This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tRXXqxmPh_mqVq36N4EBsym7X3s.roa File: tRXXqxmPh_mqVq36N4EBsym7X3s.roa (raw, json) Hash identifier: /IQj+uPJEHVtdR6MAPbqPRfPLF4pRtIXXWq2Mi83QY4= Subject key identifier: B5:15:D7:AB:19:8F:87:F9:AA:56:AD:FA:37:81:01:B3:29:BB:5F:7B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B332AD6FF5F076B1C2103C605B6C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tRXXqxmPh_mqVq36N4EBsym7X3s.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213404 IP address blocks: 31.57.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b3:32:ad:6f:f5:f0:76:b1:c2:10:3c:60:5b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b515d7ab198f87f9aa56adfa378101b329bb5f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:47:ab:f6:5b:c1:1e:c9:8f:be:db:4b:4a:87: 50:92:47:b8:9a:d0:e1:19:52:2e:7e:ba:88:b4:97: 43:31:a3:db:ee:05:44:d6:1c:ce:c1:e0:9f:f7:d8: cf:fe:76:97:71:e7:ca:97:ff:c0:e2:25:f7:93:f2: 72:fd:ae:fc:c0:7e:6d:0f:31:3e:90:09:71:48:1a: 58:24:12:95:f0:18:aa:64:94:07:26:c8:26:3c:eb: a8:7f:65:f6:f6:81:48:b7:1e:94:3e:27:c3:d2:82: ba:89:c4:bf:fc:79:4a:5f:6f:61:d8:4c:8c:aa:84: a4:93:03:3c:49:4e:8f:6d:63:dd:48:5a:87:39:dd: 72:17:b3:f5:fa:23:b6:10:8c:6f:5e:c5:e0:dd:f3: 70:0c:42:f9:13:d9:df:ad:b0:12:f8:6d:69:8e:6c: 75:22:cf:9b:da:dc:45:82:de:a2:b1:25:1e:2f:2a: 45:2f:c8:f1:74:39:8a:dd:9d:47:4a:19:3e:a9:48: 10:0f:45:9a:b3:54:08:7a:8b:ff:fe:ba:d6:06:7f: 1e:d1:9e:bc:21:fd:14:27:3a:e2:3d:2e:08:06:8a: c5:6f:ec:f6:fe:07:4f:a5:a1:e7:c3:80:32:59:b0: 3d:36:cb:a9:83:8c:73:b6:59:ed:cb:be:fd:c7:53: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:D7:AB:19:8F:87:F9:AA:56:AD:FA:37:81:01:B3:29:BB:5F:7B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tRXXqxmPh_mqVq36N4EBsym7X3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.10.0/24 Signature Algorithm: sha256WithRSAEncryption 71:7f:3e:bc:11:0d:17:d0:79:87:4d:57:69:36:ee:8c:7a:79: 96:05:e7:64:ac:60:8b:78:1a:fb:d7:0a:f3:cc:3d:0f:00:52: 10:f4:1c:7e:8d:78:32:9e:27:38:96:1b:fb:a9:8d:1f:04:bd: f9:5b:df:f1:0b:48:01:45:69:16:ce:87:16:44:bb:b6:82:3e: 4f:e2:5a:05:c0:09:55:a4:49:c2:62:e0:d9:57:33:5f:f1:96: f3:fb:b1:ac:16:2e:93:9c:6f:8f:f6:85:4d:72:ee:24:e6:13: 05:8e:82:aa:6b:07:8b:d9:03:f3:0d:9e:aa:35:dd:f1:6d:49: 9a:6a:92:13:76:1e:c8:27:f6:3e:83:82:2f:a2:8c:5e:cf:c0: 06:4c:55:d4:37:5c:5f:3a:6e:0b:5b:66:01:d0:35:cf:89:98: e9:7c:37:81:64:9a:84:89:07:91:6d:1d:38:e2:f6:05:46:91: cb:34:bf:b6:e6:f7:9e:60:01:41:0f:8f:64:e1:0b:9f:ea:91: b7:70:79:c2:2d:55:96:af:65:42:64:c3:24:c3:a2:4d:e6:ac: 95:28:cb:da:ab:7a:ec:47:0d:d3:fc:b2:e4:fa:df:a3:d7:7d: 2c:74:af:73:a6:e2:c1:e3:d1:a0:09:cc:dd:19:42:1c:69:a6: d8:b0:82:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLMyrW/18HaxwhA8YFtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTE1ZDdhYjE5OGY4N2Y5YWE1NmFkZmEzNzgxMDFiMzI5YmI1ZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ker9lvBHsmPvttLSodQkke4mtDh GVIufrqItJdDMaPb7gVE1hzOweCf99jP/naXcefKl//A4iX3k/Jy/a78wH5tDzE+ kAlxSBpYJBKV8BiqZJQHJsgmPOuof2X29oFItx6UPifD0oK6icS//HlKX29h2EyM qoSkkwM8SU6PbWPdSFqHOd1yF7P1+iO2EIxvXsXg3fNwDEL5E9nfrbAS+G1pjmx1 Is+b2txFgt6isSUeLypFL8jxdDmK3Z1HShk+qUgQD0Was1QIeov//rrWBn8e0Z68 If0UJzriPS4IBorFb+z2/gdPpaHnw4AyWbA9Nsupg4xztlnty779x1My0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUV16sZj4f5qlat+jeBAbMpu197MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdFJYWHF4bVBoX21xVnEzNk40RUJzeW03WDNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkKMA0G CSqGSIb3DQEBCwUAA4IBAQBxfz68EQ0X0HmHTVdpNu6MenmWBedkrGCLeBr71wrz zD0PAFIQ9Bx+jXgynic4lhv7qY0fBL35W9/xC0gBRWkWzocWRLu2gj5P4loFwAlV pEnCYuDZVzNf8Zbz+7GsFi6TnG+P9oVNcu4k5hMFjoKqaweL2QPzDZ6qNd3xbUma apITdh7IJ/Y+g4Ivooxez8AGTFXUN1xfOm4LW2YB0DXPiZjpfDeBZJqEiQeRbR04 4vYFRpHLNL+25veeYAFBD49k4Quf6pG3cHnCLVWWr2VCZMMkw6JN5qyVKMvaq3rs Rw3T/LLk+t+j130sdK9zpuLB49GgCczdGUIcaabYsIJL -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:33 2026 by rpki-client