This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w-q8xneUfX8n_qnONDSjW0B8law.roa File: w-q8xneUfX8n_qnONDSjW0B8law.roa (raw, json) Hash identifier: in8h6rKy0/lzcFmmcCB4DTi3iwA5Qke48PatpnLnv0k= Subject key identifier: C3:EA:BC:C6:77:94:7D:7F:27:FE:A9:CE:34:34:A3:5B:40:7C:95:AC Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BA3A85047FE0F4C6B880D5C2ABFDCC093 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w-q8xneUfX8n_qnONDSjW0B8law.roa Signing time: Fri 09 Jan 2026 16:47:55 +0000 ROA not before: Fri 09 Jan 2026 16:47:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 31.57.132.0/24 maxlen: 24 31.58.41.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:a8:50:47:fe:0f:4c:6b:88:0d:5c:2a:bf:dc:c0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 9 16:47:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3eabcc677947d7f27fea9ce3434a35b407c95ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:74:03:6d:66:b5:e4:b2:c4:f2:5d:ad:15: 1e:e8:34:9c:ea:66:b2:ad:43:be:22:0a:ae:db:46: d2:1b:a7:f4:06:18:e2:da:4a:6e:78:56:19:0f:d8: 93:12:49:36:86:2f:92:a2:ef:2e:e8:f0:65:70:34: 42:e0:b1:e5:a3:1e:19:96:f2:a0:02:0d:3b:d2:fc: df:61:db:81:83:9c:fa:6f:33:80:60:d5:03:a0:2f: ec:4e:3b:ab:8f:47:a0:56:01:92:23:85:52:22:f9: cd:b8:00:dc:3a:c1:ae:f3:22:d4:3c:a2:ba:85:21: 00:3d:1d:8b:69:33:88:ae:1f:a5:3e:f1:18:3e:cc: 50:0a:01:1c:ec:05:09:ff:84:2b:1f:c5:10:5d:85: 81:2c:5b:a1:e1:fe:66:ff:bd:92:7f:1c:15:95:84: bb:ff:29:48:88:9f:f1:12:2a:6a:08:ae:83:19:24: 31:96:87:b1:bf:59:ec:a5:6a:1d:cd:1b:a5:d8:b8: d2:be:c9:37:23:c7:35:5a:d6:86:c6:bf:be:34:e9: ff:67:d8:77:ca:35:94:80:61:5c:2f:22:ad:69:1f: e6:65:08:9c:1e:9a:32:2f:92:cb:6b:2d:44:80:5c: f5:a3:c9:52:7d:37:e4:4d:6c:ef:61:28:4c:87:95: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EA:BC:C6:77:94:7D:7F:27:FE:A9:CE:34:34:A3:5B:40:7C:95:AC X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w-q8xneUfX8n_qnONDSjW0B8law.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.132.0/24 31.58.41.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a9:5a:5c:eb:e7:d4:69:7b:05:45:b4:db:59:70:1a:52:d7: 31:b7:a8:fb:01:2a:e9:4d:12:77:cd:2b:02:32:12:cd:52:2c: 75:d6:4b:f3:64:74:aa:a3:98:b9:ad:49:14:9c:0e:b8:85:13: 30:e7:e2:d8:51:37:4e:40:f4:c5:b3:06:b5:e8:06:a1:40:9b: aa:04:1c:8c:f1:8c:8f:7e:74:ed:d5:f3:5a:8f:54:49:ef:f8: c4:98:83:3c:7c:e6:77:ff:a6:b3:f6:ba:69:05:f8:8a:f4:52: 99:f2:ca:1f:db:7c:a1:57:e8:d6:bf:f0:ff:3a:cc:3f:ce:94: 40:22:4b:02:44:8e:09:9b:1c:e0:5e:1e:40:11:53:fc:e9:e5: e9:45:d3:fb:dc:64:c2:06:00:fb:4e:2f:90:dc:8a:a7:ca:95: e7:1c:f4:75:93:16:53:fa:ee:fb:b9:c7:88:44:2c:46:4d:db: 2c:9d:9d:c4:36:fb:7f:c4:31:98:3d:97:4c:67:b7:58:e0:15: f4:d0:4e:67:f8:b3:ee:55:1b:87:c2:0e:81:fd:a2:da:33:b3: fa:94:a0:de:fa:42:04:2e:21:13:c6:9d:ab:a0:53:c8:91:60: 0c:ae:fb:24:3d:ec:f5:b0:af:e2:8b:79:e5:98:0d:6f:88:fb: 7e:6e:0b:e5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZujqFBH/g9Ma4gNXCq/3MCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA5MTY0NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2VhYmNjNjc3OTQ3ZDdmMjdmZWE5Y2UzNDM0YTM1YjQwN2M5NWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxp0A21mteSyxPJdrRUe6DSc6may rUO+Igqu20bSG6f0Bhji2kpueFYZD9iTEkk2hi+Sou8u6PBlcDRC4LHlox4ZlvKg Ag070vzfYduBg5z6bzOAYNUDoC/sTjurj0egVgGSI4VSIvnNuADcOsGu8yLUPKK6 hSEAPR2LaTOIrh+lPvEYPsxQCgEc7AUJ/4QrH8UQXYWBLFuh4f5m/72SfxwVlYS7 /ylIiJ/xEipqCK6DGSQxloexv1nspWodzRul2LjSvsk3I8c1WtaGxr++NOn/Z9h3 yjWUgGFcLyKtaR/mZQicHpoyL5LLay1EgFz1o8lSfTfkTWzvYShMh5XsaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMPqvMZ3lH1/J/6pzjQ0o1tAfJWsMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdy1xOHhuZVVmWDhuX3FuT05EU2pXMEI4bGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzmEAwQA HzopAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQBKqVpc6+fUaXsFRbTbWXAaUtcx t6j7ASrpTRJ3zSsCMhLNUix11kvzZHSqo5i5rUkUnA64hRMw5+LYUTdOQPTFswa1 6AahQJuqBByM8YyPfnTt1fNaj1RJ7/jEmIM8fOZ3/6az9rppBfiK9FKZ8sof23yh V+jWv/D/Osw/zpRAIksCRI4JmxzgXh5AEVP86eXpRdP73GTCBgD7Ti+Q3IqnypXn HPR1kxZT+u77uceIRCxGTdssnZ3ENvt/xDGYPZdMZ7dY4BX00E5n+LPuVRuHwg6B /aLaM7P6lKDe+kIELiETxp2roFPIkWAMrvskPez1sK/ii3nlmA1viPt+bgvl -----END CERTIFICATE-----Generated at Sat Jan 10 09:45:53 2026 by rpki-client