This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mEiRHmDjVCdLn2O3GxYFTw7XQu0.roa File: mEiRHmDjVCdLn2O3GxYFTw7XQu0.roa (raw, json) Hash identifier: LNSdOgpVp872kbCu1w9UDmhqUzg99PZKzBBVlv6+KbY= Subject key identifier: 98:48:91:1E:60:E3:54:27:4B:9F:63:B7:1B:16:05:4F:0E:D7:42:ED Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844FB37E271071EA106A8A86B13D9D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mEiRHmDjVCdLn2O3GxYFTw7XQu0.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 31.56.106.0/24 maxlen: 24 31.58.221.0/24 maxlen: 24 31.59.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4f:b3:7e:27:10:71:ea:10:6a:8a:86:b1:3d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9848911e60e354274b9f63b71b16054f0ed742ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:99:6f:1a:61:35:05:cb:57:9d:cf:6d:cc: 40:1c:97:d4:6c:fe:8d:db:e6:3c:df:90:9f:78:87: 9f:1b:32:fe:7b:08:1d:83:85:79:f7:a8:75:97:e8: fe:4b:e3:47:01:1b:af:e4:6f:08:60:3d:66:d3:f7: da:dd:93:28:e2:34:95:92:d3:a4:c7:74:47:4b:b5: 1a:6c:a2:a4:41:a2:13:4e:c4:8f:2e:9f:2f:36:2a: c2:1c:9b:77:b2:c6:60:7a:5e:19:e6:c2:3d:b2:7f: c4:a7:f7:d1:f0:9d:99:ea:47:97:ea:0e:51:50:20: ca:29:ab:db:e5:05:48:10:46:53:0e:1f:db:c5:d2: 99:f2:ac:58:cc:10:ba:08:7f:53:8c:2e:4e:fb:4b: ac:14:ca:86:08:77:78:83:d1:86:7c:92:ea:85:0a: 02:a9:fc:d4:b1:bd:4a:fc:b7:01:01:e4:d2:9e:c8: c9:8f:b1:58:c9:aa:dd:8e:09:03:55:43:16:e9:72: 8d:96:67:87:97:df:bc:3a:b4:3b:22:10:5c:a6:c4: 88:84:60:e7:0f:83:fa:5c:ef:ef:0b:b5:16:b3:77: c9:89:fb:c5:c2:0d:68:6e:d5:bb:af:63:fa:39:54: 62:a8:1d:7f:8c:42:ec:c2:ee:5b:46:ae:41:21:c9: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:48:91:1E:60:E3:54:27:4B:9F:63:B7:1B:16:05:4F:0E:D7:42:ED X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mEiRHmDjVCdLn2O3GxYFTw7XQu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.106.0/24 31.58.221.0/24 31.59.230.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:e8:0d:e0:35:c1:9c:a5:f9:24:7f:fa:3a:70:66:b6:d8:8e: 6b:ad:5c:61:84:83:5b:e5:22:cd:0c:72:a4:22:24:f6:07:e3: a4:e5:42:c3:ea:2b:ac:3b:c3:55:33:e8:a6:ce:92:50:c3:67: ef:fe:f7:52:4c:cf:88:fd:67:8a:f4:12:53:58:21:25:9a:0f: b0:b3:d6:30:18:75:8b:c9:d4:e1:92:80:f4:d2:7e:e8:85:83: 65:98:69:3b:e2:a1:25:89:68:58:b9:52:2e:37:2f:71:63:6e: 24:77:0f:8f:2b:82:49:f2:b8:df:86:36:ab:cc:3b:4a:55:fb: 2a:97:b3:e2:75:04:a4:8d:46:82:e4:ed:4d:06:f3:c4:f6:e7: 28:ba:33:da:a4:6d:c8:64:03:bb:33:2b:20:d6:21:52:f3:19: dc:f4:d3:b7:0d:35:c1:12:69:19:c3:c3:18:22:2b:87:e8:a3: e5:cc:bc:08:29:48:1a:5f:87:8d:f4:d9:47:6d:c7:72:cf:fb: a4:4c:ab:99:37:8f:f2:07:19:82:62:39:3d:a9:93:69:ed:b4: 1e:a1:3f:46:02:7b:7c:e5:af:85:10:ec:a7:7d:6d:32:72:a0: 75:20:91:24:26:48:df:c0:1a:ce:92:c2:2f:a3:3e:fa:2e:98: 0f:38:47:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hE+zficQceoQaoqGsT2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODQ4OTExZTYwZTM1NDI3NGI5ZjYzYjcxYjE2MDU0ZjBlZDc0MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b+ZbxphNQXLV53PbcxAHJfUbP6N 2+Y835CfeIefGzL+ewgdg4V596h1l+j+S+NHARuv5G8IYD1m0/fa3ZMo4jSVktOk x3RHS7UabKKkQaITTsSPLp8vNirCHJt3ssZgel4Z5sI9sn/Ep/fR8J2Z6keX6g5R UCDKKavb5QVIEEZTDh/bxdKZ8qxYzBC6CH9TjC5O+0usFMqGCHd4g9GGfJLqhQoC qfzUsb1K/LcBAeTSnsjJj7FYyardjgkDVUMW6XKNlmeHl9+8OrQ7IhBcpsSIhGDn D4P6XO/vC7UWs3fJifvFwg1obtW7r2P6OVRiqB1/jELswu5bRq5BIclAZwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJhIkR5g41QnS59jtxsWBU8O10LtMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbUVpUkhtRGpWQ2RMbjJPM0d4WUZUdzdYUXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhqAwQA HzrdAwQAHzvmMA0GCSqGSIb3DQEBCwUAA4IBAQBd6A3gNcGcpfkkf/o6cGa22I5r rVxhhINb5SLNDHKkIiT2B+Ok5ULD6iusO8NVM+imzpJQw2fv/vdSTM+I/WeK9BJT WCElmg+ws9YwGHWLydThkoD00n7ohYNlmGk74qEliWhYuVIuNy9xY24kdw+PK4JJ 8rjfhjarzDtKVfsql7PidQSkjUaC5O1NBvPE9ucoujPapG3IZAO7Mysg1iFS8xnc 9NO3DTXBEmkZw8MYIiuH6KPlzLwIKUgaX4eN9NlHbcdyz/ukTKuZN4/yBxmCYjk9 qZNp7bQeoT9GAnt85a+FEOynfW0ycqB1IJEkJkjfwBrOksIvoz76LpgPOEeQ -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:07 2026 by rpki-client