This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s1ZuudTq8bhp3nhqfo7R34TPjaY.roa File: s1ZuudTq8bhp3nhqfo7R34TPjaY.roa (raw, json) Hash identifier: u53yg300nOkenONLyATm4e2vBUnlPLCLDfL81JDzt9k= Subject key identifier: B3:56:6E:B9:D4:EA:F1:B8:69:DE:78:6A:7E:8E:D1:DF:84:CF:8D:A6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DD32A1BA127A6F76823BCF446ED6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s1ZuudTq8bhp3nhqfo7R34TPjaY.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394104 IP address blocks: 31.56.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dd:32:a1:ba:12:7a:6f:76:82:3b:cf:44:6e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3566eb9d4eaf1b869de786a7e8ed1df84cf8da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:28:14:55:3e:d5:46:8e:5c:a8:f6:a1:fb:48: 58:9b:48:88:43:db:ac:b1:3d:db:30:5e:66:e1:37: f3:e9:81:73:67:5f:20:b1:7a:aa:67:a0:43:6a:84: a0:12:61:6e:aa:86:22:c7:0a:8e:9e:bf:ed:ee:8b: 65:c4:e7:6d:e1:35:c1:68:78:ec:c4:87:5f:7e:ff: d8:f6:d3:77:0a:c9:75:9b:02:43:5d:30:25:4c:44: 26:61:39:37:d7:2b:44:f2:0a:6e:cd:40:e7:61:8e: 2f:2c:4f:e1:5b:a4:ca:94:f2:ce:85:ab:d3:9b:35: d1:08:44:35:dd:31:28:f5:cf:e4:57:b1:c8:52:81: 53:09:ef:85:2e:91:6d:74:4e:0f:92:43:c6:55:61: 76:7f:ef:13:ce:62:68:df:fc:bd:f1:b5:cd:df:5b: 21:53:64:85:29:6b:44:c2:8c:87:b9:32:d0:d1:19: 0c:35:24:e7:21:9a:9c:2d:ca:8b:d7:77:b1:87:22: e2:e2:43:84:12:83:5c:3b:23:e8:6f:68:0c:07:42: 31:32:e2:e8:61:05:9c:96:98:4a:78:f9:5c:41:03: 7b:7b:bc:86:e5:8b:64:aa:1b:6d:01:c2:78:a9:fa: 5b:03:11:90:9f:6c:de:f9:e2:ee:99:25:a7:ec:e3: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:56:6E:B9:D4:EA:F1:B8:69:DE:78:6A:7E:8E:D1:DF:84:CF:8D:A6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s1ZuudTq8bhp3nhqfo7R34TPjaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.75.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:8e:ed:36:c5:2d:88:60:6e:68:a4:d4:34:1b:60:c8:f4:e0: 96:de:4f:b0:bf:b1:d3:f1:6e:64:d8:04:90:b1:d9:b4:eb:af: 95:4d:10:2e:6d:f9:bb:82:d6:b9:c1:40:3f:ce:35:30:7f:ac: 08:e6:02:1a:bf:3f:83:f9:aa:27:4b:ae:d7:b8:dd:00:c1:c6: f9:91:9d:97:d5:52:3b:e9:01:6e:ce:45:1b:2b:42:ff:a2:e1: 76:4a:e0:9b:a1:eb:b2:45:b1:b8:96:fc:36:fb:ba:68:46:19: 4f:0d:22:ae:01:df:b6:0d:1d:03:a7:e6:24:5d:c8:97:b7:35: 07:f4:9f:d1:f4:32:3e:28:51:86:b2:7e:a0:b0:45:65:20:94: f0:3c:86:32:9e:86:c4:69:40:2a:75:ac:14:e1:61:db:a4:0a: 90:2d:77:14:d8:0d:17:8f:59:a7:97:2b:90:97:78:0c:f3:5f: 47:15:54:db:60:5c:33:fd:23:c4:08:49:cf:6a:50:e5:96:24: 35:ba:33:8d:71:9c:b4:a2:00:b7:52:ac:ab:f7:2f:c3:f3:44: 8c:a0:5a:af:70:f5:ed:2c:af:bc:e1:01:85:28:9a:56:c0:24: ba:cf:e3:3f:d6:9c:14:4c:58:e5:7f:f5:de:37:0a:e1:76:d6: 98:8b:39:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hN0yoboSem92gjvPRG7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzU2NmViOWQ0ZWFmMWI4NjlkZTc4NmE3ZThlZDFkZjg0Y2Y4ZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ygUVT7VRo5cqPah+0hYm0iIQ9us sT3bMF5m4Tfz6YFzZ18gsXqqZ6BDaoSgEmFuqoYixwqOnr/t7otlxOdt4TXBaHjs xIdffv/Y9tN3Csl1mwJDXTAlTEQmYTk31ytE8gpuzUDnYY4vLE/hW6TKlPLOhavT mzXRCEQ13TEo9c/kV7HIUoFTCe+FLpFtdE4PkkPGVWF2f+8TzmJo3/y98bXN31sh U2SFKWtEwoyHuTLQ0RkMNSTnIZqcLcqL13exhyLi4kOEEoNcOyPob2gMB0IxMuLo YQWclphKePlcQQN7e7yG5YtkqhttAcJ4qfpbAxGQn2ze+eLumSWn7ONKYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNWbrnU6vG4ad54an6O0d+Ez42mMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvczFadXVkVHE4YmhwM25ocWZvN1IzNFRQamFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhLMA0G CSqGSIb3DQEBCwUAA4IBAQBLju02xS2IYG5opNQ0G2DI9OCW3k+wv7HT8W5k2ASQ sdm066+VTRAubfm7gta5wUA/zjUwf6wI5gIavz+D+aonS67XuN0Awcb5kZ2X1VI7 6QFuzkUbK0L/ouF2SuCboeuyRbG4lvw2+7poRhlPDSKuAd+2DR0Dp+YkXciXtzUH 9J/R9DI+KFGGsn6gsEVlIJTwPIYynobEaUAqdawU4WHbpAqQLXcU2A0Xj1mnlyuQ l3gM819HFVTbYFwz/SPECEnPalDlliQ1ujONcZy0ogC3Uqyr9y/D80SMoFqvcPXt LK+84QGFKJpWwCS6z+M/1pwUTFjlf/XeNwrhdtaYizkL -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:43 2026 by rpki-client