This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oxZ3y1H00n7gvjyLR2mo-3T_wds.roa File: oxZ3y1H00n7gvjyLR2mo-3T_wds.roa (raw, json) Hash identifier: /jOVZAmESbUlh0y4xjhukONiipY2HD8Zux5r2b7F26U= Subject key identifier: A3:16:77:CB:51:F4:D2:7E:E0:BE:3C:8B:47:69:A8:FB:74:FF:C1:DB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8494C1038898A9B182F7A5746FD032 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oxZ3y1H00n7gvjyLR2mo-3T_wds.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203462 IP address blocks: 31.59.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:94:c1:03:88:98:a9:b1:82:f7:a5:74:6f:d0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31677cb51f4d27ee0be3c8b4769a8fb74ffc1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:5d:e1:bc:2b:f6:5b:e9:1f:77:64:d6:3f: 9c:1a:ee:36:37:99:1c:e2:d7:da:9e:50:97:ea:20: 91:85:51:20:31:b1:e8:cc:5b:22:c5:b8:de:56:75: 3f:c4:ba:82:e9:47:17:ff:8e:13:14:04:1c:95:75: 7f:4a:19:e1:77:44:ff:29:e6:5c:cf:82:ca:58:37: 0a:0b:f7:c5:c8:1f:68:c9:5c:30:13:85:c9:41:b9: 17:45:a7:1e:94:66:e8:ed:78:53:a8:a2:db:4e:f1: b6:b2:41:70:aa:ba:51:7c:eb:5b:65:ee:49:05:ba: 5c:ad:1e:47:c9:8e:1d:dd:0d:29:0e:b0:ff:9b:bf: c5:50:0e:68:03:50:e7:a7:57:9f:85:1c:86:ff:4b: 61:7e:53:91:20:c2:ab:0f:89:fd:b0:0e:00:d7:22: 06:6c:40:db:45:04:1e:e2:ff:0e:d2:b0:bc:39:e0: 26:ba:3b:92:a9:ab:c6:99:72:83:aa:29:e9:b2:62: e6:07:64:c7:b0:48:64:a3:50:e3:81:2a:58:54:99: 99:79:22:84:29:42:b7:a4:05:80:0e:a5:b6:40:79: 68:0a:d6:c2:40:d4:b6:1e:31:1c:ea:99:b5:f6:00: 6d:fe:a5:1c:3d:c5:70:80:c2:20:30:e8:5a:c3:cf: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:16:77:CB:51:F4:D2:7E:E0:BE:3C:8B:47:69:A8:FB:74:FF:C1:DB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oxZ3y1H00n7gvjyLR2mo-3T_wds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.89.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:e7:7a:53:d2:26:4f:3e:7d:ef:a8:4c:93:28:1a:ab:f7:0e: 47:32:b1:3c:c1:d2:24:fe:b8:22:0e:51:0e:68:8f:cb:84:37: 7e:03:25:55:13:db:c5:2c:f0:8d:61:34:4d:f1:ab:73:cd:35: 52:61:9f:97:0f:08:22:32:70:ed:09:df:70:0f:5c:e1:40:9f: 7a:ea:b8:e7:11:62:0b:ed:02:10:70:63:4a:f6:85:81:a3:79: 0a:85:a8:f4:c2:b5:64:6c:7e:fb:8c:ed:a5:41:e7:4e:68:b5: ef:e0:93:cc:cc:0f:79:88:61:b3:2e:0e:b6:f6:62:36:4a:62: 25:2d:34:51:5b:0f:27:1f:94:ee:a6:d7:56:e8:fa:58:56:dc: 84:da:47:86:ef:63:de:ea:2a:bc:76:13:12:f2:b4:9d:45:d5: 1f:56:3e:be:72:27:35:7e:cc:e3:ff:4c:92:d4:0f:22:9b:87: 34:53:ee:07:d2:f9:46:69:5a:bd:28:4f:04:1c:19:aa:be:3a: c4:ad:77:d2:6b:5d:bd:f4:47:f8:e5:c5:e9:2d:82:85:61:60: dc:04:df:e5:9e:6d:67:eb:99:09:a4:08:c4:79:0d:67:b1:a1: 53:83:3a:8e:91:01:1b:c8:3c:1a:bb:37:c6:a7:81:e6:d1:bc: 03:d0:a5:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJTBA4iYqbGC96V0b9AyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzE2NzdjYjUxZjRkMjdlZTBiZTNjOGI0NzY5YThmYjc0ZmZjMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjddd4bwr9lvpH3dk1j+cGu42N5kc 4tfanlCX6iCRhVEgMbHozFsixbjeVnU/xLqC6UcX/44TFAQclXV/Shnhd0T/KeZc z4LKWDcKC/fFyB9oyVwwE4XJQbkXRacelGbo7XhTqKLbTvG2skFwqrpRfOtbZe5J BbpcrR5HyY4d3Q0pDrD/m7/FUA5oA1Dnp1efhRyG/0thflORIMKrD4n9sA4A1yIG bEDbRQQe4v8O0rC8OeAmujuSqavGmXKDqinpsmLmB2THsEhko1DjgSpYVJmZeSKE KUK3pAWADqW2QHloCtbCQNS2HjEc6pm19gBt/qUcPcVwgMIgMOhaw89DTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMWd8tR9NJ+4L48i0dpqPt0/8HbMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb3haM3kxSDAwbjdndmp5TFIybW8tM1Rfd2RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztZMA0G CSqGSIb3DQEBCwUAA4IBAQAN53pT0iZPPn3vqEyTKBqr9w5HMrE8wdIk/rgiDlEO aI/LhDd+AyVVE9vFLPCNYTRN8atzzTVSYZ+XDwgiMnDtCd9wD1zhQJ966rjnEWIL 7QIQcGNK9oWBo3kKhaj0wrVkbH77jO2lQedOaLXv4JPMzA95iGGzLg629mI2SmIl LTRRWw8nH5TuptdW6PpYVtyE2keG72Pe6iq8dhMS8rSdRdUfVj6+cic1fszj/0yS 1A8im4c0U+4H0vlGaVq9KE8EHBmqvjrErXfSa1299Ef45cXpLYKFYWDcBN/lnm1n 65kJpAjEeQ1nsaFTgzqOkQEbyDwauzfGp4Hm0bwD0KVG -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client