This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wDNri4SN9JTSDEWYiLS5gKuu6TY.roa File: wDNri4SN9JTSDEWYiLS5gKuu6TY.roa (raw, json) Hash identifier: CMSkeql3WGDMzHbdreUtwtP7VuX+wHkXE9wtRnqH1wo= Subject key identifier: C0:33:6B:8B:84:8D:F4:94:D2:0C:45:98:88:B4:B9:80:AB:AE:E9:36 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84972A44ABB6C9C11300DAC292A34D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wDNri4SN9JTSDEWYiLS5gKuu6TY.roa Signing time: Fri 02 Jan 2026 16:22:34 +0000 ROA not before: Fri 02 Jan 2026 16:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205091 IP address blocks: 31.56.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:97:2a:44:ab:b6:c9:c1:13:00:da:c2:92:a3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0336b8b848df494d20c459888b4b980abaee936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:6e:6a:b6:53:66:3a:a4:54:58:14:57:ef: c6:ee:80:b0:53:24:26:e9:97:56:0d:00:83:41:7d: 6c:9e:f3:d5:5c:94:3d:04:97:f3:6b:60:14:0b:61: 77:87:e0:96:79:b7:fd:72:27:1a:a2:c3:ae:86:0f: 04:fd:e9:dd:54:12:65:0a:e1:7e:d0:ae:34:ba:52: 46:d5:30:92:d0:ec:fd:60:47:9b:57:3d:c7:1c:84: 41:e7:f0:f5:4d:da:72:af:3c:93:b1:93:47:de:f7: 70:44:73:60:35:80:da:5a:d6:56:53:52:c6:73:83: 1d:b6:e5:07:9e:d4:60:c6:f9:59:c9:39:08:66:8d: 38:cd:ad:37:21:23:b2:1f:8b:01:51:1e:39:a5:fb: 4a:da:96:ee:70:38:3e:0e:2a:86:0e:db:96:06:6a: 74:66:63:de:c2:ad:4e:55:12:2f:bf:05:aa:a8:cc: 62:b2:1b:94:6f:f5:63:82:51:6f:81:4d:69:ba:d9: 97:58:4f:e8:66:08:45:83:e8:ba:94:53:cc:b1:24: 52:f1:9b:bf:15:93:b8:4e:4a:fd:74:5d:52:d6:07: d0:48:eb:58:ad:29:9b:81:1b:4e:80:16:46:3e:47: 80:a6:46:00:d3:56:73:55:61:cd:c0:66:6c:ff:3c: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:6B:8B:84:8D:F4:94:D2:0C:45:98:88:B4:B9:80:AB:AE:E9:36 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wDNri4SN9JTSDEWYiLS5gKuu6TY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.111.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:4d:b8:8c:ba:3e:1b:fd:10:72:0c:97:c5:dc:28:df:c1:e6: fd:81:5d:24:5a:65:0e:2b:d1:e0:53:77:3b:7e:95:2c:45:d3: 11:a4:10:de:62:ac:a2:c1:e9:d1:8e:c6:8e:0f:27:76:93:55: 7b:76:78:03:43:5f:d6:f6:bf:e1:ae:1d:e9:26:f7:6b:80:7f: e7:d6:77:9c:57:31:f7:d1:e0:61:c6:b9:8c:70:d0:96:51:41: b0:77:b9:f6:9d:d7:2f:0a:e6:10:7e:1a:75:14:87:74:7e:74: 4c:37:b8:52:f6:4e:39:ab:46:22:23:f7:9e:7b:d3:f2:81:4d: b7:77:58:de:bf:ff:03:89:a3:4e:50:53:15:b5:3f:43:f2:d8: 58:ac:a8:90:a9:1a:d9:d0:cb:f8:b6:0a:7e:d5:d3:40:9e:d7: 43:dd:d6:ed:3d:27:6d:0b:d2:6e:4a:80:d5:db:6c:7c:3e:35: 90:38:19:e9:0b:42:8c:eb:31:a0:c2:42:14:ab:0f:eb:0c:3e: 52:3b:c0:6c:25:7e:3d:5a:d2:65:15:b8:63:68:3e:b4:fd:40: 3b:1e:c3:a6:ab:1e:2a:37:e6:0e:57:59:22:97:00:9c:6f:70: 4e:75:42:eb:9b:d7:20:a3:98:ba:bf:f1:6b:35:06:98:63:59: e0:40:6c:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJcqRKu2ycETANrCkqNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDMzNmI4Yjg0OGRmNDk0ZDIwYzQ1OTg4OGI0Yjk4MGFiYWVlOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv19uarZTZjqkVFgUV+/G7oCwUyQm 6ZdWDQCDQX1snvPVXJQ9BJfza2AUC2F3h+CWebf9cicaosOuhg8E/endVBJlCuF+ 0K40ulJG1TCS0Oz9YEebVz3HHIRB5/D1TdpyrzyTsZNH3vdwRHNgNYDaWtZWU1LG c4MdtuUHntRgxvlZyTkIZo04za03ISOyH4sBUR45pftK2pbucDg+DiqGDtuWBmp0 ZmPewq1OVRIvvwWqqMxishuUb/VjglFvgU1putmXWE/oZghFg+i6lFPMsSRS8Zu/ FZO4Tkr9dF1S1gfQSOtYrSmbgRtOgBZGPkeApkYA01ZzVWHNwGZs/zyLjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAza4uEjfSU0gxFmIi0uYCrruk2MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvd0ROcmk0U045SlRTREVXWWlMUzVnS3V1NlRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhvMA0G CSqGSIb3DQEBCwUAA4IBAQAPTbiMuj4b/RByDJfF3Cjfweb9gV0kWmUOK9HgU3c7 fpUsRdMRpBDeYqyiwenRjsaODyd2k1V7dngDQ1/W9r/hrh3pJvdrgH/n1necVzH3 0eBhxrmMcNCWUUGwd7n2ndcvCuYQfhp1FId0fnRMN7hS9k45q0YiI/eee9PygU23 d1jev/8DiaNOUFMVtT9D8thYrKiQqRrZ0Mv4tgp+1dNAntdD3dbtPSdtC9JuSoDV 22x8PjWQOBnpC0KM6zGgwkIUqw/rDD5SO8BsJX49WtJlFbhjaD60/UA7HsOmqx4q N+YOV1kilwCcb3BOdULrm9cgo5i6v/FrNQaYY1ngQGyO -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client