This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-q7oRWF4qYuDwci7Z4NrjH-6xk.roa File: n-q7oRWF4qYuDwci7Z4NrjH-6xk.roa (raw, json) Hash identifier: GF2iaxKuuJSm5pgvu1RGbO+jrzZONFZ/QBvIrt08hos= Subject key identifier: 9F:EA:BB:A1:15:85:E2:A6:2E:0F:07:22:ED:9E:0D:AE:31:FE:EB:19 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BC35B02302EB2CBDC9DA9B2FCF6C3403D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-q7oRWF4qYuDwci7Z4NrjH-6xk.roa Signing time: Thu 15 Jan 2026 20:31:20 +0000 ROA not before: Thu 15 Jan 2026 20:31:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.57.190.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 31.58.138.0/24 maxlen: 24 31.59.59.0/24 maxlen: 24 31.59.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 20:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:5b:02:30:2e:b2:cb:dc:9d:a9:b2:fc:f6:c3:40:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 15 20:31:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9feabba11585e2a62e0f0722ed9e0dae31feeb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:92:67:63:46:bd:7f:5a:21:10:48:5f:d0: ee:35:63:ce:d3:29:6f:23:00:b4:fa:1f:eb:29:1e: 4c:6a:2d:79:52:38:67:a7:12:57:36:47:2e:b2:eb: 31:57:e4:2a:13:7f:64:20:76:69:03:a0:e5:6b:f0: f2:cf:a8:9f:df:a7:d5:de:ff:1e:bc:1e:34:77:53: 87:85:2a:2d:47:61:91:ea:58:50:c2:13:6e:2b:dc: f3:90:48:1a:51:02:b5:b0:aa:9a:d0:10:4e:d3:8c: 7f:6d:72:8a:10:69:3b:dc:06:ed:e6:99:4a:f9:61: 92:d0:e6:bf:38:bf:16:d0:3e:c0:ad:e5:ba:bf:3f: 95:42:cf:d0:90:8a:79:2e:6a:7a:bf:bf:c4:7a:0b: 5e:5e:88:4a:3f:22:ee:ac:ef:fd:90:e0:bb:a5:23: 1d:29:9d:2e:87:a5:7d:44:3f:8b:e1:62:04:2c:93: d4:28:c4:11:f1:f0:64:e5:1c:dd:44:e5:db:c1:64: 4b:76:66:4c:c7:3f:c9:d2:f8:45:ff:e0:20:27:26: e3:3d:d5:3d:8e:f4:64:37:4d:c8:8f:43:03:a0:f4: d8:55:fc:15:19:c6:86:51:1d:2d:39:c8:58:b9:f4: da:6b:81:18:06:65:06:35:8c:6d:43:2f:58:b3:6f: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:BB:A1:15:85:E2:A6:2E:0F:07:22:ED:9E:0D:AE:31:FE:EB:19 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n-q7oRWF4qYuDwci7Z4NrjH-6xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.141.0/24 31.57.190.0/23 31.57.221.0/24 31.58.131.0/24 31.58.138.0/24 31.59.59.0/24 31.59.208.0/24 Signature Algorithm: sha256WithRSAEncryption 00:94:42:cc:79:36:be:0f:74:de:7c:f0:aa:58:c1:11:c4:ce: 31:76:ca:23:48:bc:fc:78:ae:60:c1:25:ca:59:4c:81:4e:9d: 0e:c8:74:d5:da:32:e5:96:a7:32:d1:b3:f0:c4:71:de:66:5a: 98:d3:85:39:af:a5:33:22:90:e4:78:3f:15:f2:0a:8d:7a:7a: de:03:aa:dc:62:0f:46:c8:3c:10:43:ce:dc:76:3a:e3:eb:86: 2f:c5:03:70:74:84:c8:78:93:0b:c6:87:07:80:1e:24:a6:f1: 39:05:14:4b:cf:67:31:3b:7c:30:fe:fb:9c:da:7a:a1:ce:3e: ab:98:7a:e9:c2:6b:47:c7:82:36:60:12:9e:d5:11:9a:95:ca: 08:f4:8b:48:ab:83:c6:5d:c3:55:06:c3:4f:e2:6d:a6:d4:c0: a7:6f:0a:ff:2a:89:7e:fd:55:d2:73:b4:19:ec:89:7a:d0:a7: ea:3e:f2:ad:ec:e5:4a:00:1a:a6:d5:26:4c:d9:91:dd:ea:49: 5a:ce:f5:23:ec:11:6d:34:86:4a:67:39:4a:00:9a:a3:6b:43: ff:fa:65:67:ba:6f:65:73:bf:ef:16:a3:85:a9:a0:6f:39:c5: c7:6f:6d:cc:d7:51:97:d2:0e:d9:a1:17:1c:8e:47:ea:35:02: 32:df:83:00 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZvDWwIwLrLL3J2psvz2w0A9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE1MjAzMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmVhYmJhMTE1ODVlMmE2MmUwZjA3MjJlZDllMGRhZTMxZmVlYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpuSZ2NGvX9aIRBIX9DuNWPO0ylv IwC0+h/rKR5Mai15UjhnpxJXNkcususxV+QqE39kIHZpA6Dla/Dyz6if36fV3v8e vB40d1OHhSotR2GR6lhQwhNuK9zzkEgaUQK1sKqa0BBO04x/bXKKEGk73Abt5plK +WGS0Oa/OL8W0D7AreW6vz+VQs/QkIp5Lmp6v7/EegteXohKPyLurO/9kOC7pSMd KZ0uh6V9RD+L4WIELJPUKMQR8fBk5RzdROXbwWRLdmZMxz/J0vhF/+AgJybjPdU9 jvRkN03Ij0MDoPTYVfwVGcaGUR0tOchYufTaa4EYBmUGNYxtQy9Ys2/7IQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFJ/qu6EVheKmLg8HIu2eDa4x/usZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbi1xN29SV0Y0cVl1RHdjaTdaNE5yakgtNnhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAHzh9AwQA HziNAwQBHzm+AwQAHzndAwQAHzqDAwQAHzqKAwQAHzs7AwQAHzvQMA0GCSqGSIb3 DQEBCwUAA4IBAQAAlELMeTa+D3TefPCqWMERxM4xdsojSLz8eK5gwSXKWUyBTp0O yHTV2jLllqcy0bPwxHHeZlqY04U5r6UzIpDkeD8V8gqNenreA6rcYg9GyDwQQ87c djrj64YvxQNwdITIeJMLxocHgB4kpvE5BRRLz2cxO3ww/vuc2nqhzj6rmHrpwmtH x4I2YBKe1RGalcoI9ItIq4PGXcNVBsNP4m2m1MCnbwr/Kol+/VXSc7QZ7Il60Kfq PvKt7OVKABqm1SZM2ZHd6klazvUj7BFtNIZKZzlKAJqja0P/+mVnum9lc7/vFqOF qaBvOcXHb23M11GX0g7ZoRccjkfqNQIy34MA -----END CERTIFICATE-----Generated at Fri Jan 16 05:31:59 2026 by rpki-client