This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lefLxgPtg4tihBp1JeA6vgbk9vM.roa File: lefLxgPtg4tihBp1JeA6vgbk9vM.roa (raw, json) Hash identifier: EwCSHUIYFgLT5Kws3g0v226Xa/w6DOf3myhLInJZflg= Subject key identifier: 95:E7:CB:C6:03:ED:83:8B:62:84:1A:75:25:E0:3A:BE:06:E4:F6:F3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BEA592D5CA19FD7FE0B0E2C4FD715A694 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lefLxgPtg4tihBp1JeA6vgbk9vM.roa Signing time: Fri 23 Jan 2026 10:14:31 +0000 ROA not before: Fri 23 Jan 2026 10:14:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17497 IP address blocks: 31.59.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:59:2d:5c:a1:9f:d7:fe:0b:0e:2c:4f:d7:15:a6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 23 10:14:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95e7cbc603ed838b62841a7525e03abe06e4f6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:1a:02:ab:3a:f8:8d:0f:ce:59:ba:bd:43: c7:ce:e9:3b:12:16:78:89:bc:d9:1d:73:1d:7e:f7: 70:e3:67:1b:5f:fd:35:18:8e:7c:ef:83:7a:0c:6e: c6:99:88:8a:ba:cc:4a:2d:0f:68:c5:29:9d:0f:3d: 2e:49:5b:25:4c:b3:1e:b6:7a:99:55:45:81:38:4e: 8a:9e:96:d3:6a:75:fc:d8:7f:fe:73:d1:35:14:3f: a7:e3:20:a1:36:40:cf:77:96:34:88:21:b1:c9:c7: 22:e0:c4:a5:31:d7:35:c0:05:ec:71:e9:b0:af:a3: 0c:aa:fd:bc:62:de:d1:17:b8:24:e0:20:d2:98:a5: 04:c1:6a:26:d5:23:b2:1f:0c:38:9e:9f:4d:14:78: 6c:dd:b9:00:a4:68:27:4f:b9:0b:e4:89:49:0d:6f: a6:96:c4:30:5b:18:33:cf:27:58:6e:65:50:86:6c: bd:d7:3b:9d:35:02:46:d5:e5:5d:04:c4:fa:73:8f: f7:b0:6d:ee:e9:6b:41:d8:be:cc:12:e4:d9:57:c9: b0:2b:d1:18:fa:0e:13:ab:50:83:6e:62:e5:20:aa: 1f:48:9b:d0:79:35:47:a1:87:c3:3f:cd:7b:4e:1d: f1:15:0e:ee:f3:52:1f:26:74:6a:50:a3:60:84:03: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:CB:C6:03:ED:83:8B:62:84:1A:75:25:E0:3A:BE:06:E4:F6:F3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lefLxgPtg4tihBp1JeA6vgbk9vM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.172.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e0:40:b7:92:c5:44:23:92:09:56:43:47:c7:aa:14:2f:0c: 1d:dc:e8:6a:a6:b8:97:76:2f:fb:95:11:1f:58:58:db:a9:ba: 50:4b:61:ff:cb:04:ea:ed:77:f6:1f:d4:02:08:d8:f5:82:88: 0a:b8:b4:95:b6:32:7e:77:73:12:52:a5:7f:f7:e7:31:8c:2d: 2f:1a:35:8f:18:6f:b7:81:c5:bf:65:ae:62:ae:a8:66:8c:43: 12:58:96:be:53:e2:62:cd:95:08:e5:25:89:c1:7a:f3:20:c5: d1:94:e2:0e:a0:5f:7c:cc:d7:f9:20:fe:a3:84:de:d7:cd:8e: 68:3b:89:8f:a2:14:c5:98:86:c7:2d:0c:21:4f:74:e8:19:6f: 16:1a:ac:41:77:db:52:fa:ee:81:94:6e:79:d4:bc:d6:91:86: 26:a3:1a:95:65:7a:27:ab:90:22:a8:6a:ee:c7:e9:21:8a:42: 2d:0e:ea:22:ee:9c:10:ce:f1:46:a7:5e:44:d9:54:fa:c4:36: 43:c6:7e:9c:6a:14:71:6d:fb:9e:f3:04:29:08:02:6c:72:b4: b8:34:f8:f5:aa:23:36:80:93:6f:47:b3:61:eb:7b:bc:e0:94: 1c:ae:c8:12:d5:29:57:56:88:f1:58:75:bc:13:bd:8b:90:68: 22:66:3e:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvqWS1coZ/X/gsOLE/XFaaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIzMTAxNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWU3Y2JjNjAzZWQ4MzhiNjI4NDFhNzUyNWUwM2FiZTA2ZTRmNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38AaAqs6+I0Pzlm6vUPHzuk7EhZ4 ibzZHXMdfvdw42cbX/01GI5874N6DG7GmYiKusxKLQ9oxSmdDz0uSVslTLMetnqZ VUWBOE6KnpbTanX82H/+c9E1FD+n4yChNkDPd5Y0iCGxycci4MSlMdc1wAXscemw r6MMqv28Yt7RF7gk4CDSmKUEwWom1SOyHww4np9NFHhs3bkApGgnT7kL5IlJDW+m lsQwWxgzzydYbmVQhmy91zudNQJG1eVdBMT6c4/3sG3u6WtB2L7MEuTZV8mwK9EY +g4Tq1CDbmLlIKofSJvQeTVHoYfDP817Th3xFQ7u81IfJnRqUKNghAMsKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXny8YD7YOLYoQadSXgOr4G5PbzMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbGVmTHhnUHRnNHRpaEJwMUplQTZ2Z2JrOXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzusMA0G CSqGSIb3DQEBCwUAA4IBAQAl4EC3ksVEI5IJVkNHx6oULwwd3OhqpriXdi/7lREf WFjbqbpQS2H/ywTq7Xf2H9QCCNj1gogKuLSVtjJ+d3MSUqV/9+cxjC0vGjWPGG+3 gcW/Za5irqhmjEMSWJa+U+JizZUI5SWJwXrzIMXRlOIOoF98zNf5IP6jhN7XzY5o O4mPohTFmIbHLQwhT3ToGW8WGqxBd9tS+u6BlG551LzWkYYmoxqVZXonq5AiqGru x+khikItDuoi7pwQzvFGp15E2VT6xDZDxn6cahRxbfue8wQpCAJscrS4NPj1qiM2 gJNvR7Nh63u84JQcrsgS1SlXVojxWHW8E72LkGgiZj7v -----END CERTIFICATE-----Generated at Sat Jan 24 03:50:36 2026 by rpki-client