This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uesjC5Y1GpgzcsTPnHmrq4yquQU.roa File: uesjC5Y1GpgzcsTPnHmrq4yquQU.roa (raw, json) Hash identifier: H5w1zMCVA0l1vuyNcSkMS/vc26d2JLaX1xeU+u12KIk= Subject key identifier: B9:EB:23:0B:96:35:1A:98:33:72:C4:CF:9C:79:AB:AB:8C:AA:B9:05 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849C2C98FB0D07FE98D93B67A1D728 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uesjC5Y1GpgzcsTPnHmrq4yquQU.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207155 IP address blocks: 31.59.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9c:2c:98:fb:0d:07:fe:98:d9:3b:67:a1:d7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9eb230b96351a983372c4cf9c79abab8caab905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:36:e8:30:ff:bf:1d:c3:5b:a4:e5:17:89: 3c:84:88:ea:1d:c0:6d:6f:ae:5d:13:e0:26:00:a9: e6:22:be:08:d1:24:ae:75:3b:87:2d:1e:91:de:6a: 67:7a:38:d5:16:1a:f0:d9:ae:3d:53:29:d5:17:2d: 22:74:a3:a4:6e:ec:03:3e:a2:12:b4:ea:98:4c:13: e5:90:19:8c:22:84:84:5a:93:cf:73:16:95:3b:c8: 9b:dd:0e:4e:9d:9a:b2:6f:5e:0e:4a:af:07:67:35: 2a:b2:f1:54:ae:e0:3f:82:de:8c:02:d2:c2:57:f5: e9:06:5f:35:b1:0f:5b:af:99:95:99:c5:c3:60:61: 5f:b0:97:9d:c1:ce:85:54:1a:7f:f4:71:41:8f:a1: e9:47:5f:da:f4:6d:89:e0:b9:3f:2b:95:de:a2:5b: 29:83:b5:a2:4f:ca:4b:3e:43:57:a4:f5:a1:7f:72: 98:66:af:db:c3:f6:9c:45:03:2d:d1:8a:cb:3d:a7: 81:2a:c0:a6:8b:3b:aa:6b:50:06:2e:70:ce:aa:d4: da:7f:ba:04:e8:66:39:8d:e4:dc:27:3f:8c:96:08: ec:08:38:67:f5:15:62:24:1e:91:24:50:fd:c8:be: 4d:3d:1f:68:27:c4:b3:42:39:2f:13:2a:08:55:bc: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:23:0B:96:35:1A:98:33:72:C4:CF:9C:79:AB:AB:8C:AA:B9:05 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uesjC5Y1GpgzcsTPnHmrq4yquQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.214.0/24 Signature Algorithm: sha256WithRSAEncryption 13:34:3f:16:d1:7b:05:92:6d:05:10:30:24:13:97:67:13:d8: c6:de:f8:47:78:2b:59:d6:29:2e:f5:02:2a:4b:b1:97:95:f3: 24:15:85:c6:aa:5c:b2:38:4a:6e:48:78:92:1c:f5:25:73:e3: 44:d1:92:ae:4f:5e:04:64:2f:07:67:a4:46:21:cc:53:5d:f0: 85:97:54:f5:4a:ed:78:87:28:d4:ba:a8:db:39:d3:90:95:24: 4f:16:3e:4b:90:57:c2:5a:bf:ed:46:d9:d4:5a:c0:0d:66:b5: bc:14:d7:c7:71:6d:50:18:d7:2c:40:67:2a:81:48:8e:ec:50: 0c:43:a3:08:ca:a9:70:df:c3:df:3a:af:9d:5d:7a:2b:64:e6: 09:11:1f:bc:e3:13:f5:1a:81:09:0e:3e:e5:80:cc:11:0d:51: 6a:0c:43:e2:af:27:22:14:52:8a:7a:18:51:53:ee:a5:d4:b3: 05:c6:7e:6a:79:a2:d2:72:cf:65:e3:d2:07:5d:df:5d:49:10: 60:9f:04:20:73:98:e0:f2:7e:41:6b:27:cc:f7:d4:ec:ad:c9: 74:6d:ab:18:bd:a2:fb:94:75:22:4d:33:8c:98:f5:dc:10:0b: c5:29:98:e6:07:11:46:20:3f:37:73:fb:ee:58:af:b1:0a:f4: d5:43:3d:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJwsmPsNB/6Y2TtnodcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWViMjMwYjk2MzUxYTk4MzM3MmM0Y2Y5Yzc5YWJhYjhjYWFiOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMo26DD/vx3DW6TlF4k8hIjqHcBt b65dE+AmAKnmIr4I0SSudTuHLR6R3mpnejjVFhrw2a49UynVFy0idKOkbuwDPqIS tOqYTBPlkBmMIoSEWpPPcxaVO8ib3Q5OnZqyb14OSq8HZzUqsvFUruA/gt6MAtLC V/XpBl81sQ9br5mVmcXDYGFfsJedwc6FVBp/9HFBj6HpR1/a9G2J4Lk/K5Xeolsp g7WiT8pLPkNXpPWhf3KYZq/bw/acRQMt0YrLPaeBKsCmizuqa1AGLnDOqtTaf7oE 6GY5jeTcJz+MlgjsCDhn9RViJB6RJFD9yL5NPR9oJ8SzQjkvEyoIVbxOtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLnrIwuWNRqYM3LEz5x5q6uMqrkFMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdWVzakM1WTFHcGd6Y3NUUG5IbXJxNHlxdVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzvWMA0G CSqGSIb3DQEBCwUAA4IBAQATND8W0XsFkm0FEDAkE5dnE9jG3vhHeCtZ1iku9QIq S7GXlfMkFYXGqlyyOEpuSHiSHPUlc+NE0ZKuT14EZC8HZ6RGIcxTXfCFl1T1Su14 hyjUuqjbOdOQlSRPFj5LkFfCWr/tRtnUWsANZrW8FNfHcW1QGNcsQGcqgUiO7FAM Q6MIyqlw38PfOq+dXXorZOYJER+84xP1GoEJDj7lgMwRDVFqDEPiryciFFKKehhR U+6l1LMFxn5qeaLScs9l49IHXd9dSRBgnwQgc5jg8n5BayfM99Tsrcl0basYvaL7 lHUiTTOMmPXcEAvFKZjmBxFGID83c/vuWK+xCvTVQz2L -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:55 2026 by rpki-client