This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vA-WlMvnWgRcuQpYfKeSLlQSqLA.roa File: vA-WlMvnWgRcuQpYfKeSLlQSqLA.roa (raw, json) Hash identifier: /heg8rBQXQo/I3kFO/6tw1N7AoxCMIOmB8FMWmoVcHc= Subject key identifier: BC:0F:96:94:CB:E7:5A:04:5C:B9:0A:58:7C:A7:92:2E:54:12:A8:B0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D4759A6963AED0FC144720254ACC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vA-WlMvnWgRcuQpYfKeSLlQSqLA.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216221 IP address blocks: 31.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d4:75:9a:69:63:ae:d0:fc:14:47:20:25:4a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc0f9694cbe75a045cb90a587ca7922e5412a8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:02:a3:15:1c:95:95:42:dd:80:e8:68:47: cc:be:c4:d6:23:68:dc:21:35:ee:83:0d:7a:ea:2d: f2:df:ad:a4:5b:a2:f2:08:e1:1f:c7:d4:50:16:d1: a8:e0:37:f1:10:18:43:92:95:f2:be:1b:2b:5d:e2: 50:e0:99:e4:e2:4b:6a:98:db:eb:7f:5a:1b:88:4b: e4:25:6b:d4:17:41:1d:4e:ca:52:16:9a:dd:24:23: d9:df:15:7c:52:2f:a9:34:17:9e:a6:0f:55:77:bf: 39:db:0f:6b:5d:7a:5a:8b:61:24:d3:0a:b3:cc:3d: e7:04:e6:b4:4c:34:16:23:da:69:08:7b:86:74:68: b1:6b:38:a1:35:03:62:e3:ba:62:af:de:a9:09:0d: ac:1f:69:2c:e5:1c:bb:ef:c7:11:dd:a0:e7:da:1d: dd:0d:45:63:ed:91:27:31:4d:3a:3e:54:1b:26:26: 54:ae:55:a7:8d:ff:9c:23:67:6d:c5:06:88:9d:f0: 45:7b:69:43:b5:6d:e8:3a:a3:9d:14:f6:40:18:6c: 54:5c:34:1c:b0:53:3f:e7:75:86:26:97:26:e6:b5: 95:df:fc:dd:b6:b5:6e:79:4d:78:6c:e9:18:75:c0: de:ce:1c:f0:f5:3d:75:fd:50:16:4e:12:07:50:bb: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:96:94:CB:E7:5A:04:5C:B9:0A:58:7C:A7:92:2E:54:12:A8:B0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vA-WlMvnWgRcuQpYfKeSLlQSqLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.112.0/24 Signature Algorithm: sha256WithRSAEncryption bc:24:3e:c8:58:6b:2d:17:ec:bc:d2:e7:fc:a4:46:0a:2c:3e: cf:14:16:a2:63:52:95:7e:fb:83:92:76:23:43:1b:ea:ed:fe: 08:b7:3c:08:74:be:42:bd:88:74:14:9b:26:35:2a:f8:34:9e: 42:42:f0:3b:bc:03:54:8a:90:71:13:b3:6c:bb:26:f3:dd:73: 1b:98:4a:30:7f:31:3f:c4:22:b1:39:c6:69:23:2a:c6:f8:97: 69:51:0d:82:c8:3c:7d:8d:f7:aa:fb:50:a3:c0:5f:2f:30:53: 55:e6:f9:f3:0c:5b:c1:4a:64:8f:0f:21:87:09:ed:94:4c:6e: 89:c6:d9:21:2d:6b:dc:49:3f:55:6a:d8:6a:60:17:53:d9:c0: e2:13:df:6d:67:03:05:99:95:b3:55:e0:3c:cb:cc:d7:e9:01: 6b:62:05:f1:87:b6:66:8d:c9:6f:6a:03:8c:9a:8c:65:ce:e2: 07:20:27:2d:62:7b:37:20:30:1d:fc:93:e3:c9:1c:fa:ee:0c: 76:97:46:ff:5e:98:31:20:df:2b:70:e3:cd:d8:f6:3b:b9:2c: 52:98:0a:0f:92:3a:87:9c:58:e1:f9:eb:5e:aa:ce:de:df:02: 5b:52:09:b2:5c:01:2e:98:3b:b5:92:97:2d:19:5f:fe:b3:15: 79:9a:0b:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNR1mmljrtD8FEcgJUrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzBmOTY5NGNiZTc1YTA0NWNiOTBhNTg3Y2E3OTIyZTU0MTJhOGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtocCoxUclZVC3YDoaEfMvsTWI2jc ITXugw166i3y362kW6LyCOEfx9RQFtGo4DfxEBhDkpXyvhsrXeJQ4Jnk4ktqmNvr f1obiEvkJWvUF0EdTspSFprdJCPZ3xV8Ui+pNBeepg9Vd7852w9rXXpai2Ek0wqz zD3nBOa0TDQWI9ppCHuGdGixazihNQNi47pir96pCQ2sH2ks5Ry778cR3aDn2h3d DUVj7ZEnMU06PlQbJiZUrlWnjf+cI2dtxQaInfBFe2lDtW3oOqOdFPZAGGxUXDQc sFM/53WGJpcm5rWV3/zdtrVueU14bOkYdcDezhzw9T11/VAWThIHULsDJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwPlpTL51oEXLkKWHynki5UEqiwMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdkEtV2xNdm5XZ1JjdVFwWWZLZVNMbFFTcUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzlwMA0G CSqGSIb3DQEBCwUAA4IBAQC8JD7IWGstF+y80uf8pEYKLD7PFBaiY1KVfvuDknYj Qxvq7f4ItzwIdL5CvYh0FJsmNSr4NJ5CQvA7vANUipBxE7Nsuybz3XMbmEowfzE/ xCKxOcZpIyrG+JdpUQ2CyDx9jfeq+1CjwF8vMFNV5vnzDFvBSmSPDyGHCe2UTG6J xtkhLWvcST9VathqYBdT2cDiE99tZwMFmZWzVeA8y8zX6QFrYgXxh7ZmjclvagOM moxlzuIHICctYns3IDAd/JPjyRz67gx2l0b/XpgxIN8rcOPN2PY7uSxSmAoPkjqH nFjh+eteqs7e3wJbUgmyXAEumDu1kpctGV/+sxV5mgvp -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:35 2026 by rpki-client