This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zBJscq_SCBhifqRBX7s8P_eQBcI.roa File: zBJscq_SCBhifqRBX7s8P_eQBcI.roa (raw, json) Hash identifier: RarnJwFhcggyIaBxMVjVjWp8fX8xVQVyxVwzLH5JLXA= Subject key identifier: CC:12:6C:72:AF:D2:08:18:62:7E:A4:41:5F:BB:3C:3F:F7:90:05:C2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F848C3D7DB3525ADAFC81482C68DBC1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zBJscq_SCBhifqRBX7s8P_eQBcI.roa Signing time: Fri 02 Jan 2026 16:22:31 +0000 ROA not before: Fri 02 Jan 2026 16:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154410 IP address blocks: 31.56.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8c:3d:7d:b3:52:5a:da:fc:81:48:2c:68:db:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc126c72afd20818627ea4415fbb3c3ff79005c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:6f:a8:53:a6:a5:33:24:fc:4a:c9:af:7e: 92:be:04:3c:70:77:be:e5:e0:3f:db:30:b9:e1:17: 76:05:6b:37:04:d8:6e:6b:7f:4d:35:a0:f6:db:c5: 2c:b4:43:ec:3e:57:72:f0:63:27:5f:2b:1a:04:4b: 95:83:01:78:25:ea:48:0d:f4:67:0f:4a:25:a6:6c: 8c:d1:c4:1f:26:b9:7a:5d:47:31:3b:a8:96:75:b6: 4f:9c:fb:36:74:6d:d2:17:ec:47:b2:dd:50:b8:f0: ac:36:36:6d:b6:a2:1a:c7:08:cc:9a:12:87:60:14: 75:c3:5b:89:33:02:f5:83:f1:c5:11:d2:a8:a0:8d: b9:19:b3:d5:5d:f8:41:dd:c1:e8:54:33:77:fb:60: 44:37:d3:1a:86:99:5c:1c:55:7b:be:96:44:19:21: 41:e0:67:00:18:e6:81:52:44:26:f0:f2:87:35:af: 99:60:d9:ab:ad:c4:c9:fb:2c:4a:20:f3:f9:59:61: 58:8a:01:53:ab:92:0a:4c:49:6b:a6:a8:e4:d3:e8: 2c:6f:c0:dc:8e:4f:e4:dc:97:d3:c2:9d:9d:18:31: 19:f0:08:21:da:37:74:9a:cc:38:8f:9a:8d:f3:be: 3c:c5:8d:83:da:6e:42:43:a9:3d:43:d3:15:ce:91: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:6C:72:AF:D2:08:18:62:7E:A4:41:5F:BB:3C:3F:F7:90:05:C2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zBJscq_SCBhifqRBX7s8P_eQBcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.71.0/24 Signature Algorithm: sha256WithRSAEncryption 45:1c:e9:61:24:ff:c8:bf:8d:45:80:6b:b9:f9:3f:22:d6:f6: 1e:7a:25:44:79:2c:43:3d:b6:73:49:d3:eb:a9:ba:1b:d5:47: e2:f5:6f:22:5b:f7:1a:ed:70:e5:ab:1e:c8:5c:80:ac:67:98: ec:38:e0:6d:49:cc:f7:f9:42:d4:00:f5:cd:42:d5:3c:e4:c4: 14:90:51:cf:f0:3b:c0:90:f1:c3:7c:09:02:77:70:12:d5:20: 23:33:a6:fe:4f:0b:d1:53:8c:5a:8d:bf:d0:95:f0:8c:2d:95: cf:92:92:5e:02:d7:ab:e0:ee:7c:ec:7b:1e:ea:a2:bc:b8:12: ec:49:ba:22:ff:bf:83:c8:eb:fe:4f:01:e7:fa:f3:b7:3c:b5: e2:71:bb:3a:99:9f:c1:eb:66:bb:77:5a:e8:ab:bc:17:73:77: d7:04:96:38:78:ae:61:77:1e:02:e1:f0:e2:39:8e:17:47:c1: 33:91:a9:6e:37:81:55:52:71:da:50:20:e2:36:34:09:c3:86: 39:13:9e:b8:02:f1:f2:70:7c:f9:3f:64:ca:d2:b3:e3:f2:2f: e1:60:7e:f8:d9:e8:a3:56:5f:6a:f8:12:23:cd:fb:c5:b1:dc: 10:2e:d0:ab:1e:05:8c:b0:bc:66:56:a0:f1:e6:53:75:58:f3: b8:e2:47:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIw9fbNSWtr8gUgsaNvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzEyNmM3MmFmZDIwODE4NjI3ZWE0NDE1ZmJiM2MzZmY3OTAwNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoRvqFOmpTMk/ErJr36SvgQ8cHe+ 5eA/2zC54Rd2BWs3BNhua39NNaD228UstEPsPldy8GMnXysaBEuVgwF4JepIDfRn D0olpmyM0cQfJrl6XUcxO6iWdbZPnPs2dG3SF+xHst1QuPCsNjZttqIaxwjMmhKH YBR1w1uJMwL1g/HFEdKooI25GbPVXfhB3cHoVDN3+2BEN9MahplcHFV7vpZEGSFB 4GcAGOaBUkQm8PKHNa+ZYNmrrcTJ+yxKIPP5WWFYigFTq5IKTElrpqjk0+gsb8Dc jk/k3JfTwp2dGDEZ8Agh2jd0msw4j5qN8748xY2D2m5CQ6k9Q9MVzpHt4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwSbHKv0ggYYn6kQV+7PD/3kAXCMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvekJKc2NxX1NDQmhpZnFSQlg3czhQX2VRQmNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhHMA0G CSqGSIb3DQEBCwUAA4IBAQBFHOlhJP/Iv41FgGu5+T8i1vYeeiVEeSxDPbZzSdPr qbob1Ufi9W8iW/ca7XDlqx7IXICsZ5jsOOBtScz3+ULUAPXNQtU85MQUkFHP8DvA kPHDfAkCd3AS1SAjM6b+TwvRU4xajb/QlfCMLZXPkpJeAter4O587Hse6qK8uBLs Sboi/7+DyOv+TwHn+vO3PLXicbs6mZ/B62a7d1roq7wXc3fXBJY4eK5hdx4C4fDi OY4XR8EzkaluN4FVUnHaUCDiNjQJw4Y5E564AvHycHz5P2TK0rPj8i/hYH742eij Vl9q+BIjzfvFsdwQLtCrHgWMsLxmVqDx5lN1WPO44keT -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:13 2026 by rpki-client