This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ssQ2s3twu1KVnnnVQRRMQdeW8Yg.roa File: ssQ2s3twu1KVnnnVQRRMQdeW8Yg.roa (raw, json) Hash identifier: /H/wXXphiX9lAsV9kjju3ngVAkRBCJIs1qZg5nL+pV0= Subject key identifier: B2:C4:36:B3:7B:70:BB:52:95:9E:79:D5:41:14:4C:41:D7:96:F1:88 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D13A110D73565852E3E76C81354F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ssQ2s3twu1KVnnnVQRRMQdeW8Yg.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215703 IP address blocks: 31.56.39.0/24 maxlen: 24 31.58.58.0/24 maxlen: 24 31.59.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d1:3a:11:0d:73:56:58:52:e3:e7:6c:81:35:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2c436b37b70bb52959e79d541144c41d796f188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:cb:ca:e8:7c:cd:25:29:b7:90:d7:02:9b: cf:26:75:80:4e:ce:2c:75:ae:9a:d9:96:be:6f:aa: 7e:15:d4:73:d3:45:60:aa:e8:69:71:d2:cf:6f:d6: cf:a3:37:73:3d:13:0b:83:cd:52:30:c4:ae:e9:b4: 6f:46:9b:0b:9b:96:e3:81:86:3a:3e:5d:39:f4:0b: d7:9f:30:4c:a2:b2:6f:28:13:3a:83:fd:85:8e:de: 8f:65:3e:7a:19:17:b3:01:46:f8:1d:7c:b6:c4:ae: b3:56:d6:c3:98:d7:fb:41:2a:ea:91:7a:db:39:1b: 9d:98:20:d9:45:3d:74:8c:d5:6d:f0:6e:76:e2:1b: e5:54:68:0a:42:56:34:81:f2:c7:5c:d9:e1:da:6f: ef:fe:4a:c3:1f:77:5e:b2:82:f1:83:f4:0f:7f:37: ee:4e:c4:6e:09:59:ad:aa:2a:4f:02:6b:c3:2b:a9: bc:4a:bc:93:7b:4a:35:12:ea:25:86:5a:37:4b:4a: 8f:f1:15:f3:e6:7f:6b:12:f9:d3:22:cb:09:ed:98: d1:34:35:22:70:46:e1:ea:e8:86:a2:e1:2d:8c:6a: 20:27:db:5d:99:f6:0c:15:84:8f:ec:05:73:8e:e8: bb:1c:d0:78:df:94:fd:08:5e:da:8b:c7:dd:76:90: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C4:36:B3:7B:70:BB:52:95:9E:79:D5:41:14:4C:41:D7:96:F1:88 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ssQ2s3twu1KVnnnVQRRMQdeW8Yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.39.0/24 31.58.58.0/24 31.59.58.0/24 Signature Algorithm: sha256WithRSAEncryption 30:7a:a5:3a:da:21:c5:28:b3:b7:fd:97:04:aa:66:28:c5:cc: e1:b9:4f:80:cb:9b:d9:f9:59:1d:46:c2:af:d0:34:13:fb:ad: 65:b7:f4:1e:e5:36:f6:48:b5:16:fc:5e:92:d7:68:a6:5c:39: 48:8f:66:6b:bd:11:5e:5f:09:26:4c:0a:0f:58:08:10:05:50: 2d:18:cf:fc:4d:8a:b3:21:19:af:6f:17:ca:d6:d2:57:a8:60: 32:ae:72:22:81:c7:bb:bb:09:bc:2b:8f:b4:ff:7a:b7:bc:d9: c2:8b:1b:be:a6:5c:b0:45:31:7e:1e:1b:ae:c8:b7:f3:44:14: 3c:41:75:6c:9f:97:47:b7:08:66:63:02:83:e4:09:73:34:80: 98:07:cd:e8:41:97:f2:ca:c6:75:21:56:3d:ce:4c:e7:3c:3e: 41:1c:0d:2e:a4:f2:4b:20:18:67:c9:f7:bc:a0:e3:f1:92:7d: 76:aa:85:0a:f4:27:84:0a:6a:99:84:2b:c8:9a:df:8d:59:5d: 17:5f:ad:9c:b0:d9:62:56:f4:75:45:40:34:71:4b:b9:00:97: 31:bf:2e:9e:be:9f:a1:75:76:28:bd:99:39:0e:b5:2d:d7:50: 16:3d:7b:b2:2d:81:9d:5d:d4:05:9e:b4:6d:3e:80:c0:90:db: b5:cb:05:71 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hNE6EQ1zVlhS4+dsgTVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmM0MzZiMzdiNzBiYjUyOTU5ZTc5ZDU0MTE0NGM0MWQ3OTZmMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN/Lyuh8zSUpt5DXApvPJnWATs4s da6a2Za+b6p+FdRz00VgquhpcdLPb9bPozdzPRMLg81SMMSu6bRvRpsLm5bjgYY6 Pl059AvXnzBMorJvKBM6g/2Fjt6PZT56GRezAUb4HXy2xK6zVtbDmNf7QSrqkXrb ORudmCDZRT10jNVt8G524hvlVGgKQlY0gfLHXNnh2m/v/krDH3desoLxg/QPfzfu TsRuCVmtqipPAmvDK6m8SryTe0o1Euolhlo3S0qP8RXz5n9rEvnTIssJ7ZjRNDUi cEbh6uiGouEtjGogJ9tdmfYMFYSP7AVzjui7HNB435T9CF7ai8fddpDpBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLLENrN7cLtSlZ551UEUTEHXlvGIMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvc3NRMnMzdHd1MUtWbm5uVlFSUk1RZGVXOFlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzgnAwQA Hzo6AwQAHzs6MA0GCSqGSIb3DQEBCwUAA4IBAQAweqU62iHFKLO3/ZcEqmYoxczh uU+Ay5vZ+VkdRsKv0DQT+61lt/Qe5Tb2SLUW/F6S12imXDlIj2ZrvRFeXwkmTAoP WAgQBVAtGM/8TYqzIRmvbxfK1tJXqGAyrnIigce7uwm8K4+0/3q3vNnCixu+plyw RTF+HhuuyLfzRBQ8QXVsn5dHtwhmYwKD5AlzNICYB83oQZfyysZ1IVY9zkznPD5B HA0upPJLIBhnyfe8oOPxkn12qoUK9CeECmqZhCvImt+NWV0XX62csNliVvR1RUA0 cUu5AJcxvy6evp+hdXYovZk5DrUt11AWPXuyLYGdXdQFnrRtPoDAkNu1ywVx -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client