This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y5jDQ9E3jBykHiFPVhUTmSkn6fI.roa File: y5jDQ9E3jBykHiFPVhUTmSkn6fI.roa (raw, json) Hash identifier: J11kM7MZ8D36lc/4Z/1AMuShdLHmJ/g5oYQdpxnuifc= Subject key identifier: CB:98:C3:43:D1:37:8C:1C:A4:1E:21:4F:56:15:13:99:29:27:E9:F2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D7E32FEC025EEB4FBDEC6E8F3200 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y5jDQ9E3jBykHiFPVhUTmSkn6fI.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 269986 IP address blocks: 31.58.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d7:e3:2f:ec:02:5e:eb:4f:bd:ec:6e:8f:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb98c343d1378c1ca41e214f561513992927e9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:e2:f2:7e:f1:1d:90:f6:2c:af:54:6b:15: 92:21:df:55:d5:34:75:7f:4c:dd:7a:d1:ba:63:b0: d4:a3:f1:c1:42:ba:2a:9e:6b:3e:15:c8:7c:3b:d3: 0d:b4:fd:ff:84:05:0f:c2:7b:6f:0f:68:db:03:1c: 7f:12:2c:76:5a:f3:68:14:61:ab:85:bb:0a:fc:4d: 41:a1:cb:fc:f9:8d:d8:27:bf:94:0c:72:72:5b:e5: 51:7d:8c:c7:32:c5:8e:e0:d7:c0:ba:3b:0c:96:01: 70:0e:d5:de:44:fe:3d:bb:c0:ee:22:a3:fd:6a:41: 56:1c:c9:48:b4:80:ef:04:37:d1:3b:e9:14:6b:bd: 3e:e1:0d:d8:40:39:87:11:01:d2:f1:6c:1d:70:34: 8f:5b:a8:0c:8c:4c:26:e8:1b:56:04:05:44:b2:15: 19:3f:e8:8f:ca:b6:20:64:cd:07:41:c5:61:bf:d6: 25:50:4e:19:e7:57:25:55:e6:b7:75:66:bb:e0:80: e5:97:75:d7:73:a8:4e:50:e5:0a:a0:bd:f0:99:f7: 19:ec:65:9e:f6:ca:ff:df:59:44:e9:8d:a0:23:67: f2:a4:69:d6:b1:15:41:01:26:be:29:df:00:84:19: fd:2d:15:6b:b6:5f:43:0b:a9:e7:76:61:2e:be:40: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:C3:43:D1:37:8C:1C:A4:1E:21:4F:56:15:13:99:29:27:E9:F2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y5jDQ9E3jBykHiFPVhUTmSkn6fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.89.0/24 Signature Algorithm: sha256WithRSAEncryption 54:61:35:14:f4:bf:6a:e3:66:27:1e:b8:21:3d:96:79:38:e7: 42:fd:ed:d5:03:01:4f:7c:3a:ff:56:99:75:fd:94:ca:36:09: 87:1d:7c:22:dc:c0:90:59:cf:52:e2:53:4c:7e:76:10:98:8d: 96:34:42:9e:59:f7:07:05:6c:18:ed:f8:ea:08:d8:94:cb:20: f4:db:6c:62:5b:df:b0:c3:e0:1b:92:42:4d:39:0c:c1:c8:a2: 38:89:1a:2e:6c:e7:b6:1a:bb:c7:68:6c:65:c2:cf:16:ff:b8: 15:01:f1:10:21:4f:5b:da:e1:c3:a1:c0:a8:05:3d:15:e6:53: bb:bb:d8:9b:da:25:06:00:b0:4f:8d:0b:c3:bc:f3:6c:39:51: 67:52:d3:59:18:95:75:1c:4f:f6:90:82:b1:ef:f9:31:6a:f2: d0:d4:96:58:85:a0:c2:a4:05:98:d1:f2:32:01:91:b2:84:f5: ab:86:8d:fb:98:8e:24:76:80:8d:d4:29:99:d4:65:58:6c:ef: 92:c4:a3:d9:a3:01:4a:cd:33:08:80:b2:62:78:6e:e9:03:94: ff:9c:7d:e5:ff:43:ad:e7:c2:94:05:d5:17:b6:31:67:5b:7b: 42:4b:84:7c:17:50:ce:2e:e0:e7:b2:f4:e7:5c:4f:48:eb:40: 90:53:d1:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNfjL+wCXutPvexujzIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjk4YzM0M2QxMzc4YzFjYTQxZTIxNGY1NjE1MTM5OTI5MjdlOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0fi8n7xHZD2LK9UaxWSId9V1TR1 f0zdetG6Y7DUo/HBQroqnms+Fch8O9MNtP3/hAUPwntvD2jbAxx/Eix2WvNoFGGr hbsK/E1Bocv8+Y3YJ7+UDHJyW+VRfYzHMsWO4NfAujsMlgFwDtXeRP49u8DuIqP9 akFWHMlItIDvBDfRO+kUa70+4Q3YQDmHEQHS8WwdcDSPW6gMjEwm6BtWBAVEshUZ P+iPyrYgZM0HQcVhv9YlUE4Z51clVea3dWa74IDll3XXc6hOUOUKoL3wmfcZ7GWe 9sr/31lE6Y2gI2fypGnWsRVBASa+Kd8AhBn9LRVrtl9DC6nndmEuvkBQWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMuYw0PRN4wcpB4hT1YVE5kpJ+nyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveTVqRFE5RTNqQnlrSGlGUFZoVVRtU2tuNmZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpZMA0G CSqGSIb3DQEBCwUAA4IBAQBUYTUU9L9q42YnHrghPZZ5OOdC/e3VAwFPfDr/Vpl1 /ZTKNgmHHXwi3MCQWc9S4lNMfnYQmI2WNEKeWfcHBWwY7fjqCNiUyyD022xiW9+w w+AbkkJNOQzByKI4iRoubOe2GrvHaGxlws8W/7gVAfEQIU9b2uHDocCoBT0V5lO7 u9ib2iUGALBPjQvDvPNsOVFnUtNZGJV1HE/2kIKx7/kxavLQ1JZYhaDCpAWY0fIy AZGyhPWrho37mI4kdoCN1CmZ1GVYbO+SxKPZowFKzTMIgLJieG7pA5T/nH3l/0Ot 58KUBdUXtjFnW3tCS4R8F1DOLuDnsvTnXE9I60CQU9Fw -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:45 2026 by rpki-client