This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t0C3vxR1867NZjLF-5MS__qbT_o.roa File: t0C3vxR1867NZjLF-5MS__qbT_o.roa (raw, json) Hash identifier: lf236XIQelosFjk4N2VZkTALGEAif58So6sjD2bd5Ss= Subject key identifier: B7:40:B7:BF:14:75:F3:AE:CD:66:32:C5:FB:93:12:FF:FA:9B:4F:FA Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BF1B55772FCEAB7CB1D02453D0752DFCA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t0C3vxR1867NZjLF-5MS__qbT_o.roa Signing time: Sat 24 Jan 2026 20:32:31 +0000 ROA not before: Sat 24 Jan 2026 20:32:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202051 IP address blocks: 31.58.44.0/22 maxlen: 24 31.58.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:b5:57:72:fc:ea:b7:cb:1d:02:45:3d:07:52:df:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 24 20:32:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b740b7bf1475f3aecd6632c5fb9312fffa9b4ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:83:10:47:cf:8e:c3:97:6d:7b:5d:e0:2a: 9f:bf:51:1a:63:9f:53:8e:b2:99:3a:02:6d:c3:cd: e8:45:03:1b:75:00:78:03:e2:59:67:6d:f2:43:a1: 88:d7:ea:8e:c1:d7:7e:ac:85:eb:7d:6f:22:39:90: 82:19:0d:1b:81:ef:a3:e0:20:de:56:d5:b6:77:b0: 29:a8:24:aa:64:42:11:d7:0d:83:96:8a:fd:24:d0: ac:be:f9:94:85:4e:51:4d:4c:cf:9e:f9:e7:a4:58: fe:3f:af:45:04:f7:df:cb:4c:70:60:87:4c:4c:04: 50:a4:f9:00:30:3f:ab:71:bb:9c:bb:a5:5b:ab:41: bc:2a:bd:91:a0:2c:e1:99:9d:df:f9:b2:85:f5:07: c1:44:c4:38:10:d7:09:ca:56:40:e8:ad:cb:8c:af: 58:ba:76:0e:30:08:e3:91:12:73:fc:37:62:9e:e7: ba:6b:77:f4:c6:49:64:af:c3:64:5c:c8:49:98:9c: 58:3b:78:b4:cc:ff:84:f0:0a:92:9d:e5:9c:6b:0d: c1:ed:14:20:02:00:54:3b:d5:b0:6f:ae:bc:04:6d: 30:1b:9d:9b:bd:b2:0a:90:2f:fa:6e:19:3c:c8:3c: 0b:d0:e9:da:68:7a:6c:59:c0:c6:ec:d3:00:99:50: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:B7:BF:14:75:F3:AE:CD:66:32:C5:FB:93:12:FF:FA:9B:4F:FA X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t0C3vxR1867NZjLF-5MS__qbT_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:9e:61:a6:22:25:dd:2a:99:59:1a:30:2f:ec:3e:ff:ad:85: 7e:81:5f:95:f4:d4:45:d7:de:eb:97:4d:b7:15:bc:46:29:51: f1:07:8d:0b:2e:1d:93:7e:ee:c6:f5:08:f6:ad:9a:22:16:da: 23:b8:74:d4:51:6f:2f:ae:de:84:9f:58:be:b2:a1:e2:9c:7f: d9:6b:ee:89:8b:8e:44:53:0c:01:e1:cc:79:fe:e7:db:5d:fa: 83:45:a8:19:36:e3:68:9e:8d:08:36:8b:81:21:02:ea:e4:7d: 55:79:d4:60:d9:4a:7b:99:c8:95:8c:c9:a3:fd:88:04:4f:71: 09:cd:47:87:a4:c7:ff:fc:9f:bc:6e:95:49:12:49:cc:6e:05: 10:0e:97:be:6a:39:46:eb:ea:15:85:2d:7e:23:97:ae:1c:7e: d2:f2:f8:84:35:26:dd:2d:a2:c2:2d:ed:58:f3:02:98:e6:7b: 79:23:d0:ef:45:d2:40:b0:fb:7b:6a:a4:50:84:95:ec:6c:1c: 5b:da:fe:fa:81:7e:3f:61:d7:dc:da:e0:ce:76:58:b6:93:71: 9b:47:bd:e8:d2:1f:62:84:44:be:5b:75:e1:53:eb:33:91:c2: 38:f4:6e:7d:91:d2:e0:03:e6:ad:46:4b:d0:2b:07:24:f9:85: c0:0f:0b:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvxtVdy/Oq3yx0CRT0HUt/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI0MjAzMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQwYjdiZjE0NzVmM2FlY2Q2NjMyYzVmYjkzMTJmZmZhOWI0ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF6DEEfPjsOXbXtd4Cqfv1EaY59T jrKZOgJtw83oRQMbdQB4A+JZZ23yQ6GI1+qOwdd+rIXrfW8iOZCCGQ0bge+j4CDe VtW2d7ApqCSqZEIR1w2Dlor9JNCsvvmUhU5RTUzPnvnnpFj+P69FBPffy0xwYIdM TARQpPkAMD+rcbucu6Vbq0G8Kr2RoCzhmZ3f+bKF9QfBRMQ4ENcJylZA6K3LjK9Y unYOMAjjkRJz/Ddinue6a3f0xklkr8NkXMhJmJxYO3i0zP+E8AqSneWcaw3B7RQg AgBUO9Wwb668BG0wG52bvbIKkC/6bhk8yDwL0OnaaHpsWcDG7NMAmVBvFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdAt78UdfOuzWYyxfuTEv/6m0/6MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdDBDM3Z4UjE4NjdOWmpMRi01TVNfX3FiVF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzosMA0G CSqGSIb3DQEBCwUAA4IBAQBtnmGmIiXdKplZGjAv7D7/rYV+gV+V9NRF197rl023 FbxGKVHxB40LLh2Tfu7G9Qj2rZoiFtojuHTUUW8vrt6En1i+sqHinH/Za+6Ji45E UwwB4cx5/ufbXfqDRagZNuNono0INouBIQLq5H1VedRg2Up7mciVjMmj/YgET3EJ zUeHpMf//J+8bpVJEknMbgUQDpe+ajlG6+oVhS1+I5euHH7S8viENSbdLaLCLe1Y 8wKY5nt5I9DvRdJAsPt7aqRQhJXsbBxb2v76gX4/Ydfc2uDOdli2k3GbR73o0h9i hES+W3XhU+szkcI49G59kdLgA+atRkvQKwck+YXADwtN -----END CERTIFICATE-----Generated at Sun Jan 25 03:43:17 2026 by rpki-client