This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j4dw9jH66LwAqEbbypuu5CFyras.roa File: j4dw9jH66LwAqEbbypuu5CFyras.roa (raw, json) Hash identifier: lFk74fvBckuI5JP/fE7jg8hS0dScK+wviy8DUMku8ZY= Subject key identifier: 8F:87:70:F6:31:FA:E8:BC:00:A8:46:DB:CA:9B:AE:E4:21:72:AD:AB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844B3C4474EF0B874129F68F96D04F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j4dw9jH66LwAqEbbypuu5CFyras.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4637 IP address blocks: 31.58.172.0/23 maxlen: 24 31.58.174.0/23 maxlen: 24 31.59.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4b:3c:44:74:ef:0b:87:41:29:f6:8f:96:d0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f8770f631fae8bc00a846dbca9baee42172adab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d5:f8:e7:0e:1f:4f:5e:3b:c1:ac:df:0d:6f: e0:c3:52:dc:5f:08:16:fd:0f:d3:41:1f:21:10:b2: 1b:be:5e:de:b3:8e:86:69:6f:f7:b5:8a:8f:07:bb: d5:0a:60:f6:d2:94:be:6a:19:6c:91:66:a6:cb:f0: 27:16:b3:27:29:5e:b9:a3:af:9f:a6:81:e4:7a:c6: 4a:9a:01:a7:bc:d2:3f:5e:08:bf:05:ec:d0:e9:c2: 7b:a6:b0:5b:f5:12:90:08:01:7c:58:ad:b6:55:8c: b4:c4:bc:fc:1c:8d:10:0c:1e:f7:51:ef:48:d6:2f: c5:48:45:4a:01:eb:ac:4f:f1:b8:42:9c:48:b1:e3: 11:b3:6f:f8:a7:f2:22:c3:e9:11:82:c4:eb:8c:bf: 64:e8:64:01:c7:68:b9:7e:74:6f:c8:2c:36:24:41: 58:a9:4e:90:7e:b3:c3:bf:bb:87:46:82:6b:0e:85: 4a:a1:aa:a4:48:6c:fd:37:78:ff:ea:79:fd:6d:2f: df:e7:ac:2a:c8:0c:22:a7:1d:cc:fc:70:59:04:e7: f1:2a:cf:c8:d6:23:a1:0a:3c:57:76:8e:07:ee:3f: 60:9b:c8:5a:e0:70:ba:58:41:ae:03:8a:c8:3e:ff: 14:04:37:0e:65:49:54:c2:54:32:a4:f3:dd:f3:94: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:87:70:F6:31:FA:E8:BC:00:A8:46:DB:CA:9B:AE:E4:21:72:AD:AB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j4dw9jH66LwAqEbbypuu5CFyras.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.172.0/22 31.59.76.0/23 Signature Algorithm: sha256WithRSAEncryption a4:a2:a3:77:90:3d:be:d4:7a:64:50:62:b0:9c:29:fc:f4:69: 97:dd:fc:ff:b5:f5:e3:c0:af:77:2e:cb:fc:b7:16:07:83:f7: 7f:3e:48:54:00:79:0d:20:a9:de:36:87:b4:a1:39:f2:7e:14: e7:6a:a2:c0:01:13:1d:2f:fb:bf:08:19:0d:02:e7:59:7c:51: 37:b3:15:6c:d1:65:7e:fa:c7:89:a6:45:69:de:db:8c:d4:3a: ad:a4:70:cf:38:fa:78:df:a6:0a:50:56:a3:a2:2c:64:c2:9b: ce:59:56:50:ba:c4:d7:fa:3f:48:22:2a:b9:0d:41:59:60:05: 7e:88:5f:17:cb:d7:c3:9b:e2:6a:62:eb:70:fc:f7:61:41:c6: df:67:f8:78:65:ac:40:1d:00:20:fb:8f:74:69:33:e1:63:35: 6b:73:a7:2f:23:e6:ad:9c:fc:ea:20:bb:8b:02:c9:f6:25:bd: 6e:53:7b:8e:e6:40:b3:52:2a:4e:60:86:8f:a4:39:1b:4f:24: a2:6d:c9:99:94:20:cf:cd:4c:28:40:85:73:02:40:f9:ab:4f: 3c:e2:b1:f4:13:0f:bb:4d:7b:0b:3f:ae:c1:d0:fe:23:98:3c: e9:ac:6f:0e:cf:2c:5c:9a:c1:7b:e3:6f:9d:7d:eb:c7:a3:0c: 42:30:20:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hEs8RHTvC4dBKfaPltBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjg3NzBmNjMxZmFlOGJjMDBhODQ2ZGJjYTliYWVlNDIxNzJhZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NX45w4fT147wazfDW/gw1LcXwgW /Q/TQR8hELIbvl7es46GaW/3tYqPB7vVCmD20pS+ahlskWamy/AnFrMnKV65o6+f poHkesZKmgGnvNI/Xgi/BezQ6cJ7prBb9RKQCAF8WK22VYy0xLz8HI0QDB73Ue9I 1i/FSEVKAeusT/G4QpxIseMRs2/4p/Iiw+kRgsTrjL9k6GQBx2i5fnRvyCw2JEFY qU6QfrPDv7uHRoJrDoVKoaqkSGz9N3j/6nn9bS/f56wqyAwipx3M/HBZBOfxKs/I 1iOhCjxXdo4H7j9gm8ha4HC6WEGuA4rIPv8UBDcOZUlUwlQypPPd85T48wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+HcPYx+ui8AKhG28qbruQhcq2rMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvajRkdzlqSDY2THdBcUViYnlwdXU1Q0Z5cmFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCHzqsAwQB HztMMA0GCSqGSIb3DQEBCwUAA4IBAQCkoqN3kD2+1HpkUGKwnCn89GmX3fz/tfXj wK93Lsv8txYHg/d/PkhUAHkNIKneNoe0oTnyfhTnaqLAARMdL/u/CBkNAudZfFE3 sxVs0WV++seJpkVp3tuM1DqtpHDPOPp436YKUFajoixkwpvOWVZQusTX+j9IIiq5 DUFZYAV+iF8Xy9fDm+JqYutw/PdhQcbfZ/h4ZaxAHQAg+490aTPhYzVrc6cvI+at nPzqILuLAsn2Jb1uU3uO5kCzUipOYIaPpDkbTySibcmZlCDPzUwoQIVzAkD5q088 4rH0Ew+7TXsLP67B0P4jmDzprG8OzyxcmsF742+dfevHowxCMCAs -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:41 2026 by rpki-client