This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jpFhCRihs34TnT1NvTrYtPFeT3A.roa File: jpFhCRihs34TnT1NvTrYtPFeT3A.roa (raw, json) Hash identifier: 2XLYrBFs0Cpg4+vee9LvLTLDCPy/HdgVOz7YRB8JCH0= Subject key identifier: 8E:91:61:09:18:A1:B3:7E:13:9D:3D:4D:BD:3A:D8:B4:F1:5E:4F:70 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84703FA252F3246AB8A3189F0D5213 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jpFhCRihs34TnT1NvTrYtPFeT3A.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58678 IP address blocks: 31.56.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:70:3f:a2:52:f3:24:6a:b8:a3:18:9f:0d:52:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e91610918a1b37e139d3d4dbd3ad8b4f15e4f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:f8:d0:6c:f6:ee:32:68:1b:24:63:b6:63: 56:9b:8c:9b:27:17:c1:e5:81:37:53:cd:d2:09:bd: 0e:60:e4:5e:ec:b3:2d:ac:61:bc:de:89:60:b6:68: 34:c5:44:f3:67:c2:04:8d:41:61:a6:53:03:a5:b3: e0:48:ef:ff:d7:a1:62:44:df:df:df:76:cb:3b:14: f8:e6:d3:48:07:6e:de:ac:7d:be:f1:3f:e5:79:ab: 7d:c2:20:0f:fa:03:5a:40:68:22:17:6a:60:cb:ea: 97:e6:6f:06:86:34:23:9c:d6:03:82:30:ff:d3:30: 17:80:6a:65:2c:a0:b8:db:9c:ec:b3:76:ec:2b:d3: ab:d6:8a:ef:36:5e:5c:b5:d6:1e:89:12:40:e6:48: 75:51:2d:cf:3d:fa:8e:55:14:08:68:fb:cb:66:53: f7:ec:fb:82:66:e9:35:49:27:97:6a:65:ab:73:22: 57:cd:92:cb:ac:56:d1:69:e9:75:12:0c:a1:f9:df: bb:ed:53:85:0d:cd:ea:80:b0:3d:29:47:3e:9b:6d: 6e:64:c5:a9:ac:cc:0b:35:c1:a3:90:87:04:81:41: 17:92:fa:8c:52:f1:80:1b:90:68:24:14:7c:f3:5a: 92:c6:8f:e9:5a:cb:a0:85:c5:33:3e:1e:9e:c2:fc: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:91:61:09:18:A1:B3:7E:13:9D:3D:4D:BD:3A:D8:B4:F1:5E:4F:70 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jpFhCRihs34TnT1NvTrYtPFeT3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.122.0/24 Signature Algorithm: sha256WithRSAEncryption 73:32:a9:bc:f8:eb:f2:c1:c1:40:53:d3:7f:f5:c6:d0:6a:3b: a8:9b:01:8f:c1:a6:5c:54:28:fb:ae:bf:1b:4f:7a:e8:e4:c4: eb:d8:18:5f:ef:ee:fa:92:03:0a:ab:fe:d0:a8:62:db:e2:7d: 02:3c:9e:b4:11:b0:22:12:12:e9:06:1c:2d:9f:50:8f:e5:61: 24:27:60:4d:6b:69:62:cc:8f:94:8a:1e:d7:5d:38:7d:49:6c: e7:ec:71:2b:58:0c:3a:b1:5e:55:ef:ce:6f:98:20:d4:e7:2e: ad:29:19:16:30:d5:c6:6b:eb:45:ea:69:f5:5f:1b:8e:b4:e0: f5:e4:89:9c:ec:d3:3e:cb:34:dc:ec:97:78:27:70:45:41:52: b4:6b:a5:ab:4d:78:eb:bc:31:c6:85:8f:a3:a6:2f:6e:f1:be: 6f:75:21:cf:77:16:3b:5a:66:72:4d:00:48:91:f6:a9:e6:09: bb:7b:c8:6c:4f:af:2e:78:3c:88:e7:36:6e:76:0c:05:12:c1: 77:b5:7f:40:7c:67:fc:76:7d:be:ce:16:4d:ba:fe:e9:03:44: 19:7f:88:97:b7:5c:91:7a:70:d6:e2:6a:48:92:32:8c:6a:f6: 87:6e:77:03:c8:b0:6c:46:00:cd:dc:f5:5e:47:6f:67:9a:92: 97:3b:5d:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHA/olLzJGq4oxifDVITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTkxNjEwOTE4YTFiMzdlMTM5ZDNkNGRiZDNhZDhiNGYxNWU0ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPn40Gz27jJoGyRjtmNWm4ybJxfB 5YE3U83SCb0OYORe7LMtrGG83olgtmg0xUTzZ8IEjUFhplMDpbPgSO//16FiRN/f 33bLOxT45tNIB27erH2+8T/leat9wiAP+gNaQGgiF2pgy+qX5m8GhjQjnNYDgjD/ 0zAXgGplLKC425zss3bsK9Or1orvNl5ctdYeiRJA5kh1US3PPfqOVRQIaPvLZlP3 7PuCZuk1SSeXamWrcyJXzZLLrFbRael1Egyh+d+77VOFDc3qgLA9KUc+m21uZMWp rMwLNcGjkIcEgUEXkvqMUvGAG5BoJBR881qSxo/pWsughcUzPh6ewvwRXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6RYQkYobN+E509Tb062LTxXk9wMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvanBGaENSaWhzMzRUblQxTnZUcll0UEZlVDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzh6MA0G CSqGSIb3DQEBCwUAA4IBAQBzMqm8+OvywcFAU9N/9cbQajuomwGPwaZcVCj7rr8b T3ro5MTr2Bhf7+76kgMKq/7QqGLb4n0CPJ60EbAiEhLpBhwtn1CP5WEkJ2BNa2li zI+Uih7XXTh9SWzn7HErWAw6sV5V785vmCDU5y6tKRkWMNXGa+tF6mn1XxuOtOD1 5Imc7NM+yzTc7Jd4J3BFQVK0a6WrTXjrvDHGhY+jpi9u8b5vdSHPdxY7WmZyTQBI kfap5gm7e8hsT68ueDyI5zZudgwFEsF3tX9AfGf8dn2+zhZNuv7pA0QZf4iXt1yR enDW4mpIkjKMavaHbncDyLBsRgDN3PVeR29nmpKXO12G -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:32 2026 by rpki-client