This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sfbB0sBiaCYHqhHn2-wGXfYafXQ.roa File: sfbB0sBiaCYHqhHn2-wGXfYafXQ.roa (raw, json) Hash identifier: PdPHdSMqlnbA7JBgMYOEOuQRTHNfRfyWOYuLUOB7iAM= Subject key identifier: B1:F6:C1:D2:C0:62:68:26:07:AA:11:E7:DB:EC:06:5D:F6:1A:7D:74 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E5FEA243B87832B5DC160CBC0E5F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sfbB0sBiaCYHqhHn2-wGXfYafXQ.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 31.56.68.0/24 maxlen: 24 31.57.132.0/24 maxlen: 24 31.58.41.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e5:fe:a2:43:b8:78:32:b5:dc:16:0c:bc:0e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1f6c1d2c062682607aa11e7dbec065df61a7d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:48:5e:06:10:c7:30:61:8f:99:af:bf:54: 63:b1:f0:02:82:d8:4c:9d:8c:5f:e2:bc:6c:a9:0b: 5d:64:52:4d:b6:f4:5a:13:71:40:11:7a:02:4a:9d: e4:48:eb:8b:b8:9c:5e:b4:01:70:55:03:f5:26:5c: 29:d5:56:49:74:35:8c:41:49:2b:ae:dd:24:cc:0c: 21:fd:07:2a:41:16:da:f0:0f:71:00:67:a5:ea:88: 4e:de:30:3f:8e:57:8d:6a:de:4a:39:01:0e:81:ef: c5:cd:eb:e4:0a:a8:28:ee:cb:ca:83:75:29:c6:71: 10:4d:07:6a:d3:a1:b0:ba:de:c8:be:37:03:6e:53: 50:55:85:97:ee:7c:ed:fd:c5:de:8e:48:8f:e9:87: d0:d5:6d:92:a2:6f:0e:f2:a8:ff:8e:a4:6f:8f:2a: 72:56:d7:d7:bc:6e:f6:b0:31:a4:61:2f:0c:16:06: eb:48:e7:cb:82:d8:f2:87:d1:b3:04:66:47:c8:79: 59:91:c1:52:be:7a:7a:f7:db:e5:b1:11:c4:ae:ec: 9a:08:ad:d5:db:4f:be:af:e6:87:19:df:98:4f:bd: e2:51:65:e1:9b:fa:ae:fb:4c:e7:cd:fe:dc:61:ad: 42:28:b5:47:e1:0a:9d:5c:be:04:de:b3:c0:6d:ea: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F6:C1:D2:C0:62:68:26:07:AA:11:E7:DB:EC:06:5D:F6:1A:7D:74 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sfbB0sBiaCYHqhHn2-wGXfYafXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.68.0/24 31.57.132.0/24 31.58.41.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 75:16:cb:1a:91:28:fe:26:67:e7:dc:db:11:97:b6:13:d5:37: a1:15:73:ac:61:94:04:0b:f5:31:6e:48:60:b7:ab:ba:df:3e: e1:85:59:40:86:24:c9:f8:7d:28:a6:c2:aa:74:07:96:30:3f: ce:d8:75:43:f4:b4:45:a5:1a:fe:74:5c:36:63:7b:3f:eb:dc: 14:28:57:3d:55:7d:3d:74:17:51:53:c6:d7:14:96:24:3f:22: 2a:ce:de:ef:27:1e:52:5f:36:d4:74:9c:6b:8d:31:bf:b5:be: 2d:51:ac:90:c2:5e:de:44:38:b7:b9:67:2e:8f:b5:3b:04:dd: bf:2b:0b:cd:fb:da:75:cc:74:af:dc:ac:b8:f5:47:ef:e8:e4: cb:f4:fe:1f:51:c1:95:85:13:66:ac:1a:82:df:63:d0:a8:71: 65:26:9d:54:e2:ba:c5:26:ec:6a:77:f2:85:e0:b4:49:0d:26: 6b:c4:ea:9b:e6:d9:89:01:02:5e:f1:bf:79:6d:25:cc:f3:3e: 7c:b4:03:8d:b9:78:f2:c4:32:09:2f:d1:a1:be:b7:e6:16:0a: 56:6e:ce:c4:4e:29:c3:f1:8c:15:28:b1:a6:2c:b4:ed:c7:0f: f3:68:82:06:e2:a0:a5:f5:f3:af:42:23:31:68:9b:e1:a7:17: 5a:8a:b4:11 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hOX+okO4eDK13BYMvA5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWY2YzFkMmMwNjI2ODI2MDdhYTExZTdkYmVjMDY1ZGY2MWE3ZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOhIXgYQxzBhj5mvv1RjsfACgthM nYxf4rxsqQtdZFJNtvRaE3FAEXoCSp3kSOuLuJxetAFwVQP1Jlwp1VZJdDWMQUkr rt0kzAwh/QcqQRba8A9xAGel6ohO3jA/jleNat5KOQEOge/FzevkCqgo7svKg3Up xnEQTQdq06Gwut7IvjcDblNQVYWX7nzt/cXejkiP6YfQ1W2Som8O8qj/jqRvjypy VtfXvG72sDGkYS8MFgbrSOfLgtjyh9GzBGZHyHlZkcFSvnp699vlsRHEruyaCK3V 20++r+aHGd+YT73iUWXhm/qu+0znzf7cYa1CKLVH4QqdXL4E3rPAbepHIQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLH2wdLAYmgmB6oR59vsBl32Gn10MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvc2ZiQjBzQmlhQ1lIcWhIbjItd0dYZllhZlhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhEAwQA HzmEAwQAHzopAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQB1FssakSj+Jmfn3NsR l7YT1TehFXOsYZQEC/Uxbkhgt6u63z7hhVlAhiTJ+H0opsKqdAeWMD/O2HVD9LRF pRr+dFw2Y3s/69wUKFc9VX09dBdRU8bXFJYkPyIqzt7vJx5SXzbUdJxrjTG/tb4t UayQwl7eRDi3uWcuj7U7BN2/KwvN+9p1zHSv3Ky49Ufv6OTL9P4fUcGVhRNmrBqC 32PQqHFlJp1U4rrFJuxqd/KF4LRJDSZrxOqb5tmJAQJe8b95bSXM8z58tAONuXjy xDIJL9GhvrfmFgpWbs7ETinD8YwVKLGmLLTtxw/zaIIG4qCl9fOvQiMxaJvhpxda irQR -----END CERTIFICATE-----Generated at Mon Jan 5 14:39:16 2026 by rpki-client