This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mNxVjXq-rHmZKSucnY32xdPrU88.roa File: mNxVjXq-rHmZKSucnY32xdPrU88.roa (raw, json) Hash identifier: 9oyIzadVlz1vYKQMFfjKVa2Tjt28JLzeXtqLU1jEykk= Subject key identifier: 98:DC:55:8D:7A:BE:AC:79:99:29:2B:9C:9D:8D:F6:C5:D3:EB:53:CF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F847BF58D53F3D6293070DBEBDD51C4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mNxVjXq-rHmZKSucnY32xdPrU88.roa Signing time: Fri 02 Jan 2026 16:22:27 +0000 ROA not before: Fri 02 Jan 2026 16:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134972 IP address blocks: 31.58.132.0/23 maxlen: 24 31.59.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7b:f5:8d:53:f3:d6:29:30:70:db:eb:dd:51:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98dc558d7abeac7999292b9c9d8df6c5d3eb53cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:e1:28:5c:38:d0:ba:ea:51:b5:67:9c:fc: e0:c9:0d:d7:ea:90:a8:dd:5e:3a:78:5d:d9:7c:66: 6c:3f:bb:23:b9:43:6a:82:d7:6a:91:c3:0d:04:d9: 89:3f:53:41:ba:eb:8e:83:03:ae:74:b6:51:3f:8e: b4:97:9c:29:aa:e1:17:14:51:ce:a8:b9:63:19:d7: c0:4d:dc:f5:9b:f8:42:26:e6:62:2c:28:59:45:63: b1:51:af:7e:83:e4:78:f5:7d:cd:83:f6:07:ad:e4: 21:ee:e5:6b:a5:21:d7:d7:b5:5c:c2:62:4e:ae:65: 85:a8:22:b2:af:96:97:23:35:b4:45:c0:9d:d3:f6: 78:b2:f3:fd:43:6e:8e:59:85:83:25:7a:1d:26:1a: 48:4e:1a:1a:e5:2c:6c:a0:c2:5d:0c:66:13:fa:01: 5a:62:5f:e4:c3:8f:45:fd:8e:d3:5f:54:d6:1f:e7: 23:10:50:b3:41:6d:0d:35:aa:98:f9:17:27:24:f9: d9:ba:fd:16:d9:5f:da:98:ec:e3:ea:d3:75:0f:6a: 21:d6:d8:27:3b:82:62:f2:c5:ec:71:dc:ca:77:d0: 00:4e:75:69:cb:5a:23:8a:2d:ab:53:5c:04:dd:e6: f5:86:54:a5:78:6f:fc:97:72:cd:5e:5d:e5:3c:cd: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DC:55:8D:7A:BE:AC:79:99:29:2B:9C:9D:8D:F6:C5:D3:EB:53:CF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mNxVjXq-rHmZKSucnY32xdPrU88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.132.0/23 31.59.132.0/22 Signature Algorithm: sha256WithRSAEncryption 39:40:af:23:4c:1e:04:8c:d5:9a:18:d0:7d:cc:fe:66:c0:7c: 32:0a:5d:fd:9d:f7:2e:9f:39:f2:52:36:3b:9c:27:3e:61:59: 1e:99:98:17:b4:6a:e0:a6:9b:95:d5:65:28:8c:74:1b:6d:8a: 9f:10:a9:a3:0f:28:4a:c6:9d:15:85:45:c1:4b:e5:86:46:08: 52:72:dc:f4:54:07:e8:16:1f:00:62:34:26:d3:64:a4:e8:c8: ee:c9:5f:bb:fc:a4:48:6e:c4:6e:6e:76:13:e3:12:3a:04:7a: 32:1c:52:e8:84:72:65:d9:3b:3a:45:35:ec:04:a4:f6:70:5e: 8c:d3:ea:d5:28:60:a3:4c:b4:aa:66:c7:3f:04:57:8c:9a:37: f9:1e:87:77:69:4d:57:0e:1b:2a:77:5a:9d:04:8b:15:d1:94: f8:03:9a:45:55:67:17:f3:d8:07:d6:68:28:1f:9d:60:33:76: 22:c1:e4:0b:90:1a:13:9f:d7:5d:bf:fc:42:f3:8c:9b:e4:9d: 8f:92:b1:77:89:38:c2:41:ba:34:a4:ab:4f:b6:58:71:a4:24: 3f:4b:03:43:0d:ef:fd:5a:e2:ad:cc:c9:06:ad:9e:3d:d1:87: 7f:5d:29:54:be:66:ff:cc:d2:74:e9:c2:5b:bc:c8:c7:87:72: 9a:53:e6:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hHv1jVPz1ikwcNvr3VHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGRjNTU4ZDdhYmVhYzc5OTkyOTJiOWM5ZDhkZjZjNWQzZWI1M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5ThKFw40LrqUbVnnPzgyQ3X6pCo 3V46eF3ZfGZsP7sjuUNqgtdqkcMNBNmJP1NBuuuOgwOudLZRP460l5wpquEXFFHO qLljGdfATdz1m/hCJuZiLChZRWOxUa9+g+R49X3Ng/YHreQh7uVrpSHX17VcwmJO rmWFqCKyr5aXIzW0RcCd0/Z4svP9Q26OWYWDJXodJhpIThoa5SxsoMJdDGYT+gFa Yl/kw49F/Y7TX1TWH+cjEFCzQW0NNaqY+RcnJPnZuv0W2V/amOzj6tN1D2oh1tgn O4Ji8sXscdzKd9AATnVpy1ojii2rU1wE3eb1hlSleG/8l3LNXl3lPM1nvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJjcVY16vqx5mSkrnJ2N9sXT61PPMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbU54VmpYcS1ySG1aS1N1Y25ZMzJ4ZFByVTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHzqEAwQC HzuEMA0GCSqGSIb3DQEBCwUAA4IBAQA5QK8jTB4EjNWaGNB9zP5mwHwyCl39nfcu nznyUjY7nCc+YVkemZgXtGrgppuV1WUojHQbbYqfEKmjDyhKxp0VhUXBS+WGRghS ctz0VAfoFh8AYjQm02Sk6MjuyV+7/KRIbsRubnYT4xI6BHoyHFLohHJl2Ts6RTXs BKT2cF6M0+rVKGCjTLSqZsc/BFeMmjf5Hod3aU1XDhsqd1qdBIsV0ZT4A5pFVWcX 89gH1mgoH51gM3YiweQLkBoTn9ddv/xC84yb5J2PkrF3iTjCQbo0pKtPtlhxpCQ/ SwNDDe/9WuKtzMkGrZ490Yd/XSlUvmb/zNJ06cJbvMjHh3KaU+ao -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client