This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wQ7DDNXplC9dJ8-4hlFiNyytUyQ.roa File: wQ7DDNXplC9dJ8-4hlFiNyytUyQ.roa (raw, json) Hash identifier: R/Osb+iAvXruq7q3dXRfp+n/fIrkZ1go7bFUSyk2nbM= Subject key identifier: C1:0E:C3:0C:D5:E9:94:2F:5D:27:CF:B8:86:51:62:37:2C:AD:53:24 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B8A112A3779C4543C9FBCB33B0A375365 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wQ7DDNXplC9dJ8-4hlFiNyytUyQ.roa Signing time: Sun 04 Jan 2026 17:32:19 +0000 ROA not before: Sun 04 Jan 2026 17:32:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 31.57.221.0/24 maxlen: 24 31.59.199.0/24 maxlen: 24 31.59.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:11:2a:37:79:c4:54:3c:9f:bc:b3:3b:0a:37:53:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 4 17:32:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c10ec30cd5e9942f5d27cfb8865162372cad5324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:90:cd:2f:80:08:89:2a:f5:be:5f:db:03: 04:db:30:09:e0:fc:11:31:13:9b:65:30:08:ef:64: 58:cb:50:33:72:73:d5:13:48:45:a6:0c:82:be:d2: d0:d4:cb:62:91:26:7e:6b:0e:5f:d4:05:90:d4:d5: f9:44:7b:49:6e:f8:ac:67:5c:72:b3:7e:9b:d3:05: 0a:be:7e:5f:f4:27:49:cb:5e:24:89:89:4f:f8:0d: 42:28:3b:96:ce:d5:0b:a2:d5:e6:f2:b9:e4:bb:f0: 18:40:7d:cb:16:cd:40:40:ab:a0:76:ab:91:c7:4e: a3:c1:20:3c:5a:ba:3a:f4:de:5c:8c:47:90:26:72: 31:86:b2:57:2c:50:d5:ac:ec:6e:6a:13:7f:0b:42: 3e:f2:53:57:a8:b7:bb:1f:a7:6c:c2:e6:02:ed:56: ec:02:fe:cc:6b:52:a0:9b:48:e0:63:6a:b4:60:e3: 50:af:bf:94:4d:ba:35:54:66:02:4e:b3:f5:ca:73: b3:d8:f2:fe:e6:44:7b:67:b4:96:b3:fb:29:68:52: b5:1f:24:41:46:e4:fc:2f:f1:0c:5a:4d:53:00:15: 35:0f:bb:d2:35:d7:ff:33:a7:69:c0:67:49:72:dc: 1e:27:2e:8d:ab:d4:b9:2f:de:ec:de:b8:b9:08:4f: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0E:C3:0C:D5:E9:94:2F:5D:27:CF:B8:86:51:62:37:2C:AD:53:24 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wQ7DDNXplC9dJ8-4hlFiNyytUyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.221.0/24 31.59.199.0/24 31.59.215.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:32:c5:d9:3b:c9:3e:98:67:c3:a6:e7:cb:15:9b:8d:0e:a0: 5a:da:8a:39:24:ee:a3:6c:53:7b:34:cf:56:8c:18:69:a4:38: b8:9e:0b:27:96:fd:17:db:ac:10:f5:fa:60:2c:d3:ee:30:6e: 32:8d:d5:c2:b8:60:6f:1f:55:a5:25:cc:42:40:2e:d1:c3:c1: 8f:01:24:a9:57:be:26:2e:f0:fb:29:12:f1:f1:06:a1:7f:ee: c0:20:fd:7c:95:05:37:7a:dc:d3:72:e6:3e:a3:a6:95:4c:08: fc:db:c5:cb:2f:b8:0a:a6:63:79:1d:3c:0f:c0:ff:d9:4c:79: 10:43:ed:7e:05:56:67:ed:1c:65:8a:d6:38:25:36:58:d3:be: e6:02:76:51:3d:87:f3:f7:92:99:49:c1:7c:ae:25:6f:39:70: ed:70:86:dc:15:bd:ef:fe:7d:21:bb:b7:ef:4b:84:16:5d:db: dc:b9:45:ea:b3:95:e7:65:ad:ac:12:77:21:c9:8b:e6:68:aa: 86:67:ed:59:66:d6:23:68:a3:3e:79:15:e6:53:4c:fd:81:b3: ce:a1:42:82:af:b7:9f:80:f0:e1:2a:19:91:5f:bb:cb:36:77: 2d:88:df:5a:75:2a:56:fc:4a:ce:d7:35:e9:18:f7:a4:4c:e1: 13:b3:1f:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuKESo3ecRUPJ+8szsKN1NlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA0MTczMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTBlYzMwY2Q1ZTk5NDJmNWQyN2NmYjg4NjUxNjIzNzJjYWQ1MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUmQzS+ACIkq9b5f2wME2zAJ4PwR MRObZTAI72RYy1AzcnPVE0hFpgyCvtLQ1MtikSZ+aw5f1AWQ1NX5RHtJbvisZ1xy s36b0wUKvn5f9CdJy14kiYlP+A1CKDuWztULotXm8rnku/AYQH3LFs1AQKugdquR x06jwSA8Wro69N5cjEeQJnIxhrJXLFDVrOxuahN/C0I+8lNXqLe7H6dswuYC7Vbs Av7Ma1Kgm0jgY2q0YONQr7+UTbo1VGYCTrP1ynOz2PL+5kR7Z7SWs/spaFK1HyRB RuT8L/EMWk1TABU1D7vSNdf/M6dpwGdJctweJy6Nq9S5L97s3ri5CE9i6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMEOwwzV6ZQvXSfPuIZRYjcsrVMkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvd1E3REROWHBsQzlkSjgtNGhsRmlOeXl0VXlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzndAwQA HzvHAwQAHzvXMA0GCSqGSIb3DQEBCwUAA4IBAQAcMsXZO8k+mGfDpufLFZuNDqBa 2oo5JO6jbFN7NM9WjBhppDi4ngsnlv0X26wQ9fpgLNPuMG4yjdXCuGBvH1WlJcxC QC7Rw8GPASSpV74mLvD7KRLx8Qahf+7AIP18lQU3etzTcuY+o6aVTAj828XLL7gK pmN5HTwPwP/ZTHkQQ+1+BVZn7RxlitY4JTZY077mAnZRPYfz95KZScF8riVvOXDt cIbcFb3v/n0hu7fvS4QWXdvcuUXqs5XnZa2sEnchyYvmaKqGZ+1ZZtYjaKM+eRXm U0z9gbPOoUKCr7efgPDhKhmRX7vLNnctiN9adSpW/ErO1zXpGPekTOETsx9V -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:22 2026 by rpki-client