This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/su946u6sEiRte4SpkxGNj5MBrBs.roa File: su946u6sEiRte4SpkxGNj5MBrBs.roa (raw, json) Hash identifier: E8/9fFjaiuzKzRZG1AAj+/j8arAnpJnS8rp3Jj8O7T0= Subject key identifier: B2:EF:78:EA:EE:AC:12:24:6D:7B:84:A9:93:11:8D:8F:93:01:AC:1B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B976FB97C696AACBCD49AAB4434320C46 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/su946u6sEiRte4SpkxGNj5MBrBs.roa Signing time: Wed 07 Jan 2026 07:50:40 +0000 ROA not before: Wed 07 Jan 2026 07:50:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 31.56.140.0/24 maxlen: 24 31.56.147.0/24 maxlen: 24 31.56.193.0/24 maxlen: 24 31.57.78.0/24 maxlen: 24 31.57.79.0/24 maxlen: 24 31.57.80.0/24 maxlen: 24 31.57.81.0/24 maxlen: 24 31.57.85.0/24 maxlen: 24 31.57.86.0/24 maxlen: 24 31.57.87.0/24 maxlen: 24 31.57.203.0/24 maxlen: 24 31.58.10.0/24 maxlen: 24 31.58.16.0/24 maxlen: 24 31.58.19.0/24 maxlen: 24 31.58.20.0/24 maxlen: 24 31.58.21.0/24 maxlen: 24 31.58.26.0/24 maxlen: 24 31.58.29.0/24 maxlen: 24 31.58.30.0/24 maxlen: 24 31.58.167.0/24 maxlen: 24 31.59.13.0/24 maxlen: 24 31.59.18.0/24 maxlen: 24 31.59.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:6f:b9:7c:69:6a:ac:bc:d4:9a:ab:44:34:32:0c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 7 07:50:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2ef78eaeeac12246d7b84a993118d8f9301ac1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:1c:53:0f:73:17:c3:86:ad:f3:2a:ea:f2: 2d:4f:61:26:41:8f:a0:96:64:39:79:4b:40:6e:a7: 9f:3a:54:bc:9b:9b:ec:4c:27:11:31:e4:37:1c:5a: 67:25:cd:4f:5d:32:0a:ac:76:48:99:9f:23:03:04: bb:dc:e6:74:21:50:2a:56:2a:7f:a0:ce:21:65:2c: 4a:36:1d:94:1e:3b:56:ca:e3:fe:a8:3e:6d:0f:18: c4:19:0a:f2:00:c6:28:70:a5:2b:fa:9a:aa:46:50: 06:b2:a5:4b:bf:91:c1:c5:cf:f3:34:d2:ef:f6:4b: e0:b3:c3:2c:76:02:b7:53:0a:bf:d5:b1:d9:fb:f9: 4e:d9:7b:fa:1a:6f:e8:cd:35:b3:a7:f8:df:6c:2f: a7:5a:ec:a1:38:5e:67:19:a3:31:d1:16:53:98:bc: 88:c5:5c:13:d1:49:e2:99:28:c7:af:0d:8d:99:f0: 8d:cc:26:d5:59:05:17:16:2f:81:d4:10:d5:67:49: 64:ee:69:2a:14:ea:02:9f:1e:37:28:66:61:22:66: 3f:eb:17:8f:f1:87:a1:7e:fe:f7:de:50:45:36:59: 9e:36:b0:8f:eb:a6:3b:95:07:07:2b:d2:63:1d:a2: 62:49:ff:db:9f:20:c7:d5:68:36:5d:32:9b:75:13: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EF:78:EA:EE:AC:12:24:6D:7B:84:A9:93:11:8D:8F:93:01:AC:1B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/su946u6sEiRte4SpkxGNj5MBrBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.140.0/24 31.56.147.0/24 31.56.193.0/24 31.57.78.0-31.57.81.255 31.57.85.0-31.57.87.255 31.57.203.0/24 31.58.10.0/24 31.58.16.0/24 31.58.19.0-31.58.21.255 31.58.26.0/24 31.58.29.0-31.58.30.255 31.58.167.0/24 31.59.13.0/24 31.59.18.0/24 31.59.24.0/24 Signature Algorithm: sha256WithRSAEncryption 23:c1:53:e1:24:8e:1a:1d:d4:96:95:50:55:86:cd:dc:04:70: 1d:31:63:4d:07:bf:48:7c:f2:b3:58:bf:7d:01:6f:1d:6c:35: 29:a6:a1:6c:37:bd:1d:de:61:fa:8e:bf:e4:2b:e7:da:6f:70: 9d:15:e3:bc:2f:85:23:16:a8:c4:7c:2c:10:c7:76:3a:e4:ea: fa:25:85:3b:34:6e:25:6c:a8:40:b1:6e:6e:e1:2c:ba:00:e4: d1:c6:ce:79:8c:f6:cc:7b:15:fc:ed:8b:35:8c:b1:41:d8:8b: 19:0d:78:c1:5c:60:55:1e:c1:95:d2:f6:90:6f:5f:22:cb:7b: a6:6b:65:22:a7:4c:8e:a1:2a:6f:65:72:c5:fb:7e:0c:2d:c8: b0:43:97:e8:32:28:db:04:b7:f5:aa:65:bb:99:b9:06:94:ba: ea:94:17:e4:65:1c:9d:ee:62:79:56:0b:c7:07:76:a3:85:be: ef:44:81:ee:4a:78:5b:44:fa:0a:ed:d0:cc:de:23:58:80:23: 3a:4c:80:58:53:7b:58:92:7d:e9:c2:80:a0:9c:8b:d3:39:b4: f3:d3:54:fa:50:ba:b5:c8:72:50:d5:69:06:7e:e7:4d:4c:fd: 13:89:4c:8d:90:05:9f:67:85:e1:f9:38:62:a5:80:53:ac:86: 09:d7:30:7c -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZuXb7l8aWqsvNSaq0Q0MgxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA3MDc1MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmVmNzhlYWVlYWMxMjI0NmQ3Yjg0YTk5MzExOGQ4ZjkzMDFhYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jYcUw9zF8OGrfMq6vItT2EmQY+g lmQ5eUtAbqefOlS8m5vsTCcRMeQ3HFpnJc1PXTIKrHZImZ8jAwS73OZ0IVAqVip/ oM4hZSxKNh2UHjtWyuP+qD5tDxjEGQryAMYocKUr+pqqRlAGsqVLv5HBxc/zNNLv 9kvgs8MsdgK3Uwq/1bHZ+/lO2Xv6Gm/ozTWzp/jfbC+nWuyhOF5nGaMx0RZTmLyI xVwT0UnimSjHrw2NmfCNzCbVWQUXFi+B1BDVZ0lk7mkqFOoCnx43KGZhImY/6xeP 8Yehfv733lBFNlmeNrCP66Y7lQcHK9JjHaJiSf/bnyDH1Wg2XTKbdRMZ2QIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFLLveOrurBIkbXuEqZMRjY+TAawbMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvc3U5NDZ1NnNFaVJ0ZTRTcGt4R05qNU1CckJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAB84 jAMEAB84kwMEAB84wTAMAwQBHzlOAwQBHzlQMAwDBAAfOVUDBAMfOVADBAAfOcsD BAAfOgoDBAAfOhAwDAMEAB86EwMEAR86FAMEAB86GjAMAwQAHzodAwQAHzoeAwQA HzqnAwQAHzsNAwQAHzsSAwQAHzsYMA0GCSqGSIb3DQEBCwUAA4IBAQAjwVPhJI4a HdSWlVBVhs3cBHAdMWNNB79IfPKzWL99AW8dbDUppqFsN70d3mH6jr/kK+fab3Cd FeO8L4UjFqjEfCwQx3Y65Or6JYU7NG4lbKhAsW5u4Sy6AOTRxs55jPbMexX87Ys1 jLFB2IsZDXjBXGBVHsGV0vaQb18iy3uma2Uip0yOoSpvZXLF+34MLciwQ5foMijb BLf1qmW7mbkGlLrqlBfkZRyd7mJ5VgvHB3ajhb7vRIHuSnhbRPoK7dDM3iNYgCM6 TIBYU3tYkn3pwoCgnIvTObTz01T6ULq1yHJQ1WkGfudNTP0TiUyNkAWfZ4Xh+Thi pYBTrIYJ1zB8 -----END CERTIFICATE-----Generated at Fri Jan 9 17:59:16 2026 by rpki-client