This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nc3xmYwVzkH2ACk2IQ6rB7MCfEk.roa File: nc3xmYwVzkH2ACk2IQ6rB7MCfEk.roa (raw, json) Hash identifier: YoMqz0CLjuzJGVrUhZqU47tIVQth0j5MeFoo8na/lew= Subject key identifier: 9D:CD:F1:99:8C:15:CE:41:F6:00:29:36:21:0E:AB:07:B3:02:7C:49 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C173D810C390D1245886B394BD10 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nc3xmYwVzkH2ACk2IQ6rB7MCfEk.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214311 IP address blocks: 31.57.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c1:73:d8:10:c3:90:d1:24:58:86:b3:94:bd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dcdf1998c15ce41f6002936210eab07b3027c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:3b:25:4d:47:92:94:b3:a3:d6:9c:f1:f0: e4:10:3b:50:0a:b2:8e:a6:98:a4:b0:90:09:20:20: e6:88:e9:1f:4b:ef:34:31:ec:8a:c0:a2:4d:70:4d: d0:2e:29:6f:da:e4:ee:13:69:d2:e3:21:28:c7:a2: c0:3c:1c:4c:69:51:09:ac:d8:03:85:30:35:65:16: de:17:ae:fa:57:1c:26:01:56:b1:27:52:e5:5e:a6: d5:a2:7a:f1:49:d8:44:ad:3b:33:6d:06:78:eb:e1: 27:cd:09:c0:8d:e2:c9:c7:6d:d4:65:4e:fd:e4:93: 72:3d:95:d4:68:cc:72:08:4e:bd:e7:9a:2f:57:b8: c0:14:79:fc:ac:fd:99:1b:bf:3a:d1:81:54:64:25: 29:c8:46:ca:ae:0a:ac:47:de:c4:11:bb:f7:7b:fc: 39:68:96:33:63:e5:5d:84:df:75:e6:f7:6b:9c:8a: 0d:e4:20:e9:a3:5a:6a:d7:e3:9e:3b:5c:b1:df:0a: 78:a1:22:b4:c2:47:43:74:d0:95:e2:fb:e4:b0:f4: 4f:5c:73:94:1b:81:d1:d4:a0:b1:21:9e:02:5d:44: c1:75:d0:20:25:7d:2c:63:7e:c5:cd:e2:c1:7c:71: 9d:64:67:31:18:e0:39:97:90:b3:9c:02:b1:34:81: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CD:F1:99:8C:15:CE:41:F6:00:29:36:21:0E:AB:07:B3:02:7C:49 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nc3xmYwVzkH2ACk2IQ6rB7MCfEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.197.0/24 Signature Algorithm: sha256WithRSAEncryption b2:4a:d6:d7:28:b7:f7:15:49:f1:3a:95:78:d1:96:7f:b2:92: 96:d3:31:53:f7:0e:5e:78:6b:df:4d:5d:8c:7e:62:74:79:c5: 22:d8:cb:3e:5d:06:be:5f:2d:16:c1:b5:93:17:fb:f3:1e:7c: a9:38:23:ec:4c:02:b4:7f:25:1b:3a:0f:2f:a6:8d:92:8a:12: 4e:44:0a:ef:06:87:c2:8e:dc:23:74:ab:7e:05:25:81:89:ed: ae:45:4a:c6:1c:f7:c8:fd:64:7a:48:a4:0e:bf:74:14:17:fa: aa:10:32:96:82:ce:f8:64:ab:b1:e0:b7:59:87:26:89:ca:46: c9:99:bf:e0:4e:60:e2:bc:19:35:89:f4:f1:1e:47:ba:bd:0f: bc:ea:06:53:22:4d:eb:99:c5:d3:bf:cb:e0:42:20:aa:01:ca: 66:f3:77:43:e7:d6:b5:74:e4:82:79:8f:fe:13:cf:5f:01:6c: fa:45:73:b5:86:44:b0:2b:54:82:d7:53:3b:f9:f0:e1:48:aa: fc:13:80:96:b1:b9:34:bf:d5:63:05:2e:37:5f:ad:1f:3b:3f: eb:bc:48:01:9a:7f:20:a7:0e:c9:ce:4f:78:a5:13:94:22:31: 10:be:99:2e:d9:13:2e:f7:67:d0:89:54:91:7d:0e:6d:2e:ff: d8:bd:3e:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMFz2BDDkNEkWIazlL0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGNkZjE5OThjMTVjZTQxZjYwMDI5MzYyMTBlYWIwN2IzMDI3YzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc07JU1HkpSzo9ac8fDkEDtQCrKO ppiksJAJICDmiOkfS+80MeyKwKJNcE3QLilv2uTuE2nS4yEox6LAPBxMaVEJrNgD hTA1ZRbeF676VxwmAVaxJ1LlXqbVonrxSdhErTszbQZ46+EnzQnAjeLJx23UZU79 5JNyPZXUaMxyCE6955ovV7jAFHn8rP2ZG7860YFUZCUpyEbKrgqsR97EEbv3e/w5 aJYzY+VdhN915vdrnIoN5CDpo1pq1+OeO1yx3wp4oSK0wkdDdNCV4vvksPRPXHOU G4HR1KCxIZ4CXUTBddAgJX0sY37FzeLBfHGdZGcxGOA5l5CznAKxNIFSjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3N8ZmMFc5B9gApNiEOqwezAnxJMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbmMzeG1Zd1Z6a0gyQUNrMklRNnJCN01DZkVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznFMA0G CSqGSIb3DQEBCwUAA4IBAQCyStbXKLf3FUnxOpV40ZZ/spKW0zFT9w5eeGvfTV2M fmJ0ecUi2Ms+XQa+Xy0WwbWTF/vzHnypOCPsTAK0fyUbOg8vpo2SihJORArvBofC jtwjdKt+BSWBie2uRUrGHPfI/WR6SKQOv3QUF/qqEDKWgs74ZKux4LdZhyaJykbJ mb/gTmDivBk1ifTxHke6vQ+86gZTIk3rmcXTv8vgQiCqAcpm83dD59a1dOSCeY/+ E89fAWz6RXO1hkSwK1SC11M7+fDhSKr8E4CWsbk0v9VjBS43X60fOz/rvEgBmn8g pw7Jzk94pROUIjEQvpku2RMu92fQiVSRfQ5tLv/YvT7L -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:44 2026 by rpki-client