This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yHGej8_2TXORgVe1WeRy9LgjHxk.roa File: yHGej8_2TXORgVe1WeRy9LgjHxk.roa (raw, json) Hash identifier: ZLVbegmKBsDZjuAepLxbPnIKoI0Oo4DRzMUxKh98jO8= Subject key identifier: C8:71:9E:8F:CF:F6:4D:73:91:81:57:B5:59:E4:72:F4:B8:23:1F:19 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A275E9FF0EB779247DC1798F5E3D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yHGej8_2TXORgVe1WeRy9LgjHxk.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209336 IP address blocks: 31.58.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a2:75:e9:ff:0e:b7:79:24:7d:c1:79:8f:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8719e8fcff64d73918157b559e472f4b8231f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:3a:ea:2c:b8:a7:7a:c3:31:a5:57:b1:b5: 46:10:19:1a:32:ec:e2:50:78:41:bc:71:3a:3d:1b: f7:ee:70:71:9e:2b:77:f6:26:e6:2d:57:31:54:bd: 13:98:3b:d7:b1:f7:24:45:b6:6d:eb:60:38:10:3b: 50:67:2e:a7:c3:41:a4:8f:43:13:c9:14:1c:4b:58: 2e:f2:e7:38:08:c2:d6:b3:27:46:55:73:20:06:bb: 89:5f:18:cb:0e:3c:f8:04:a7:b3:00:ac:b8:2c:3f: 78:30:1b:81:d7:4d:d7:b8:a8:df:ba:00:a6:1c:e8: db:79:8e:1c:2b:3c:b4:42:50:39:ff:d4:a3:31:b2: da:67:98:d2:d4:aa:35:bf:fb:67:5e:cf:0d:4f:f5: c8:26:c6:d2:79:84:96:bc:0f:6a:23:26:4c:b7:b5: 00:e9:79:96:2d:82:29:91:5b:5d:39:c6:1a:9e:2c: 04:09:ea:22:f5:ba:ce:0d:be:af:48:63:45:40:8d: 49:74:b3:e9:bd:81:09:fa:7f:b2:77:44:4a:3e:a1: 9a:c2:05:86:6d:3a:a9:69:ef:ee:09:3d:26:d6:f1: c3:b7:6c:94:cf:6a:a2:f4:f2:e0:2c:94:0d:e5:d9: 68:29:e6:78:18:d6:c8:41:df:f3:78:ab:2a:fd:b4: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:71:9E:8F:CF:F6:4D:73:91:81:57:B5:59:E4:72:F4:B8:23:1F:19 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yHGej8_2TXORgVe1WeRy9LgjHxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.225.0/24 Signature Algorithm: sha256WithRSAEncryption 59:8a:f9:a1:f9:a1:66:82:5b:c8:c5:04:1c:4b:f4:20:8d:c3: 6c:44:eb:77:b3:80:dd:02:b6:a2:cf:f1:0b:99:95:02:e8:fa: f0:2f:0b:cf:85:c5:cf:ae:9d:e2:00:bb:5a:ac:e7:65:09:c6: e9:ea:dc:09:cb:20:30:67:7d:b9:12:6e:c8:00:c8:52:af:d1: d2:1e:27:d0:92:9a:5d:58:02:92:ee:5e:5c:9d:75:58:a9:91: 49:4b:c8:ae:0c:bf:6c:aa:8d:30:92:54:f7:fd:0d:5b:d9:3f: fb:66:e6:a8:8d:4d:10:37:82:5a:4f:54:dc:ee:4f:73:13:6e: 01:43:12:af:80:24:fe:0b:aa:92:db:e0:fd:1c:14:9d:13:a4: 6b:68:97:e3:df:7d:d4:e3:ad:3a:ee:62:92:6a:e8:da:84:17: 20:06:f6:03:33:a4:95:c1:95:11:2c:51:3f:75:e8:2e:67:f1: 9e:7f:84:3f:f6:3b:4d:54:9a:7e:f8:43:c2:3d:04:00:bb:b1: d1:43:c8:37:2d:e9:67:04:d5:32:84:7f:c4:da:54:67:0c:65: fe:cd:65:66:2b:4c:b6:43:09:4c:ed:2a:6b:5f:b0:12:92:96: 43:e7:09:b8:94:e4:8c:f2:f3:d6:13:d1:d0:68:d4:0d:9a:48: 37:da:24:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKJ16f8Ot3kkfcF5j149MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODcxOWU4ZmNmZjY0ZDczOTE4MTU3YjU1OWU0NzJmNGI4MjMxZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL066iy4p3rDMaVXsbVGEBkaMuzi UHhBvHE6PRv37nBxnit39ibmLVcxVL0TmDvXsfckRbZt62A4EDtQZy6nw0Gkj0MT yRQcS1gu8uc4CMLWsydGVXMgBruJXxjLDjz4BKezAKy4LD94MBuB103XuKjfugCm HOjbeY4cKzy0QlA5/9SjMbLaZ5jS1Ko1v/tnXs8NT/XIJsbSeYSWvA9qIyZMt7UA 6XmWLYIpkVtdOcYaniwECeoi9brODb6vSGNFQI1JdLPpvYEJ+n+yd0RKPqGawgWG bTqpae/uCT0m1vHDt2yUz2qi9PLgLJQN5dloKeZ4GNbIQd/zeKsq/bS+gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMhxno/P9k1zkYFXtVnkcvS4Ix8ZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveUhHZWo4XzJUWE9SZ1ZlMVdlUnk5TGdqSHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrhMA0G CSqGSIb3DQEBCwUAA4IBAQBZivmh+aFmglvIxQQcS/QgjcNsROt3s4DdAraiz/EL mZUC6PrwLwvPhcXPrp3iALtarOdlCcbp6twJyyAwZ325Em7IAMhSr9HSHifQkppd WAKS7l5cnXVYqZFJS8iuDL9sqo0wklT3/Q1b2T/7ZuaojU0QN4JaT1Tc7k9zE24B QxKvgCT+C6qS2+D9HBSdE6RraJfj333U46067mKSaujahBcgBvYDM6SVwZURLFE/ deguZ/Gef4Q/9jtNVJp++EPCPQQAu7HRQ8g3LelnBNUyhH/E2lRnDGX+zWVmK0y2 QwlM7SprX7ASkpZD5wm4lOSM8vPWE9HQaNQNmkg32iTH -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:51 2026 by rpki-client