This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/khq3lUE3sDUKq41rWeGZdMf2lBU.roa File: khq3lUE3sDUKq41rWeGZdMf2lBU.roa (raw, json) Hash identifier: 0DRUeWT1thq9Eo+s+9H6wkEw7HkLsxcbHCi/7JDU+Yw= Subject key identifier: 92:1A:B7:95:41:37:B0:35:0A:AB:8D:6B:59:E1:99:74:C7:F6:94:15 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84ADDD27EB59A6D971F05B604A235D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/khq3lUE3sDUKq41rWeGZdMf2lBU.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212042 IP address blocks: 31.57.130.0/24 maxlen: 24 31.58.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ad:dd:27:eb:59:a6:d9:71:f0:5b:60:4a:23:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=921ab7954137b0350aab8d6b59e19974c7f69415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4f:15:a6:c5:6d:d7:4f:b1:52:b2:84:f6:01: ae:b5:01:7a:80:d9:77:82:8e:ba:de:18:3f:08:f2: 8a:8b:e9:f2:ed:53:93:b9:22:f2:c0:06:cf:3d:07: 81:96:fc:20:fe:11:e1:87:ae:c5:9c:52:1f:5e:c6: 31:bf:fc:7d:40:f8:b7:9b:41:5b:35:30:da:c9:ba: 90:28:d2:14:dc:b6:df:d3:8b:ee:23:d1:40:77:9b: 87:25:a5:38:c5:6e:19:8b:6f:56:5d:97:cb:7a:13: 16:08:af:7d:3d:ed:d1:b6:3e:1c:ee:f5:51:42:a9: 27:f7:2e:d4:56:38:fa:a4:8a:91:6d:23:03:34:08: c8:61:56:16:3a:70:a6:01:b2:8f:5d:c9:f7:cb:5e: 5f:bf:8e:4b:b7:12:a7:b4:75:00:5b:14:08:11:9e: 28:e9:fa:33:94:e1:fd:56:de:5f:a0:de:59:da:19: 09:c4:69:9e:27:5e:ef:a9:f2:7f:5d:ab:ff:9f:22: cd:fb:e7:86:db:d1:db:fe:78:c5:dc:b4:a6:29:99: 9d:af:98:18:de:db:fc:42:b4:f1:aa:02:d7:3b:fd: d9:b0:8d:af:55:51:b5:69:3d:d0:69:3d:12:16:7a: 34:2e:2a:31:37:39:33:a0:4c:36:db:f6:61:1a:4e: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1A:B7:95:41:37:B0:35:0A:AB:8D:6B:59:E1:99:74:C7:F6:94:15 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/khq3lUE3sDUKq41rWeGZdMf2lBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.130.0/24 31.58.140.0/24 Signature Algorithm: sha256WithRSAEncryption 29:2e:2b:bb:d4:32:b5:32:10:25:5d:94:d9:c9:ea:27:ea:68: 02:cc:83:5d:1e:6f:4d:d6:51:35:56:76:62:86:db:ac:af:1e: 08:f7:51:e2:0b:38:80:48:d6:13:3b:5b:33:30:28:0f:dd:1a: e2:d0:0a:19:c5:51:eb:ca:be:65:ae:19:aa:16:e6:7b:16:79: 2d:cc:12:90:fc:1d:ec:dc:3b:44:12:67:df:2c:ea:97:3a:50: 48:88:0f:b4:70:f4:35:c6:a8:56:3b:d1:b1:ec:87:b6:72:da: 03:4c:cf:59:50:c3:52:52:d0:69:0d:19:09:cf:61:f6:c9:bc: 79:3b:bf:51:ef:ee:1a:6e:9f:74:91:10:f1:8c:18:03:61:08: 8e:eb:60:e9:19:8e:b3:65:b5:d6:5c:60:da:7f:76:db:4d:1f: a9:06:d3:3b:af:96:28:9e:db:ba:29:56:3f:0d:a3:55:70:38: 64:c4:e0:7d:d7:b7:92:e3:8d:47:d0:14:53:22:d1:87:8e:71: a9:b9:f9:35:35:8d:fc:55:9d:f2:03:71:e4:0e:53:0f:6f:79: ea:ed:69:ca:38:f5:e1:44:7f:d8:fd:25:fe:53:c1:fb:88:21: 22:00:5d:97:75:f0:be:53:f2:aa:84:4b:86:53:fd:05:11:a5: 60:75:39:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hK3dJ+tZptlx8FtgSiNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjFhYjc5NTQxMzdiMDM1MGFhYjhkNmI1OWUxOTk3NGM3ZjY5NDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U8VpsVt10+xUrKE9gGutQF6gNl3 go663hg/CPKKi+ny7VOTuSLywAbPPQeBlvwg/hHhh67FnFIfXsYxv/x9QPi3m0Fb NTDaybqQKNIU3Lbf04vuI9FAd5uHJaU4xW4Zi29WXZfLehMWCK99Pe3Rtj4c7vVR Qqkn9y7UVjj6pIqRbSMDNAjIYVYWOnCmAbKPXcn3y15fv45LtxKntHUAWxQIEZ4o 6fozlOH9Vt5foN5Z2hkJxGmeJ17vqfJ/Xav/nyLN++eG29Hb/njF3LSmKZmdr5gY 3tv8QrTxqgLXO/3ZsI2vVVG1aT3QaT0SFno0LioxNzkzoEw22/ZhGk6KNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJIat5VBN7A1CquNa1nhmXTH9pQVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEva2hxM2xVRTNzRFVLcTQxcldlR1pkTWYybEJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmCAwQA HzqMMA0GCSqGSIb3DQEBCwUAA4IBAQApLiu71DK1MhAlXZTZyeon6mgCzINdHm9N 1lE1VnZihtusrx4I91HiCziASNYTO1szMCgP3Rri0AoZxVHryr5lrhmqFuZ7Fnkt zBKQ/B3s3DtEEmffLOqXOlBIiA+0cPQ1xqhWO9Gx7Ie2ctoDTM9ZUMNSUtBpDRkJ z2H2ybx5O79R7+4abp90kRDxjBgDYQiO62DpGY6zZbXWXGDaf3bbTR+pBtM7r5Yo ntu6KVY/DaNVcDhkxOB917eS441H0BRTItGHjnGpufk1NY38VZ3yA3HkDlMPb3nq 7WnKOPXhRH/Y/SX+U8H7iCEiAF2XdfC+U/KqhEuGU/0FEaVgdTkG -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:55 2026 by rpki-client