This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRvf-gWZbG_SU88qkfKHWbBds1Y.roa File: wRvf-gWZbG_SU88qkfKHWbBds1Y.roa (raw, json) Hash identifier: Jrz7mmuyCcClLt5mOAar/pOMC4ZMQDSe/QSmM7qCV4E= Subject key identifier: C1:1B:DF:FA:05:99:6C:6F:D2:53:CF:2A:91:F2:87:59:B0:5D:B3:56 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B6F4E2C2D87A37D28A1D5F405EF5 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRvf-gWZbG_SU88qkfKHWbBds1Y.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213734 IP address blocks: 31.56.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b6:f4:e2:c2:d8:7a:37:d2:8a:1d:5f:40:5e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c11bdffa05996c6fd253cf2a91f28759b05db356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:de:37:5a:8d:67:9b:15:76:18:4c:71:16: 59:53:d4:0f:62:d5:ab:f3:bc:76:fb:e0:e2:d9:a3: 5c:35:87:a1:36:b8:26:d2:f4:cf:48:38:26:13:3a: 56:70:1f:b5:de:07:3f:61:d5:51:78:47:12:5c:03: be:eb:0f:7d:4a:c6:60:12:66:be:84:3c:16:3d:c6: 17:5b:9b:94:1e:59:05:01:96:de:53:5c:15:d6:65: df:eb:7b:15:d7:e4:b5:74:e5:5a:55:b9:b2:5b:12: 13:87:f4:ee:0a:a1:24:67:65:14:60:c2:f2:50:b1: 4e:de:b9:03:a6:5d:62:c1:98:9d:6c:bd:09:38:96: fe:1c:b0:32:61:43:a1:24:29:36:94:4a:10:07:70: b2:47:c9:81:83:6e:8f:9b:64:99:bd:6e:de:d7:09: 39:62:a8:71:30:3a:b9:4d:39:67:8c:be:c2:99:1a: 29:b7:4c:b2:a2:e0:81:bd:6c:7a:88:29:3c:05:34: f4:8c:91:fb:b6:38:cb:18:3c:29:94:90:d1:f2:ab: 29:f9:b2:cb:45:7f:0c:ea:db:cc:ad:b2:1a:cc:36: 38:fc:bb:14:3e:43:2a:02:eb:02:f5:48:99:a8:57: d0:b9:e0:a5:04:12:16:d0:e3:c3:e6:4d:fa:a0:74: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:DF:FA:05:99:6C:6F:D2:53:CF:2A:91:F2:87:59:B0:5D:B3:56 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wRvf-gWZbG_SU88qkfKHWbBds1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.105.0/24 Signature Algorithm: sha256WithRSAEncryption 13:88:74:09:ed:11:63:fe:47:7c:38:5e:ab:23:81:a1:47:0f: d9:9a:89:3e:b1:a7:10:d7:c4:38:55:52:d3:94:22:cd:4a:28: 81:f9:66:69:55:68:7d:5c:2d:33:f6:81:bc:a3:7e:bf:8e:d6: 31:bc:66:5f:98:06:fd:d3:f1:df:5f:0b:d2:1b:41:a8:eb:db: 82:b8:23:3a:e5:64:3d:8e:eb:9e:d8:ad:7a:f8:43:bc:1f:5b: 21:53:86:60:c3:6a:b9:9d:d0:3c:e1:97:50:2d:68:44:5d:53: 5b:d8:93:e9:c3:83:59:a0:a9:30:6e:ee:75:38:18:34:3b:cd: 19:f6:27:da:e5:cd:88:f7:3d:35:02:95:47:8a:52:0c:85:c9: be:0b:9c:87:f9:94:fc:2c:f5:ee:7e:03:b6:23:9e:6a:19:22: 12:a9:75:a0:ba:d6:19:74:1e:fe:6b:69:cb:ba:81:8a:df:36: 57:87:8d:5c:3e:a9:49:8a:08:ca:44:f2:a9:35:78:c9:62:97: fd:1c:a2:2d:3e:6c:a0:39:31:87:7c:42:b0:64:98:df:af:48: b6:c2:1e:11:62:da:62:74:8b:e5:06:02:87:09:42:1b:ef:a4: 5b:74:ba:78:9d:b4:c5:c2:cd:66:31:3c:38:5a:85:6d:ba:f3: c4:4c:6c:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLb04sLYejfSih1fQF71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTFiZGZmYTA1OTk2YzZmZDI1M2NmMmE5MWYyODc1OWIwNWRiMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QLeN1qNZ5sVdhhMcRZZU9QPYtWr 87x2++Di2aNcNYehNrgm0vTPSDgmEzpWcB+13gc/YdVReEcSXAO+6w99SsZgEma+ hDwWPcYXW5uUHlkFAZbeU1wV1mXf63sV1+S1dOVaVbmyWxITh/TuCqEkZ2UUYMLy ULFO3rkDpl1iwZidbL0JOJb+HLAyYUOhJCk2lEoQB3CyR8mBg26Pm2SZvW7e1wk5 YqhxMDq5TTlnjL7CmRopt0yyouCBvWx6iCk8BTT0jJH7tjjLGDwplJDR8qsp+bLL RX8M6tvMrbIazDY4/LsUPkMqAusC9UiZqFfQueClBBIW0OPD5k36oHS4uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEb3/oFmWxv0lPPKpHyh1mwXbNWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvd1J2Zi1nV1piR19TVTg4cWtmS0hXYkJkczFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhpMA0G CSqGSIb3DQEBCwUAA4IBAQATiHQJ7RFj/kd8OF6rI4GhRw/Zmok+sacQ18Q4VVLT lCLNSiiB+WZpVWh9XC0z9oG8o36/jtYxvGZfmAb90/HfXwvSG0Go69uCuCM65WQ9 juue2K16+EO8H1shU4Zgw2q5ndA84ZdQLWhEXVNb2JPpw4NZoKkwbu51OBg0O80Z 9ifa5c2I9z01ApVHilIMhcm+C5yH+ZT8LPXufgO2I55qGSISqXWgutYZdB7+a2nL uoGK3zZXh41cPqlJigjKRPKpNXjJYpf9HKItPmygOTGHfEKwZJjfr0i2wh4RYtpi dIvlBgKHCUIb76RbdLp4nbTFws1mMTw4WoVtuvPETGwN -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:34 2026 by rpki-client