This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sTpVU18iaDsXjZaOzU5rkBsddzc.roa File: sTpVU18iaDsXjZaOzU5rkBsddzc.roa (raw, json) Hash identifier: +8xGB+3Nb7hokrQ9m32PtEWolALU+tN1VXFbE0L3fKs= Subject key identifier: B1:3A:55:53:5F:22:68:3B:17:8D:96:8E:CD:4E:6B:90:1B:1D:77:37 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BEC319644A89D94060366BCD87BBA4421 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sTpVU18iaDsXjZaOzU5rkBsddzc.roa Signing time: Fri 23 Jan 2026 18:50:31 +0000 ROA not before: Fri 23 Jan 2026 18:50:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 31.58.139.0/24 maxlen: 24 31.59.196.0/24 maxlen: 24 31.59.199.0/24 maxlen: 24 31.59.202.0/24 maxlen: 24 31.59.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:31:96:44:a8:9d:94:06:03:66:bc:d8:7b:ba:44:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 23 18:50:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b13a55535f22683b178d968ecd4e6b901b1d7737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:03:90:fa:5d:2c:64:ac:40:a3:91:4b:21: 51:56:e4:17:cb:b6:86:cf:f4:13:ec:a7:6c:56:f9: ea:47:30:8a:75:ff:67:f5:d7:b5:f5:25:cd:42:e8: 4a:86:19:f0:29:0e:5e:c8:3d:35:80:dc:e1:d8:e4: 35:00:cc:8c:2c:95:0a:e5:06:78:b7:25:b3:c2:8b: ea:65:40:ab:24:41:7a:25:f8:fb:ac:4b:2f:02:49: 23:a9:13:ce:ea:36:91:f1:82:c5:f0:43:65:f4:7c: 62:08:5f:28:27:e4:34:3e:db:10:e3:12:15:5c:ac: bb:d7:98:86:5e:0e:6e:e0:fb:d3:c3:f6:14:e5:da: 7c:fd:37:fa:78:1f:66:ec:cd:4e:97:33:3d:3d:a8: 0c:c6:65:ce:65:54:13:46:b8:a0:0e:30:72:34:47: dc:73:10:38:a5:49:59:73:d2:a7:d7:b7:9f:b2:fd: d4:02:b9:16:a0:e6:13:d6:c9:78:b8:36:6c:dd:82: 5b:32:f8:b3:5a:8d:d9:d0:ae:b5:1a:41:1b:43:52: a2:10:38:21:35:d0:3a:08:99:4a:46:15:b7:7d:3f: d9:71:d2:61:d4:c5:6e:09:e3:db:ff:59:1b:c7:67: 9f:49:57:56:ef:90:9a:73:7c:45:df:cf:08:b9:9c: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3A:55:53:5F:22:68:3B:17:8D:96:8E:CD:4E:6B:90:1B:1D:77:37 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sTpVU18iaDsXjZaOzU5rkBsddzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.139.0/24 31.59.196.0/24 31.59.199.0/24 31.59.202.0/24 31.59.208.0/24 Signature Algorithm: sha256WithRSAEncryption 36:7c:7e:c4:40:cb:a0:a9:26:64:20:20:c2:47:ea:b2:4b:94: 64:43:4a:66:03:76:36:95:2f:b7:bf:a3:fd:12:17:d6:88:36: 8f:b0:7b:cc:7c:a6:b9:af:9b:56:dc:07:a0:66:78:24:87:85: 52:10:c9:57:dd:7a:12:2d:2f:0e:46:dc:be:92:91:3c:1e:e5: ce:cb:a3:95:c1:b0:fd:30:55:34:31:11:98:34:26:3b:85:43: 93:e8:ea:d5:07:9b:3c:f9:fa:5f:42:44:54:26:15:56:ab:d2: 82:3c:18:a7:61:6e:8b:56:78:98:8a:bd:be:45:a2:c5:e7:d1: 6e:0d:1b:35:37:8d:52:b0:a1:0c:1f:c6:e9:f6:15:37:6f:1a: ea:7e:c9:99:a6:c5:a9:79:11:a3:07:79:d7:46:53:15:33:d9: ee:a5:6d:2d:9e:d5:05:a3:4f:b1:f5:f7:4e:77:db:a2:e9:60: 53:2e:c0:90:df:b1:4d:53:6c:50:19:c2:dc:94:d0:9b:b9:18: 40:08:4c:ba:ec:ef:f5:77:0e:97:2e:ae:da:b5:fc:58:ce:3d: c6:c6:39:4e:85:05:f2:2b:e6:1b:47:92:92:67:5b:d1:ce:db: c7:7c:cb:fe:ab:fe:62:be:b6:2e:3a:2b:45:98:0f:61:4a:da: 69:5f:10:e7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvsMZZEqJ2UBgNmvNh7ukQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIzMTg1MDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTNhNTU1MzVmMjI2ODNiMTc4ZDk2OGVjZDRlNmI5MDFiMWQ3NzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYDkPpdLGSsQKORSyFRVuQXy7aG z/QT7KdsVvnqRzCKdf9n9de19SXNQuhKhhnwKQ5eyD01gNzh2OQ1AMyMLJUK5QZ4 tyWzwovqZUCrJEF6Jfj7rEsvAkkjqRPO6jaR8YLF8ENl9HxiCF8oJ+Q0PtsQ4xIV XKy715iGXg5u4PvTw/YU5dp8/Tf6eB9m7M1OlzM9PagMxmXOZVQTRrigDjByNEfc cxA4pUlZc9Kn17efsv3UArkWoOYT1sl4uDZs3YJbMvizWo3Z0K61GkEbQ1KiEDgh NdA6CJlKRhW3fT/ZcdJh1MVuCePb/1kbx2efSVdW75Cac3xF388IuZyeDQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLE6VVNfImg7F42Wjs1Oa5AbHXc3MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvc1RwVlUxOGlhRHNYalphT3pVNXJrQnNkZHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzqLAwQA HzvEAwQAHzvHAwQAHzvKAwQAHzvQMA0GCSqGSIb3DQEBCwUAA4IBAQA2fH7EQMug qSZkICDCR+qyS5RkQ0pmA3Y2lS+3v6P9EhfWiDaPsHvMfKa5r5tW3AegZngkh4VS EMlX3XoSLS8ORty+kpE8HuXOy6OVwbD9MFU0MRGYNCY7hUOT6OrVB5s8+fpfQkRU JhVWq9KCPBinYW6LVniYir2+RaLF59FuDRs1N41SsKEMH8bp9hU3bxrqfsmZpsWp eRGjB3nXRlMVM9nupW0tntUFo0+x9fdOd9ui6WBTLsCQ37FNU2xQGcLclNCbuRhA CEy67O/1dw6XLq7atfxYzj3GxjlOhQXyK+YbR5KSZ1vRztvHfMv+q/5ivrYuOitF mA9hStppXxDn -----END CERTIFICATE-----Generated at Sat Jan 24 03:50:35 2026 by rpki-client