This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lZd73mW6Z0vSz8WXjNujsaqNehU.roa File: lZd73mW6Z0vSz8WXjNujsaqNehU.roa (raw, json) Hash identifier: Un53WNa+HafCILUzt1nxS4VZDsdP8CCPAJoxzKUU4OA= Subject key identifier: 95:97:7B:DE:65:BA:67:4B:D2:CF:C5:97:8C:DB:A3:B1:AA:8D:7A:15 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A0C80FB0E3D4E2D83BB68D2B0782 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lZd73mW6Z0vSz8WXjNujsaqNehU.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208765 IP address blocks: 31.56.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a0:c8:0f:b0:e3:d4:e2:d8:3b:b6:8d:2b:07:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95977bde65ba674bd2cfc5978cdba3b1aa8d7a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ce:23:04:ae:5b:cf:d0:69:1c:de:62:2c:40: 7b:6a:28:0f:1c:95:f1:c5:ec:57:a8:d0:f8:6b:42: e9:01:eb:fa:b6:33:c6:ab:76:a6:5c:cd:5e:7c:6f: e4:23:fb:76:c1:4d:14:02:c2:2e:3a:26:08:dc:d7: 9e:51:80:3c:37:6d:21:30:c0:fb:b0:1f:db:7f:ac: a4:06:db:fb:2d:cc:62:07:ea:db:3c:7d:d0:20:94: 5a:3e:5d:2b:06:06:ef:df:96:4b:88:93:16:67:f6: 4b:34:64:aa:bd:e1:94:f2:f2:3c:d7:dd:3b:67:bc: b2:f7:e1:c3:ef:15:90:bd:48:a4:27:09:db:55:6b: a8:33:e9:7e:4e:7c:69:6f:37:cd:65:a3:d1:06:b6: fd:b0:35:5b:5d:bd:30:d4:bf:ea:ed:94:9f:5b:55: e0:40:c9:1c:f8:0b:bd:af:b8:0f:2e:09:59:82:e4: 83:47:be:0b:5d:01:9d:70:19:1b:5a:fa:c7:5b:d0: c2:ef:8e:3b:c4:e5:91:82:8a:18:b5:c2:e5:04:91: a0:57:53:8c:90:31:d8:70:bd:38:48:f2:c7:a9:f1: 7e:6e:a6:fa:24:42:08:ed:c3:fb:ad:99:37:f5:9b: a5:3e:e1:a5:f7:29:69:69:21:24:02:c3:4f:84:28: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:97:7B:DE:65:BA:67:4B:D2:CF:C5:97:8C:DB:A3:B1:AA:8D:7A:15 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lZd73mW6Z0vSz8WXjNujsaqNehU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.236.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:0e:91:a2:a3:91:3f:da:c4:b7:d5:84:0d:8c:b9:b2:10:03: b2:56:2e:07:dd:95:fc:c1:98:94:41:d6:15:22:06:46:c0:a2: c9:3b:d0:a9:4e:4a:0c:50:51:aa:85:7f:34:6c:e9:38:9b:45: 3e:4f:ea:83:69:0d:bc:4a:2f:ba:39:be:21:f8:c8:85:fe:28: 76:5c:ae:22:c7:82:27:9d:56:70:6f:07:b0:4f:c1:12:26:ba: 0c:bd:77:3a:45:e1:2b:2a:f2:bb:03:c7:45:35:5e:00:4d:b9: 02:55:a5:4d:be:51:3b:ee:2b:5d:f7:99:c4:b1:2d:d6:c7:9d: 93:0b:5a:c2:20:46:61:c8:46:5a:df:08:7e:0c:30:16:63:6c: 9e:f4:e4:af:66:2a:d0:77:f8:d4:13:c9:15:63:d6:00:83:55: 1f:20:10:eb:d1:9f:0a:a2:a3:c7:9c:f0:fa:e9:ac:a3:4b:75: 44:af:9a:c9:5e:35:7b:7d:9d:d6:be:d6:16:f8:98:91:39:27: 55:82:1e:7b:e8:12:b5:58:74:07:9d:5e:0a:1b:85:5b:e6:3c: 55:62:b7:a9:23:f9:b8:52:d3:a0:d4:18:b1:78:66:79:88:2f: c4:5f:79:07:74:88:97:b6:0e:c1:43:2d:70:de:a2:e0:1e:8b: d2:31:25:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKDID7Dj1OLYO7aNKweCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTk3N2JkZTY1YmE2NzRiZDJjZmM1OTc4Y2RiYTNiMWFhOGQ3YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9s4jBK5bz9BpHN5iLEB7aigPHJXx xexXqND4a0LpAev6tjPGq3amXM1efG/kI/t2wU0UAsIuOiYI3NeeUYA8N20hMMD7 sB/bf6ykBtv7LcxiB+rbPH3QIJRaPl0rBgbv35ZLiJMWZ/ZLNGSqveGU8vI81907 Z7yy9+HD7xWQvUikJwnbVWuoM+l+TnxpbzfNZaPRBrb9sDVbXb0w1L/q7ZSfW1Xg QMkc+Au9r7gPLglZguSDR74LXQGdcBkbWvrHW9DC7447xOWRgooYtcLlBJGgV1OM kDHYcL04SPLHqfF+bqb6JEII7cP7rZk39ZulPuGl9ylpaSEkAsNPhCjVkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWXe95lumdL0s/Fl4zbo7GqjXoVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbFpkNzNtVzZaMHZTejhXWGpOdWpzYXFOZWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzjsMA0G CSqGSIb3DQEBCwUAA4IBAQCaDpGio5E/2sS31YQNjLmyEAOyVi4H3ZX8wZiUQdYV IgZGwKLJO9CpTkoMUFGqhX80bOk4m0U+T+qDaQ28Si+6Ob4h+MiF/ih2XK4ix4In nVZwbwewT8ESJroMvXc6ReErKvK7A8dFNV4ATbkCVaVNvlE77itd95nEsS3Wx52T C1rCIEZhyEZa3wh+DDAWY2ye9OSvZirQd/jUE8kVY9YAg1UfIBDr0Z8KoqPHnPD6 6ayjS3VEr5rJXjV7fZ3WvtYW+JiROSdVgh576BK1WHQHnV4KG4Vb5jxVYrepI/m4 UtOg1BixeGZ5iC/EX3kHdIiXtg7BQy1w3qLgHovSMSXG -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:22 2026 by rpki-client