This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zsHJXpRWwY9QDvFUSb2_gAdf00g.roa File: zsHJXpRWwY9QDvFUSb2_gAdf00g.roa (raw, json) Hash identifier: 4Oag1fOiMzrCPNcKoL9zvaRCN6zlTil8yoZ1B6C+K3w= Subject key identifier: CE:C1:C9:5E:94:56:C1:8F:50:0E:F1:54:49:BD:BF:80:07:5F:D3:48 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8477DD2EE57BA8F36C5ACC26981B4D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zsHJXpRWwY9QDvFUSb2_gAdf00g.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63473 IP address blocks: 31.56.62.0/24 maxlen: 24 31.56.232.0/24 maxlen: 24 31.57.218.0/24 maxlen: 24 31.57.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:77:dd:2e:e5:7b:a8:f3:6c:5a:cc:26:98:1b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cec1c95e9456c18f500ef15449bdbf80075fd348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:e3:33:8b:12:ee:ae:70:c7:39:6a:48:0b: 07:c9:46:bb:9f:68:5a:55:5a:31:c0:0d:a7:af:88: 24:e7:1f:ac:41:48:88:ab:4b:fc:28:3d:cd:49:ed: 99:47:69:17:30:e8:f0:cd:98:91:7e:82:64:3f:ae: b8:9d:76:21:6e:25:e7:65:4f:64:71:ec:39:e6:e9: 57:f2:5e:51:b3:a7:c6:29:9c:ca:b8:3c:d1:a3:e4: d2:cd:28:df:0b:d8:98:b9:ea:69:b0:68:0a:8c:93: f6:6d:8c:1e:c8:e1:8b:c3:b1:f1:3c:56:b5:ec:98: aa:1b:a3:6c:08:8d:b8:ec:bf:77:2e:66:99:19:03: 84:dd:06:0d:e6:e3:50:10:bd:56:6f:b9:74:90:29: 93:0d:12:de:53:d3:be:48:7d:a6:07:75:81:67:63: f3:ae:f6:61:67:67:e8:2a:4e:69:79:f0:6d:3c:3a: d0:57:6a:50:1c:7e:a4:75:43:3a:9f:c3:4b:de:12: ca:28:fc:7c:18:e8:62:e0:b6:1c:32:6b:e2:52:e0: 8c:72:99:66:2d:60:c0:d8:c0:58:b8:9b:28:82:82: 57:fb:a8:b2:73:8d:e5:e7:ca:49:8f:65:ee:bb:c1: 99:7d:15:62:f8:33:fc:76:90:65:31:79:32:8c:45: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C1:C9:5E:94:56:C1:8F:50:0E:F1:54:49:BD:BF:80:07:5F:D3:48 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zsHJXpRWwY9QDvFUSb2_gAdf00g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.62.0/24 31.56.232.0/24 31.57.218.0/24 31.57.224.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ab:3e:73:f4:1f:7f:da:a6:fe:00:44:e4:32:13:e2:34:78: 41:e1:4a:85:ed:1e:93:61:a2:0f:e9:69:ec:93:34:da:20:a5: 9f:5d:58:0e:20:75:80:4a:82:52:89:5c:d9:a7:7b:81:70:d3: 88:ee:b5:fa:93:e9:b2:fa:46:67:c6:58:7d:86:07:2d:3e:03: a3:52:c1:f7:88:10:5e:10:71:5f:15:fe:17:fe:ff:ab:40:a8: 4c:d3:a7:a4:d1:4c:7f:a3:b2:42:b6:4a:5d:0e:24:31:0f:55: 3b:dd:67:5b:a4:e1:e9:47:67:58:32:39:db:43:e0:a1:4a:d8: 02:5a:6c:57:0d:7e:b9:98:a6:1f:eb:4c:8b:a2:5d:b8:89:0b: a7:4f:9e:0e:87:ad:9e:78:77:e6:ed:45:e7:a5:93:ff:ea:c3: 01:57:4a:86:82:70:17:fd:fb:7a:51:89:bd:cb:ff:9e:fe:6e: 1f:8b:c7:96:ac:12:45:5f:38:6f:56:75:3d:1f:0e:88:72:bf: d8:84:be:2c:57:3c:d6:e4:e9:8c:43:00:07:45:53:6e:a8:a7: d8:0e:20:20:10:7f:51:e9:af:a0:52:35:14:1b:ad:b7:d0:3e: a4:bd:75:97:af:a1:0c:b1:3a:ce:91:1c:e1:ff:a9:d7:d7:66: 53:31:b2:75 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hHfdLuV7qPNsWswmmBtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWMxYzk1ZTk0NTZjMThmNTAwZWYxNTQ0OWJkYmY4MDA3NWZkMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXjjM4sS7q5wxzlqSAsHyUa7n2ha VVoxwA2nr4gk5x+sQUiIq0v8KD3NSe2ZR2kXMOjwzZiRfoJkP664nXYhbiXnZU9k cew55ulX8l5Rs6fGKZzKuDzRo+TSzSjfC9iYueppsGgKjJP2bYweyOGLw7HxPFa1 7JiqG6NsCI247L93LmaZGQOE3QYN5uNQEL1Wb7l0kCmTDRLeU9O+SH2mB3WBZ2Pz rvZhZ2foKk5pefBtPDrQV2pQHH6kdUM6n8NL3hLKKPx8GOhi4LYcMmviUuCMcplm LWDA2MBYuJsogoJX+6iyc43l58pJj2Xuu8GZfRVi+DP8dpBlMXkyjEWVLQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFM7ByV6UVsGPUA7xVEm9v4AHX9NIMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvenNISlhwUld3WTlRRHZGVVNiMl9nQWRmMDBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzg+AwQA HzjoAwQAHznaAwQAHzngMA0GCSqGSIb3DQEBCwUAA4IBAQBYqz5z9B9/2qb+AETk MhPiNHhB4UqF7R6TYaIP6WnskzTaIKWfXVgOIHWASoJSiVzZp3uBcNOI7rX6k+my +kZnxlh9hgctPgOjUsH3iBBeEHFfFf4X/v+rQKhM06ek0Ux/o7JCtkpdDiQxD1U7 3WdbpOHpR2dYMjnbQ+ChStgCWmxXDX65mKYf60yLol24iQunT54Oh62eeHfm7UXn pZP/6sMBV0qGgnAX/ft6UYm9y/+e/m4fi8eWrBJFXzhvVnU9Hw6Icr/YhL4sVzzW 5OmMQwAHRVNuqKfYDiAgEH9R6a+gUjUUG6230D6kvXWXr6EMsTrOkRzh/6nX12ZT MbJ1 -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:44 2026 by rpki-client