This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vKY3gUszcEsyaxb809MZgzWZrik.roa File: vKY3gUszcEsyaxb809MZgzWZrik.roa (raw, json) Hash identifier: KkzOSPQE6tGg7EyHTilCz2zb89izA4+uUiXnQvrHw34= Subject key identifier: BC:A6:37:81:4B:33:70:4B:32:6B:16:FC:D3:D3:19:83:35:99:AE:29 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E50FC092F98A5CA74DB1C9485681 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vKY3gUszcEsyaxb809MZgzWZrik.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401190 IP address blocks: 31.57.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e5:0f:c0:92:f9:8a:5c:a7:4d:b1:c9:48:56:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bca637814b33704b326b16fcd3d319833599ae29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:8b:1d:7d:db:fc:41:37:7a:7a:c4:6f:af: 2e:22:1a:9e:b3:e9:42:38:52:a6:be:d2:c7:5e:c9: dc:c2:21:b1:40:72:c0:2a:ae:f6:04:9c:6d:dc:b4: af:7a:48:8e:c4:c3:6f:eb:b1:cf:58:26:32:9c:b0: 16:81:d5:57:a9:6e:3e:7d:37:aa:1c:4d:8c:df:56: bb:f0:26:de:3d:32:b7:98:94:9f:5a:b3:f0:e0:48: 8d:9d:09:d5:ee:3e:0c:09:4e:ce:f4:0c:b1:69:14: 18:56:4b:28:f6:57:1e:2a:29:7f:4d:43:85:1d:c4: 97:ee:e4:af:93:aa:69:c9:67:f8:9b:22:d7:de:d8: 3b:8a:7a:66:64:db:cb:01:3b:d1:64:92:63:e0:90: ff:f6:46:1d:22:bb:84:ec:f5:84:27:95:2d:6c:cc: da:d9:3b:41:6b:08:ee:2e:fa:31:65:78:a7:df:a1: cd:2b:5c:64:cf:42:ea:48:a8:16:8e:f2:1f:ab:c3: 78:52:03:dc:a3:c0:8b:56:29:e2:ef:8a:0d:8e:34: b2:25:8c:2b:a2:93:d9:39:61:15:04:a9:ca:ab:5e: 83:5f:a0:64:c4:6e:44:93:8c:af:10:5a:dd:9a:7c: f7:4c:b9:e6:83:14:79:1e:d2:50:eb:5d:b9:39:c9: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A6:37:81:4B:33:70:4B:32:6B:16:FC:D3:D3:19:83:35:99:AE:29 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vKY3gUszcEsyaxb809MZgzWZrik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.212.0/23 Signature Algorithm: sha256WithRSAEncryption 93:f3:aa:13:46:af:d4:94:ca:11:51:df:43:4a:56:c9:50:f3: 00:4a:8a:24:60:d6:9a:6e:97:73:38:ac:cd:0b:07:8b:de:4c: 52:15:f5:cf:6d:de:c5:7d:96:68:6d:a1:a9:0c:f1:8c:fb:11: f1:3d:73:b0:b1:02:68:dc:d8:bd:ac:5f:4c:e9:a8:2c:43:7c: 5a:67:55:34:6e:73:0f:5b:26:eb:e0:37:f5:00:fc:68:ba:1e: 7d:c7:2c:d5:72:f1:da:28:6e:e1:42:ee:12:4c:b4:f4:94:5c: d6:9d:57:82:08:a7:47:4a:39:8d:49:24:c0:00:d7:3a:41:2c: c4:57:ad:a8:6d:4e:e3:3d:81:c8:80:f3:c5:77:79:7f:fd:1b: cc:9a:83:b0:ff:4c:c0:77:af:5a:5a:7c:da:b5:f0:8e:45:8e: fe:f0:c6:b0:c0:36:cf:dd:a3:d5:f2:7b:eb:34:1a:32:94:b7: 33:d2:af:20:0b:c8:3d:76:8c:0a:e1:a3:28:ab:ef:1e:4e:04: 23:e6:02:45:b6:80:d0:1f:ea:a8:f2:34:fa:ad:31:03:0c:51: 09:5a:29:13:16:f3:e4:e8:11:c2:27:2b:e5:b5:31:9e:71:f2: e2:7a:75:f5:8d:7b:c5:ab:2b:a8:d2:a2:d3:06:4b:af:a0:f2: 4c:2e:24:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOUPwJL5ilynTbHJSFaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2E2Mzc4MTRiMzM3MDRiMzI2YjE2ZmNkM2QzMTk4MzM1OTlhZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvqLHX3b/EE3enrEb68uIhqes+lC OFKmvtLHXsncwiGxQHLAKq72BJxt3LSvekiOxMNv67HPWCYynLAWgdVXqW4+fTeq HE2M31a78CbePTK3mJSfWrPw4EiNnQnV7j4MCU7O9AyxaRQYVkso9lceKil/TUOF HcSX7uSvk6ppyWf4myLX3tg7inpmZNvLATvRZJJj4JD/9kYdIruE7PWEJ5UtbMza 2TtBawjuLvoxZXin36HNK1xkz0LqSKgWjvIfq8N4UgPco8CLVini74oNjjSyJYwr opPZOWEVBKnKq16DX6BkxG5Ek4yvEFrdmnz3TLnmgxR5HtJQ6125OclhcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLymN4FLM3BLMmsW/NPTGYM1ma4pMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdktZM2dVc3pjRXN5YXhiODA5TVpneldacmlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHznUMA0G CSqGSIb3DQEBCwUAA4IBAQCT86oTRq/UlMoRUd9DSlbJUPMASookYNaabpdzOKzN CweL3kxSFfXPbd7FfZZobaGpDPGM+xHxPXOwsQJo3Ni9rF9M6agsQ3xaZ1U0bnMP Wybr4Df1APxouh59xyzVcvHaKG7hQu4STLT0lFzWnVeCCKdHSjmNSSTAANc6QSzE V62obU7jPYHIgPPFd3l//RvMmoOw/0zAd69aWnzatfCORY7+8MawwDbP3aPV8nvr NBoylLcz0q8gC8g9dowK4aMoq+8eTgQj5gJFtoDQH+qo8jT6rTEDDFEJWikTFvPk 6BHCJyvltTGecfLienX1jXvFqyuo0qLTBkuvoPJMLiQK -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:36 2026 by rpki-client