This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tO1uxIO9Te4_Jwk8tzAYyOYEqAo.roa File: tO1uxIO9Te4_Jwk8tzAYyOYEqAo.roa (raw, json) Hash identifier: ZN6oC878SB+fwIDRNdUh9VhChCCOThiQDFZ/t/2dBXM= Subject key identifier: B4:ED:6E:C4:83:BD:4D:EE:3F:27:09:3C:B7:30:18:C8:E6:04:A8:0A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A90DCC29A24A0A3DF01A7B6376BF69EAF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tO1uxIO9Te4_Jwk8tzAYyOYEqAo.roa Signing time: Mon 17 Nov 2025 08:09:38 +0000 ROA not before: Mon 17 Nov 2025 08:09:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210064 IP address blocks: 31.59.168.0/24 maxlen: 24 94.183.151.0/24 maxlen: 24 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:dc:c2:9a:24:a0:a3:df:01:a7:b6:37:6b:f6:9e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 17 08:09:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4ed6ec483bd4dee3f27093cb73018c8e604a80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:bc:91:65:3f:75:37:40:72:bd:83:5d:3d: 7d:b5:db:09:27:bf:af:28:90:e6:e6:d6:83:32:5f: 14:0a:c9:b0:74:97:9a:f1:dc:88:87:56:92:0d:e7: 38:14:b6:36:fa:ef:09:f7:c6:2e:a8:70:48:6d:66: 4f:85:14:74:bd:cc:5b:b5:d5:5b:ce:cf:ca:75:80: f7:a5:40:84:e8:fa:0c:08:02:7a:a6:c7:5c:37:b3: 78:89:3d:7d:a6:6c:c1:67:e5:4c:18:87:c3:e0:bd: ae:67:c5:ef:fd:b4:f3:0d:16:75:e7:61:32:8a:69: 65:22:5d:33:6e:92:f5:ca:54:3e:08:4a:eb:32:15: 28:59:7b:98:15:d5:da:9c:83:f9:c7:a6:e0:47:84: a8:fb:13:2c:dd:82:24:3f:3e:27:ec:a5:ac:41:84: d5:a9:4a:2b:c0:99:34:39:e2:39:55:34:f9:b5:5e: 27:31:b7:24:56:3d:a4:0c:3a:68:92:63:67:e4:9a: 2b:4e:3b:47:32:23:24:0a:f0:88:bb:08:51:4d:36: d1:1e:0c:a7:99:5e:06:d6:b9:03:a7:f4:42:fc:15: 33:4b:dc:bd:3a:b9:76:a2:6d:7d:b5:81:30:3d:c7: 31:ee:3a:50:da:7a:5c:41:e3:6e:94:6a:cd:5b:a3: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:ED:6E:C4:83:BD:4D:EE:3F:27:09:3C:B7:30:18:C8:E6:04:A8:0A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tO1uxIO9Te4_Jwk8tzAYyOYEqAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.168.0/24 94.183.151.0/24 IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 30:ff:3a:49:a3:bf:af:43:61:d6:83:55:9c:95:e5:f9:85:b1: 42:1d:26:7a:fe:3a:f4:c2:fe:10:ae:ea:a2:d9:70:63:97:89: fa:3d:a7:a3:13:c7:8c:86:a6:07:9e:8d:38:ea:d3:b5:12:e7: d8:fc:ca:8e:37:63:79:d6:01:98:f3:c4:17:b2:d0:51:b6:ad: d1:9d:b4:b8:d1:03:b1:7f:d3:67:a1:cf:91:f2:c6:91:2a:e2: 60:a6:2d:d0:0a:d0:88:ae:56:fd:5a:dc:d2:fb:1b:96:55:3c: 4f:83:53:b1:8b:04:45:4e:6a:c0:af:ec:2d:1c:9f:1b:4a:35: bd:f5:e3:11:17:b9:57:87:21:1e:81:71:28:1f:8d:23:12:fb: 8f:b2:5c:4f:15:a7:ba:36:e3:ba:ad:b1:ef:80:31:e0:8f:d1: 8f:c0:a0:ac:a5:d8:17:d3:83:b5:92:39:de:af:8f:89:7f:b1: 4b:dc:be:ac:f9:7a:5a:15:24:5c:e5:e2:fc:c1:e1:c2:eb:e2: 44:4d:df:d1:21:8d:4f:5c:24:ba:54:16:e1:ca:0d:3e:ad:76: d8:10:87:0a:65:36:b6:74:18:5f:c0:03:e2:79:bd:6f:59:7c: 41:d5:28:a9:5b:56:87:f6:a9:5e:73:0b:f4:2d:59:54:88:30: c5:73:13:e3 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZqQ3MKaJKCj3wGntjdr9p6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE3MDgwOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGVkNmVjNDgzYmQ0ZGVlM2YyNzA5M2NiNzMwMThjOGU2MDRhODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSu8kWU/dTdAcr2DXT19tdsJJ7+v KJDm5taDMl8UCsmwdJea8dyIh1aSDec4FLY2+u8J98YuqHBIbWZPhRR0vcxbtdVb zs/KdYD3pUCE6PoMCAJ6psdcN7N4iT19pmzBZ+VMGIfD4L2uZ8Xv/bTzDRZ152Ey imllIl0zbpL1ylQ+CErrMhUoWXuYFdXanIP5x6bgR4So+xMs3YIkPz4n7KWsQYTV qUorwJk0OeI5VTT5tV4nMbckVj2kDDpokmNn5JorTjtHMiMkCvCIuwhRTTbRHgyn mV4G1rkDp/RC/BUzS9y9Orl2om19tYEwPccx7jpQ2npcQeNulGrNW6MWIQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLTtbsSDvU3uPycJPLcwGMjmBKgKMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdE8xdXhJTzlUZTRfSndrOHR6QVl5T1lFcUFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAHzuoAwQA XreXMA8EAgACMAkDBwAqFG5AAAEwDQYJKoZIhvcNAQELBQADggEBADD/Okmjv69D YdaDVZyV5fmFsUIdJnr+OvTC/hCu6qLZcGOXifo9p6MTx4yGpgeejTjq07US59j8 yo43Y3nWAZjzxBey0FG2rdGdtLjRA7F/02ehz5HyxpEq4mCmLdAK0IiuVv1a3NL7 G5ZVPE+DU7GLBEVOasCv7C0cnxtKNb314xEXuVeHIR6BcSgfjSMS+4+yXE8Vp7o2 47qtse+AMeCP0Y/AoKyl2BfTg7WSOd6vj4l/sUvcvqz5eloVJFzl4vzB4cLr4kRN 39EhjU9cJLpUFuHKDT6tdtgQhwplNrZ0GF/AA+J5vW9ZfEHVKKlbVof2qV5zC/Qt WVSIMMVzE+M= -----END CERTIFICATE-----Generated at Wed Nov 19 13:27:40 2025 by rpki-client