This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JOwy9QgjWRuwLQbwlF-yXkXCDCE.roa File: JOwy9QgjWRuwLQbwlF-yXkXCDCE.roa (raw, json) Hash identifier: zXnWRbgy9Ep58DJxkZ05GTR1DestAV46aVALH8/qKdo= Subject key identifier: 24:EC:32:F5:08:23:59:1B:B0:2D:06:F0:94:5F:B2:5E:45:C2:0C:21 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A188607F0B2C4CF8DE039FF7575E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JOwy9QgjWRuwLQbwlF-yXkXCDCE.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209000 IP address blocks: 31.57.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a1:88:60:7f:0b:2c:4c:f8:de:03:9f:f7:57:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24ec32f50823591bb02d06f0945fb25e45c20c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:9d:76:c6:09:6a:af:08:b6:55:5a:bd:b7: 72:2a:da:27:a5:ec:50:ef:9a:02:cd:a3:cf:c0:d2: ff:b5:49:a6:5e:c7:b1:9c:a9:2f:fc:9e:6f:61:97: 95:a6:65:4f:c4:4b:ee:96:9a:d6:a4:b4:5b:e1:c9: 4b:93:5e:43:c3:ec:b2:d6:25:be:42:3a:93:6f:43: b6:73:d5:0d:0f:3c:2a:28:d5:76:4e:67:c7:e6:1a: b8:9c:b7:09:a1:e7:b7:0c:f3:5a:48:e5:04:03:4b: 52:08:91:f1:60:10:5f:79:7e:db:50:4a:7b:13:41: 66:dd:79:b9:bf:90:0f:a4:2a:eb:8d:2a:56:7d:e6: a9:7b:b4:94:92:42:c9:06:44:ee:8f:7c:3d:72:07: 03:43:32:ee:ea:70:f8:8f:32:7a:86:e9:0c:b0:83: a7:21:3e:39:ee:79:59:5e:62:f5:5a:d4:d6:4b:3c: 53:f2:c8:b4:94:4a:d3:6e:b8:7f:7c:32:35:2a:3d: 09:0d:ac:7e:32:b1:79:18:3d:b2:0f:75:fd:e0:26: 01:22:c2:96:d7:54:bf:d7:b3:83:a1:16:fc:c5:ed: 30:b2:77:98:b7:19:f2:7d:61:65:8b:98:52:57:1c: 0b:20:f5:87:6c:fa:d5:03:c8:82:d3:0c:d4:ec:e1: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EC:32:F5:08:23:59:1B:B0:2D:06:F0:94:5F:B2:5E:45:C2:0C:21 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JOwy9QgjWRuwLQbwlF-yXkXCDCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.58.0/24 Signature Algorithm: sha256WithRSAEncryption 33:c6:09:13:3b:ae:b4:c5:68:63:16:9c:7f:88:62:f9:a8:ee: 4d:76:fc:d9:b9:a2:8a:fe:0e:44:a8:6f:c8:6b:d6:b4:21:3e: 15:c7:91:01:ee:71:f6:5b:62:5f:4e:eb:8b:e2:0e:a3:d8:f9: 79:de:f5:5c:fa:56:94:c5:00:43:01:f5:f9:80:81:65:7f:76: 21:b8:e3:aa:23:89:17:04:f0:54:5b:78:3b:7e:23:bd:31:02: 7b:e7:40:e6:8f:5c:22:0e:fa:4f:52:80:27:7a:13:c3:b8:12: 25:be:b3:3b:2e:10:e0:a3:78:95:9b:f2:cb:58:52:90:79:c2: 6e:45:a2:7d:cc:48:16:f2:a1:d0:36:d3:f6:44:e3:c1:01:4b: 97:73:e4:11:0c:23:e7:99:b2:14:69:39:3b:f4:d4:a8:e9:35: b4:37:6b:22:08:6b:01:1c:9d:21:a6:de:a4:4f:b9:5e:ee:22: f4:66:e5:7e:70:9f:10:bf:b3:b0:b2:de:83:6e:8e:0e:8b:71: 8b:5a:b4:e1:21:92:76:fb:7f:3b:c1:d5:80:1c:a9:f3:b8:46: 48:cf:08:4c:9e:3c:b7:85:af:11:3d:24:ee:77:57:19:cf:0e: 51:c2:2b:5f:3b:bc:a5:8c:8f:b9:7e:36:c4:e1:8c:19:89:1f: 48:61:61:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKGIYH8LLEz43gOf91deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGVjMzJmNTA4MjM1OTFiYjAyZDA2ZjA5NDVmYjI1ZTQ1YzIwYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZCddsYJaq8ItlVavbdyKtonpexQ 75oCzaPPwNL/tUmmXsexnKkv/J5vYZeVpmVPxEvulprWpLRb4clLk15Dw+yy1iW+ QjqTb0O2c9UNDzwqKNV2TmfH5hq4nLcJoee3DPNaSOUEA0tSCJHxYBBfeX7bUEp7 E0Fm3Xm5v5APpCrrjSpWfeape7SUkkLJBkTuj3w9cgcDQzLu6nD4jzJ6hukMsIOn IT457nlZXmL1WtTWSzxT8si0lErTbrh/fDI1Kj0JDax+MrF5GD2yD3X94CYBIsKW 11S/17ODoRb8xe0wsneYtxnyfWFli5hSVxwLIPWHbPrVA8iC0wzU7OHKRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTsMvUII1kbsC0G8JRfsl5FwgwhMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSk93eTlRZ2pXUnV3TFFid2xGLXlYa1hDRENFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzk6MA0G CSqGSIb3DQEBCwUAA4IBAQAzxgkTO660xWhjFpx/iGL5qO5NdvzZuaKK/g5EqG/I a9a0IT4Vx5EB7nH2W2JfTuuL4g6j2Pl53vVc+laUxQBDAfX5gIFlf3YhuOOqI4kX BPBUW3g7fiO9MQJ750Dmj1wiDvpPUoAnehPDuBIlvrM7LhDgo3iVm/LLWFKQecJu RaJ9zEgW8qHQNtP2ROPBAUuXc+QRDCPnmbIUaTk79NSo6TW0N2siCGsBHJ0hpt6k T7le7iL0ZuV+cJ8Qv7Owst6Dbo4Oi3GLWrThIZJ2+387wdWAHKnzuEZIzwhMnjy3 ha8RPSTud1cZzw5RwitfO7yljI+5fjbE4YwZiR9IYWHD -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:54 2026 by rpki-client