This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Mp5dmSmQsU3c6yvNUfVS9_3lJE.roa File: 8Mp5dmSmQsU3c6yvNUfVS9_3lJE.roa (raw, json) Hash identifier: /QMi6mGdVZr5sJ7blox2d6EoC7XtPhCVGur28R0mO+Q= Subject key identifier: F0:CA:79:76:64:A6:42:C5:37:73:AC:AF:35:47:D5:4B:DF:F7:94:91 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AC41EB15A016913F1D04ED94AC8EDC80A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Mp5dmSmQsU3c6yvNUfVS9_3lJE.roa Signing time: Thu 27 Nov 2025 07:02:17 +0000 ROA not before: Thu 27 Nov 2025 07:02:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 31.56.100.0/23 maxlen: 23 31.56.100.0/24 maxlen: 24 31.59.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:1e:b1:5a:01:69:13:f1:d0:4e:d9:4a:c8:ed:c8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 27 07:02:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f0ca797664a642c53773acaf3547d54bdff79491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:48:bc:4f:d3:64:53:9b:0d:d8:be:9b:3e: 56:5b:28:e1:a1:12:e2:e3:05:24:52:24:b6:0d:4d: 73:38:a5:48:c1:ec:e2:c0:39:66:c1:60:b1:95:e1: 59:ff:6f:f6:a3:87:6c:57:03:7a:26:d5:39:6e:03: d1:b6:83:26:7e:7e:42:ee:ce:49:7d:09:42:36:8b: f7:0d:fc:af:47:20:44:1a:0c:c3:bb:71:9d:86:8a: 9b:58:77:a4:6a:b1:f8:e7:99:94:98:7e:6a:be:41: 73:5a:e3:4e:3a:a1:5f:48:82:9e:56:33:0a:19:ae: f8:e1:4c:6d:a9:54:66:4d:8e:17:fc:55:9b:c5:8d: 85:d7:3d:56:20:09:09:87:18:17:75:4c:cd:a7:2e: 89:75:ab:83:63:a0:7c:f1:87:f1:fd:70:fe:b1:f9: 2a:4c:00:0e:44:54:e9:b2:cf:95:75:ed:7f:2e:f2: ab:c7:97:5e:d0:3e:14:9e:2f:47:55:7e:72:af:c8: 83:1d:ef:ae:e8:d7:76:03:ef:27:b4:ab:76:eb:c9: b8:c8:7d:8c:b3:56:b4:85:91:ee:6e:7d:9b:e6:a5: 57:74:14:ac:2b:f7:d1:0f:8e:1a:f9:81:a1:fc:93: f8:de:94:50:c6:94:71:98:67:63:3b:16:98:90:11: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CA:79:76:64:A6:42:C5:37:73:AC:AF:35:47:D5:4B:DF:F7:94:91 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Mp5dmSmQsU3c6yvNUfVS9_3lJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.100.0/23 31.59.173.0/24 Signature Algorithm: sha256WithRSAEncryption 39:80:9b:9f:f6:0b:5e:35:71:27:5d:73:74:a7:d6:e3:72:10: 9c:da:81:0f:07:e6:1a:a7:24:a4:89:e5:d6:f0:06:3d:19:e0: 70:e8:21:dc:87:4f:a5:cd:df:c8:88:cf:0f:c9:fa:9a:cc:77: 6c:ad:6a:25:04:26:81:50:f7:aa:6e:d0:a5:92:78:07:2d:b8: 76:53:2d:14:5c:45:3c:b1:39:9a:58:9e:d1:11:46:2c:0c:9c: 30:fb:f6:01:6f:7c:a2:72:e4:f6:e2:43:5e:20:3d:d8:96:3d: 43:3d:16:66:a3:d6:b7:2b:5d:6e:d3:70:da:e8:95:2c:5e:42: 35:b7:e9:ec:5b:39:de:48:30:68:bf:79:82:fd:59:55:b2:16: d1:95:9e:dc:47:89:90:95:f9:83:99:93:93:52:10:63:0d:66: 17:e0:a6:78:48:24:71:f2:c1:d1:bb:e6:63:ef:d0:45:6d:23: 7a:1d:aa:22:a5:63:6b:2c:06:8a:b8:61:50:b7:b7:ef:65:0f: 51:95:55:d4:60:e8:db:82:1e:67:76:c7:1c:5e:72:0b:40:62: 60:7c:da:13:86:0b:a7:d9:10:45:51:79:15:15:80:31:da:20: 69:ac:de:c9:8d:e2:a5:c9:d8:10:7c:f6:21:24:cc:25:82:49: 75:43:f1:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrEHrFaAWkT8dBO2UrI7cgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI3MDcwMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGNhNzk3NjY0YTY0MmM1Mzc3M2FjYWYzNTQ3ZDU0YmRmZjc5NDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOtIvE/TZFObDdi+mz5WWyjhoRLi 4wUkUiS2DU1zOKVIweziwDlmwWCxleFZ/2/2o4dsVwN6JtU5bgPRtoMmfn5C7s5J fQlCNov3DfyvRyBEGgzDu3GdhoqbWHekarH455mUmH5qvkFzWuNOOqFfSIKeVjMK Ga744UxtqVRmTY4X/FWbxY2F1z1WIAkJhxgXdUzNpy6JdauDY6B88Yfx/XD+sfkq TAAORFTpss+Vde1/LvKrx5de0D4Uni9HVX5yr8iDHe+u6Nd2A+8ntKt268m4yH2M s1a0hZHubn2b5qVXdBSsK/fRD44a+YGh/JP43pRQxpRxmGdjOxaYkBG9+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPDKeXZkpkLFN3OsrzVH1Uvf95SRMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOE1wNWRtU21Rc1UzYzZ5dk5VZlZTOV8zbEpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHzhkAwQA HzutMA0GCSqGSIb3DQEBCwUAA4IBAQA5gJuf9gteNXEnXXN0p9bjchCc2oEPB+Ya pySkieXW8AY9GeBw6CHch0+lzd/IiM8PyfqazHdsrWolBCaBUPeqbtClkngHLbh2 Uy0UXEU8sTmaWJ7REUYsDJww+/YBb3yicuT24kNeID3Ylj1DPRZmo9a3K11u03Da 6JUsXkI1t+nsWzneSDBov3mC/VlVshbRlZ7cR4mQlfmDmZOTUhBjDWYX4KZ4SCRx 8sHRu+Zj79BFbSN6HaoipWNrLAaKuGFQt7fvZQ9RlVXUYOjbgh5ndsccXnILQGJg fNoThgun2RBFUXkVFYAx2iBprN7JjeKlydgQfPYhJMwlgkl1Q/GG -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:28 2025 by rpki-client