This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xC9-7CaLkN5NaA37F_MSvDaSbUM.roa File: xC9-7CaLkN5NaA37F_MSvDaSbUM.roa (raw, json) Hash identifier: CaUxBWoDu/YpMVcMoXW+gBajoVom3oL1Ur/fFDdzaYg= Subject key identifier: C4:2F:7E:EC:26:8B:90:DE:4D:68:0D:FB:17:F3:12:BC:36:92:6D:43 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D569343E1884DD9C7A0ABB540611 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xC9-7CaLkN5NaA37F_MSvDaSbUM.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263702 IP address blocks: 31.57.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d5:69:34:3e:18:84:dd:9c:7a:0a:bb:54:06:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42f7eec268b90de4d680dfb17f312bc36926d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:20:c0:17:00:d6:26:be:8b:c2:0e:80:4b: 1e:08:02:71:f4:0b:b4:91:7c:5e:dc:1f:41:69:7a: c3:91:f4:e9:1c:53:9c:6e:58:5a:fe:7b:4a:11:50: 59:0a:92:47:a5:a5:10:ad:c8:80:57:9a:37:34:9b: 15:d4:f5:8d:c7:60:d6:f0:09:42:d0:3b:22:82:06: 7c:e4:43:bc:6f:ea:1c:11:db:0b:30:21:ae:5a:89: e6:fc:f5:eb:ad:66:70:09:21:55:74:03:49:b7:8e: 78:7b:d9:2b:2a:0d:f3:4c:42:14:d7:97:23:b4:8b: 29:11:92:39:7a:6a:c0:10:c4:74:51:32:86:27:f5: 29:14:48:78:35:9b:81:38:12:4f:8f:0b:38:35:56: 45:f6:ff:f7:82:c1:f0:b4:a8:07:41:8d:17:df:14: 57:d2:d1:fd:63:0e:c5:0a:17:b3:75:6d:6a:d5:57: 60:dc:86:68:1a:54:8a:13:05:f0:d3:21:b9:94:e2: 0e:64:8d:c7:01:0b:27:98:52:22:78:e2:72:50:56: d8:83:4f:57:df:03:e0:78:73:3d:af:2b:c4:f8:7f: 84:6c:9a:3b:77:b4:8e:83:04:4c:5b:0a:cb:5c:2c: 3c:6d:d7:17:f5:88:15:c0:f6:72:6d:8a:6a:0c:89: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2F:7E:EC:26:8B:90:DE:4D:68:0D:FB:17:F3:12:BC:36:92:6D:43 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xC9-7CaLkN5NaA37F_MSvDaSbUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.145.0/24 Signature Algorithm: sha256WithRSAEncryption 50:7e:a4:4b:1a:5e:f7:4d:35:28:09:fd:f4:29:7d:df:88:5a: b3:58:f7:db:c8:5d:67:82:a6:05:f4:28:21:64:cc:59:c7:0d: d7:bc:d0:05:01:e8:29:4e:cc:d6:9a:99:25:30:5d:56:16:8e: fd:7b:fa:fe:d2:7c:16:09:40:60:e9:51:3f:58:b5:bc:a1:ea: 85:f2:45:c2:df:8f:f7:4a:90:75:74:a5:09:cb:a3:92:7c:ec: bc:44:57:02:70:8f:d1:6e:23:0b:b7:3c:b4:c5:ec:cb:fb:82: 40:3c:cb:97:c8:e3:8e:02:d0:98:ed:1c:a5:a3:33:63:e0:f9: 6e:77:33:4b:2d:d6:17:ac:3d:8f:70:2f:63:8c:f8:02:ee:14: d6:1b:e7:a0:d1:22:1c:62:f4:8a:d9:b5:b3:9d:9f:35:c1:a4: 1f:92:88:2d:7c:ee:d2:b8:22:7d:e9:96:0e:7c:3d:be:02:95: 07:42:66:93:2a:ae:ac:58:fa:46:9b:1b:64:fd:2e:9c:09:f8: 51:75:b5:20:ee:21:cf:96:77:d4:25:34:e6:02:08:c8:2e:7a: db:f8:c3:77:b9:7a:9f:d5:cf:17:21:26:5e:79:c0:53:c2:4b: ab:75:fb:ac:98:0b:18:97:da:35:0e:7b:e2:97:c9:ef:9a:68: c2:fa:77:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNVpND4YhN2cegq7VAYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDJmN2VlYzI2OGI5MGRlNGQ2ODBkZmIxN2YzMTJiYzM2OTI2ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WYgwBcA1ia+i8IOgEseCAJx9Au0 kXxe3B9BaXrDkfTpHFOcblha/ntKEVBZCpJHpaUQrciAV5o3NJsV1PWNx2DW8AlC 0DsiggZ85EO8b+ocEdsLMCGuWonm/PXrrWZwCSFVdANJt454e9krKg3zTEIU15cj tIspEZI5emrAEMR0UTKGJ/UpFEh4NZuBOBJPjws4NVZF9v/3gsHwtKgHQY0X3xRX 0tH9Yw7FChezdW1q1Vdg3IZoGlSKEwXw0yG5lOIOZI3HAQsnmFIieOJyUFbYg09X 3wPgeHM9ryvE+H+EbJo7d7SOgwRMWwrLXCw8bdcX9YgVwPZybYpqDIkd2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQvfuwmi5DeTWgN+xfzErw2km1DMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveEM5LTdDYUxrTjVOYUEzN0ZfTVN2RGFTYlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmRMA0G CSqGSIb3DQEBCwUAA4IBAQBQfqRLGl73TTUoCf30KX3fiFqzWPfbyF1ngqYF9Cgh ZMxZxw3XvNAFAegpTszWmpklMF1WFo79e/r+0nwWCUBg6VE/WLW8oeqF8kXC34/3 SpB1dKUJy6OSfOy8RFcCcI/RbiMLtzy0xezL+4JAPMuXyOOOAtCY7RylozNj4Plu dzNLLdYXrD2PcC9jjPgC7hTWG+eg0SIcYvSK2bWznZ81waQfkogtfO7SuCJ96ZYO fD2+ApUHQmaTKq6sWPpGmxtk/S6cCfhRdbUg7iHPlnfUJTTmAgjILnrb+MN3uXqf 1c8XISZeecBTwkurdfusmAsYl9o1Dnvil8nvmmjC+nef -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:43 2026 by rpki-client