This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uZ4DdCgY9qzMhkLo_0wROL4-mY8.roa File: uZ4DdCgY9qzMhkLo_0wROL4-mY8.roa (raw, json) Hash identifier: 8Q2qOe+DRnOxsvbgau5UWA57402urXlj0ncvMb6RTRQ= Subject key identifier: B9:9E:03:74:28:18:F6:AC:CC:86:42:E8:FF:4C:11:38:BE:3E:99:8F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84CAE024A3E6DFA14E67E3043D4964 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uZ4DdCgY9qzMhkLo_0wROL4-mY8.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 31.57.144.0/24 maxlen: 24 217.60.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ca:e0:24:a3:e6:df:a1:4e:67:e3:04:3d:49:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b99e03742818f6accc8642e8ff4c1138be3e998f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:74:fa:84:d0:fb:0c:d5:10:09:bf:da:34:71: df:d5:9e:6c:d6:d5:2a:44:af:56:6a:a5:df:7c:ad: 94:c8:b4:ab:7f:6b:69:b7:b3:30:7e:0a:74:5b:3a: c3:74:b9:68:ff:e7:b5:37:77:56:03:c4:cc:36:eb: 26:48:8e:30:5c:33:a5:e5:8d:0b:e6:e9:d8:b2:cf: 17:dc:ea:3d:ce:b4:90:76:d9:a5:61:3e:35:29:5e: 12:8a:8c:97:83:52:dc:10:c4:8d:89:20:88:15:3a: 89:ed:35:cd:b2:03:70:e1:13:7d:f0:63:e5:43:a5: 98:61:29:a5:38:7b:c7:cb:e1:05:98:d9:ba:cb:81: 3f:2e:fa:6a:11:b1:9d:e4:17:dd:80:9d:98:9c:ef: 11:af:a2:5d:64:9b:31:7d:cf:a6:d6:15:77:d0:7c: 58:a1:ee:51:61:60:88:1f:16:be:d9:68:9c:ea:86: 5e:6d:12:3e:21:97:47:be:0c:25:30:0f:e7:ca:a1: 0c:01:63:de:9a:9b:ec:69:10:e2:71:8d:1c:72:4c: 7d:89:40:7c:4a:47:57:1a:67:a7:f4:60:9b:0d:d8: f4:0d:5d:7c:c8:bf:0d:f7:b3:02:32:84:77:ba:01: ff:fd:e8:7f:39:f8:36:33:62:f0:75:b3:50:e7:7f: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9E:03:74:28:18:F6:AC:CC:86:42:E8:FF:4C:11:38:BE:3E:99:8F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uZ4DdCgY9qzMhkLo_0wROL4-mY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.144.0/24 217.60.253.0/24 Signature Algorithm: sha256WithRSAEncryption 42:97:0b:da:9c:9b:8c:ba:ca:16:7a:15:b4:97:8a:25:c1:a5: 1a:b0:76:eb:36:df:b6:e0:e6:6c:34:90:48:17:03:34:56:65: 68:ce:06:8f:35:b9:7a:15:7d:5a:f7:15:45:ae:df:fe:a9:4c: fa:29:3a:55:ff:f3:22:e8:fb:73:4e:c2:6c:e1:8c:fb:fd:b8: 69:d9:6a:60:16:24:6b:35:51:19:19:d8:2e:fc:b6:13:cd:70: 2d:50:bb:b8:4b:28:f9:e0:1d:e8:68:4f:71:d6:7e:e6:8e:b7: 58:64:18:67:e1:6d:9f:66:2a:e4:33:6a:28:67:74:32:dc:29: 6c:0e:a0:6b:c5:46:62:cc:32:1d:3c:62:52:cf:57:6f:17:31: 35:ca:2d:6a:bd:3d:ae:02:da:69:66:7e:89:a0:73:8d:15:b2: bc:2f:12:e6:44:23:8f:f7:7d:d3:70:4b:84:af:91:d0:b9:41: b8:8f:78:a2:3b:a9:cd:84:eb:e3:db:7f:10:17:da:0b:91:de: d3:85:95:e7:2d:32:64:ab:fe:f3:35:8a:32:0f:33:ea:86:c4: 30:aa:9d:b4:7b:f1:8e:38:1c:5a:2d:bd:a9:f7:4a:a8:f8:e4: 44:36:d2:c9:b0:7a:bc:3c:16:bf:5a:73:63:5e:bc:5e:c6:7b: b3:ee:fb:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMrgJKPm36FOZ+MEPUlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTllMDM3NDI4MThmNmFjY2M4NjQyZThmZjRjMTEzOGJlM2U5OThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3T6hND7DNUQCb/aNHHf1Z5s1tUq RK9WaqXffK2UyLSrf2tpt7Mwfgp0WzrDdLlo/+e1N3dWA8TMNusmSI4wXDOl5Y0L 5unYss8X3Oo9zrSQdtmlYT41KV4SioyXg1LcEMSNiSCIFTqJ7TXNsgNw4RN98GPl Q6WYYSmlOHvHy+EFmNm6y4E/LvpqEbGd5BfdgJ2YnO8Rr6JdZJsxfc+m1hV30HxY oe5RYWCIHxa+2Wic6oZebRI+IZdHvgwlMA/nyqEMAWPempvsaRDicY0cckx9iUB8 SkdXGmen9GCbDdj0DV18yL8N97MCMoR3ugH//eh/Ofg2M2LwdbNQ53+oywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLmeA3QoGPaszIZC6P9METi+PpmPMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdVo0RGRDZ1k5cXpNaGtMb18wd1JPTDQtbVk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmQAwQA 2Tz9MA0GCSqGSIb3DQEBCwUAA4IBAQBClwvanJuMusoWehW0l4olwaUasHbrNt+2 4OZsNJBIFwM0VmVozgaPNbl6FX1a9xVFrt/+qUz6KTpV//Mi6PtzTsJs4Yz7/bhp 2WpgFiRrNVEZGdgu/LYTzXAtULu4Syj54B3oaE9x1n7mjrdYZBhn4W2fZirkM2oo Z3Qy3ClsDqBrxUZizDIdPGJSz1dvFzE1yi1qvT2uAtppZn6JoHONFbK8LxLmRCOP 933TcEuEr5HQuUG4j3iiO6nNhOvj238QF9oLkd7ThZXnLTJkq/7zNYoyDzPqhsQw qp20e/GOOBxaLb2p90qo+ORENtLJsHq8PBa/WnNjXrxexnuz7vtP -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:22 2026 by rpki-client