This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rPlfMfwAeOZXlcHvjTejQmTMUrY.roa File: rPlfMfwAeOZXlcHvjTejQmTMUrY.roa (raw, json) Hash identifier: piZhR8tvXqXCUbQJeP11/B3j8xlmMlGaxRi+aItOD7Y= Subject key identifier: AC:F9:5F:31:FC:00:78:E6:57:95:C1:EF:8D:37:A3:42:64:CC:52:B6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E29B9A68FDD4B1136EEE9DC80F7D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rPlfMfwAeOZXlcHvjTejQmTMUrY.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399486 IP address blocks: 31.57.38.0/24 maxlen: 24 31.57.147.0/24 maxlen: 24 31.57.188.0/24 maxlen: 24 31.57.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e2:9b:9a:68:fd:d4:b1:13:6e:ee:9d:c8:0f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acf95f31fc0078e65795c1ef8d37a34264cc52b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:3a:17:92:bf:6c:49:67:8f:20:4e:4e:81: fd:79:66:26:8c:9a:90:f6:12:8b:83:90:62:01:cb: 9a:63:4f:ba:de:f8:6e:0c:30:ba:30:87:0a:31:ae: 27:bf:7e:69:db:c2:02:53:00:9a:a2:bf:63:5d:06: aa:98:ad:69:56:41:50:c4:b9:aa:e0:56:0e:b8:72: f9:a8:ae:af:a3:aa:14:06:be:5e:23:9f:0c:23:10: 1d:79:6b:83:b8:c0:d6:53:53:6c:c0:04:44:45:72: 93:7a:f4:e8:06:e7:b7:ab:01:74:07:6b:3c:a4:77: 7f:32:a8:2a:8a:06:4b:17:a4:57:ad:62:c2:a8:df: c6:b4:42:f9:83:90:e7:d0:42:6b:ff:3d:56:15:30: a0:fe:e6:0c:5f:ae:e7:fc:e7:00:47:f5:f8:7d:ef: c4:94:33:6a:92:bb:25:fa:4e:89:59:76:a9:b7:c6: 3e:1e:5f:c6:ed:7f:66:d3:41:7c:7b:3f:be:41:a0: b7:f0:e1:ea:ad:a7:a4:fc:35:77:95:dc:48:e4:00: 50:91:ad:76:ea:d0:55:10:cc:72:74:b7:df:7d:29: 1e:e9:b3:ad:36:d3:bc:70:bf:e3:28:24:74:b8:f1: 39:1a:13:0f:8c:aa:10:60:c1:d5:ed:b7:a9:36:1f: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F9:5F:31:FC:00:78:E6:57:95:C1:EF:8D:37:A3:42:64:CC:52:B6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rPlfMfwAeOZXlcHvjTejQmTMUrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.38.0/24 31.57.147.0/24 31.57.188.0/24 31.57.219.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b6:01:79:fa:29:fe:a8:ed:d0:c6:b9:45:e1:13:37:4b:0b: e4:ab:1e:58:c2:40:94:44:0e:b2:01:fe:be:f8:a4:cb:b5:54: b2:0a:14:b6:9e:5c:10:a6:95:04:e8:5d:43:b5:22:04:a4:ea: 3b:4e:7e:4b:41:83:56:dc:02:e4:af:d6:a3:8f:79:0d:81:46: 38:2e:5e:c4:8d:51:c5:15:b0:a0:04:a4:72:eb:da:75:c1:67: 01:94:3a:2a:ae:32:7e:77:45:02:1e:94:38:ca:aa:45:b5:27: 13:81:b0:d4:4f:3f:dd:1c:24:4d:d1:fc:bf:49:ba:3e:5b:fc: d2:ea:02:97:42:ad:1e:72:98:7e:94:be:69:15:fb:85:e0:04: 96:89:36:d9:2a:33:44:5e:7c:60:ee:a8:83:d5:40:e3:fb:59: bd:25:94:db:29:36:97:00:06:d2:18:52:87:72:ca:88:20:58: 34:3a:3a:6f:4b:c0:8e:29:cd:61:aa:23:9d:8a:b7:5e:26:a0: df:80:60:9b:4d:46:34:1d:19:00:8c:b6:dd:9d:51:11:ce:92: 7f:38:58:f5:5f:f7:a7:1d:fb:ff:17:20:bb:12:26:cd:d8:82: e1:85:b6:f2:d8:4c:6b:07:5f:37:ef:79:0c:d5:18:0f:c3:ce: 5c:cc:d4:37 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hOKbmmj91LETbu6dyA99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2Y5NWYzMWZjMDA3OGU2NTc5NWMxZWY4ZDM3YTM0MjY0Y2M1MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/w6F5K/bElnjyBOToH9eWYmjJqQ 9hKLg5BiAcuaY0+63vhuDDC6MIcKMa4nv35p28ICUwCaor9jXQaqmK1pVkFQxLmq 4FYOuHL5qK6vo6oUBr5eI58MIxAdeWuDuMDWU1NswARERXKTevToBue3qwF0B2s8 pHd/MqgqigZLF6RXrWLCqN/GtEL5g5Dn0EJr/z1WFTCg/uYMX67n/OcAR/X4fe/E lDNqkrsl+k6JWXapt8Y+Hl/G7X9m00F8ez++QaC38OHqraek/DV3ldxI5ABQka12 6tBVEMxydLfffSke6bOtNtO8cL/jKCR0uPE5GhMPjKoQYMHV7bepNh/hCwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKz5XzH8AHjmV5XB7403o0JkzFK2MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvclBsZk1md0FlT1pYbGNIdmpUZWpRbVRNVXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzkmAwQA HzmTAwQAHzm8AwQAHznbMA0GCSqGSIb3DQEBCwUAA4IBAQBQtgF5+in+qO3QxrlF 4RM3Swvkqx5YwkCURA6yAf6++KTLtVSyChS2nlwQppUE6F1DtSIEpOo7Tn5LQYNW 3ALkr9ajj3kNgUY4Ll7EjVHFFbCgBKRy69p1wWcBlDoqrjJ+d0UCHpQ4yqpFtScT gbDUTz/dHCRN0fy/Sbo+W/zS6gKXQq0ecph+lL5pFfuF4ASWiTbZKjNEXnxg7qiD 1UDj+1m9JZTbKTaXAAbSGFKHcsqIIFg0OjpvS8COKc1hqiOdirdeJqDfgGCbTUY0 HRkAjLbdnVERzpJ/OFj1X/enHfv/FyC7EibN2ILhhbby2ExrB18373kM1RgPw85c zNQ3 -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:25 2026 by rpki-client