This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pGziyXjXHCGPKD1bwYc4YLeVDEs.roa File: pGziyXjXHCGPKD1bwYc4YLeVDEs.roa (raw, json) Hash identifier: DeChi8SHlvwACe/m8WJE6dRz1IauAtEfNYIXLYonEjc= Subject key identifier: A4:6C:E2:C9:78:D7:1C:21:8F:28:3D:5B:C1:87:38:60:B7:95:0C:4B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C4ACE3A16E8523651099D3FF041A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pGziyXjXHCGPKD1bwYc4YLeVDEs.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214828 IP address blocks: 31.56.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c4:ac:e3:a1:6e:85:23:65:10:99:d3:ff:04:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46ce2c978d71c218f283d5bc1873860b7950c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0d:48:e7:ae:1a:f2:84:8a:71:92:eb:a8:37: 26:44:6c:cc:1d:a1:cb:7c:43:2d:e8:4c:52:c8:f0: 30:0a:a3:c4:d8:49:31:7a:1b:f6:9d:a7:37:a9:c1: 89:d8:63:9b:11:ea:1c:90:59:6c:c8:6b:fb:02:5a: 70:92:c0:19:3b:91:12:ad:83:8a:1f:d6:03:f7:2f: c7:da:f8:d0:bb:72:bc:10:ff:a6:11:7f:fe:09:c6: e1:42:ec:b1:d0:d5:59:56:51:95:03:bd:92:6f:87: 32:d9:be:1d:10:8f:0d:1a:9c:42:ee:49:60:0e:64: 0c:7d:68:3e:00:2b:9d:bb:5c:bf:cd:91:b5:42:3e: 61:19:2b:9e:90:29:a2:fb:d9:90:87:49:6f:0c:c0: 64:89:b7:aa:f2:d4:e1:45:43:00:1a:4d:97:29:5d: 00:1c:b9:92:01:db:1d:c2:1f:2c:05:f0:62:98:0f: 46:51:ce:06:b1:00:b3:a3:cc:1b:65:dd:1d:26:d4: d2:cd:12:0b:47:09:92:05:5c:9b:8f:92:55:89:7f: ed:64:35:4f:0c:4e:11:14:af:a8:e3:66:7f:cc:6e: de:9f:1d:30:54:f1:e6:95:fa:39:9b:5e:38:80:1c: 56:5d:5c:72:9b:ed:b2:72:f5:f4:aa:7a:a5:ae:1a: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6C:E2:C9:78:D7:1C:21:8F:28:3D:5B:C1:87:38:60:B7:95:0C:4B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pGziyXjXHCGPKD1bwYc4YLeVDEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.144.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d3:63:a6:03:53:7c:af:c1:63:e5:93:53:95:77:7d:d4:e6: c3:c6:19:f3:d9:20:cb:d9:49:93:a0:da:c9:29:e7:8b:7a:c1: 98:00:4a:10:83:fa:52:4f:1e:6f:9a:0a:36:4c:b2:68:62:38: ea:72:1e:58:1a:0b:c6:47:43:5c:7c:77:bb:cd:35:e2:88:c5: bc:5f:44:40:64:cd:f2:49:ff:1d:e1:31:f1:36:63:1c:4e:01: 87:09:57:73:4e:45:ee:cd:f5:2b:d6:56:8e:00:f0:fe:4f:bf: bf:f8:bc:5b:af:ae:24:c9:44:42:93:6c:c3:4f:a4:d7:fa:9a: 40:54:95:00:07:13:57:38:5d:dd:b0:df:d9:93:73:f2:9e:12: cc:62:9f:61:d4:1e:cd:db:5e:79:1c:d8:e7:2f:da:2d:84:a5: 18:4a:5a:ec:33:eb:c3:3a:26:f7:dc:a1:32:73:d7:df:cf:95: 3e:85:f7:de:37:5f:04:bd:ab:37:b8:fc:06:a6:89:d8:63:a5: 5b:7a:b3:71:84:6d:8a:f5:d0:0d:33:c6:6a:3e:a1:cf:3a:c2: 47:8c:7a:21:0c:8d:b3:d3:f6:a5:41:1b:6f:6d:c2:2a:47:de: d6:00:e8:73:6b:a0:ba:69:75:9c:93:f4:6a:05:0c:92:94:cf: 23:fc:9b:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMSs46FuhSNlEJnT/wQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDZjZTJjOTc4ZDcxYzIxOGYyODNkNWJjMTg3Mzg2MGI3OTUwYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg1I564a8oSKcZLrqDcmRGzMHaHL fEMt6ExSyPAwCqPE2Ekxehv2nac3qcGJ2GObEeockFlsyGv7AlpwksAZO5ESrYOK H9YD9y/H2vjQu3K8EP+mEX/+CcbhQuyx0NVZVlGVA72Sb4cy2b4dEI8NGpxC7klg DmQMfWg+ACudu1y/zZG1Qj5hGSuekCmi+9mQh0lvDMBkibeq8tThRUMAGk2XKV0A HLmSAdsdwh8sBfBimA9GUc4GsQCzo8wbZd0dJtTSzRILRwmSBVybj5JViX/tZDVP DE4RFK+o42Z/zG7enx0wVPHmlfo5m144gBxWXVxym+2ycvX0qnqlrhpRrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRs4sl41xwhjyg9W8GHOGC3lQxLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcEd6aXlYalhIQ0dQS0QxYndZYzRZTGVWREVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHziQMA0G CSqGSIb3DQEBCwUAA4IBAQCj02OmA1N8r8Fj5ZNTlXd91ObDxhnz2SDL2UmToNrJ KeeLesGYAEoQg/pSTx5vmgo2TLJoYjjqch5YGgvGR0NcfHe7zTXiiMW8X0RAZM3y Sf8d4THxNmMcTgGHCVdzTkXuzfUr1laOAPD+T7+/+Lxbr64kyURCk2zDT6TX+ppA VJUABxNXOF3dsN/Zk3PynhLMYp9h1B7N2155HNjnL9othKUYSlrsM+vDOib33KEy c9ffz5U+hffeN18Evas3uPwGponYY6VberNxhG2K9dANM8ZqPqHPOsJHjHohDI2z 0/alQRtvbcIqR97WAOhza6C6aXWck/RqBQySlM8j/JtX -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:37 2026 by rpki-client