This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v99GZ1hiMYEsGcZi9iukvfg4NZA.roa File: v99GZ1hiMYEsGcZi9iukvfg4NZA.roa (raw, json) Hash identifier: W3rdo4uXhHytKW7aFkinjFgdUGBP77uUcei237li108= Subject key identifier: BF:DF:46:67:58:62:31:81:2C:19:C6:62:F6:2B:A4:BD:F8:38:35:90 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7ACF8425D6A471C1355BDD95E786F351 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v99GZ1hiMYEsGcZi9iukvfg4NZA.roa Signing time: Thu 01 Jan 2026 18:26:18 +0000 ROA not before: Thu 01 Jan 2026 18:26:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 31.56.80.0/24 maxlen: 24 31.56.84.0/24 maxlen: 24 31.57.190.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 31.59.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:cf:84:25:d6:a4:71:c1:35:5b:dd:95:e7:86:f3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 1 18:26:18 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bfdf4667586231812c19c662f62ba4bdf8383590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:0a:00:62:a6:3d:eb:74:82:ad:ce:cf:ea: d7:c7:64:2a:64:48:92:c7:a3:01:0f:be:39:6f:85: b7:f9:01:eb:37:a3:8d:f2:0d:ed:e6:19:10:e5:f4: 8d:0a:7b:fe:ab:9f:55:9c:e5:01:92:b8:56:df:61: 80:06:2c:28:57:74:11:99:51:19:49:60:cf:20:d9: 3f:1e:aa:d1:b5:04:db:9e:20:c6:fe:47:01:50:6a: ed:23:c6:28:0f:fc:3e:4a:88:f0:4b:23:8e:52:c6: 80:01:c6:02:39:0d:fb:4d:9a:76:49:d0:99:cb:58: 8b:99:8b:84:ee:13:06:f7:b6:a7:69:c4:92:ff:5d: d1:8f:6b:9e:76:b3:8e:84:c6:58:0f:8a:49:25:74: 51:34:5c:b2:17:9b:2c:56:28:98:4c:8c:e3:ba:42: ad:60:77:57:72:a7:b0:3d:bb:1a:6e:7a:a0:d2:b4: dc:46:56:f2:9b:4b:76:63:6d:9a:e8:bb:85:2e:bd: e8:ab:2e:7e:a7:6a:9b:ed:f7:7c:bd:0a:ae:c2:29: 9c:a4:57:03:06:29:b1:9b:07:16:76:2b:83:9b:3d: b4:cd:2e:04:5d:f0:f1:9b:16:c9:25:42:01:9b:25: 92:6c:da:60:a9:9a:5c:76:f6:d0:4f:cf:4b:d8:62: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DF:46:67:58:62:31:81:2C:19:C6:62:F6:2B:A4:BD:F8:38:35:90 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v99GZ1hiMYEsGcZi9iukvfg4NZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.80.0/24 31.56.84.0/24 31.57.190.0/24 31.58.131.0/24 31.59.198.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:f5:4e:f0:71:46:fe:b1:6a:ce:2e:b5:7e:1a:08:1f:79:3e: a3:a1:35:66:9c:f2:29:23:20:64:43:47:c3:f2:5a:5d:c8:15: 28:6d:01:13:e8:ed:c8:48:d9:4e:75:f2:27:5f:d7:eb:c7:97: e9:a7:c3:75:9e:50:d4:2d:5f:a6:87:49:d3:ad:25:78:36:fe: 2b:03:29:77:72:e3:07:d7:f3:9d:3c:b2:07:83:2c:ac:03:95: 21:e9:e5:43:f8:fd:31:ea:1e:94:af:66:b7:88:f9:f6:ec:1f: 5d:ae:5f:8e:ea:31:36:ae:6d:f9:01:8b:47:a0:b4:66:b8:fc: f2:b5:96:b3:ce:2f:e3:40:f0:19:92:6b:a2:ff:94:8c:ed:34: fc:94:95:f3:31:7c:f6:e0:81:69:33:ab:cc:a1:6d:20:bd:78: 27:3f:6b:b4:42:7e:ad:5a:bd:1a:d3:0d:f4:c7:97:f5:2f:0c: d6:a9:bc:d9:d6:be:ea:cd:e7:f7:d4:9b:79:db:21:68:e9:31: 74:71:5d:96:ff:32:a4:0f:41:50:dd:00:9f:11:55:fa:93:00: fd:f7:65:f0:7b:9f:4a:65:cb:9a:ef:93:40:8c:97:e7:55:79: 8c:d7:ac:1e:47:af:d0:cb:ea:3d:2b:63:d9:52:0d:67:ce:d9: 1b:24:88:a5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6z4Ql1qRxwTVb3ZXnhvNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAxMTgyNjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmRmNDY2NzU4NjIzMTgxMmMxOWM2NjJmNjJiYTRiZGY4MzgzNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fYKAGKmPet0gq3Oz+rXx2QqZEiS x6MBD745b4W3+QHrN6ON8g3t5hkQ5fSNCnv+q59VnOUBkrhW32GABiwoV3QRmVEZ SWDPINk/HqrRtQTbniDG/kcBUGrtI8YoD/w+SojwSyOOUsaAAcYCOQ37TZp2SdCZ y1iLmYuE7hMG97anacSS/13Rj2uedrOOhMZYD4pJJXRRNFyyF5ssViiYTIzjukKt YHdXcqewPbsabnqg0rTcRlbym0t2Y22a6LuFLr3oqy5+p2qb7fd8vQquwimcpFcD BimxmwcWdiuDmz20zS4EXfDxmxbJJUIBmyWSbNpgqZpcdvbQT89L2GLMbwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFL/fRmdYYjGBLBnGYvYrpL34ODWQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdjk5R1oxaGlNWUVzR2NaaTlpdWt2Zmc0TlpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzhQAwQA HzhUAwQAHzm+AwQAHzqDAwQAHzvGMA0GCSqGSIb3DQEBCwUAA4IBAQCO9U7wcUb+ sWrOLrV+GggfeT6joTVmnPIpIyBkQ0fD8lpdyBUobQET6O3ISNlOdfInX9frx5fp p8N1nlDULV+mh0nTrSV4Nv4rAyl3cuMH1/OdPLIHgyysA5Uh6eVD+P0x6h6Ur2a3 iPn27B9drl+O6jE2rm35AYtHoLRmuPzytZazzi/jQPAZkmui/5SM7TT8lJXzMXz2 4IFpM6vMoW0gvXgnP2u0Qn6tWr0a0w30x5f1LwzWqbzZ1r7qzef31Jt52yFo6TF0 cV2W/zKkD0FQ3QCfEVX6kwD992Xwe59KZcua75NAjJfnVXmM16weR6/Qy+o9K2PZ Ug1nztkbJIil -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:42 2026 by rpki-client