This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/owHO956iyL-rLYVRJKBoBDlqcTs.roa File: owHO956iyL-rLYVRJKBoBDlqcTs.roa (raw, json) Hash identifier: DXYvSAjZeMYGBO614g2/ol7pfMLlDXJgqKu9GwkTWJ8= Subject key identifier: A3:01:CE:F7:9E:A2:C8:BF:AB:2D:85:51:24:A0:68:04:39:6A:71:3B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E551B3EA2C9731E97B8421A0640C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/owHO956iyL-rLYVRJKBoBDlqcTs.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401476 IP address blocks: 31.58.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e5:51:b3:ea:2c:97:31:e9:7b:84:21:a0:64:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a301cef79ea2c8bfab2d855124a06804396a713b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:75:cf:21:94:ce:a8:7f:b7:e2:7f:62:b4: 32:47:6d:42:3d:86:9f:75:2e:1e:62:0f:9e:be:09: bb:e9:1e:30:70:4a:b6:ff:ce:c2:25:b0:a1:46:07: 75:2f:08:44:72:d9:52:38:74:a2:2a:e6:74:e2:0b: 7b:56:28:02:42:33:95:5d:d1:10:e0:34:3e:23:a1: 6c:6d:2b:3d:12:58:e3:11:8e:93:e1:c4:07:af:a3: 84:40:ba:98:4d:2c:fe:bb:51:8a:03:9f:33:3c:c1: b2:48:a7:12:30:b1:54:f3:db:0b:b6:33:a2:a0:52: d1:da:65:0c:18:49:15:e4:4c:21:01:30:d3:13:18: ea:79:e2:10:08:db:4d:f5:5d:33:13:0a:e3:9e:08: 36:24:03:4b:66:58:33:52:2d:24:d7:a9:a2:b6:46: d0:e5:0b:ee:dd:90:6b:56:22:1f:86:e1:5e:d2:ca: dd:46:92:6e:55:f8:13:39:82:e8:f9:85:50:37:49: 86:96:36:bd:43:32:a6:e4:d8:73:ac:9b:e4:9a:db: 37:74:fa:99:38:ee:72:64:3f:34:6e:83:c3:ba:91: 95:ec:c4:01:aa:2b:3d:3e:38:06:01:ec:15:63:4c: cd:ec:ba:ca:b8:c5:b8:b4:13:0e:e5:13:6a:ce:dd: b1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:01:CE:F7:9E:A2:C8:BF:AB:2D:85:51:24:A0:68:04:39:6A:71:3B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/owHO956iyL-rLYVRJKBoBDlqcTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.215.0/24 Signature Algorithm: sha256WithRSAEncryption 13:8e:99:8e:b2:92:ed:8a:ff:09:1e:70:f6:ea:46:b5:d9:37: 3f:bb:6e:8a:c5:49:9a:e5:79:0e:69:d8:1b:ff:d1:88:9d:e7: 5f:46:2e:7f:b1:f8:81:83:55:d3:52:b0:3e:57:6b:c0:df:57: 02:00:4b:5c:94:13:0e:85:2c:64:63:54:25:34:a1:d5:93:5d: f8:8d:07:b1:e5:9f:0e:42:9b:77:f1:a0:3c:d3:d4:37:b7:2e: 27:f1:50:ce:2b:59:d0:c9:ac:21:6f:bc:08:ce:55:55:0c:d4: 06:28:25:18:7f:63:f1:f3:7d:7e:79:49:da:1d:90:8a:cc:3c: a3:80:7e:7b:3f:7f:e8:ba:17:fa:e3:4c:6e:bf:40:eb:e4:f7: d4:bf:33:0b:4c:e7:92:52:74:88:bb:38:e1:5e:7c:f1:c5:5e: d3:5e:f9:26:fe:dc:f8:b4:f4:cb:b8:37:3d:78:ac:a7:b4:34: cb:43:a0:66:81:1d:31:d4:38:17:cb:59:6f:0a:94:aa:6c:16: 53:a1:31:ea:27:f3:26:a9:6e:e2:99:0a:aa:97:f0:90:73:67: 34:57:78:91:e5:c4:4a:78:53:4a:33:43:d3:7e:4d:46:75:1c: a2:74:f5:89:af:a2:81:b9:1c:ae:33:bb:cd:45:e8:7b:49:54: 00:6a:b0:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOVRs+oslzHpe4QhoGQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzAxY2VmNzllYTJjOGJmYWIyZDg1NTEyNGEwNjgwNDM5NmE3MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bl1zyGUzqh/t+J/YrQyR21CPYaf dS4eYg+evgm76R4wcEq2/87CJbChRgd1LwhEctlSOHSiKuZ04gt7VigCQjOVXdEQ 4DQ+I6FsbSs9EljjEY6T4cQHr6OEQLqYTSz+u1GKA58zPMGySKcSMLFU89sLtjOi oFLR2mUMGEkV5EwhATDTExjqeeIQCNtN9V0zEwrjngg2JANLZlgzUi0k16mitkbQ 5Qvu3ZBrViIfhuFe0srdRpJuVfgTOYLo+YVQN0mGlja9QzKm5NhzrJvkmts3dPqZ OO5yZD80boPDupGV7MQBqis9PjgGAewVY0zN7LrKuMW4tBMO5RNqzt2xnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMBzveeosi/qy2FUSSgaAQ5anE7MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb3dITzk1Nml5TC1yTFlWUkpLQm9CRGxxY1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrXMA0G CSqGSIb3DQEBCwUAA4IBAQATjpmOspLtiv8JHnD26ka12Tc/u26KxUma5XkOadgb /9GInedfRi5/sfiBg1XTUrA+V2vA31cCAEtclBMOhSxkY1QlNKHVk134jQex5Z8O Qpt38aA809Q3ty4n8VDOK1nQyawhb7wIzlVVDNQGKCUYf2Px831+eUnaHZCKzDyj gH57P3/ouhf640xuv0Dr5PfUvzMLTOeSUnSIuzjhXnzxxV7TXvkm/tz4tPTLuDc9 eKyntDTLQ6BmgR0x1DgXy1lvCpSqbBZToTHqJ/MmqW7imQqql/CQc2c0V3iR5cRK eFNKM0PTfk1GdRyidPWJr6KBuRyuM7vNReh7SVQAarCk -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:37 2026 by rpki-client