This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOVkc4onocBnm5gnaVCXdGx6F3I.roa File: zOVkc4onocBnm5gnaVCXdGx6F3I.roa (raw, json) Hash identifier: m9DylaIxH2/sUNFCWbK41Ev6ueZ6AiY0puw7hPDj0pY= Subject key identifier: CC:E5:64:73:8A:27:A1:C0:67:9B:98:27:69:50:97:74:6C:7A:17:72 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BC0F2DFC90F9E6FDC6344E08076C27B10 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOVkc4onocBnm5gnaVCXdGx6F3I.roa Signing time: Thu 15 Jan 2026 09:18:20 +0000 ROA not before: Thu 15 Jan 2026 09:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 31.58.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:f2:df:c9:0f:9e:6f:dc:63:44:e0:80:76:c2:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 15 09:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce564738a27a1c0679b9827695097746c7a1772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:a4:a9:50:cd:4b:42:9d:48:6f:b9:f4:fd: e1:80:66:81:d0:dc:3b:30:7d:dc:1f:65:38:49:26: 5a:c4:92:41:3c:fc:41:25:7f:9f:4c:f0:76:39:96: 4e:33:44:8a:3d:e1:d9:27:97:57:3a:1a:c7:14:79: 79:19:cc:17:13:45:dd:b1:fc:0f:48:08:5d:ee:32: a5:af:c3:99:dd:d2:ee:0d:00:00:87:4d:ec:fc:00: 09:b7:0d:41:cd:87:52:60:77:33:48:e3:bc:23:93: d8:7d:18:15:10:39:0d:3a:a6:c3:68:73:7b:ff:f0: de:dc:7c:31:f4:4e:e6:72:3f:b7:0a:ca:87:51:a8: 77:52:a0:47:10:53:0d:14:21:d9:a5:59:1a:7e:92: 67:0f:a9:2c:d4:04:f5:42:c5:87:07:ca:9a:ec:bf: f7:4c:a8:f3:b9:ba:2e:c3:3d:c9:66:21:1d:48:01: 98:b3:c2:f1:08:1e:9b:8f:51:67:ab:bb:12:1b:f8: 91:96:85:09:b0:fe:cb:24:f7:68:07:5d:c7:c1:89: 9a:68:c5:d8:49:ec:ac:a3:73:be:c8:1a:55:b6:49: ca:cf:ca:d6:70:ad:24:05:d4:9d:42:43:a9:a6:63: a7:a2:21:15:f1:da:b6:ca:62:ae:f0:ef:20:9e:cf: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:64:73:8A:27:A1:C0:67:9B:98:27:69:50:97:74:6C:7A:17:72 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOVkc4onocBnm5gnaVCXdGx6F3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.56.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f7:c8:ac:96:b4:12:ef:40:51:0c:b5:e7:29:69:9b:a2:d8: c2:a2:d0:17:d6:6e:ac:b5:ce:e6:95:13:96:ab:e0:98:b7:f1: 22:21:69:e3:44:f5:14:d2:f5:d3:21:84:ab:fe:1d:df:3f:1f: 54:71:ec:6e:5c:84:e9:8d:f4:e8:dc:e0:d6:53:99:9e:19:3e: d6:23:a9:df:23:93:d7:ee:a4:21:16:b1:69:79:21:e3:de:81: 1b:11:bb:99:ae:8b:6b:1a:dc:9a:92:44:eb:29:29:05:73:0a: 67:0a:45:54:ae:cb:58:3f:3f:e0:2a:83:4a:f4:cf:f4:56:ba: bd:af:ce:bd:c2:b5:9b:f6:a0:c9:e6:e3:f6:59:2e:8a:c4:90: e9:24:64:3d:73:1d:3c:c9:46:63:9e:bb:a7:e4:14:b4:72:f3: f2:11:8a:f7:fb:75:a7:5b:50:2d:c0:f3:ee:d8:98:1a:04:51: c6:a3:e9:96:fe:77:34:d0:33:70:78:eb:01:50:53:cd:74:9d: e2:47:e0:81:0c:2c:84:f4:f5:f8:b6:c1:2c:1c:85:33:59:7e: 47:95:e2:49:05:ac:01:5a:06:9a:a6:43:42:91:d3:c4:2a:ce: 01:b1:6a:f5:aa:52:67:cf:c0:11:8a:0f:6c:c4:82:84:e1:40: ab:71:e0:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvA8t/JD55v3GNE4IB2wnsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE1MDkxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2U1NjQ3MzhhMjdhMWMwNjc5Yjk4Mjc2OTUwOTc3NDZjN2ExNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueOkqVDNS0KdSG+59P3hgGaB0Nw7 MH3cH2U4SSZaxJJBPPxBJX+fTPB2OZZOM0SKPeHZJ5dXOhrHFHl5GcwXE0XdsfwP SAhd7jKlr8OZ3dLuDQAAh03s/AAJtw1BzYdSYHczSOO8I5PYfRgVEDkNOqbDaHN7 //De3Hwx9E7mcj+3CsqHUah3UqBHEFMNFCHZpVkafpJnD6ks1AT1QsWHB8qa7L/3 TKjzubouwz3JZiEdSAGYs8LxCB6bj1Fnq7sSG/iRloUJsP7LJPdoB13HwYmaaMXY Seyso3O+yBpVtknKz8rWcK0kBdSdQkOppmOnoiEV8dq2ymKu8O8gns+qNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzlZHOKJ6HAZ5uYJ2lQl3RsehdyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvek9Wa2M0b25vY0JubTVnbmFWQ1hkR3g2RjNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzo4MA0G CSqGSIb3DQEBCwUAA4IBAQBy98islrQS70BRDLXnKWmbotjCotAX1m6stc7mlROW q+CYt/EiIWnjRPUU0vXTIYSr/h3fPx9UcexuXITpjfTo3ODWU5meGT7WI6nfI5PX 7qQhFrFpeSHj3oEbEbuZrotrGtyakkTrKSkFcwpnCkVUrstYPz/gKoNK9M/0Vrq9 r869wrWb9qDJ5uP2WS6KxJDpJGQ9cx08yUZjnrun5BS0cvPyEYr3+3WnW1AtwPPu 2JgaBFHGo+mW/nc00DNweOsBUFPNdJ3iR+CBDCyE9PX4tsEsHIUzWX5HleJJBawB WgaapkNCkdPEKs4BsWr1qlJnz8ARig9sxIKE4UCrceCc -----END CERTIFICATE-----Generated at Thu Jan 15 22:47:45 2026 by rpki-client