This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j9AcCyM3TEu2uGafQogCu8ALpAM.roa File: j9AcCyM3TEu2uGafQogCu8ALpAM.roa (raw, json) Hash identifier: QFCnMxvqADp3P870RWdBCu1va6Tk36bK1J8UnXCrSSM= Subject key identifier: 8F:D0:1C:0B:23:37:4C:4B:B6:B8:66:9F:42:88:02:BB:C0:0B:A4:03 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BD5D8A2AAC814161F11809246FF4AE2E3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j9AcCyM3TEu2uGafQogCu8ALpAM.roa Signing time: Mon 19 Jan 2026 10:41:43 +0000 ROA not before: Mon 19 Jan 2026 10:41:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51722 IP address blocks: 31.56.211.0/24 maxlen: 24 217.60.200.0/22 maxlen: 24 217.60.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:d8:a2:aa:c8:14:16:1f:11:80:92:46:ff:4a:e2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 19 10:41:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fd01c0b23374c4bb6b8669f428802bbc00ba403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:17:3b:b8:b7:eb:44:59:f4:e5:70:81:c3: c4:ab:b1:2c:01:e9:06:28:b4:eb:55:2f:68:8e:63: 7a:ff:91:36:ed:83:86:1c:7c:9f:5c:2b:81:1d:b7: be:3b:a5:b2:07:d5:10:0d:9f:cc:50:c1:50:fb:70: 84:9a:9f:fc:fe:16:27:94:ea:a6:ae:ef:85:41:71: 74:44:5d:73:61:68:83:19:7a:77:d7:7c:51:e1:47: 4d:c1:47:c6:ea:58:d5:b2:68:98:f7:cc:af:b9:2e: 4a:27:94:23:cc:c9:c9:84:c7:9a:0d:9f:e5:2f:f6: 56:cd:30:24:b6:ff:db:f4:c7:97:9b:82:f9:dd:72: f2:1c:2c:92:5c:40:29:82:08:a7:22:c9:de:8f:93: 6c:52:14:79:60:a4:54:cb:44:fe:b1:3f:5e:88:d6: 2b:a1:e7:5f:ec:2e:ea:e6:ad:c8:b4:f2:7a:1c:e4: 3b:30:8f:a4:db:3d:51:51:b0:bb:00:e6:fa:38:db: 45:55:87:b1:6f:f9:ec:7a:40:dd:2c:a9:4a:1e:8a: b9:b8:83:71:bf:9f:66:00:60:bb:34:fe:33:c8:8a: 5b:7b:3f:ae:6b:01:25:46:5a:77:9c:c4:ad:77:f6: 4f:99:a8:66:87:04:f8:1e:ab:d0:24:8a:19:f6:c2: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D0:1C:0B:23:37:4C:4B:B6:B8:66:9F:42:88:02:BB:C0:0B:A4:03 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j9AcCyM3TEu2uGafQogCu8ALpAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 217.60.200.0/21 Signature Algorithm: sha256WithRSAEncryption 06:9e:14:8b:56:5f:37:91:66:9e:b2:b6:a5:9e:44:16:25:39: cd:41:fa:8b:e9:f6:96:f6:1b:07:2a:f6:08:ce:57:3b:27:06: 11:fc:b3:90:7f:4d:18:ba:fb:6c:5d:84:b4:4b:8d:0e:a0:b1: 94:d7:7e:c8:0f:7e:28:5f:01:87:52:28:a4:61:00:d1:56:f4: 4a:33:23:94:11:5c:91:c9:1d:21:10:24:2e:eb:01:03:63:6b: 32:a9:fa:a7:4a:c3:4f:8d:26:a7:66:7e:86:a1:23:d9:7d:da: 7e:b2:17:4d:63:09:a2:01:96:f6:36:18:09:e4:e4:a9:45:13: 1b:99:57:72:2d:4a:59:00:04:c9:10:a0:cb:27:16:50:f8:07: 67:2b:ad:a4:1c:ad:88:e3:0b:cb:ac:76:46:e8:f7:eb:b8:09: a4:92:cc:55:bf:cd:d4:8b:52:14:82:c9:f6:35:ff:87:62:ed: 43:50:81:30:ce:91:06:7a:02:14:43:20:fd:e9:fd:6a:6c:44: cc:df:6a:e7:89:ef:6e:5c:34:1d:40:5b:2e:df:9f:21:a1:06: 36:53:82:f9:c9:77:94:ec:84:a6:2b:15:1a:e3:1d:07:43:4d: 67:b4:95:34:af:32:77:d7:78:24:dd:59:db:0e:c1:fb:29:36: 1e:9e:a2:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvV2KKqyBQWHxGAkkb/SuLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE5MTA0MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmQwMWMwYjIzMzc0YzRiYjZiODY2OWY0Mjg4MDJiYmMwMGJhNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCAXO7i360RZ9OVwgcPEq7EsAekG KLTrVS9ojmN6/5E27YOGHHyfXCuBHbe+O6WyB9UQDZ/MUMFQ+3CEmp/8/hYnlOqm ru+FQXF0RF1zYWiDGXp313xR4UdNwUfG6ljVsmiY98yvuS5KJ5QjzMnJhMeaDZ/l L/ZWzTAktv/b9MeXm4L53XLyHCySXEApgginIsnej5NsUhR5YKRUy0T+sT9eiNYr oedf7C7q5q3ItPJ6HOQ7MI+k2z1RUbC7AOb6ONtFVYexb/nsekDdLKlKHoq5uINx v59mAGC7NP4zyIpbez+uawElRlp3nMStd/ZPmahmhwT4HqvQJIoZ9sJ6UwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI/QHAsjN0xLtrhmn0KIArvAC6QDMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvajlBY0N5TTNURXUydUdhZlFvZ0N1OEFMcEFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjTAwQD 2TzIMA0GCSqGSIb3DQEBCwUAA4IBAQAGnhSLVl83kWaesralnkQWJTnNQfqL6faW 9hsHKvYIzlc7JwYR/LOQf00YuvtsXYS0S40OoLGU137ID34oXwGHUiikYQDRVvRK MyOUEVyRyR0hECQu6wEDY2syqfqnSsNPjSanZn6GoSPZfdp+shdNYwmiAZb2NhgJ 5OSpRRMbmVdyLUpZAATJEKDLJxZQ+AdnK62kHK2I4wvLrHZG6PfruAmkksxVv83U i1IUgsn2Nf+HYu1DUIEwzpEGegIUQyD96f1qbETM32rnie9uXDQdQFsu358hoQY2 U4L5yXeU7ISmKxUa4x0HQ01ntJU0rzJ313gk3VnbDsH7KTYenqLK -----END CERTIFICATE-----Generated at Tue Jan 20 20:30:33 2026 by rpki-client