This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lBHvWADh8pIa8jbJ-eE7J2rK7dQ.roa File: lBHvWADh8pIa8jbJ-eE7J2rK7dQ.roa (raw, json) Hash identifier: vTMofHBK4CXDFqBFjlbz/SWrgNpiAPhcXN2iqAOBLhA= Subject key identifier: 94:11:EF:58:00:E1:F2:92:1A:F2:36:C9:F9:E1:3B:27:6A:CA:ED:D4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F847E0413B899F50FCEBDEAA016AF2C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lBHvWADh8pIa8jbJ-eE7J2rK7dQ.roa Signing time: Fri 02 Jan 2026 16:22:28 +0000 ROA not before: Fri 02 Jan 2026 16:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135682 IP address blocks: 31.56.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7e:04:13:b8:99:f5:0f:ce:bd:ea:a0:16:af:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9411ef5800e1f2921af236c9f9e13b276acaedd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:1d:86:c4:94:e1:77:4f:c5:1a:96:32:9e: 29:37:71:88:b9:c0:6b:62:3a:0f:cb:ab:bc:07:95: 6e:a5:39:e7:23:f6:65:75:e5:60:ce:7b:0a:a1:d3: 81:ef:82:04:b6:47:f1:79:fc:b1:18:1d:0e:72:49: cc:08:2e:53:27:cd:30:50:b4:c0:2f:4d:c4:4a:30: de:28:13:2e:f3:60:5e:f3:68:30:1e:d4:a5:d8:9a: f9:a5:25:c7:a7:cd:33:b1:5b:4e:3b:d2:13:f5:0f: d1:a2:f5:f5:b5:e9:fe:85:bc:63:3f:89:1d:d6:e6: 6f:07:db:27:c9:2b:b8:22:58:6b:eb:fb:ed:d3:da: d5:be:24:b6:c6:04:3b:1d:eb:53:84:37:b6:15:69: 88:78:a4:95:2e:85:61:ff:2d:86:f0:e8:6b:f6:fc: 33:c1:e6:7e:d3:7d:98:15:bc:5a:e5:09:ca:db:fe: 88:f5:c3:b9:17:52:d3:42:27:06:66:bc:07:f9:85: 7f:a6:1f:b6:b0:aa:13:83:28:2a:67:6e:6d:e2:2f: da:46:ca:1c:9f:2f:99:b8:e4:cf:c3:8b:52:89:3b: 64:71:b5:a2:06:67:ff:98:fe:d7:84:69:6e:3e:43: 5c:59:bb:15:9f:0d:eb:99:1d:7a:93:1e:8a:4f:4e: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:EF:58:00:E1:F2:92:1A:F2:36:C9:F9:E1:3B:27:6A:CA:ED:D4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lBHvWADh8pIa8jbJ-eE7J2rK7dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.96.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:fb:a3:53:39:95:bf:bc:75:8f:4f:d1:ab:a4:d9:c8:1d:ce: ef:b6:d0:02:44:ef:a2:ad:48:83:65:61:0b:8e:5e:5f:70:f4: 4e:39:65:45:c0:74:09:10:fe:b7:8d:5e:22:e9:a1:c5:37:48: 22:76:f7:1a:e2:15:cd:57:06:b3:d1:35:ea:d5:bd:7c:dc:1b: 61:ed:0b:31:aa:a6:d5:9f:b0:40:69:d1:8e:32:82:f3:50:08: 46:21:34:bf:61:a7:4d:21:80:2b:db:3a:6a:62:26:c3:e9:b1: e6:41:da:96:6e:f1:67:57:86:e2:91:a3:5c:56:5a:91:bb:67: 76:8b:e6:cb:8a:ed:81:b5:61:5d:49:a1:8f:3c:aa:39:22:43: b6:01:1b:47:44:46:66:d3:33:2c:5f:07:28:96:5b:ab:a7:07: f5:c4:bb:3e:5c:de:3f:d9:ec:35:08:bb:65:25:b5:99:28:1c: fe:b6:90:50:28:2d:cb:a8:a4:e9:d4:cd:d4:87:fa:07:a8:52: e7:45:32:c9:7d:df:74:71:18:b2:74:c5:e7:71:f0:65:cd:fc: 98:31:be:0e:d1:90:b1:6d:cf:92:c9:1c:c0:a3:71:d3:e3:d3: ee:f8:fd:02:7c:25:e3:b1:5a:98:ac:0d:38:4a:89:e0:23:1a: 43:8f:ca:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hH4EE7iZ9Q/OveqgFq8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDExZWY1ODAwZTFmMjkyMWFmMjM2YzlmOWUxM2IyNzZhY2FlZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ8dhsSU4XdPxRqWMp4pN3GIucBr YjoPy6u8B5VupTnnI/ZldeVgznsKodOB74IEtkfxefyxGB0OcknMCC5TJ80wULTA L03ESjDeKBMu82Be82gwHtSl2Jr5pSXHp80zsVtOO9IT9Q/RovX1ten+hbxjP4kd 1uZvB9snySu4Ilhr6/vt09rVviS2xgQ7HetThDe2FWmIeKSVLoVh/y2G8Ohr9vwz weZ+032YFbxa5QnK2/6I9cO5F1LTQicGZrwH+YV/ph+2sKoTgygqZ25t4i/aRsoc ny+ZuOTPw4tSiTtkcbWiBmf/mP7XhGluPkNcWbsVnw3rmR16kx6KT07uaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQR71gA4fKSGvI2yfnhOydqyu3UMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbEJIdldBRGg4cElhOGpiSi1lRTdKMnJLN2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhgMA0G CSqGSIb3DQEBCwUAA4IBAQAt+6NTOZW/vHWPT9GrpNnIHc7vttACRO+irUiDZWEL jl5fcPROOWVFwHQJEP63jV4i6aHFN0gidvca4hXNVwaz0TXq1b183Bth7QsxqqbV n7BAadGOMoLzUAhGITS/YadNIYAr2zpqYibD6bHmQdqWbvFnV4bikaNcVlqRu2d2 i+bLiu2BtWFdSaGPPKo5IkO2ARtHREZm0zMsXwcollurpwf1xLs+XN4/2ew1CLtl JbWZKBz+tpBQKC3LqKTp1M3Uh/oHqFLnRTLJfd90cRiydMXncfBlzfyYMb4O0ZCx bc+SyRzAo3HT49Pu+P0CfCXjsVqYrA04SongIxpDj8pe -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:02 2026 by rpki-client