This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mIoBsQmVxVW5Hc9XBLq8RA670c0.roa File: mIoBsQmVxVW5Hc9XBLq8RA670c0.roa (raw, json) Hash identifier: WLtgL+K17F1RmjGpss3NaGKjS8ciCpqkAUc7RQ9wdd8= Subject key identifier: 98:8A:01:B1:09:95:C5:55:B9:1D:CF:57:04:BA:BC:44:0E:BB:D1:CD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DD664CB3C2454D6D4C775283A103 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mIoBsQmVxVW5Hc9XBLq8RA670c0.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395092 IP address blocks: 31.57.179.0/24 maxlen: 24 31.58.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dd:66:4c:b3:c2:45:4d:6d:4c:77:52:83:a1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=988a01b10995c555b91dcf5704babc440ebbd1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:b0:f6:bd:f4:f3:78:81:22:9c:40:ae:34: 08:44:cb:30:ba:ea:48:33:48:69:a3:d2:a1:aa:5f: 53:ad:7b:48:88:2f:5e:cd:70:9f:fa:ea:dc:2e:af: 14:a4:48:10:0d:60:bf:1b:3f:2c:ba:e7:5b:c7:9a: 4c:22:ef:ba:74:60:72:2b:f4:e6:61:1c:27:13:38: 0e:66:ae:9b:a0:d4:5b:1c:05:3a:8b:0e:ab:66:83: 13:90:7a:c4:4a:cb:a2:8c:66:e6:42:e1:ba:c9:31: df:00:ef:da:ba:0e:e7:db:cf:cc:e2:78:00:66:27: 30:cd:61:c3:4b:39:81:a7:d6:f9:6b:9d:a3:67:b7: 3d:d4:3b:3f:58:f0:29:72:67:58:5f:f7:8e:1f:08: 07:e7:0f:b7:b8:57:9f:5b:44:c0:b3:6c:6a:36:9a: fb:5c:02:70:23:60:c7:86:2f:8d:e9:38:8a:5f:ae: b9:c1:64:0b:75:92:24:84:f5:3f:20:5b:df:09:51: 91:ff:74:1b:62:71:be:16:8f:2d:d8:35:5c:91:a4: f0:c4:ab:a7:bf:d4:e5:5c:8e:2e:f1:40:bf:1b:05: 01:fb:b6:b4:f2:ef:0d:f2:db:87:d8:c5:b3:c2:bb: b6:8e:6a:fc:37:63:9a:05:ec:5e:51:42:9f:4c:37: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8A:01:B1:09:95:C5:55:B9:1D:CF:57:04:BA:BC:44:0E:BB:D1:CD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mIoBsQmVxVW5Hc9XBLq8RA670c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.179.0/24 31.58.67.0/24 Signature Algorithm: sha256WithRSAEncryption 57:2d:fc:e1:16:d2:47:28:ea:1e:c6:59:78:b6:c7:cd:d5:c5: 8f:9a:20:27:33:8c:8f:7e:62:0c:2e:14:9b:db:49:9e:44:5b: 52:ff:8c:d1:be:37:b8:4d:d6:b5:2a:22:62:c7:d9:91:cc:be: a0:1a:18:a2:8f:77:de:2b:74:45:ca:20:0c:2d:be:a0:0e:83: f4:9b:18:20:8d:3a:9e:bf:44:77:a9:3f:44:b9:62:52:31:ea: 2d:14:4e:ce:65:b9:77:c4:8f:6c:48:b1:8d:18:05:26:dc:af: 10:33:e6:e5:cc:9b:84:ce:47:56:d5:11:9e:9b:82:34:c3:82: a3:45:8f:b8:2f:28:7f:6a:67:6e:70:a1:1c:0a:1c:02:df:f3: 5c:2b:83:6b:91:65:6d:c6:70:b8:24:9a:cb:3b:54:77:22:b1: 88:ec:fb:1d:22:e6:48:73:7e:60:ca:61:fe:90:45:a2:4e:b9: d3:7c:7a:c8:d9:20:af:c4:d7:ed:a6:9c:38:a0:44:1c:78:2d: 88:d6:90:be:f9:80:6f:56:6a:93:66:d9:ed:43:b0:21:08:95: b5:e3:0c:ee:47:b4:11:55:3d:ac:c9:e6:82:6e:76:61:e1:2b: 61:11:95:b5:e4:24:e2:ed:be:2a:d2:4f:fb:db:5b:5f:98:07: 41:8d:9d:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hN1mTLPCRU1tTHdSg6EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODhhMDFiMTA5OTVjNTU1YjkxZGNmNTcwNGJhYmM0NDBlYmJkMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gOw9r3083iBIpxArjQIRMswuupI M0hpo9Khql9TrXtIiC9ezXCf+urcLq8UpEgQDWC/Gz8suudbx5pMIu+6dGByK/Tm YRwnEzgOZq6boNRbHAU6iw6rZoMTkHrESsuijGbmQuG6yTHfAO/aug7n28/M4ngA ZicwzWHDSzmBp9b5a52jZ7c91Ds/WPApcmdYX/eOHwgH5w+3uFefW0TAs2xqNpr7 XAJwI2DHhi+N6TiKX665wWQLdZIkhPU/IFvfCVGR/3QbYnG+Fo8t2DVckaTwxKun v9TlXI4u8UC/GwUB+7a08u8N8tuH2MWzwru2jmr8N2OaBexeUUKfTDcBfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJiKAbEJlcVVuR3PVwS6vEQOu9HNMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbUlvQnNRbVZ4Vlc1SGM5WEJMcThSQTY3MGMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmzAwQA HzpDMA0GCSqGSIb3DQEBCwUAA4IBAQBXLfzhFtJHKOoexll4tsfN1cWPmiAnM4yP fmIMLhSb20meRFtS/4zRvje4Tda1KiJix9mRzL6gGhiij3feK3RFyiAMLb6gDoP0 mxggjTqev0R3qT9EuWJSMeotFE7OZbl3xI9sSLGNGAUm3K8QM+blzJuEzkdW1RGe m4I0w4KjRY+4Lyh/amducKEcChwC3/NcK4NrkWVtxnC4JJrLO1R3IrGI7PsdIuZI c35gymH+kEWiTrnTfHrI2SCvxNftppw4oEQceC2I1pC++YBvVmqTZtntQ7AhCJW1 4wzuR7QRVT2syeaCbnZh4SthEZW15CTi7b4q0k/721tfmAdBjZ0y -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:34 2026 by rpki-client