This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oEC0meQuHheeKM0hxPNCmyeL15k.roa File: oEC0meQuHheeKM0hxPNCmyeL15k.roa (raw, json) Hash identifier: vzgTFfzAAM5YUuDuQAMwUqejwKQ/R1ugHUg4kbUqgbY= Subject key identifier: A0:40:B4:99:E4:2E:1E:17:9E:28:CD:21:C4:F3:42:9B:27:8B:D7:99 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84884749814C36ED204290FF44C322 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oEC0meQuHheeKM0hxPNCmyeL15k.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152586 IP address blocks: 31.59.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:88:47:49:81:4c:36:ed:20:42:90:ff:44:c3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a040b499e42e1e179e28cd21c4f3429b278bd799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:c4:3e:40:39:4d:c2:40:e0:79:01:b7:da: 6b:5e:cc:dd:a0:f6:0d:6f:9e:9d:d6:62:2b:c4:7a: 95:d7:e0:d3:8b:fa:18:04:fd:78:3e:fb:a7:10:5c: e4:d7:25:7a:e5:d6:d3:59:9d:b0:65:36:d8:66:bb: 8d:4f:15:20:4e:ad:ec:f7:e9:8c:d0:82:ff:ce:05: 5b:0d:90:43:68:ad:77:31:0b:a8:64:3d:16:da:5e: d6:c5:e1:0e:7c:fa:3f:d5:8f:05:f2:5d:8a:7f:27: e8:b5:4d:fc:ee:bf:eb:9e:2e:42:ad:47:fa:a0:1f: a2:a7:91:3f:59:fe:83:85:b2:aa:83:43:e0:4b:e4: 95:f8:26:9b:3d:65:76:d6:e0:f8:a5:3a:5f:e9:aa: d2:bf:52:2e:a0:06:13:af:9b:3c:08:fb:8a:a4:11: d5:7f:8e:26:61:a5:b9:04:8e:db:24:8a:fb:54:33: 1a:fb:3e:c9:f2:6d:3c:a3:28:9f:e0:9c:e2:03:a3: 38:08:2f:c1:69:5c:6d:81:0d:65:dd:4d:59:0b:43: 9b:73:a7:2f:e1:0a:53:ea:e1:ae:3f:5d:19:aa:6f: a2:33:2a:12:23:5f:07:97:d1:5e:c0:67:a9:bc:57: e1:4f:f4:73:25:18:b5:0b:1d:ba:4d:3a:5d:13:2b: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:B4:99:E4:2E:1E:17:9E:28:CD:21:C4:F3:42:9B:27:8B:D7:99 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oEC0meQuHheeKM0hxPNCmyeL15k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.118.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:e0:26:a9:85:d5:5f:50:0b:1b:0e:82:a3:01:b4:b5:0b:95: df:df:06:94:60:44:86:bd:48:c7:ed:9e:c3:bf:50:e0:5e:7d: d4:3c:f9:ce:b9:26:10:0b:84:72:12:0c:e0:5a:ba:47:9c:4a: 2a:93:30:d8:5d:1f:48:dc:1b:13:48:16:43:31:a0:0d:17:fa: da:a9:c3:eb:cd:9a:60:d9:11:af:93:1f:03:93:c6:0e:47:4b: af:88:11:0d:7e:1e:8d:c1:67:f0:46:d6:c7:fa:f1:35:73:e8: 13:12:c1:c8:31:ab:62:4c:d6:64:c7:24:fb:3f:cc:10:a6:b6: 3a:b4:ac:42:92:50:a3:9a:b5:af:19:9c:de:a6:82:81:02:db: 61:c3:d2:5d:9c:b7:c5:6d:30:c0:bf:46:8a:07:36:42:28:48: c6:d9:b3:25:2d:9d:e5:8e:5f:a8:00:b0:25:cb:18:fa:96:63: 5b:6d:0e:4a:f9:7c:7a:e4:ac:5a:06:a0:f8:31:18:5c:08:df: 0c:3e:11:bb:42:22:bc:26:38:78:f9:14:63:b4:d9:95:58:82: cc:87:98:e1:7b:c3:13:a4:88:94:ff:52:c7:03:ea:64:b4:35: 9b:30:23:53:2b:d5:a0:05:da:03:34:6c:9b:02:09:94:4c:34: 13:59:b0:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIhHSYFMNu0gQpD/RMMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDQwYjQ5OWU0MmUxZTE3OWUyOGNkMjFjNGYzNDI5YjI3OGJkNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoDEPkA5TcJA4HkBt9prXszdoPYN b56d1mIrxHqV1+DTi/oYBP14PvunEFzk1yV65dbTWZ2wZTbYZruNTxUgTq3s9+mM 0IL/zgVbDZBDaK13MQuoZD0W2l7WxeEOfPo/1Y8F8l2KfyfotU387r/rni5CrUf6 oB+ip5E/Wf6DhbKqg0PgS+SV+CabPWV21uD4pTpf6arSv1IuoAYTr5s8CPuKpBHV f44mYaW5BI7bJIr7VDMa+z7J8m08oyif4JziA6M4CC/BaVxtgQ1l3U1ZC0Obc6cv 4QpT6uGuP10Zqm+iMyoSI18Hl9FewGepvFfhT/RzJRi1Cx26TTpdEytN3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBAtJnkLh4XnijNIcTzQpsni9eZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb0VDMG1lUXVIaGVlS00waHhQTkNteWVMMTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzt2MA0G CSqGSIb3DQEBCwUAA4IBAQAr4CaphdVfUAsbDoKjAbS1C5Xf3waUYESGvUjH7Z7D v1DgXn3UPPnOuSYQC4RyEgzgWrpHnEoqkzDYXR9I3BsTSBZDMaANF/raqcPrzZpg 2RGvkx8Dk8YOR0uviBENfh6NwWfwRtbH+vE1c+gTEsHIMatiTNZkxyT7P8wQprY6 tKxCklCjmrWvGZzepoKBAtthw9JdnLfFbTDAv0aKBzZCKEjG2bMlLZ3ljl+oALAl yxj6lmNbbQ5K+Xx65KxaBqD4MRhcCN8MPhG7QiK8Jjh4+RRjtNmVWILMh5jhe8MT pIiU/1LHA+pktDWbMCNTK9WgBdoDNGybAgmUTDQTWbCL -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:46 2026 by rpki-client