This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vO5whl44iiEJpcNrD16kLJtEX7Y.roa File: vO5whl44iiEJpcNrD16kLJtEX7Y.roa (raw, json) Hash identifier: MyvIbnfm4B+pahiKNbJ8rIdtyX9QVw8RANRMCxVSmPY= Subject key identifier: BC:EE:70:86:5E:38:8A:21:09:A5:C3:6B:0F:5E:A4:2C:9B:44:5F:B6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DEB6D99440E2D237B224296D9DC9 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vO5whl44iiEJpcNrD16kLJtEX7Y.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395374 IP address blocks: 31.57.98.0/24 maxlen: 24 31.58.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:de:b6:d9:94:40:e2:d2:37:b2:24:29:6d:9d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcee70865e388a2109a5c36b0f5ea42c9b445fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:28:d2:0d:36:3f:85:a6:4c:cc:54:79:e1: aa:75:9f:1f:e8:dd:fb:63:23:51:93:67:c1:28:fe: f4:60:66:5a:23:34:59:7a:5f:fd:1e:ae:1b:02:24: 43:82:fd:95:9c:e8:fd:ff:c7:e9:1d:f2:c1:94:5c: e3:aa:30:a0:aa:97:aa:f4:56:2e:2f:9d:10:26:04: ea:ed:a0:f8:a7:ef:68:0f:35:99:db:e4:b5:3c:66: 58:f9:c7:35:ff:89:12:7f:f1:6c:54:f3:77:cd:21: 80:62:d8:41:c9:e4:55:4d:18:ef:46:47:68:4c:c4: 51:ec:b9:f6:e5:cb:f7:50:6c:4a:e7:5a:1f:65:70: 78:b1:44:c0:5a:a2:52:d7:38:dd:05:c0:b3:cd:39: a7:fc:a5:f2:03:a9:4f:3d:fd:63:f6:00:80:38:4c: c7:af:b8:55:e7:d7:64:20:88:f9:a8:68:30:eb:33: 21:99:cd:84:31:42:b5:9b:64:3f:45:d5:65:fe:63: 4a:ec:76:46:54:14:3d:18:4c:79:36:fa:6f:19:21: ce:17:8c:bb:fa:c8:59:83:0f:3a:81:e2:d1:d3:c7: 89:2a:c1:5d:e7:28:50:28:08:55:93:61:b1:93:b8: 6b:83:1d:1e:2f:e9:f4:35:f5:45:07:fc:aa:1d:2c: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EE:70:86:5E:38:8A:21:09:A5:C3:6B:0F:5E:A4:2C:9B:44:5F:B6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vO5whl44iiEJpcNrD16kLJtEX7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.98.0/24 31.58.65.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:0f:5d:c6:2f:21:89:1e:65:d7:5c:c7:16:96:c6:86:0d:2b: fd:89:c4:9a:cb:0b:1e:fc:db:7b:9d:79:ce:22:0e:e5:2c:9d: 8f:5e:b5:32:27:09:3c:6c:39:9f:43:18:51:9a:d1:77:99:e9: 76:f6:17:ae:2f:84:74:11:ad:1f:6c:2a:8f:fb:bf:d0:17:8c: 4c:33:f1:8d:29:cb:5a:3c:24:37:d7:1a:b3:4d:d1:1f:21:9e: 77:40:1e:2a:42:4a:ce:5d:21:fc:b1:7c:92:1b:98:c0:34:0a: 04:9d:f9:8e:4b:b8:7c:f2:ce:d2:02:cd:3a:ab:86:8b:7c:9f: e9:f2:a5:f8:2c:ef:56:3d:1d:48:6a:ce:ff:d9:1f:ca:a6:2a: 3e:3a:6a:95:19:3c:22:08:33:51:e9:ea:10:83:e1:ec:0d:4e: 22:70:ac:82:c1:71:cf:20:5e:f7:30:69:74:9a:4a:e7:a5:7f: d5:5c:ea:cb:d4:5b:e2:f8:3a:ed:5c:dd:a6:59:dc:17:29:e4: ea:66:2c:f9:93:48:48:09:01:91:51:cb:1d:fb:dd:0c:5e:c1: 22:08:f1:9d:02:b0:dd:f3:a5:b6:69:92:06:3b:a8:ce:c6:82: a9:b7:aa:e7:69:b7:e3:be:d3:f8:87:de:6c:86:f4:b5:28:b4: e5:d4:6a:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hN622ZRA4tI3siQpbZ3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2VlNzA4NjVlMzg4YTIxMDlhNWMzNmIwZjVlYTQyYzliNDQ1ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaso0g02P4WmTMxUeeGqdZ8f6N37 YyNRk2fBKP70YGZaIzRZel/9Hq4bAiRDgv2VnOj9/8fpHfLBlFzjqjCgqpeq9FYu L50QJgTq7aD4p+9oDzWZ2+S1PGZY+cc1/4kSf/FsVPN3zSGAYthByeRVTRjvRkdo TMRR7Ln25cv3UGxK51ofZXB4sUTAWqJS1zjdBcCzzTmn/KXyA6lPPf1j9gCAOEzH r7hV59dkIIj5qGgw6zMhmc2EMUK1m2Q/RdVl/mNK7HZGVBQ9GEx5NvpvGSHOF4y7 +shZgw86geLR08eJKsFd5yhQKAhVk2Gxk7hrgx0eL+n0NfVFB/yqHSyQxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLzucIZeOIohCaXDaw9epCybRF+2MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdk81d2hsNDRpaUVKcGNOckQxNmtMSnRFWDdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzliAwQA HzpBMA0GCSqGSIb3DQEBCwUAA4IBAQCbD13GLyGJHmXXXMcWlsaGDSv9icSaywse /Nt7nXnOIg7lLJ2PXrUyJwk8bDmfQxhRmtF3mel29heuL4R0Ea0fbCqP+7/QF4xM M/GNKctaPCQ31xqzTdEfIZ53QB4qQkrOXSH8sXySG5jANAoEnfmOS7h88s7SAs06 q4aLfJ/p8qX4LO9WPR1Ias7/2R/Kpio+OmqVGTwiCDNR6eoQg+HsDU4icKyCwXHP IF73MGl0mkrnpX/VXOrL1Fvi+DrtXN2mWdwXKeTqZiz5k0hICQGRUcsd+90MXsEi CPGdArDd86W2aZIGO6jOxoKpt6rnabfjvtP4h95shvS1KLTl1GqT -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:06 2026 by rpki-client