This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lwjkskorrAojkHr9sGpVsfyRllc.roa File: lwjkskorrAojkHr9sGpVsfyRllc.roa (raw, json) Hash identifier: NDYO9hZHLMaAe4jIyHvdMCjcPPFR0gHwdrZgHfEwIDU= Subject key identifier: 97:08:E4:B2:4A:2B:AC:0A:23:90:7A:FD:B0:6A:55:B1:FC:91:96:57 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B02DD9F3FFD64EDCF7E8B2384327 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lwjkskorrAojkHr9sGpVsfyRllc.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212416 IP address blocks: 31.56.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b0:2d:d9:f3:ff:d6:4e:dc:f7:e8:b2:38:43:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9708e4b24a2bac0a23907afdb06a55b1fc919657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:ed:eb:e3:69:52:f3:20:ce:e9:af:e1:26: df:5a:8c:fe:4a:4d:2c:14:f4:1b:6a:05:27:a7:5f: 3f:59:bc:5b:58:e3:fe:02:f7:75:f7:01:52:00:02: 28:95:9b:9c:f4:fd:b7:32:1d:c3:6d:d7:f8:3e:d9: 1a:d3:c3:01:dd:68:d0:aa:af:52:cf:50:d9:f0:1b: 54:b4:9f:a4:0f:e3:05:ca:47:03:bf:e8:79:0e:e2: 59:bd:e9:ff:f3:10:ec:7e:79:63:aa:65:e6:45:8f: 88:20:7b:5d:18:75:5b:a9:16:50:3d:7c:ad:ff:05: 78:7e:ad:93:d7:a9:cf:f9:a8:74:98:06:8f:74:12: ba:1e:de:77:1c:26:f6:29:5e:74:67:65:4d:e0:f4: 2b:15:a5:b7:5a:f6:c0:89:a0:e2:90:33:7d:47:43: ee:5d:88:4f:c7:f8:58:35:41:41:5a:5b:9b:07:99: 2b:60:0f:dc:cd:2b:11:d2:96:9e:a1:b9:84:05:ec: 4e:d9:76:1f:52:72:eb:0a:d4:d0:b0:dd:1f:2f:59: 0c:f2:0f:39:94:a1:1b:16:3d:90:bc:b8:af:b6:f3: ea:53:6a:b4:56:c4:97:15:e8:a8:de:45:1e:a0:14: a3:18:a9:bd:be:0f:44:b8:96:2e:99:30:76:f6:dc: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:E4:B2:4A:2B:AC:0A:23:90:7A:FD:B0:6A:55:B1:FC:91:96:57 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lwjkskorrAojkHr9sGpVsfyRllc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.118.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:3f:48:f0:60:62:46:81:c8:c4:e7:6a:32:7f:15:05:9b:ca: e0:89:bd:fb:3c:25:22:8e:98:79:d0:6b:04:cb:18:84:d4:e6: 69:4d:c7:33:9d:0a:f3:a6:6c:eb:01:6d:ab:7a:aa:ba:02:b4: 96:05:65:7b:ed:f4:39:57:92:77:80:b4:cd:38:a3:0b:11:38: 96:34:f9:c2:ca:db:b8:ef:05:1c:ba:32:f5:68:5f:e1:b9:27: 5d:8e:51:1f:91:1d:6b:eb:51:1d:81:50:e8:8d:18:04:6c:ee: 8d:8a:3d:0f:1e:45:a4:76:ae:33:ef:45:44:34:7e:c8:81:37: cd:89:10:5b:aa:04:5c:81:94:ba:6b:64:60:74:5e:b6:07:7e: 33:91:49:f3:0f:0a:91:06:d3:62:0b:b8:86:66:12:a6:91:67: fa:cd:6c:52:97:aa:7f:1d:6a:8a:34:95:e0:19:d2:5a:f7:88: f8:ac:fe:82:80:12:3c:15:2b:89:7e:da:62:95:0d:eb:3d:83: 11:e9:52:44:e3:82:33:23:77:60:c9:a8:02:4f:9d:dc:bb:21: 63:36:cd:ab:d7:34:4b:7e:0e:cf:fe:81:9d:14:4e:0e:f0:56: f7:a9:77:d3:32:fb:b0:58:ed:23:35:9b:5a:7d:cf:b6:7c:89: 96:00:f5:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLAt2fP/1k7c9+iyOEMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzA4ZTRiMjRhMmJhYzBhMjM5MDdhZmRiMDZhNTViMWZjOTE5NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve7t6+NpUvMgzumv4SbfWoz+Sk0s FPQbagUnp18/WbxbWOP+Avd19wFSAAIolZuc9P23Mh3Dbdf4Ptka08MB3WjQqq9S z1DZ8BtUtJ+kD+MFykcDv+h5DuJZven/8xDsfnljqmXmRY+IIHtdGHVbqRZQPXyt /wV4fq2T16nP+ah0mAaPdBK6Ht53HCb2KV50Z2VN4PQrFaW3WvbAiaDikDN9R0Pu XYhPx/hYNUFBWlubB5krYA/czSsR0paeobmEBexO2XYfUnLrCtTQsN0fL1kM8g85 lKEbFj2QvLivtvPqU2q0VsSXFeio3kUeoBSjGKm9vg9EuJYumTB29txNqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJcI5LJKK6wKI5B6/bBqVbH8kZZXMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbHdqa3Nrb3JyQW9qa0hyOXNHcFZzZnlSbGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzh2MA0G CSqGSIb3DQEBCwUAA4IBAQCdP0jwYGJGgcjE52oyfxUFm8rgib37PCUijph50GsE yxiE1OZpTccznQrzpmzrAW2reqq6ArSWBWV77fQ5V5J3gLTNOKMLETiWNPnCytu4 7wUcujL1aF/huSddjlEfkR1r61EdgVDojRgEbO6Nij0PHkWkdq4z70VENH7IgTfN iRBbqgRcgZS6a2RgdF62B34zkUnzDwqRBtNiC7iGZhKmkWf6zWxSl6p/HWqKNJXg GdJa94j4rP6CgBI8FSuJftpilQ3rPYMR6VJE44IzI3dgyagCT53cuyFjNs2r1zRL fg7P/oGdFE4O8Fb3qXfTMvuwWO0jNZtafc+2fImWAPXo -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:36 2026 by rpki-client