This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mFwJIV534Ix2j_8hyt0cevFrhlM.roa File: mFwJIV534Ix2j_8hyt0cevFrhlM.roa (raw, json) Hash identifier: 3ZDG891nvx60IgI3urw2rwYdNJDjvfi1lH8sm7fI0XI= Subject key identifier: 98:5C:09:21:5E:77:E0:8C:76:8F:FF:21:CA:DD:1C:7A:F1:6B:86:53 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84AA0F5D276864D27F6E1EE27D6D1B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mFwJIV534Ix2j_8hyt0cevFrhlM.roa Signing time: Fri 02 Jan 2026 16:22:39 +0000 ROA not before: Fri 02 Jan 2026 16:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211407 IP address blocks: 31.56.78.0/24 maxlen: 24 31.57.178.0/24 maxlen: 24 31.58.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:aa:0f:5d:27:68:64:d2:7f:6e:1e:e2:7d:6d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=985c09215e77e08c768fff21cadd1c7af16b8653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:42:86:87:a6:d5:bf:e3:e7:fa:28:bb:c3: 74:2d:02:86:bf:77:01:1d:40:53:a5:6b:bf:e7:c1: d2:e4:d5:31:7a:c6:ee:ec:cc:47:6f:00:85:9b:cf: 53:e2:b6:c8:ef:54:a7:4b:cb:53:5c:04:07:2d:cf: 24:b9:8a:af:fe:98:6c:f3:4a:a8:45:44:b6:b1:bc: 92:cd:38:0d:b9:9a:45:ef:8d:69:97:5f:09:62:e1: 3a:63:54:bd:39:47:19:79:a5:c9:95:ea:ed:d1:ee: a8:6a:86:df:68:b5:81:54:fc:ff:9b:f4:50:b9:c1: 45:3f:a1:74:64:66:bf:c4:af:d7:77:27:78:1e:16: e5:0e:0f:66:17:60:5a:8a:a1:55:88:bb:23:8b:b0: 3f:de:bd:b4:48:c3:18:6e:fe:f3:e5:e0:1b:49:21: fa:22:9f:a6:38:10:80:76:b9:eb:09:75:65:9f:4d: 2f:6d:17:24:5f:34:1a:1f:64:ef:46:cd:f3:53:a0: 3e:8e:83:a1:e4:4f:42:07:aa:77:43:e3:9d:12:b2: 94:95:ef:4f:a5:a5:ff:a5:36:66:28:7b:aa:41:0a: 1f:55:9b:45:71:f9:cf:87:08:62:55:56:2b:82:e9: ba:c6:91:91:07:03:c3:e4:cf:5e:7f:2e:0a:5a:c6: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:09:21:5E:77:E0:8C:76:8F:FF:21:CA:DD:1C:7A:F1:6B:86:53 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mFwJIV534Ix2j_8hyt0cevFrhlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.78.0/24 31.57.178.0/24 31.58.158.0/24 Signature Algorithm: sha256WithRSAEncryption 16:b1:ee:3d:d1:aa:17:14:7a:23:5c:9e:31:45:af:0b:b7:b9: fb:ad:b3:f4:bd:8b:b0:7b:05:5d:93:fa:d0:d5:5b:4b:ab:99: 95:45:47:cf:c0:15:31:cd:08:be:d7:7f:6e:84:90:14:02:ca: 21:ec:ab:8e:57:e1:56:70:82:b2:45:30:75:9c:86:62:ab:d2: 5f:12:12:e4:ac:3d:af:f1:06:c5:ea:4c:fb:c2:5b:ad:bd:5a: 32:55:db:f3:e3:89:89:2b:ac:e0:03:4a:65:59:ac:7d:cd:5d: 06:54:16:4c:c3:43:fb:ea:5e:64:31:56:3e:32:d5:68:73:64: 61:78:fd:57:11:ad:76:22:d1:fb:70:ef:b7:b1:50:79:22:5f: e9:69:3e:e4:82:3f:cc:6f:f1:0a:c7:3d:ed:41:eb:1a:0e:85: ed:d9:29:26:fd:98:5d:16:e8:75:c9:9d:4c:77:7a:fc:1c:bb: 16:28:21:a1:a5:af:fa:77:13:e1:87:f1:e0:09:94:8a:29:df: ea:44:bd:16:38:ed:d6:24:80:5b:5d:20:a6:2d:ef:cc:1e:52: 57:52:62:fd:8a:7e:18:48:d3:db:72:d3:22:f3:cb:f2:00:78: 14:94:1a:f7:9f:57:5b:6b:68:6d:aa:a8:8f:2f:95:05:2d:5b: 35:91:a4:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hKoPXSdoZNJ/bh7ifW0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODVjMDkyMTVlNzdlMDhjNzY4ZmZmMjFjYWRkMWM3YWYxNmI4NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtotChoem1b/j5/oou8N0LQKGv3cB HUBTpWu/58HS5NUxesbu7MxHbwCFm89T4rbI71SnS8tTXAQHLc8kuYqv/phs80qo RUS2sbySzTgNuZpF741pl18JYuE6Y1S9OUcZeaXJlert0e6oaobfaLWBVPz/m/RQ ucFFP6F0ZGa/xK/Xdyd4HhblDg9mF2BaiqFViLsji7A/3r20SMMYbv7z5eAbSSH6 Ip+mOBCAdrnrCXVln00vbRckXzQaH2TvRs3zU6A+joOh5E9CB6p3Q+OdErKUle9P paX/pTZmKHuqQQofVZtFcfnPhwhiVVYrgum6xpGRBwPD5M9efy4KWsbIJwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJhcCSFed+CMdo//IcrdHHrxa4ZTMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbUZ3SklWNTM0SXgyal84aHl0MGNldkZyaGxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhOAwQA HzmyAwQAHzqeMA0GCSqGSIb3DQEBCwUAA4IBAQAWse490aoXFHojXJ4xRa8Lt7n7 rbP0vYuwewVdk/rQ1VtLq5mVRUfPwBUxzQi+139uhJAUAsoh7KuOV+FWcIKyRTB1 nIZiq9JfEhLkrD2v8QbF6kz7wlutvVoyVdvz44mJK6zgA0plWax9zV0GVBZMw0P7 6l5kMVY+MtVoc2RheP1XEa12ItH7cO+3sVB5Il/paT7kgj/Mb/EKxz3tQesaDoXt 2Skm/ZhdFuh1yZ1Md3r8HLsWKCGhpa/6dxPhh/HgCZSKKd/qRL0WOO3WJIBbXSCm Le/MHlJXUmL9in4YSNPbctMi88vyAHgUlBr3n1dba2htqqiPL5UFLVs1kaTW -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:37 2026 by rpki-client