This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/psYFXpBUPAEmIbb6K7eVMeimVQY.roa File: psYFXpBUPAEmIbb6K7eVMeimVQY.roa (raw, json) Hash identifier: 9XEYVPtFdT/RCmQO7qr1DNMLSxGqttBPGtCuEqCdQ4A= Subject key identifier: A6:C6:05:5E:90:54:3C:01:26:21:B6:FA:2B:B7:95:31:E8:A6:55:06 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B84B11F1687E57E8CE455E195BC5FF734 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/psYFXpBUPAEmIbb6K7eVMeimVQY.roa Signing time: Sat 03 Jan 2026 16:29:18 +0000 ROA not before: Sat 03 Jan 2026 16:29:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215152 IP address blocks: 31.58.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:84:b1:1f:16:87:e5:7e:8c:e4:55:e1:95:bc:5f:f7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 3 16:29:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6c6055e90543c012621b6fa2bb79531e8a65506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:f2:9a:c5:91:9c:d6:4d:7b:0c:85:37:ce: 1a:64:64:f0:bb:e1:a7:8a:d0:88:ee:93:01:43:dd: 62:bd:67:e0:34:d7:0d:4d:4e:2e:46:85:26:bd:45: 75:b0:38:0b:f3:18:19:57:b1:56:ea:c3:6f:36:b0: 62:f2:2d:49:fa:ac:79:a8:a7:e4:e4:2c:b0:ac:6d: ec:1b:7d:a8:a5:38:1e:79:63:ac:7b:aa:47:b7:b3: 3b:99:bd:75:6f:9e:c3:b3:6b:6d:be:85:5a:1f:af: 0a:9b:1b:a9:25:8b:73:ad:0e:fe:0c:2b:62:5c:3f: c1:5f:89:0f:ab:bb:cb:cb:22:b1:ae:4b:5b:46:0a: 0b:25:25:eb:72:41:c1:03:99:8e:73:48:7d:a2:d5: c0:98:6d:ba:b0:23:b5:48:a0:2f:b8:81:bd:a0:87: 33:c3:22:a8:a9:a1:24:78:ff:47:80:a4:ba:ad:c1: 6f:71:25:3f:c6:16:dc:c6:9b:bb:3f:d5:73:b6:20: 72:d4:50:79:46:c1:bc:4d:89:77:ff:bd:77:e4:55: 32:2a:d2:d2:64:89:ce:05:fd:f7:d2:da:bf:c4:2d: 9d:d6:74:37:0a:62:14:3e:2b:80:de:22:ce:48:60: 0e:a3:cf:1d:71:4f:30:aa:c2:0e:63:12:19:1a:f6: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C6:05:5E:90:54:3C:01:26:21:B6:FA:2B:B7:95:31:E8:A6:55:06 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/psYFXpBUPAEmIbb6K7eVMeimVQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.44.0/24 Signature Algorithm: sha256WithRSAEncryption 36:71:0b:5c:c1:e6:61:8f:b6:ce:d0:1d:a1:25:a2:e4:61:8b: fd:d7:ff:08:77:1a:b4:4c:3f:b8:9c:be:43:c8:97:03:24:d2: ab:ea:c3:e4:7f:62:1c:20:1d:42:97:7c:d0:1a:0b:77:4c:1d: f4:c1:40:4f:9b:15:b5:6f:f4:bb:f2:94:25:7c:70:92:62:91: 4f:6c:70:97:6b:99:bb:0f:7b:27:ce:d9:da:d9:8e:fc:3f:2a: 3c:ad:2d:ef:f6:5f:2d:79:fe:8e:7f:4d:e0:20:ed:68:94:c1: c7:c3:48:f9:2f:ce:a4:fe:60:d2:24:9e:92:41:c4:11:a7:ff: 97:25:61:b3:c6:fa:db:d9:25:ba:56:23:7e:b1:48:5a:8e:71: f0:30:c1:07:06:cb:ae:2b:ec:12:b9:ba:51:f4:12:82:1f:03: 28:61:18:d3:75:e3:35:d7:5b:5f:6e:3a:ed:a5:7a:92:4a:e9: 84:45:1d:2e:b6:a7:3c:87:a2:88:9c:ae:68:8d:9c:b0:02:36: 1f:48:be:f9:ed:dd:d4:ba:c5:9f:94:4a:2f:dd:22:8a:35:61: e3:93:ab:ed:a8:cb:3c:15:f3:ad:8b:f6:a5:9b:47:6b:38:2f: 4c:65:d2:ee:41:1f:e8:17:5e:e6:aa:62:3f:dd:66:f0:b4:92: 53:35:ef:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuEsR8Wh+V+jORV4ZW8X/c0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAzMTYyOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmM2MDU1ZTkwNTQzYzAxMjYyMWI2ZmEyYmI3OTUzMWU4YTY1NTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MvymsWRnNZNewyFN84aZGTwu+Gn itCI7pMBQ91ivWfgNNcNTU4uRoUmvUV1sDgL8xgZV7FW6sNvNrBi8i1J+qx5qKfk 5CywrG3sG32opTgeeWOse6pHt7M7mb11b57Ds2ttvoVaH68KmxupJYtzrQ7+DCti XD/BX4kPq7vLyyKxrktbRgoLJSXrckHBA5mOc0h9otXAmG26sCO1SKAvuIG9oIcz wyKoqaEkeP9HgKS6rcFvcSU/xhbcxpu7P9VztiBy1FB5RsG8TYl3/7135FUyKtLS ZInOBf330tq/xC2d1nQ3CmIUPiuA3iLOSGAOo88dcU8wqsIOYxIZGvZxAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKbGBV6QVDwBJiG2+iu3lTHoplUGMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcHNZRlhwQlVQQUVtSWJiNks3ZVZNZWltVlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzosMA0G CSqGSIb3DQEBCwUAA4IBAQA2cQtcweZhj7bO0B2hJaLkYYv91/8Idxq0TD+4nL5D yJcDJNKr6sPkf2IcIB1Cl3zQGgt3TB30wUBPmxW1b/S78pQlfHCSYpFPbHCXa5m7 D3snztna2Y78Pyo8rS3v9l8tef6Of03gIO1olMHHw0j5L86k/mDSJJ6SQcQRp/+X JWGzxvrb2SW6ViN+sUhajnHwMMEHBsuuK+wSubpR9BKCHwMoYRjTdeM111tfbjrt pXqSSumERR0utqc8h6KInK5ojZywAjYfSL757d3UusWflEov3SKKNWHjk6vtqMs8 FfOti/alm0drOC9MZdLuQR/oF17mqmI/3WbwtJJTNe8N -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:45 2026 by rpki-client