This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pCACtzYO6H0OKmSJWLQCdVg-KIE.roa File: pCACtzYO6H0OKmSJWLQCdVg-KIE.roa (raw, json) Hash identifier: OVTgfhcgIN+TbGT/VtJOdWXeO7fnqAVasCfnq0rKIwY= Subject key identifier: A4:20:02:B7:36:0E:E8:7D:0E:2A:64:89:58:B4:02:75:58:3E:28:81 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844CE13577DB2963E9D756382B2EAA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pCACtzYO6H0OKmSJWLQCdVg-KIE.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 31.57.226.0/24 maxlen: 24 31.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4c:e1:35:77:db:29:63:e9:d7:56:38:2b:2e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42002b7360ee87d0e2a648958b40275583e2881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:70:57:ba:f4:c7:cc:e0:75:ce:5c:ed:79: 5e:49:bd:8c:37:63:73:58:4f:75:8e:d6:9e:42:fd: 60:2a:ba:02:5b:02:06:a7:c9:5b:32:2e:1e:d7:fb: 64:50:e9:6d:d7:29:96:24:73:89:41:36:2e:3e:ef: 72:16:96:f2:c7:4a:6d:02:87:5a:36:83:e6:ec:4e: e6:af:71:6a:4b:0e:14:49:c3:03:f9:75:84:ee:00: e8:41:d5:69:12:9e:77:dd:2d:6e:1f:72:c6:78:c0: 93:88:9b:b6:20:17:84:1f:b8:53:36:5c:7c:b6:03: 13:2e:6a:c4:82:e9:c8:5c:83:af:e0:33:c5:e0:17: b3:94:16:41:f4:9f:10:ad:15:eb:b5:6c:96:d5:12: 1b:ba:a8:88:b1:fb:d3:56:ab:dd:b9:ec:8e:51:e9: 9a:97:78:d0:42:b5:5a:81:29:56:63:ba:39:73:71: 92:24:17:c1:d8:42:ec:36:58:1a:09:b2:dc:b6:88: 9d:eb:d7:dc:66:84:66:a2:50:ac:87:ef:01:92:d7: a9:34:c8:d7:ae:2f:16:36:34:35:d6:01:bf:04:4d: 36:97:d0:d9:55:8a:e6:d1:ed:5e:51:59:75:5b:32: 6b:a5:57:ed:4b:33:9b:1f:73:8f:55:71:31:ea:82: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:20:02:B7:36:0E:E8:7D:0E:2A:64:89:58:B4:02:75:58:3E:28:81 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pCACtzYO6H0OKmSJWLQCdVg-KIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.226.0/24 31.59.99.0/24 Signature Algorithm: sha256WithRSAEncryption ad:75:f4:e5:91:73:0f:06:13:39:cb:18:34:94:07:38:e4:0c: 01:fb:ea:14:c6:56:ad:de:32:14:d0:2d:33:59:af:22:c1:fc: 62:bf:b4:43:c7:5d:cc:e2:77:48:a5:4e:38:e6:dd:e0:91:5f: 94:54:1c:be:eb:ba:04:39:ea:27:97:c9:a7:cf:0c:85:97:d3: 89:c7:2b:37:18:19:1e:1c:d8:ec:80:d7:10:a7:10:94:7b:2e: e3:f2:3f:17:3d:3f:77:fa:f9:d4:38:7e:2d:f5:9a:a9:7e:48: d8:c1:ba:cd:a4:ee:ea:b1:d0:0d:98:30:d3:2e:8c:20:1e:07: 41:84:d6:5b:89:85:ce:cf:41:51:6a:f8:1a:a7:91:a5:1a:fe: 61:79:59:59:dd:9e:bb:0b:49:0c:98:88:23:6a:4c:ac:84:50: b5:ff:06:a7:5e:55:fa:04:6e:b0:ce:6b:b1:72:87:12:cf:1d: 84:f0:24:ff:3b:c5:bf:17:f3:6f:71:41:14:6c:07:16:97:ab: 33:28:54:c7:e2:86:4a:20:0a:1a:b7:7b:97:d9:9f:bf:54:c5: bb:87:a4:01:08:3e:4d:fe:1c:a9:dc:2f:b6:b8:a7:c4:a0:fe: 40:ba:97:fe:f7:ee:ca:6e:c2:b5:bb:a1:fc:de:8a:da:e4:7e: 4d:7d:b8:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hEzhNXfbKWPp11Y4Ky6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDIwMDJiNzM2MGVlODdkMGUyYTY0ODk1OGI0MDI3NTU4M2UyODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuORwV7r0x8zgdc5c7XleSb2MN2Nz WE91jtaeQv1gKroCWwIGp8lbMi4e1/tkUOlt1ymWJHOJQTYuPu9yFpbyx0ptAoda NoPm7E7mr3FqSw4UScMD+XWE7gDoQdVpEp533S1uH3LGeMCTiJu2IBeEH7hTNlx8 tgMTLmrEgunIXIOv4DPF4BezlBZB9J8QrRXrtWyW1RIbuqiIsfvTVqvdueyOUema l3jQQrVagSlWY7o5c3GSJBfB2ELsNlgaCbLctoid69fcZoRmolCsh+8BktepNMjX ri8WNjQ11gG/BE02l9DZVYrm0e1eUVl1WzJrpVftSzObH3OPVXEx6oL5cQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKQgArc2Duh9DipkiVi0AnVYPiiBMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcENBQ3R6WU82SDBPS21TSldMUUNkVmctS0lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzniAwQA HztjMA0GCSqGSIb3DQEBCwUAA4IBAQCtdfTlkXMPBhM5yxg0lAc45AwB++oUxlat 3jIU0C0zWa8iwfxiv7RDx13M4ndIpU445t3gkV+UVBy+67oEOeonl8mnzwyFl9OJ xys3GBkeHNjsgNcQpxCUey7j8j8XPT93+vnUOH4t9ZqpfkjYwbrNpO7qsdANmDDT LowgHgdBhNZbiYXOz0FRavgap5GlGv5heVlZ3Z67C0kMmIgjakyshFC1/wanXlX6 BG6wzmuxcocSzx2E8CT/O8W/F/NvcUEUbAcWl6szKFTH4oZKIAoat3uX2Z+/VMW7 h6QBCD5N/hyp3C+2uKfEoP5Aupf+9+7KbsK1u6H83ora5H5Nfbge -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:51 2026 by rpki-client