This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pJMaJtG9gPlS78dfpxK6bSbBDDk.roa File: pJMaJtG9gPlS78dfpxK6bSbBDDk.roa (raw, json) Hash identifier: VbnoxI9f8jehr+EAKQFyQuME2wrSJjyT2gpbzDBLlcg= Subject key identifier: A4:93:1A:26:D1:BD:80:F9:52:EF:C7:5F:A7:12:BA:6D:26:C1:0C:39 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8446C11B43036F04D6D9E9D84CDAC6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pJMaJtG9gPlS78dfpxK6bSbBDDk.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 31.56.61.0/24 maxlen: 24 31.57.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:46:c1:1b:43:03:6f:04:d6:d9:e9:d8:4c:da:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4931a26d1bd80f952efc75fa712ba6d26c10c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:06:9f:91:d4:96:f2:35:65:f4:6a:e5:0c: 64:2f:e4:ef:2d:88:af:6f:eb:a6:a7:93:04:7c:be: 7d:12:59:9f:3a:7b:b8:63:6a:11:42:21:9c:63:10: 59:46:8e:49:a4:45:7d:d8:72:36:5d:f3:41:42:79: e2:f5:f3:51:b3:33:32:aa:dc:b5:09:37:ff:5b:73: fd:bd:93:d2:5b:c7:53:0a:3a:91:d9:fa:44:b0:61: a0:55:25:43:59:f4:e1:c7:16:63:3b:8a:2d:5a:93: 35:5f:fd:26:3c:fa:b9:7b:0b:eb:40:e6:3e:e4:c2: e1:cc:de:f1:d2:ec:65:94:fe:d4:9f:e8:98:53:00: 99:d6:67:f3:2e:db:4b:7c:38:ff:d9:00:8a:31:95: 07:63:69:a0:79:04:d9:1e:b1:93:33:b1:9e:1b:41: bd:01:f7:93:cd:54:74:2d:e7:1c:71:84:25:98:c7: 5a:04:fd:30:06:d4:70:fb:29:91:52:b5:98:37:de: 58:18:54:fc:a1:b5:0c:bd:ad:8c:8e:f3:a9:b7:29: cc:9b:57:a0:f8:cb:60:84:a7:a7:a0:16:23:f8:f1: de:c3:1b:54:6a:0c:16:7c:d5:52:6f:62:f8:5d:30: 99:de:d0:f1:2e:50:e8:17:28:94:b5:f7:f6:44:91: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:93:1A:26:D1:BD:80:F9:52:EF:C7:5F:A7:12:BA:6D:26:C1:0C:39 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pJMaJtG9gPlS78dfpxK6bSbBDDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.61.0/24 31.57.226.0/24 Signature Algorithm: sha256WithRSAEncryption 83:a2:fb:12:28:3e:e8:fe:6a:a9:81:06:cf:e3:fe:2a:bd:e9: 84:d7:ef:26:51:65:ec:20:67:db:8a:42:5d:ac:21:16:c9:ed: 52:6f:35:f8:4a:58:94:2f:84:aa:63:63:ce:d4:33:68:3e:42: 6d:f7:26:53:fb:89:02:57:9d:f3:9c:29:c3:0e:04:25:c3:0d: c8:04:4f:56:bd:3a:78:48:b2:23:de:99:8c:db:33:8d:83:29: 03:00:14:3f:80:bc:1c:18:46:89:16:c4:7a:be:e3:16:0b:23: f3:c7:7d:81:78:5e:2c:5e:15:3f:6b:c2:f2:b6:3e:57:7f:5e: 38:06:4d:74:8f:9f:24:2f:68:b6:95:3c:fd:33:5a:76:ef:76: 7d:76:ab:19:5f:7d:14:3e:88:c0:a8:ba:8d:92:ed:8d:4b:e4: d5:ab:92:35:2f:8e:31:07:1d:43:6b:34:4b:b0:5f:e9:4b:9f: 54:85:5d:89:5e:e5:cc:24:3f:36:da:b2:a2:df:cd:d3:3b:de: 7e:01:95:1e:35:b8:c8:91:b3:87:1a:2b:d1:6c:d5:fe:67:58: 3e:65:64:17:43:41:27:6b:94:3e:92:c1:b4:4b:ac:42:6e:ef: 96:cd:19:4e:2b:19:aa:67:79:c5:c5:a3:4b:96:61:24:60:46: c6:f0:1b:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hEbBG0MDbwTW2enYTNrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDkzMWEyNmQxYmQ4MGY5NTJlZmM3NWZhNzEyYmE2ZDI2YzEwYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpMGn5HUlvI1ZfRq5QxkL+TvLYiv b+ump5MEfL59ElmfOnu4Y2oRQiGcYxBZRo5JpEV92HI2XfNBQnni9fNRszMyqty1 CTf/W3P9vZPSW8dTCjqR2fpEsGGgVSVDWfThxxZjO4otWpM1X/0mPPq5ewvrQOY+ 5MLhzN7x0uxllP7Un+iYUwCZ1mfzLttLfDj/2QCKMZUHY2mgeQTZHrGTM7GeG0G9 AfeTzVR0LecccYQlmMdaBP0wBtRw+ymRUrWYN95YGFT8obUMva2MjvOptynMm1eg +MtghKenoBYj+PHewxtUagwWfNVSb2L4XTCZ3tDxLlDoFyiUtff2RJEExQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKSTGibRvYD5Uu/HX6cSum0mwQw5MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcEpNYUp0RzlnUGxTNzhkZnB4SzZiU2JCRERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzg9AwQA HzniMA0GCSqGSIb3DQEBCwUAA4IBAQCDovsSKD7o/mqpgQbP4/4qvemE1+8mUWXs IGfbikJdrCEWye1SbzX4SliUL4SqY2PO1DNoPkJt9yZT+4kCV53znCnDDgQlww3I BE9WvTp4SLIj3pmM2zONgykDABQ/gLwcGEaJFsR6vuMWCyPzx32BeF4sXhU/a8Ly tj5Xf144Bk10j58kL2i2lTz9M1p273Z9dqsZX30UPojAqLqNku2NS+TVq5I1L44x Bx1DazRLsF/pS59UhV2JXuXMJD822rKi383TO95+AZUeNbjIkbOHGivRbNX+Z1g+ ZWQXQ0Ena5Q+ksG0S6xCbu+WzRlOKxmqZ3nFxaNLlmEkYEbG8Btk -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client