This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qW0NkiaK-30qCSNHXEKv5C--TX0.roa File: qW0NkiaK-30qCSNHXEKv5C--TX0.roa (raw, json) Hash identifier: MJ8JTxsAk7Am8CrNObH+cx/aWs6XyPSbMTuGWxvj9R0= Subject key identifier: A9:6D:0D:92:26:8A:FB:7D:2A:09:23:47:5C:42:AF:E4:2F:BE:4D:7D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D0C5941D62F942BC28F778AEC88E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qW0NkiaK-30qCSNHXEKv5C--TX0.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215607 IP address blocks: 31.58.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d0:c5:94:1d:62:f9:42:bc:28:f7:78:ae:c8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a96d0d92268afb7d2a0923475c42afe42fbe4d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5e:89:86:ea:d5:d5:8a:5e:a7:dd:8c:47:b2: 8a:65:80:91:e3:90:f8:ea:3e:85:28:d8:97:d2:6c: bb:fd:1a:f1:e5:8a:3f:42:9a:21:ed:ad:01:b4:c2: 46:ee:2b:d3:a5:f8:8c:60:00:d6:d5:76:27:6a:66: 8f:5a:c0:1a:b1:f8:cb:8d:92:09:aa:2e:62:cd:d8: 91:73:b5:87:a2:f0:bc:38:65:8a:f5:f4:fa:7b:21: 5c:22:63:ac:83:a8:2d:d3:a5:bc:ee:61:4e:3a:d2: 07:8a:6e:b7:fe:a5:84:63:a8:75:0a:9c:51:03:18: 6d:84:26:e1:f0:d2:70:56:54:1a:9a:a6:9f:2c:ac: bb:2f:34:44:2d:73:73:c2:84:4f:63:a9:3f:01:48: 83:e6:33:fc:4c:ec:91:11:ad:c7:4d:17:b3:a6:e9: 63:68:8b:1d:67:3d:cb:11:cb:69:51:bf:02:52:2c: 44:cb:a8:39:ff:ad:dd:29:1f:3a:f5:ae:d7:9e:6d: cd:7f:fa:7a:18:8d:a1:b6:b3:d1:6a:60:53:09:33: fe:38:0b:1c:fd:50:29:55:b1:e1:6b:dc:a9:fa:93: 52:99:73:78:e1:c2:47:02:a7:c8:aa:43:a5:3d:22: 97:88:36:41:8e:17:c4:23:66:bb:cb:15:af:c6:f9: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6D:0D:92:26:8A:FB:7D:2A:09:23:47:5C:42:AF:E4:2F:BE:4D:7D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qW0NkiaK-30qCSNHXEKv5C--TX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.144.0/24 Signature Algorithm: sha256WithRSAEncryption 86:54:54:34:9b:cc:e3:fa:4c:63:e1:9b:28:2a:7e:41:b9:8b: 41:77:09:e4:77:78:a6:e0:d2:1d:b9:2b:3a:cb:46:cf:43:5b: 68:75:cb:54:99:a7:81:49:46:21:5d:2f:a0:aa:51:ae:90:7a: bd:2e:8a:3a:95:37:2c:e0:af:98:14:23:7a:a7:e2:56:13:48: 89:b1:c8:1f:b6:23:89:0f:c6:d2:88:8c:d0:fd:bf:8f:c5:88: 5e:50:61:d7:4b:bf:0c:e3:75:62:f8:23:0b:e7:f4:db:70:d3: 05:ac:3c:35:63:ff:cf:cd:5b:c4:35:63:7d:1e:c2:92:93:d9: 9c:fd:12:69:3c:a3:9c:e6:e6:3b:c9:99:b5:79:91:8e:71:c8: 01:cd:04:7f:2f:b9:07:f4:05:b3:8f:5d:33:e0:55:b6:61:e7: 38:dd:f9:ef:12:7a:2a:e4:50:82:6e:58:a2:9f:d9:02:66:ca: a8:0c:be:5b:d6:5a:60:38:19:37:ba:dc:6a:33:47:63:78:db: ea:2c:a8:31:5b:16:dd:28:d8:43:1a:6f:73:41:50:c6:cb:31: 23:f8:1c:2b:2d:d8:16:18:25:a4:4d:12:19:db:66:48:a6:1b: a4:bb:4b:c7:a4:40:4c:6a:e4:d1:43:47:de:1d:72:24:f0:59: 4c:17:80:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNDFlB1i+UK8KPd4rsiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTZkMGQ5MjI2OGFmYjdkMmEwOTIzNDc1YzQyYWZlNDJmYmU0ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l6JhurV1Ypep92MR7KKZYCR45D4 6j6FKNiX0my7/Rrx5Yo/Qpoh7a0BtMJG7ivTpfiMYADW1XYnamaPWsAasfjLjZIJ qi5izdiRc7WHovC8OGWK9fT6eyFcImOsg6gt06W87mFOOtIHim63/qWEY6h1CpxR AxhthCbh8NJwVlQamqafLKy7LzRELXNzwoRPY6k/AUiD5jP8TOyREa3HTRezpulj aIsdZz3LEctpUb8CUixEy6g5/63dKR869a7Xnm3Nf/p6GI2htrPRamBTCTP+OAsc /VApVbHha9yp+pNSmXN44cJHAqfIqkOlPSKXiDZBjhfEI2a7yxWvxvn+YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKltDZImivt9KgkjR1xCr+Qvvk19MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcVcwTmtpYUstMzBxQ1NOSFhFS3Y1Qy0tVFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqQMA0G CSqGSIb3DQEBCwUAA4IBAQCGVFQ0m8zj+kxj4ZsoKn5BuYtBdwnkd3im4NIduSs6 y0bPQ1todctUmaeBSUYhXS+gqlGukHq9Loo6lTcs4K+YFCN6p+JWE0iJscgftiOJ D8bSiIzQ/b+PxYheUGHXS78M43Vi+CML5/TbcNMFrDw1Y//PzVvENWN9HsKSk9mc /RJpPKOc5uY7yZm1eZGOccgBzQR/L7kH9AWzj10z4FW2Yec43fnvEnoq5FCCblii n9kCZsqoDL5b1lpgOBk3utxqM0djeNvqLKgxWxbdKNhDGm9zQVDGyzEj+BwrLdgW GCWkTRIZ22ZIphuku0vHpEBMauTRQ0feHXIk8FlMF4Ar -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:05 2026 by rpki-client