This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRM_BkIlpm77Tg0nVDbUx49ZNbA.roa File: wRM_BkIlpm77Tg0nVDbUx49ZNbA.roa (raw, json) Hash identifier: rx+FH/mi7sexYlmL398UQJsKADJwbj8nCyRwoYHZ+5Q= Subject key identifier: C1:13:3F:06:42:25:A6:6E:FB:4E:0D:27:54:36:D4:C7:8F:59:35:B0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C7CA20DA2389026BF2371E1D76A2 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRM_BkIlpm77Tg0nVDbUx49ZNbA.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214941 IP address blocks: 31.57.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c7:ca:20:da:23:89:02:6b:f2:37:1e:1d:76:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1133f064225a66efb4e0d275436d4c78f5935b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:2f:84:95:2e:e4:1f:65:0e:b5:54:a2:8f: 52:83:10:89:98:37:96:3e:0a:c0:18:b5:fe:73:ce: 07:15:0f:50:58:92:39:e4:db:47:b7:8a:78:c3:e5: 7d:88:d7:52:18:29:84:ac:f4:06:7e:d7:e9:ea:22: 35:d2:f0:d6:05:f0:a5:a7:3e:ba:e3:fe:e3:bb:62: 03:3b:dc:41:d8:95:9f:87:7c:eb:7f:41:0a:62:a8: 60:92:2b:62:4a:96:1f:f3:0f:2f:71:7a:28:99:6a: d2:f4:37:22:72:12:e2:58:26:96:1c:1d:22:bd:1d: 85:ad:dc:83:71:f0:69:03:5d:e5:d9:33:a1:17:eb: b9:92:0a:4e:6e:aa:e7:76:f7:6b:84:04:62:1b:53: eb:4b:a2:e0:c9:f7:11:b1:e5:34:25:fd:c4:d1:38: 8c:9e:dd:3e:31:f9:a4:24:dd:c3:24:00:90:6b:9a: ee:a1:6c:fd:c4:66:f8:b9:9a:4f:90:dd:10:05:12: 5c:94:a2:c6:35:a9:a7:dd:07:19:67:ba:3c:a3:06: ae:28:a7:0f:43:fe:e6:77:d3:42:bb:a8:64:11:c4: 84:aa:b5:30:eb:a8:cb:cf:56:69:02:de:93:2d:e0: 23:ea:38:8e:e8:fe:df:6a:e0:15:80:f7:3b:37:c0: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:13:3F:06:42:25:A6:6E:FB:4E:0D:27:54:36:D4:C7:8F:59:35:B0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRM_BkIlpm77Tg0nVDbUx49ZNbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.135.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:7d:41:b2:6d:f9:3d:66:95:a2:fc:b9:a5:97:35:83:31:cc: 26:22:a7:2e:f7:33:59:21:03:29:93:08:83:ed:72:83:42:5d: 28:9a:61:9e:97:89:bd:c5:ed:6c:42:80:4d:82:b7:c9:d0:a3: f0:71:37:9a:08:af:f1:11:2a:78:32:4d:10:bf:a2:8b:56:2b: 81:d7:d9:46:a7:ba:bc:7f:7a:0e:b3:e5:fc:bc:17:77:a3:96: a9:4b:03:fe:48:fb:77:85:e8:b1:56:5d:29:70:72:00:f4:12: 5a:d0:39:49:34:c8:ea:b8:6f:1b:a6:82:4b:ea:ff:0d:22:60: 07:86:7d:22:1b:6a:15:5d:25:bd:17:a3:a8:f0:57:74:94:62: ef:bd:3a:eb:17:92:15:85:be:f0:12:ea:dd:b6:f7:89:4c:f6: 8d:ea:36:80:fe:aa:36:4d:cd:06:af:71:c0:b0:15:fe:4b:9a: f1:96:65:d5:33:68:83:55:70:45:1b:ad:44:73:3e:69:86:57: e6:57:98:24:74:ee:13:41:6d:f5:6d:67:29:d8:3b:11:71:77: bb:7c:5a:ad:bf:bb:28:d1:06:f5:7d:53:e6:31:e9:26:7b:d6: 10:95:8b:26:39:8c:d0:ae:ca:28:20:28:29:09:6d:e2:c3:a6: 1c:15:f6:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMfKINojiQJr8jceHXaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTEzM2YwNjQyMjVhNjZlZmI0ZTBkMjc1NDM2ZDRjNzhmNTkzNWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt14vhJUu5B9lDrVUoo9SgxCJmDeW PgrAGLX+c84HFQ9QWJI55NtHt4p4w+V9iNdSGCmErPQGftfp6iI10vDWBfClpz66 4/7ju2IDO9xB2JWfh3zrf0EKYqhgkitiSpYf8w8vcXoomWrS9DcichLiWCaWHB0i vR2FrdyDcfBpA13l2TOhF+u5kgpObqrndvdrhARiG1PrS6LgyfcRseU0Jf3E0TiM nt0+MfmkJN3DJACQa5ruoWz9xGb4uZpPkN0QBRJclKLGNamn3QcZZ7o8owauKKcP Q/7md9NCu6hkEcSEqrUw66jLz1ZpAt6TLeAj6jiO6P7fauAVgPc7N8C3eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMETPwZCJaZu+04NJ1Q21MePWTWwMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvd1JNX0JrSWxwbTc3VGcwblZEYlV4NDlaTmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmHMA0G CSqGSIb3DQEBCwUAA4IBAQALfUGybfk9ZpWi/LmllzWDMcwmIqcu9zNZIQMpkwiD 7XKDQl0ommGel4m9xe1sQoBNgrfJ0KPwcTeaCK/xESp4Mk0Qv6KLViuB19lGp7q8 f3oOs+X8vBd3o5apSwP+SPt3heixVl0pcHIA9BJa0DlJNMjquG8bpoJL6v8NImAH hn0iG2oVXSW9F6Oo8Fd0lGLvvTrrF5IVhb7wEurdtveJTPaN6jaA/qo2Tc0Gr3HA sBX+S5rxlmXVM2iDVXBFG61Ecz5phlfmV5gkdO4TQW31bWcp2DsRcXe7fFqtv7so 0Qb1fVPmMekme9YQlYsmOYzQrsooICgpCW3iw6YcFfbN -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:38 2026 by rpki-client