This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kI9-Do_i7E-ddPCEjas4JLcFWEo.roa File: kI9-Do_i7E-ddPCEjas4JLcFWEo.roa (raw, json) Hash identifier: Am1UYH6eaGlR8J8N+HTRHgKzs1M+QQAoLL+VQT3vmMU= Subject key identifier: 90:8F:7E:0E:8F:E2:EC:4F:9D:74:F0:84:8D:AB:38:24:B7:05:58:4A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F848E7475D88C1F3BCE38C89A6EBD51 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kI9-Do_i7E-ddPCEjas4JLcFWEo.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198831 IP address blocks: 31.59.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8e:74:75:d8:8c:1f:3b:ce:38:c8:9a:6e:bd:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=908f7e0e8fe2ec4f9d74f0848dab3824b705584a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:10:1a:13:05:81:e9:3e:31:be:e2:6a:27: ec:18:83:41:89:8e:27:1b:e4:0e:fe:a8:88:49:4a: 98:4b:78:cf:14:31:74:e1:95:7b:62:bb:20:b1:2a: 56:68:7e:d0:26:86:5b:70:78:ef:40:34:d0:a7:96: b0:69:5e:4f:e5:e9:f8:ef:34:f6:b9:9c:6d:79:33: ce:21:0e:68:a4:a1:85:ba:08:ff:16:c1:d4:fa:57: e6:b4:dd:c2:29:a9:bd:55:ae:83:91:92:d9:cb:2c: 81:58:9e:a3:03:da:62:a6:19:ef:e0:0e:d0:6a:13: 4a:62:2d:2e:49:84:d3:3f:81:c7:fb:b9:ec:bf:4d: a8:40:5e:88:90:1d:8c:60:05:5d:88:dc:08:53:af: 0f:ee:11:ee:52:24:99:1d:43:da:8e:32:5c:e4:c2: f3:a3:28:e6:a3:52:db:ad:6a:ea:1c:ac:1a:52:6d: 86:2d:0b:44:b6:8e:50:73:b0:1a:ac:51:70:47:bd: 99:25:8f:57:d8:70:6b:f3:41:3f:a4:a2:87:45:ef: 47:82:9b:57:75:a6:c5:00:90:6d:1e:36:b6:11:ba: 33:d6:1a:ec:e0:cf:8b:ca:31:4d:c7:6e:c1:4f:49: 37:85:50:f8:6f:30:7c:c8:4d:d2:53:c2:51:67:13: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8F:7E:0E:8F:E2:EC:4F:9D:74:F0:84:8D:AB:38:24:B7:05:58:4A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kI9-Do_i7E-ddPCEjas4JLcFWEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.244.0/24 Signature Algorithm: sha256WithRSAEncryption 92:a6:5f:e7:d6:f7:8f:71:55:24:3e:55:26:bb:31:c8:bd:09: 79:16:14:43:88:f9:99:01:db:d8:7e:3b:2e:44:62:bc:1c:61: ae:42:6a:3b:02:85:93:b5:1e:30:6d:b1:fe:b8:02:bf:c4:d6: 14:83:59:07:6d:fe:c1:4a:ac:34:69:35:7a:ba:ec:2f:12:9f: 8d:05:d7:a2:a3:54:be:10:3d:1b:03:a0:06:a0:07:9e:1a:60: 35:3f:57:6a:2c:36:50:98:cf:94:28:5b:61:5a:65:42:a1:9b: eb:42:13:78:6d:f3:a6:ae:13:1c:68:5f:dc:60:55:bd:c9:2c: d1:7f:db:b2:01:6f:75:e6:71:c9:37:38:82:3a:4b:8e:d8:9e: 0c:18:65:e3:ff:0c:22:26:b6:96:17:f1:44:ae:f5:23:e4:51: 0e:79:b9:f9:95:b3:25:d3:54:57:dd:7f:ef:b3:ce:02:ff:e4: 54:12:40:12:fe:1f:4f:ee:47:0f:7d:62:ee:0c:42:ef:4e:fc: 95:ba:9b:a2:61:a0:8f:69:56:31:76:26:63:ce:89:8e:04:31: 81:c8:3d:5f:45:04:1c:27:d2:22:f7:08:e5:0b:06:e9:b1:68: 58:f1:90:0a:5d:6d:03:c8:58:de:6c:b4:9a:e7:63:cf:72:0f: f1:5e:f6:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hI50ddiMHzvOOMiabr1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDhmN2UwZThmZTJlYzRmOWQ3NGYwODQ4ZGFiMzgyNGI3MDU1ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46EQGhMFgek+Mb7iaifsGINBiY4n G+QO/qiISUqYS3jPFDF04ZV7YrsgsSpWaH7QJoZbcHjvQDTQp5awaV5P5en47zT2 uZxteTPOIQ5opKGFugj/FsHU+lfmtN3CKam9Va6DkZLZyyyBWJ6jA9piphnv4A7Q ahNKYi0uSYTTP4HH+7nsv02oQF6IkB2MYAVdiNwIU68P7hHuUiSZHUPajjJc5MLz oyjmo1LbrWrqHKwaUm2GLQtEto5Qc7AarFFwR72ZJY9X2HBr80E/pKKHRe9HgptX dabFAJBtHja2Eboz1hrs4M+LyjFNx27BT0k3hVD4bzB8yE3SU8JRZxPoLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJCPfg6P4uxPnXTwhI2rOCS3BVhKMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEva0k5LURvX2k3RS1kZFBDRWphczRKTGNGV0VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzv0MA0G CSqGSIb3DQEBCwUAA4IBAQCSpl/n1vePcVUkPlUmuzHIvQl5FhRDiPmZAdvYfjsu RGK8HGGuQmo7AoWTtR4wbbH+uAK/xNYUg1kHbf7BSqw0aTV6uuwvEp+NBdeio1S+ ED0bA6AGoAeeGmA1P1dqLDZQmM+UKFthWmVCoZvrQhN4bfOmrhMcaF/cYFW9ySzR f9uyAW915nHJNziCOkuO2J4MGGXj/wwiJraWF/FErvUj5FEOebn5lbMl01RX3X/v s84C/+RUEkAS/h9P7kcPfWLuDELvTvyVupuiYaCPaVYxdiZjzomOBDGByD1fRQQc J9Ii9wjlCwbpsWhY8ZAKXW0DyFjebLSa52PPcg/xXvYZ -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:04 2026 by rpki-client