This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wZlLtRED4aoAMXO6wJZsePVE0kg.roa File: wZlLtRED4aoAMXO6wJZsePVE0kg.roa (raw, json) Hash identifier: WbWFbAo/iEJcACzGg30txYrI3VgZ3UyK3ARUnQiggsI= Subject key identifier: C1:99:4B:B5:11:03:E1:AA:00:31:73:BA:C0:96:6C:78:F5:44:D2:48 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8456FB996D5BFB05933949E376CFC9 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wZlLtRED4aoAMXO6wJZsePVE0kg.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 31.56.22.0/24 maxlen: 24 31.56.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:56:fb:99:6d:5b:fb:05:93:39:49:e3:76:cf:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1994bb51103e1aa003173bac0966c78f544d248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:05:38:50:3b:be:32:f4:93:b8:9c:2f:b2:18: 4b:5d:b8:0a:f7:fd:31:6b:67:de:27:6e:fb:d2:1f: 81:07:a7:46:9d:b4:1b:e9:07:b6:ad:1f:2e:5c:c3: 6f:25:bc:01:66:98:1b:b9:52:99:ad:b5:21:66:52: 63:d3:43:32:20:b0:15:a1:aa:bd:e4:31:aa:f0:9a: b6:c5:da:c8:08:db:0f:ca:1b:64:97:94:50:38:26: 1f:21:c3:5c:43:f4:c5:a6:3f:99:72:ca:13:7d:64: 50:c4:a9:d2:45:6c:2b:d9:7e:b6:c9:25:f9:d4:76: 26:bb:a5:a3:e1:ec:9d:ca:68:b5:a8:23:1c:fc:be: 77:a2:78:c7:e3:27:de:cf:74:31:d5:76:f7:56:92: da:15:6a:14:23:fd:fb:45:0a:62:02:dc:ca:2b:0f: 3c:f3:53:db:42:eb:e5:14:2e:4d:88:58:b3:96:b7: cc:a2:ef:52:a8:48:cd:2b:65:63:47:06:77:7f:80: af:d2:68:ae:b9:b3:34:c5:6b:35:4a:cf:87:f7:44: 09:be:28:b0:9f:eb:57:30:0f:c1:25:db:c8:18:57: f3:a8:c7:48:a9:91:2c:6b:ca:73:54:c0:46:4f:9f: 80:b6:77:a3:ca:99:7d:02:72:f1:7e:b2:85:0c:52: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:99:4B:B5:11:03:E1:AA:00:31:73:BA:C0:96:6C:78:F5:44:D2:48 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wZlLtRED4aoAMXO6wJZsePVE0kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.22.0/24 31.56.203.0/24 Signature Algorithm: sha256WithRSAEncryption 13:c9:73:8a:ec:49:45:dc:5b:ec:6b:96:8f:21:f5:fb:dc:10: aa:d2:c9:47:cd:c0:69:af:d3:66:13:fb:23:8a:02:39:78:17: 9e:35:02:08:42:b3:8d:09:38:5b:fa:93:bf:63:4c:ab:b3:65: 06:25:71:95:36:dc:7f:88:59:da:f8:6c:8b:12:11:2a:fc:c1: e3:2a:42:ba:de:e9:c2:08:c0:c9:c7:d1:3f:3c:9a:62:b9:9c: e7:a7:43:74:9c:1e:15:bc:a1:b7:a0:7e:07:23:05:dc:d4:0b: 24:74:90:80:a0:9c:c8:8a:1c:b5:3d:1a:d3:3b:ba:19:b1:5d: 55:19:a1:bf:d8:ad:29:94:02:6a:17:ae:37:21:dd:07:03:34: 3b:ae:e9:14:e7:2e:a1:09:59:aa:2d:a0:c8:e7:23:32:1b:c4: fd:ba:f4:c4:38:44:9f:ac:d6:a5:fe:32:26:d0:25:c1:8e:d0: 7b:df:f4:a9:30:87:67:29:b9:53:c6:02:f9:fb:7f:87:64:3f: 70:3a:26:51:0e:a6:fb:84:f1:8f:84:ba:a3:c0:bc:aa:31:af: 5a:07:b0:fa:f6:a9:01:84:5e:6f:95:03:d4:63:01:0b:fa:9f: b2:ab:b2:7a:6c:fe:07:03:f8:c2:ab:5a:35:58:d6:84:96:54: 25:ce:ae:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hFb7mW1b+wWTOUnjds/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTk5NGJiNTExMDNlMWFhMDAzMTczYmFjMDk2NmM3OGY1NDRkMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQU4UDu+MvSTuJwvshhLXbgK9/0x a2feJ2770h+BB6dGnbQb6Qe2rR8uXMNvJbwBZpgbuVKZrbUhZlJj00MyILAVoaq9 5DGq8Jq2xdrICNsPyhtkl5RQOCYfIcNcQ/TFpj+ZcsoTfWRQxKnSRWwr2X62ySX5 1HYmu6Wj4eydymi1qCMc/L53onjH4yfez3Qx1Xb3VpLaFWoUI/37RQpiAtzKKw88 81PbQuvlFC5NiFizlrfMou9SqEjNK2VjRwZ3f4Cv0miuubM0xWs1Ss+H90QJviiw n+tXMA/BJdvIGFfzqMdIqZEsa8pzVMBGT5+Atnejypl9AnLxfrKFDFKyAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMGZS7URA+GqADFzusCWbHj1RNJIMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvd1psTHRSRUQ0YW9BTVhPNndKWnNlUFZFMGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgWAwQA HzjLMA0GCSqGSIb3DQEBCwUAA4IBAQATyXOK7ElF3Fvsa5aPIfX73BCq0slHzcBp r9NmE/sjigI5eBeeNQIIQrONCThb+pO/Y0yrs2UGJXGVNtx/iFna+GyLEhEq/MHj KkK63unCCMDJx9E/PJpiuZznp0N0nB4VvKG3oH4HIwXc1AskdJCAoJzIihy1PRrT O7oZsV1VGaG/2K0plAJqF643Id0HAzQ7rukU5y6hCVmqLaDI5yMyG8T9uvTEOESf rNal/jIm0CXBjtB73/SpMIdnKblTxgL5+3+HZD9wOiZRDqb7hPGPhLqjwLyqMa9a B7D69qkBhF5vlQPUYwEL+p+yq7J6bP4HA/jCq1o1WNaEllQlzq4C -----END CERTIFICATE-----Generated at Mon Jan 5 14:39:16 2026 by rpki-client