This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NzooK5PP6FbZbSH72UF3d5CHKeA.roa File: NzooK5PP6FbZbSH72UF3d5CHKeA.roa (raw, json) Hash identifier: FqHThKq/hWXq+eJbLWl6TSQtH0Qyy6rqunQgZozjWdU= Subject key identifier: 37:3A:28:2B:93:CF:E8:56:D9:6D:21:FB:D9:41:77:77:90:87:29:E0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84BF4F7DEEAA9228B5BBC3413E7CCD Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NzooK5PP6FbZbSH72UF3d5CHKeA.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 31.56.225.0/24 maxlen: 24 31.57.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bf:4f:7d:ee:aa:92:28:b5:bb:c3:41:3e:7c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=373a282b93cfe856d96d21fbd9417777908729e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:2a:ee:23:2d:9a:9d:71:4f:8c:1d:6c:1d: ae:00:ac:88:e6:9b:bf:4b:ed:e3:a0:63:a5:6d:71: 90:61:4e:a1:c5:43:b4:1d:aa:1b:b0:32:8e:a2:df: 26:15:97:02:72:29:4b:91:07:46:dd:40:44:e8:77: a8:a8:40:38:c0:41:02:73:5b:37:b4:10:58:9c:15: 8d:db:19:81:1c:60:27:98:e7:47:d4:65:49:d3:ce: e5:a1:aa:e9:11:37:73:bc:96:7a:e9:70:ff:38:06: c1:85:60:83:06:3f:b0:93:b6:18:c3:0a:73:e3:1b: dd:85:f7:ea:45:43:21:5d:04:7c:8a:36:10:ac:40: a3:92:50:9a:b7:49:ea:bc:03:f9:7a:22:4d:7c:7a: 1f:86:0e:89:0f:0e:0e:16:f1:13:ce:ff:7e:5a:e0: 77:5f:8f:de:a5:2e:e5:99:ef:21:0e:e4:34:1e:69: 44:eb:83:69:fc:76:90:c9:24:53:cc:e2:61:7c:92: 4c:0a:2b:4e:a7:16:89:e8:68:50:ee:aa:b5:2b:f7: f4:9a:11:3e:ed:19:76:71:64:81:40:e1:b5:97:96: c7:35:72:df:df:78:69:a3:49:03:41:13:27:e9:66: db:1f:cb:c0:b6:08:b4:65:e4:90:b3:4d:35:67:e1: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3A:28:2B:93:CF:E8:56:D9:6D:21:FB:D9:41:77:77:90:87:29:E0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NzooK5PP6FbZbSH72UF3d5CHKeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.225.0/24 31.57.127.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:b1:ec:7e:db:a2:28:ba:d4:55:6d:b0:e3:71:90:f7:37:47: e0:cd:10:9b:27:a4:22:8f:a2:fc:e2:a0:cb:79:d1:f5:dc:a9: 3b:7f:36:4c:28:11:fb:67:fb:28:b9:f0:e4:dd:a7:19:76:f6: 5d:d7:1c:f1:d3:c5:7e:5b:f2:c9:f0:26:e1:d1:e9:d1:b6:83: f0:56:4a:47:cd:46:12:8e:ed:b4:68:fd:a7:11:58:98:4c:72: 2f:57:a5:14:58:49:82:40:30:54:31:6b:f5:76:60:f9:c0:bb: 41:04:a8:81:17:b3:ec:94:6d:f1:74:9f:7f:a9:a3:11:93:a3: 7b:8c:20:3a:ab:0d:06:9b:40:4d:27:b6:f5:19:68:49:b8:55: 0c:74:f7:06:9e:05:df:47:01:d7:9f:22:bf:41:b2:ba:0a:63: bb:77:00:a2:12:5c:7a:f5:ec:f2:1c:45:74:0f:12:9a:b2:f3: 05:5d:47:72:8a:ce:80:12:a3:e2:05:1a:87:5b:3b:78:4d:3f: d9:38:3b:99:8e:85:c3:03:c4:1a:65:71:5b:a4:0b:27:a4:cb: a8:43:a4:9a:09:f1:a9:9e:d2:b2:68:37:85:74:95:70:b4:55: 53:63:34:ce:81:03:59:b8:4b:a9:88:2f:f1:fb:1f:8c:03:b4: a8:9a:af:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hL9Pfe6qkii1u8NBPnzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzNhMjgyYjkzY2ZlODU2ZDk2ZDIxZmJkOTQxNzc3NzkwODcyOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5wq7iMtmp1xT4wdbB2uAKyI5pu/ S+3joGOlbXGQYU6hxUO0HaobsDKOot8mFZcCcilLkQdG3UBE6HeoqEA4wEECc1s3 tBBYnBWN2xmBHGAnmOdH1GVJ087loarpETdzvJZ66XD/OAbBhWCDBj+wk7YYwwpz 4xvdhffqRUMhXQR8ijYQrECjklCat0nqvAP5eiJNfHofhg6JDw4OFvETzv9+WuB3 X4/epS7lme8hDuQ0HmlE64Np/HaQySRTzOJhfJJMCitOpxaJ6GhQ7qq1K/f0mhE+ 7Rl2cWSBQOG1l5bHNXLf33hpo0kDQRMn6WbbH8vAtgi0ZeSQs001Z+HMOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDc6KCuTz+hW2W0h+9lBd3eQhyngMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTnpvb0s1UFA2RmJaYlNINzJVRjNkNUNIS2VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjhAwQA Hzl/MA0GCSqGSIb3DQEBCwUAA4IBAQCdsex+26IoutRVbbDjcZD3N0fgzRCbJ6Qi j6L84qDLedH13Kk7fzZMKBH7Z/soufDk3acZdvZd1xzx08V+W/LJ8Cbh0enRtoPw VkpHzUYSju20aP2nEViYTHIvV6UUWEmCQDBUMWv1dmD5wLtBBKiBF7PslG3xdJ9/ qaMRk6N7jCA6qw0Gm0BNJ7b1GWhJuFUMdPcGngXfRwHXnyK/QbK6CmO7dwCiElx6 9ezyHEV0DxKasvMFXUdyis6AEqPiBRqHWzt4TT/ZODuZjoXDA8QaZXFbpAsnpMuo Q6SaCfGpntKyaDeFdJVwtFVTYzTOgQNZuEupiC/x+x+MA7Somq/R -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:55 2026 by rpki-client