This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xJNXEb6ntObshNqCEn0RgyZbkcU.roa File: xJNXEb6ntObshNqCEn0RgyZbkcU.roa (raw, json) Hash identifier: KgPpKTsfDCdSf93jjchjUxkzep+UassmcCSB7HeA0D4= Subject key identifier: C4:93:57:11:BE:A7:B4:E6:EC:84:DA:82:12:7D:11:83:26:5B:91:C5 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B3C8384BE289C590CB16EAA60E5A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xJNXEb6ntObshNqCEn0RgyZbkcU.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213563 IP address blocks: 31.57.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b3:c8:38:4b:e2:89:c5:90:cb:16:ea:a6:0e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4935711bea7b4e6ec84da82127d1183265b91c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:7b:15:d4:2e:69:44:d7:cb:f3:a0:ec:63: 12:a3:f2:ba:c4:a4:cb:68:51:8c:62:41:81:05:2c: b1:5b:d9:fb:b6:ca:1a:68:b7:bc:99:59:de:3f:a2: f6:7e:e7:22:30:c8:13:4d:3a:f5:dc:92:3f:d6:fc: 05:1d:20:b0:96:4c:d9:ce:6c:b0:22:21:83:8e:55: 80:06:90:f3:2e:4f:2e:79:44:38:09:db:4b:17:c4: 39:04:b2:59:52:9a:73:16:63:8f:92:73:b4:9a:05: 1a:78:52:13:c5:ad:3b:1a:93:63:73:27:71:29:49: 23:e4:70:da:30:fd:30:59:99:98:ee:c2:46:44:f7: 45:5b:16:93:74:f3:a0:d4:27:40:91:d8:55:20:70: bf:fd:11:64:4e:1a:47:9f:0c:4d:1b:5a:e1:91:d3: 67:73:59:3f:60:eb:80:80:49:ae:93:6a:78:ce:ac: 4a:f1:23:8d:8b:00:15:fb:60:30:99:a0:d5:f3:ca: 67:1f:4d:2f:ea:43:d1:d9:71:0e:d3:17:03:a6:44: 3d:9c:cc:c3:52:92:0b:7c:8f:5a:6a:fc:8c:92:ba: e3:5c:1d:99:ec:b9:85:8e:d5:7b:50:25:f6:c6:1e: 9d:fb:ce:77:c8:14:e7:6b:ad:75:0a:05:6e:c1:33: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:93:57:11:BE:A7:B4:E6:EC:84:DA:82:12:7D:11:83:26:5B:91:C5 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xJNXEb6ntObshNqCEn0RgyZbkcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.60.0/24 Signature Algorithm: sha256WithRSAEncryption 27:26:b6:94:05:8f:9e:9f:4a:cf:95:90:17:00:eb:a5:fb:fd: e5:e2:9f:13:25:05:7a:cd:43:63:0b:7c:ef:17:a7:cf:35:76: 5c:a8:c1:9b:5d:50:40:56:d6:02:c3:f2:c0:82:3a:5a:47:49: 5f:ff:07:4a:8f:7f:c5:8c:ba:d5:8d:90:5b:7c:e5:ac:74:50: 96:6a:37:1f:a6:34:95:72:fa:75:1d:84:89:d0:e0:0e:b2:2e: 7f:a8:66:51:b9:ca:12:da:79:96:45:1b:8e:22:9c:10:08:83: 5b:1f:f2:1f:fa:ca:cc:c1:2c:23:1b:91:ba:e0:6b:cd:c2:38: 2e:a5:3c:d8:3d:9b:a1:3b:ca:e9:f1:98:29:b5:5c:97:47:02: f3:fa:6f:84:6c:17:88:83:37:76:87:c6:4a:00:c5:07:ab:8b: f9:34:63:eb:89:8b:09:5b:00:6b:c8:81:4f:8f:89:11:b6:e2: 4f:c0:5d:94:8f:34:21:08:9e:b4:2d:1d:0d:a6:14:e8:eb:00: 16:a1:8e:5e:95:f6:9d:11:91:ec:d5:ac:cb:ac:95:89:93:00: d6:47:cd:e9:c1:f8:9c:df:77:ca:82:f9:d0:76:38:6c:99:90: da:d7:8d:ac:1e:7a:ab:fd:e0:6e:e1:9c:d5:7e:7a:7b:42:1f: 0e:e1:83:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLPIOEviicWQyxbqpg5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDkzNTcxMWJlYTdiNGU2ZWM4NGRhODIxMjdkMTE4MzI2NWI5MWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJR7FdQuaUTXy/Og7GMSo/K6xKTL aFGMYkGBBSyxW9n7tsoaaLe8mVneP6L2fuciMMgTTTr13JI/1vwFHSCwlkzZzmyw IiGDjlWABpDzLk8ueUQ4CdtLF8Q5BLJZUppzFmOPknO0mgUaeFITxa07GpNjcydx KUkj5HDaMP0wWZmY7sJGRPdFWxaTdPOg1CdAkdhVIHC//RFkThpHnwxNG1rhkdNn c1k/YOuAgEmuk2p4zqxK8SONiwAV+2AwmaDV88pnH00v6kPR2XEO0xcDpkQ9nMzD UpILfI9aavyMkrrjXB2Z7LmFjtV7UCX2xh6d+853yBTna611CgVuwTM0uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSTVxG+p7Tm7ITaghJ9EYMmW5HFMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveEpOWEViNm50T2JzaE5xQ0VuMFJneVpia2NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzk8MA0G CSqGSIb3DQEBCwUAA4IBAQAnJraUBY+en0rPlZAXAOul+/3l4p8TJQV6zUNjC3zv F6fPNXZcqMGbXVBAVtYCw/LAgjpaR0lf/wdKj3/FjLrVjZBbfOWsdFCWajcfpjSV cvp1HYSJ0OAOsi5/qGZRucoS2nmWRRuOIpwQCINbH/If+srMwSwjG5G64GvNwjgu pTzYPZuhO8rp8ZgptVyXRwLz+m+EbBeIgzd2h8ZKAMUHq4v5NGPriYsJWwBryIFP j4kRtuJPwF2UjzQhCJ60LR0NphTo6wAWoY5elfadEZHs1azLrJWJkwDWR83pwfic 33fKgvnQdjhsmZDa142sHnqr/eBu4ZzVfnp7Qh8O4YN/ -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:07 2026 by rpki-client