This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jL7lLp2MR5YSn6ZYxGJSVi99Jbo.roa File: jL7lLp2MR5YSn6ZYxGJSVi99Jbo.roa (raw, json) Hash identifier: OuFKAIapHRS5PC1jipwMg5888lWDMGqJ9LZX1TonlHU= Subject key identifier: 8C:BE:E5:2E:9D:8C:47:96:12:9F:A6:58:C4:62:52:56:2F:7D:25:BA Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A90DCC30DE1D9855F1D11B8789C10612C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jL7lLp2MR5YSn6ZYxGJSVi99Jbo.roa Signing time: Mon 17 Nov 2025 08:09:38 +0000 ROA not before: Mon 17 Nov 2025 08:09:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213069 IP address blocks: 31.59.168.0/24 maxlen: 24 94.183.151.0/24 maxlen: 24 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:dc:c3:0d:e1:d9:85:5f:1d:11:b8:78:9c:10:61:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 17 08:09:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8cbee52e9d8c4796129fa658c46252562f7d25ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:b1:2f:a8:fe:f5:59:32:57:15:17:6c:4f: cc:b7:95:7e:04:da:3e:b1:02:ad:66:bd:ec:3d:74: 56:8d:29:4e:b0:7e:59:c9:44:0a:93:06:78:cd:32: 61:77:19:20:32:33:6d:b7:8f:8e:6f:3b:4c:bd:0a: 4f:e1:7e:2a:14:92:b1:49:d1:14:ea:78:64:81:1f: 89:d8:81:43:a5:fb:bb:36:5f:96:f9:be:22:61:ae: 87:21:5f:dc:fb:36:1e:1e:14:eb:c0:7b:c1:43:98: 04:2b:88:07:b1:54:42:89:1a:1a:79:28:6f:a7:55: 7d:05:31:93:6b:9b:87:51:80:ea:16:66:11:e1:cb: 4a:73:bd:5e:05:9f:40:7f:37:18:c6:6f:42:bb:f5: 86:34:28:0e:2f:95:a8:2e:6f:55:25:1d:e3:b9:59: 51:c7:f9:75:1c:ad:78:b8:2e:d7:3a:4d:0e:b2:a5: 82:77:34:6c:93:de:e8:06:7f:6b:f2:71:d7:3c:4a: 66:4f:43:31:41:9b:21:3f:87:25:d7:3c:2c:5a:85: a5:94:53:27:2a:ee:b9:3e:35:91:97:d6:b5:e1:a6: b9:ad:a8:19:c9:91:e0:b0:e8:0d:d3:57:52:78:d7: e1:05:44:ce:43:b2:4e:84:3d:75:2a:4c:1d:b1:06: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BE:E5:2E:9D:8C:47:96:12:9F:A6:58:C4:62:52:56:2F:7D:25:BA X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jL7lLp2MR5YSn6ZYxGJSVi99Jbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.168.0/24 94.183.151.0/24 IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 7a:a2:a9:fc:ef:b5:e4:6b:7c:a5:78:85:10:7d:18:f8:46:6a: a9:4f:3f:84:b3:4e:b0:99:43:d6:77:48:c0:e3:b5:9f:95:f2: 5f:37:78:e3:66:2d:78:79:d8:81:be:64:1a:51:27:93:22:3e: 26:28:c4:5c:91:26:5d:91:d1:a9:cf:5c:97:0f:a8:d4:5c:15: 7e:95:84:c6:e0:fa:cd:14:cf:ba:d2:f6:1d:15:e2:ce:13:29: 83:32:ee:b1:4c:57:15:09:ce:c3:42:c4:f6:96:d3:73:a1:35: e1:b2:94:84:71:73:8f:6a:41:3b:6a:bb:68:10:f2:7d:e0:41: 9b:c9:8b:ba:5e:9f:6d:fa:cd:ba:b5:dc:b8:fb:16:0e:00:76: 4f:54:58:54:38:56:9c:f5:f8:c2:11:cb:d6:8d:f1:be:3c:bf: 4e:b4:38:7b:94:66:36:49:85:48:45:f5:39:a8:94:8c:13:fb: 40:7f:f1:d9:23:ad:ff:35:5c:6c:7c:6e:3a:39:0b:9c:37:74: d4:56:ce:57:e5:d6:e4:38:5e:c0:e5:fd:85:de:80:2d:2d:c7: e8:ef:96:8a:42:40:ea:cd:02:0f:64:3d:b8:fc:1b:ba:c1:5e: 28:16:3c:9c:6a:2f:70:7d:94:30:c7:9f:3e:f6:a0:e1:28:0b: 02:4f:56:29 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZqQ3MMN4dmFXx0RuHicEGEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE3MDgwOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2JlZTUyZTlkOGM0Nzk2MTI5ZmE2NThjNDYyNTI1NjJmN2QyNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykmxL6j+9VkyVxUXbE/Mt5V+BNo+ sQKtZr3sPXRWjSlOsH5ZyUQKkwZ4zTJhdxkgMjNtt4+ObztMvQpP4X4qFJKxSdEU 6nhkgR+J2IFDpfu7Nl+W+b4iYa6HIV/c+zYeHhTrwHvBQ5gEK4gHsVRCiRoaeShv p1V9BTGTa5uHUYDqFmYR4ctKc71eBZ9AfzcYxm9Cu/WGNCgOL5WoLm9VJR3juVlR x/l1HK14uC7XOk0OsqWCdzRsk97oBn9r8nHXPEpmT0MxQZshP4cl1zwsWoWllFMn Ku65PjWRl9a14aa5ragZyZHgsOgN01dSeNfhBUTOQ7JOhD11KkwdsQZ9jwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIy+5S6djEeWEp+mWMRiUlYvfSW6MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvakw3bExwMk1SNVlTbjZaWXhHSlNWaTk5SmJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAHzuoAwQA XreXMA8EAgACMAkDBwAqFG5AAAEwDQYJKoZIhvcNAQELBQADggEBAHqiqfzvteRr fKV4hRB9GPhGaqlPP4SzTrCZQ9Z3SMDjtZ+V8l83eONmLXh52IG+ZBpRJ5MiPiYo xFyRJl2R0anPXJcPqNRcFX6VhMbg+s0Uz7rS9h0V4s4TKYMy7rFMVxUJzsNCxPaW 03OhNeGylIRxc49qQTtqu2gQ8n3gQZvJi7pen236zbq13Lj7Fg4Adk9UWFQ4Vpz1 +MIRy9aN8b48v060OHuUZjZJhUhF9TmolIwT+0B/8dkjrf81XGx8bjo5C5w3dNRW zlfl1uQ4XsDl/YXegC0tx+jvlopCQOrNAg9kPbj8G7rBXigWPJxqL3B9lDDHnz72 oOEoCwJPVik= -----END CERTIFICATE-----Generated at Wed Nov 19 13:26:51 2025 by rpki-client