyI3X2RdCsqtNpveozc XJd63t/RI6N9/0jsX3vzkWlwZCyGEtIsXcrsWCqkyFYeZGjpFVf3Gxw0y+cXCH1C nWZE1ydJz+FXMXLamvVRnAtzrqDDPpHAQt3Y31NmD9claUsZdB8F6EJoTS/fJney ysDDvxrPemJYJrrtbQ/dm47SNgrWC4rQrE3riChtHIeBROMq2GLnG5Onmzk939Fr JmrMSzp2C5UsZCa+88Yxehsbu6PkL+2PSobzvCCBIdkgt3UFwVrkTJPsFQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFI9H8yNAyHMz1JOfU+y33/bd7CLAMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvajBmekkwREljelBVazU5VDdMZmY5dDNzSXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCHzg0AwQA HzjbAwQAHzmhAwQAHznHAwQAHzpYAwQAHztEAwQA2TzHMA0GCSqGSIb3DQEBCwUA A4IBAQAZg/BKBBg1yyTezA+oLnTrW+3mz2DLWafjHPmaGlEnc2EU0FCjDjNOg9nI ot6bmHpou7+m+LG36WnddiYSF9ohsX8dVVj5vX/MI01bnGcXllpDiXe+yJsEX54q 6XjbJNmjooUpAV7Kqs4883JxUiq43xfPSIlGo835a6pkdiunQ+r/hrBfdngNId/v Yky+yJH3oYyfP9IKJd60DjKiH3yTdYo20gpc1E2DMpAduMpG+vfis8u0+h900l/3 l4NkVlFlK3ECDNLISGnCF59mHWC3H5KGiaqiF5O0RQqIWQ/ZnIZowDMSA6btIp+P 4oUVzAxy+OclYAAa53ND6iC7R2Ip -----END CERTIFICATE-----Generated at Tue Jan 20 20:31:53 2026 by rpki-client