This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCrUc1_8IYVlbSpt4JV7VBJw6HA.roa File: zCrUc1_8IYVlbSpt4JV7VBJw6HA.roa (raw, json) Hash identifier: sHXLeFWmKxPpMSXGvUabvJzxdal758lwprCwGiKRBuQ= Subject key identifier: CC:2A:D4:73:5F:FC:21:85:65:6D:2A:6D:E0:95:7B:54:12:70:E8:70 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8491CD04E74259F8239AC91307772A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCrUc1_8IYVlbSpt4JV7VBJw6HA.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 31.59.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:91:cd:04:e7:42:59:f8:23:9a:c9:13:07:77:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc2ad4735ffc2185656d2a6de0957b541270e870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:fd:0c:eb:21:fc:2b:80:ca:6e:8e:90:9a: 10:00:07:9b:2c:70:d6:53:22:f0:32:56:18:4b:24: b7:d2:ff:90:3c:c4:bf:2e:7d:4b:73:d0:14:97:e4: 86:f8:fd:9d:92:75:80:6a:6c:df:44:da:c8:a2:ff: 40:2f:55:d1:cc:b3:cc:69:47:de:65:34:8b:fb:e4: 0f:a9:cc:14:d1:bc:46:3d:a5:64:16:b2:78:65:1d: 2f:45:e5:ab:db:e5:28:27:94:2c:50:1f:ce:20:75: 4f:6d:57:19:36:00:0d:c1:86:8d:aa:79:8d:54:26: 64:c3:1b:28:b1:ff:ee:24:e0:70:27:7c:15:46:4e: 07:6e:f9:67:41:68:ce:32:ba:db:f1:eb:a9:77:38: bc:21:8e:04:ae:44:11:8f:c0:39:fe:c2:e6:a1:68: 53:e0:4a:66:68:41:df:6f:34:4b:ed:b7:f9:c4:40: ed:b3:54:2b:d8:36:57:e5:b2:51:57:ef:d0:35:80: 18:a2:8e:96:94:a7:19:a5:d5:da:80:f9:c8:71:1a: 9b:8e:45:5f:5b:5b:f6:82:d9:c7:bc:27:1c:28:e5: 73:da:de:e8:8f:11:13:94:4d:0d:17:03:61:ec:01: ee:e8:af:1b:07:a1:0f:58:15:dd:7d:84:2c:55:96: 9c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2A:D4:73:5F:FC:21:85:65:6D:2A:6D:E0:95:7B:54:12:70:E8:70 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCrUc1_8IYVlbSpt4JV7VBJw6HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.137.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f3:0d:7a:bd:04:ca:54:03:1a:55:5f:1f:61:9c:b0:4e:67: 8e:bf:9d:a5:c3:19:e3:3b:f5:66:12:b0:7d:43:a1:7a:92:3a: ec:ab:fe:b9:4a:ac:e9:b6:02:90:4b:fd:44:e2:f9:94:f0:9a: 22:f1:3b:ca:6f:0c:e9:91:27:29:bf:f1:e7:39:fd:53:01:ec: e3:59:72:5e:77:f9:62:61:ec:01:d9:07:a4:a5:fa:dd:c9:9e: ad:da:3b:c9:65:53:29:52:53:48:d9:47:28:f2:e9:65:0c:75: 58:79:7b:52:f0:23:90:de:e2:fa:31:b6:88:fa:6a:ed:de:6e: 5a:11:e4:6a:46:b1:f2:6f:a5:9e:6e:52:ce:c8:70:05:d1:13: 9f:91:b9:22:59:2f:26:89:34:13:23:c0:19:ff:c0:a4:34:41: a0:aa:c9:8b:03:b7:aa:fe:52:8a:f2:20:a3:1d:e1:16:c0:3a: aa:e8:f5:4b:f7:53:c6:b5:da:a9:be:a5:97:dd:3d:99:c1:ec: da:77:3d:af:0c:65:1c:e5:2a:70:de:ee:61:6f:02:db:5e:51: 78:9f:c9:ff:4d:ed:5b:51:55:e0:6c:c3:d9:81:cb:ec:43:2e: 95:30:fa:d3:e5:ca:59:d3:16:d8:f9:9e:e0:ad:a2:c8:d4:c3: 40:e7:7d:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJHNBOdCWfgjmskTB3cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzJhZDQ3MzVmZmMyMTg1NjU2ZDJhNmRlMDk1N2I1NDEyNzBlODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTz9DOsh/CuAym6OkJoQAAebLHDW UyLwMlYYSyS30v+QPMS/Ln1Lc9AUl+SG+P2dknWAamzfRNrIov9AL1XRzLPMaUfe ZTSL++QPqcwU0bxGPaVkFrJ4ZR0vReWr2+UoJ5QsUB/OIHVPbVcZNgANwYaNqnmN VCZkwxsosf/uJOBwJ3wVRk4HbvlnQWjOMrrb8eupdzi8IY4ErkQRj8A5/sLmoWhT 4EpmaEHfbzRL7bf5xEDts1Qr2DZX5bJRV+/QNYAYoo6WlKcZpdXagPnIcRqbjkVf W1v2gtnHvCccKOVz2t7ojxETlE0NFwNh7AHu6K8bB6EPWBXdfYQsVZac3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwq1HNf/CGFZW0qbeCVe1QScOhwMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvekNyVWMxXzhJWVZsYlNwdDRKVjdWQkp3NkhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzuJMA0G CSqGSIb3DQEBCwUAA4IBAQBL8w16vQTKVAMaVV8fYZywTmeOv52lwxnjO/VmErB9 Q6F6kjrsq/65SqzptgKQS/1E4vmU8Joi8TvKbwzpkScpv/HnOf1TAezjWXJed/li YewB2QekpfrdyZ6t2jvJZVMpUlNI2Uco8ullDHVYeXtS8COQ3uL6MbaI+mrt3m5a EeRqRrHyb6WeblLOyHAF0ROfkbkiWS8miTQTI8AZ/8CkNEGgqsmLA7eq/lKK8iCj HeEWwDqq6PVL91PGtdqpvqWX3T2Zwezadz2vDGUc5Spw3u5hbwLbXlF4n8n/Te1b UVXgbMPZgcvsQy6VMPrT5cpZ0xbY+Z7graLI1MNA532/ -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:37 2026 by rpki-client