This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zhhEJ6k1TyBBurPUf0AOwrMXnbE.roa File: zhhEJ6k1TyBBurPUf0AOwrMXnbE.roa (raw, json) Hash identifier: jzebQaor2YF9iWaJRV5SmOGCCcjZadyD++tFg+xDOWI= Subject key identifier: CE:18:44:27:A9:35:4F:20:41:BA:B3:D4:7F:40:0E:C2:B3:17:9D:B1 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84575F84FD06FE17AF0BE0A6DB0613 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zhhEJ6k1TyBBurPUf0AOwrMXnbE.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20853 IP address blocks: 31.56.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:57:5f:84:fd:06:fe:17:af:0b:e0:a6:db:06:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce184427a9354f2041bab3d47f400ec2b3179db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:e9:47:99:bb:0e:de:9d:f1:b3:27:3a:1b: 2d:3c:05:53:85:d9:5f:81:22:fa:d9:80:5c:39:a6: 58:00:49:62:0b:6e:76:12:88:20:35:ad:d2:17:2e: 1d:bb:da:06:3c:fc:fe:77:7b:6b:d3:cf:ca:50:69: 30:07:a1:66:f3:3e:a7:f0:e6:5c:ed:23:dd:af:16: ac:ba:e8:a5:5e:56:4c:15:0c:1a:ce:ba:79:1d:78: 08:94:da:1b:94:49:05:d1:0c:ac:12:13:a4:d6:bf: 1f:52:4c:e0:7c:69:dc:6b:44:80:f6:8d:c5:9f:45: 58:7e:14:7e:d9:16:4a:8c:68:22:52:77:e1:40:ec: 7d:5f:0f:88:95:14:c5:37:8b:b7:c8:05:8b:64:60: e6:58:32:bd:63:bd:b8:44:63:86:b4:c8:53:af:27: 03:4c:80:c0:22:51:65:03:56:cd:03:ce:e1:f3:b7: 3b:3a:bf:09:dc:55:59:0f:12:52:f0:15:92:26:47: 6d:fc:28:7b:55:e6:56:76:a6:b7:5d:87:b0:86:a3: 55:58:8d:39:46:90:52:55:e3:57:00:5c:36:0e:25: ec:39:4b:68:5e:3e:a1:31:6d:36:b0:0f:00:be:a6: 1a:10:77:dd:4c:72:d4:bf:ec:ae:84:b3:48:c6:4a: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:44:27:A9:35:4F:20:41:BA:B3:D4:7F:40:0E:C2:B3:17:9D:B1 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zhhEJ6k1TyBBurPUf0AOwrMXnbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.145.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:92:ec:90:36:a1:0c:b9:39:30:08:4b:7a:ee:33:8a:92:42: bd:c2:e3:d3:b4:3a:64:f6:10:78:f4:9a:45:b3:b7:ce:50:37: 90:1c:4c:37:31:e4:ce:a4:7e:55:96:bb:0e:50:b2:8d:ee:76: a0:f1:4a:47:b8:dd:7b:11:d7:84:e2:77:05:e4:cc:5d:cd:a4: c8:5d:53:c2:36:ea:7b:a3:31:bb:09:47:59:31:d5:ea:71:f6: 8a:82:1e:41:17:dd:13:f4:9c:13:02:c7:6b:62:4e:3f:4a:d9: 59:bd:09:8a:75:ee:cd:4a:b6:93:1d:06:08:b9:fe:99:0b:ad: f2:60:6b:5e:cc:0f:76:ba:2b:b8:e4:8d:88:16:be:73:76:74: 49:38:20:39:68:cd:40:c4:95:98:6b:05:e2:67:ab:38:d5:6a: ad:d8:42:b9:19:f5:47:da:d4:8c:3f:0c:30:17:da:ad:32:c4: 41:6d:e3:fc:38:8b:ae:22:54:7a:8d:59:ca:cd:e4:bd:dc:1c: 7f:57:9c:63:73:92:86:a9:cd:79:cf:a5:72:76:ea:77:f6:7f: f6:b7:fe:93:19:40:a6:bb:19:f9:c9:bc:17:88:68:fb:0c:61: b1:e3:d1:5b:0b:45:c5:8d:96:72:1a:89:5b:22:f0:89:40:a7: 6a:1e:bb:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFdfhP0G/hevC+Cm2wYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTE4NDQyN2E5MzU0ZjIwNDFiYWIzZDQ3ZjQwMGVjMmIzMTc5ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo83pR5m7Dt6d8bMnOhstPAVThdlf gSL62YBcOaZYAEliC252EoggNa3SFy4du9oGPPz+d3tr08/KUGkwB6Fm8z6n8OZc 7SPdrxasuuilXlZMFQwazrp5HXgIlNoblEkF0QysEhOk1r8fUkzgfGnca0SA9o3F n0VYfhR+2RZKjGgiUnfhQOx9Xw+IlRTFN4u3yAWLZGDmWDK9Y724RGOGtMhTrycD TIDAIlFlA1bNA87h87c7Or8J3FVZDxJS8BWSJkdt/Ch7VeZWdqa3XYewhqNVWI05 RpBSVeNXAFw2DiXsOUtoXj6hMW02sA8AvqYaEHfdTHLUv+yuhLNIxkr5nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM4YRCepNU8gQbqz1H9ADsKzF52xMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvemhoRUo2azFUeUJCdXJQVWYwQU93ck1YbmJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHziRMA0G CSqGSIb3DQEBCwUAA4IBAQAMkuyQNqEMuTkwCEt67jOKkkK9wuPTtDpk9hB49JpF s7fOUDeQHEw3MeTOpH5VlrsOULKN7nag8UpHuN17EdeE4ncF5MxdzaTIXVPCNup7 ozG7CUdZMdXqcfaKgh5BF90T9JwTAsdrYk4/StlZvQmKde7NSraTHQYIuf6ZC63y YGtezA92uiu45I2IFr5zdnRJOCA5aM1AxJWYawXiZ6s41Wqt2EK5GfVH2tSMPwww F9qtMsRBbeP8OIuuIlR6jVnKzeS93Bx/V5xjc5KGqc15z6Vydup39n/2t/6TGUCm uxn5ybwXiGj7DGGx49FbC0XFjZZyGolbIvCJQKdqHruP -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:35 2026 by rpki-client