This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xE88LalwLttns0okpbZkkC8bXVo.roa File: xE88LalwLttns0okpbZkkC8bXVo.roa (raw, json) Hash identifier: 1wZJl396AM5G/QaQ8Kb+4Uu78cqxN8qa9AMat1amcVQ= Subject key identifier: C4:4F:3C:2D:A9:70:2E:DB:67:B3:4A:24:A5:B6:64:90:2F:1B:5D:5A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B41029899768951545DC1547FFFF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xE88LalwLttns0okpbZkkC8bXVo.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213570 IP address blocks: 31.58.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b4:10:29:89:97:68:95:15:45:dc:15:47:ff:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c44f3c2da9702edb67b34a24a5b664902f1b5d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:ca:4a:c1:4b:78:d9:3f:4e:6b:d6:f8:8a: a0:05:cb:db:08:64:d2:18:6b:9c:32:d9:42:44:5a: 3a:36:fb:ad:08:4d:49:86:f3:f5:44:d1:05:02:ee: b5:a1:9b:f8:89:86:c6:b9:19:65:d4:1f:69:ab:fb: 70:a4:6a:6f:5a:a2:0e:69:30:a1:46:9e:ed:85:3a: e9:4f:60:cc:4a:43:ff:86:d7:e8:c0:14:58:4d:9a: 8c:f1:82:14:98:ad:74:11:bc:11:2f:d9:74:8a:16: 55:f3:1e:5e:1a:03:2e:79:dc:57:ae:90:c6:d5:f5: b6:20:16:8c:15:40:32:41:5e:99:c4:a4:9f:58:15: 98:35:67:75:f5:31:3d:80:21:7e:44:38:42:16:9c: c6:e8:24:c4:d5:df:d1:e6:da:5f:37:0b:21:ea:0d: f7:0e:6d:44:b6:72:7c:73:c7:da:ba:21:06:70:70: 27:91:57:5c:bd:20:51:d6:6b:fa:26:04:88:01:25: 82:cc:5a:16:90:66:6a:fe:72:77:94:d1:92:b2:93: c0:91:44:a0:ec:62:a6:3a:55:20:53:80:6a:6b:c7: e0:e6:32:ed:32:ce:d0:69:e1:bf:e2:6a:f5:ca:e3: f6:ad:0d:c9:31:ea:46:9d:3c:12:24:01:ba:9f:8f: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4F:3C:2D:A9:70:2E:DB:67:B3:4A:24:A5:B6:64:90:2F:1B:5D:5A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xE88LalwLttns0okpbZkkC8bXVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.236.0/24 Signature Algorithm: sha256WithRSAEncryption c0:d0:58:07:c8:44:a1:39:83:07:1f:6c:02:80:20:04:ba:fd: b6:08:a5:b7:39:2f:cf:76:8e:d7:59:c2:77:54:52:72:4b:e1: 43:e5:8e:4a:b5:53:ab:5d:3d:36:13:cc:90:d2:51:1c:b4:1e: 06:d8:a8:f9:f1:ae:7e:70:1f:aa:86:78:06:b4:51:ee:21:bf: c8:b2:6e:c9:d5:a2:f6:5e:b0:0e:61:b2:5e:b2:ea:65:e5:b2: ca:e4:0a:13:d0:17:9c:74:ed:1e:26:5f:12:c6:a6:df:81:97: fb:b2:be:49:57:29:4f:89:68:b9:74:58:f2:14:bf:66:90:0d: b7:34:63:56:82:88:63:8e:fb:8e:17:be:1a:4a:d7:02:ec:3c: 4b:22:87:6c:f9:ee:b2:b8:09:37:4d:79:e7:12:64:8b:75:4e: d6:59:9a:f9:e2:d4:5d:15:d3:f2:2a:3b:ce:71:c5:61:5a:b4: a1:e5:4b:e3:19:9f:0b:ef:6e:9a:60:13:6e:90:f7:e8:6e:23: 56:d5:d7:54:97:0c:5f:20:6b:d2:a3:45:24:86:d0:be:24:bf: 0e:d6:3d:75:15:14:1d:b8:78:9d:14:d7:0b:b6:94:f9:6a:01: 0b:7e:0d:15:28:b9:8c:46:66:29:5e:ba:ff:b0:74:3f:64:91: 86:1e:83:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLQQKYmXaJUVRdwVR///MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDRmM2MyZGE5NzAyZWRiNjdiMzRhMjRhNWI2NjQ5MDJmMWI1ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz63KSsFLeNk/TmvW+IqgBcvbCGTS GGucMtlCRFo6NvutCE1JhvP1RNEFAu61oZv4iYbGuRll1B9pq/twpGpvWqIOaTCh Rp7thTrpT2DMSkP/htfowBRYTZqM8YIUmK10EbwRL9l0ihZV8x5eGgMuedxXrpDG 1fW2IBaMFUAyQV6ZxKSfWBWYNWd19TE9gCF+RDhCFpzG6CTE1d/R5tpfNwsh6g33 Dm1EtnJ8c8fauiEGcHAnkVdcvSBR1mv6JgSIASWCzFoWkGZq/nJ3lNGSspPAkUSg 7GKmOlUgU4Bqa8fg5jLtMs7QaeG/4mr1yuP2rQ3JMepGnTwSJAG6n495OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRPPC2pcC7bZ7NKJKW2ZJAvG11aMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveEU4OExhbHdMdHRuczBva3BiWmtrQzhiWFZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrsMA0G CSqGSIb3DQEBCwUAA4IBAQDA0FgHyEShOYMHH2wCgCAEuv22CKW3OS/Pdo7XWcJ3 VFJyS+FD5Y5KtVOrXT02E8yQ0lEctB4G2Kj58a5+cB+qhngGtFHuIb/Ism7J1aL2 XrAOYbJesupl5bLK5AoT0BecdO0eJl8SxqbfgZf7sr5JVylPiWi5dFjyFL9mkA23 NGNWgohjjvuOF74aStcC7DxLIods+e6yuAk3TXnnEmSLdU7WWZr54tRdFdPyKjvO ccVhWrSh5UvjGZ8L726aYBNukPfobiNW1ddUlwxfIGvSo0UkhtC+JL8O1j11FRQd uHidFNcLtpT5agELfg0VKLmMRmYpXrr/sHQ/ZJGGHoMT -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:22 2026 by rpki-client