This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ka5mHUIzX09OfvdZnY9ycb7j3T8.roa File: ka5mHUIzX09OfvdZnY9ycb7j3T8.roa (raw, json) Hash identifier: s7v4Wnqh7NDRsD8Uz09EN4diWcu1dqptIUmtn4qPtRI= Subject key identifier: 91:AE:66:1D:42:33:5F:4F:4E:7E:F7:59:9D:8F:72:71:BE:E3:DD:3F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844DED134FF80D0D093DF8EBB723E3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ka5mHUIzX09OfvdZnY9ycb7j3T8.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 31.56.33.0/24 maxlen: 24 31.56.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4d:ed:13:4f:f8:0d:0d:09:3d:f8:eb:b7:23:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91ae661d42335f4f4e7ef7599d8f7271bee3dd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:48:e3:ca:0a:e8:13:a7:7f:d5:70:2e:a9:2e: a3:c9:9c:ba:42:c3:76:79:d9:08:a6:de:7b:cb:50: 63:4e:8f:4a:21:d0:46:3a:d1:88:32:9f:f7:7a:20: c8:49:4f:a5:33:ba:9e:ed:6e:44:4a:cc:d0:3e:ab: e4:02:02:25:2c:31:4c:6d:7a:bd:84:46:5a:d0:cd: 48:f3:12:3e:52:b2:89:5c:ce:92:66:2d:59:8c:c0: b4:9d:22:3e:2a:74:09:90:ec:1f:4a:55:10:66:d1: 15:d4:4f:90:9e:47:ff:ae:39:45:07:dd:fb:6f:53: f1:e3:54:38:51:01:37:71:22:03:2c:2f:e9:c7:20: a7:a1:06:a2:8a:f6:8e:3e:9f:7b:53:3a:f1:a9:21: e7:9c:ff:b6:15:dd:8d:93:23:f1:f1:e3:a5:78:37: fb:ee:7f:7d:6e:59:e4:bb:90:0f:f3:ad:b6:b1:ad: 48:b1:32:4a:a3:99:fa:13:92:3f:a6:8c:4f:a4:99: 28:05:08:07:56:fc:32:97:12:37:56:ec:35:7f:23: d2:e8:4a:ea:28:5d:cc:53:78:47:c8:7c:9b:57:2f: fb:a4:ea:cf:b4:7f:53:71:67:12:82:19:9d:c8:e3: 5d:71:7c:d9:39:a1:9e:81:b3:45:26:c0:e1:b1:43: e3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:66:1D:42:33:5F:4F:4E:7E:F7:59:9D:8F:72:71:BE:E3:DD:3F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ka5mHUIzX09OfvdZnY9ycb7j3T8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.33.0/24 31.56.70.0/24 Signature Algorithm: sha256WithRSAEncryption 38:15:2f:a2:f3:d1:05:7b:58:80:71:e0:8a:75:68:00:83:31: f8:ad:7e:10:4e:67:38:a9:6e:fa:6c:5e:d5:0c:aa:2c:79:36: dd:27:82:c2:12:a5:92:74:26:ef:4b:ac:b8:c3:b5:bf:78:dd: ac:3f:84:78:41:2b:af:d8:b9:cd:39:83:63:ad:51:ce:c4:dc: ae:50:b6:50:1f:48:f3:56:b4:ba:02:83:8f:b1:39:39:28:53: 60:90:05:43:0e:84:c3:ba:a0:32:b4:03:52:16:bc:8b:7c:0f: 31:37:bc:4e:21:71:ed:19:3f:e8:76:89:4c:1d:06:17:3c:c0: af:f6:32:77:13:b8:53:f3:aa:4d:32:69:b6:92:ef:df:e7:ae: 5a:7e:80:e8:eb:00:51:2b:09:8a:5f:15:da:d2:d8:1f:1e:d2: 61:06:b3:ae:8a:7a:33:24:08:19:bb:fa:b5:37:f7:6d:0c:f6: 1b:18:8d:c7:41:12:c9:64:89:a6:85:aa:86:40:e1:e4:cd:4e: ff:a9:d8:bc:e8:62:d1:62:17:1b:04:0c:b2:40:40:f3:72:88: 3f:90:26:c3:8d:70:97:39:e9:83:5a:0d:21:cc:d0:f3:7d:fd: 2b:4c:79:c8:a3:5b:90:34:11:96:c1:d5:e9:da:05:46:d4:ea: 7f:b2:c9:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hE3tE0/4DQ0JPfjrtyPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWFlNjYxZDQyMzM1ZjRmNGU3ZWY3NTk5ZDhmNzI3MWJlZTNkZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EjjygroE6d/1XAuqS6jyZy6QsN2 edkIpt57y1BjTo9KIdBGOtGIMp/3eiDISU+lM7qe7W5ESszQPqvkAgIlLDFMbXq9 hEZa0M1I8xI+UrKJXM6SZi1ZjMC0nSI+KnQJkOwfSlUQZtEV1E+Qnkf/rjlFB937 b1Px41Q4UQE3cSIDLC/pxyCnoQaiivaOPp97UzrxqSHnnP+2Fd2NkyPx8eOleDf7 7n99blnku5AP8622sa1IsTJKo5n6E5I/poxPpJkoBQgHVvwylxI3Vuw1fyPS6Erq KF3MU3hHyHybVy/7pOrPtH9TcWcSghmdyONdcXzZOaGegbNFJsDhsUPjJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJGuZh1CM19PTn73WZ2PcnG+490/MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEva2E1bUhVSXpYMDlPZnZkWm5ZOXljYjdqM1Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzghAwQA HzhGMA0GCSqGSIb3DQEBCwUAA4IBAQA4FS+i89EFe1iAceCKdWgAgzH4rX4QTmc4 qW76bF7VDKoseTbdJ4LCEqWSdCbvS6y4w7W/eN2sP4R4QSuv2LnNOYNjrVHOxNyu ULZQH0jzVrS6AoOPsTk5KFNgkAVDDoTDuqAytANSFryLfA8xN7xOIXHtGT/odolM HQYXPMCv9jJ3E7hT86pNMmm2ku/f565afoDo6wBRKwmKXxXa0tgfHtJhBrOuinoz JAgZu/q1N/dtDPYbGI3HQRLJZImmhaqGQOHkzU7/qdi86GLRYhcbBAyyQEDzcog/ kCbDjXCXOemDWg0hzNDzff0rTHnIo1uQNBGWwdXp2gVG1Op/ssnH -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:37 2026 by rpki-client