This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l508JYxV4rJ-r4nGyxXBgIQ62yM.roa File: l508JYxV4rJ-r4nGyxXBgIQ62yM.roa (raw, json) Hash identifier: 1R2fSogbnkEW6c00w0KEdbMuZYz+X4+3aJnzXweNTHM= Subject key identifier: 97:9D:3C:25:8C:55:E2:B2:7E:AF:89:C6:CB:15:C1:80:84:3A:DB:23 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846E13D6045C1F738FD9EC9C99FE64 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l508JYxV4rJ-r4nGyxXBgIQ62yM.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56655 IP address blocks: 31.56.194.0/24 maxlen: 24 31.56.216.0/24 maxlen: 24 31.56.217.0/24 maxlen: 24 31.57.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6e:13:d6:04:5c:1f:73:8f:d9:ec:9c:99:fe:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=979d3c258c55e2b27eaf89c6cb15c180843adb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6a:43:5d:e0:09:2a:08:3e:be:61:a2:f8:d0: d0:cb:ee:02:8d:b2:84:dc:60:59:2f:fd:d9:fb:07: 09:36:9b:ca:59:75:6a:48:9b:04:02:f7:0d:8e:72: d1:c7:f1:ef:15:46:ad:13:c0:5a:df:58:78:e3:4a: 68:d6:19:b0:f0:e0:6a:fe:c6:f0:77:f7:c6:83:77: f9:44:df:b2:f9:0e:9a:7d:be:ab:9f:28:87:fe:1b: 52:36:b2:b6:bd:da:51:8f:7c:95:fe:56:c1:f6:d9: b0:8c:b0:e9:ba:5a:d7:ad:53:c5:d7:4d:38:fb:2f: fe:22:09:5e:63:02:99:4f:a8:5d:19:f7:71:68:47: 95:97:b9:f3:0a:ed:e2:07:82:39:d0:b4:a0:e9:71: bd:61:c7:fa:aa:7b:06:58:ec:38:4c:7f:37:53:22: 8c:b2:f5:67:4a:08:f4:e8:e3:a3:8e:84:02:c9:5d: 43:8c:0c:0d:24:91:53:12:89:e5:e1:8c:6f:4e:59: ff:96:9e:69:0b:28:53:52:c0:7f:6c:ee:39:38:b8: 22:e3:53:f0:82:b9:e4:81:d7:2c:24:ea:f2:f9:43: 0b:0e:ed:28:d2:7e:f3:a6:c4:26:10:be:0a:2a:f6: e4:62:36:1e:7e:03:7a:d1:2d:04:36:45:47:94:01: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9D:3C:25:8C:55:E2:B2:7E:AF:89:C6:CB:15:C1:80:84:3A:DB:23 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/l508JYxV4rJ-r4nGyxXBgIQ62yM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.194.0/24 31.56.216.0/23 31.57.15.0/24 Signature Algorithm: sha256WithRSAEncryption 32:8b:76:f6:8e:9a:fc:88:a2:a6:fe:3f:cc:37:f7:77:59:6b: fd:e0:fc:e9:1e:e7:65:7b:92:6c:9a:cc:fe:b9:aa:ed:ab:e7: e0:71:38:93:d1:ef:44:8f:54:a6:94:27:de:81:b9:39:ec:a8: 93:c4:0c:ab:b3:dc:01:68:2e:43:f3:4b:c6:c8:fa:a2:35:02: 38:db:10:5f:2c:cb:96:0c:e3:ea:09:60:f6:e2:d4:62:1e:6a: 11:b7:be:53:57:8a:9b:20:1c:03:c7:b5:c3:77:85:41:63:9d: 97:a7:11:aa:d2:73:cc:a6:37:1d:83:fe:fd:a0:1c:c2:59:db: fa:fe:fe:ba:ba:60:50:66:b0:ea:46:4b:8c:6e:9c:e1:05:98: 57:cc:5d:1f:8e:6c:a7:5f:0b:84:5d:20:fa:f5:2a:35:d8:25: a7:9b:d6:73:48:74:6f:7b:c7:f4:75:47:eb:8c:30:b5:1a:04: 9c:90:c7:4c:22:b8:a7:56:25:12:2f:3b:bc:df:a8:dd:df:60: e5:fb:58:cd:73:63:f9:95:df:a2:c6:51:74:e2:e5:34:82:b7: 64:d5:d9:74:9f:b2:7e:8c:12:1b:3b:a3:9a:fd:a3:ce:e6:80: 12:12:c5:45:3b:cd:bf:8d:7b:ab:10:19:e5:87:2a:48:e0:70: 6e:90:f3:9e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hG4T1gRcH3OP2eycmf5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzlkM2MyNThjNTVlMmIyN2VhZjg5YzZjYjE1YzE4MDg0M2FkYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WpDXeAJKgg+vmGi+NDQy+4CjbKE 3GBZL/3Z+wcJNpvKWXVqSJsEAvcNjnLRx/HvFUatE8Ba31h440po1hmw8OBq/sbw d/fGg3f5RN+y+Q6afb6rnyiH/htSNrK2vdpRj3yV/lbB9tmwjLDpulrXrVPF1004 +y/+IgleYwKZT6hdGfdxaEeVl7nzCu3iB4I50LSg6XG9Ycf6qnsGWOw4TH83UyKM svVnSgj06OOjjoQCyV1DjAwNJJFTEonl4YxvTln/lp5pCyhTUsB/bO45OLgi41Pw grnkgdcsJOry+UMLDu0o0n7zpsQmEL4KKvbkYjYefgN60S0ENkVHlAF26QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJedPCWMVeKyfq+JxssVwYCEOtsjMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbDUwOEpZeFY0ckotcjRuR3l4WEJnSVE2MnlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjCAwQB HzjYAwQAHzkPMA0GCSqGSIb3DQEBCwUAA4IBAQAyi3b2jpr8iKKm/j/MN/d3WWv9 4PzpHudle5Jsmsz+uartq+fgcTiT0e9Ej1SmlCfegbk57KiTxAyrs9wBaC5D80vG yPqiNQI42xBfLMuWDOPqCWD24tRiHmoRt75TV4qbIBwDx7XDd4VBY52XpxGq0nPM pjcdg/79oBzCWdv6/v66umBQZrDqRkuMbpzhBZhXzF0fjmynXwuEXSD69So12CWn m9ZzSHRve8f0dUfrjDC1GgSckMdMIrinViUSLzu836jd32Dl+1jNc2P5ld+ixlF0 4uU0grdk1dl0n7J+jBIbO6Oa/aPO5oASEsVFO82/jXurEBnlhypI4HBukPOe -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:58 2026 by rpki-client