This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PMWacg24s-FpS8wEEUhnLV2Pm5I.roa File: PMWacg24s-FpS8wEEUhnLV2Pm5I.roa (raw, json) Hash identifier: sbWNRJwJRTWephTY4fkS41MzSqJdlpcQGh2vAKgGO2A= Subject key identifier: 3C:C5:9A:72:0D:B8:B3:E1:69:4B:CC:04:11:48:67:2D:5D:8F:9B:92 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A901DD246A1439ED69BB7D3E2CCF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PMWacg24s-FpS8wEEUhnLV2Pm5I.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 31.56.198.0/24 maxlen: 24 31.59.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a9:01:dd:24:6a:14:39:ed:69:bb:7d:3e:2c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cc59a720db8b3e1694bcc041148672d5d8f9b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:9b:c4:1b:fb:91:29:87:a5:19:f1:cc:6d: de:14:ca:7d:d7:8d:53:86:e8:9e:5e:eb:19:ae:7b: da:bd:9b:5a:2a:af:89:77:ed:e6:ec:da:cf:f6:09: 28:2e:33:3f:95:81:58:da:61:2c:9c:7e:25:cb:e6: 8a:ca:01:2f:50:6d:54:78:aa:8a:e7:b9:df:2c:e1: b7:f6:b8:30:77:b1:9c:36:a0:2b:22:0d:09:f0:36: fe:20:ba:bf:8c:d5:a8:36:19:36:e6:e9:84:71:26: 46:9f:4a:7d:03:5a:12:85:c6:fe:4c:36:6b:df:b4: e2:7d:9c:bb:6b:98:e1:78:18:20:c2:fb:60:57:5f: 68:a4:9b:2a:79:54:b2:df:8c:9f:1c:11:ec:27:8b: cf:81:ad:d8:2f:be:d4:84:5b:5f:1f:b2:3c:a2:e8: df:5a:fb:a0:b4:dd:44:28:70:a0:a3:33:17:2b:36: 6e:29:fb:60:6a:11:e6:b6:fa:de:93:6f:d4:93:b1: 5b:61:db:dd:e6:75:99:d4:e6:98:7f:b0:9e:f7:98: 3b:79:67:53:01:d9:64:37:35:bc:da:db:7a:35:47: ad:fa:cb:fb:61:88:b1:69:6d:8a:27:22:b6:8f:09: d6:63:52:1b:ec:30:19:ec:bc:6f:95:f7:e4:8c:a1: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C5:9A:72:0D:B8:B3:E1:69:4B:CC:04:11:48:67:2D:5D:8F:9B:92 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PMWacg24s-FpS8wEEUhnLV2Pm5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.198.0/24 31.59.213.0/24 Signature Algorithm: sha256WithRSAEncryption 53:15:22:b4:14:a2:1e:39:5f:b7:ba:b7:00:f5:45:96:37:43: 8d:73:58:a7:f5:62:28:b5:de:7a:ea:b4:b6:d1:f4:63:29:5a: a2:6a:06:b3:47:f1:c1:c0:77:cb:9f:11:46:1c:05:7c:df:57: 0b:c6:f8:0e:54:47:3d:91:1d:de:fc:84:33:0d:d0:27:31:28: c8:98:68:31:ca:1d:aa:98:ae:ec:90:94:31:8f:42:8b:9b:47: 34:5e:3e:f4:b6:5d:08:98:07:ab:24:43:31:23:86:b5:51:e3: 5c:bb:3c:1a:34:78:f4:af:f8:8d:fe:4d:f2:7a:ef:d2:cc:1c: 37:2d:62:e8:d9:7e:ca:6a:2b:81:88:10:66:03:11:55:df:bf: 46:03:10:ef:cd:ec:0d:33:83:01:fc:78:e9:88:a9:11:e3:1c: c3:a0:76:bc:f2:87:cd:ad:07:03:3b:9d:a2:b5:7f:8a:6d:06: 29:d3:22:e2:c2:bb:99:73:de:49:bc:21:52:4b:b4:3d:02:a4: 4c:ec:3c:53:4b:37:40:61:27:0e:d5:ce:46:39:84:65:2f:26: 3e:ce:ef:be:f5:70:5b:79:90:03:08:0b:82:f9:8f:c8:2b:3b: 39:3d:d8:88:f8:e3:65:55:f9:b7:59:72:4d:e9:67:64:7c:64: ca:79:3e:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hKkB3SRqFDntabt9PizPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2M1OWE3MjBkYjhiM2UxNjk0YmNjMDQxMTQ4NjcyZDVkOGY5YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a+bxBv7kSmHpRnxzG3eFMp9141T huieXusZrnvavZtaKq+Jd+3m7NrP9gkoLjM/lYFY2mEsnH4ly+aKygEvUG1UeKqK 57nfLOG39rgwd7GcNqArIg0J8Db+ILq/jNWoNhk25umEcSZGn0p9A1oShcb+TDZr 37TifZy7a5jheBggwvtgV19opJsqeVSy34yfHBHsJ4vPga3YL77UhFtfH7I8oujf WvugtN1EKHCgozMXKzZuKftgahHmtvrek2/Uk7FbYdvd5nWZ1OaYf7Ce95g7eWdT AdlkNzW82tt6NUet+sv7YYixaW2KJyK2jwnWY1Ib7DAZ7LxvlffkjKGSCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDzFmnINuLPhaUvMBBFIZy1dj5uSMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUE1XYWNnMjRzLUZwUzh3RUVVaG5MVjJQbTVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjGAwQA HzvVMA0GCSqGSIb3DQEBCwUAA4IBAQBTFSK0FKIeOV+3urcA9UWWN0ONc1in9WIo td566rS20fRjKVqiagazR/HBwHfLnxFGHAV831cLxvgOVEc9kR3e/IQzDdAnMSjI mGgxyh2qmK7skJQxj0KLm0c0Xj70tl0ImAerJEMxI4a1UeNcuzwaNHj0r/iN/k3y eu/SzBw3LWLo2X7KaiuBiBBmAxFV379GAxDvzewNM4MB/HjpiKkR4xzDoHa88ofN rQcDO52itX+KbQYp0yLiwruZc95JvCFSS7Q9AqRM7DxTSzdAYScO1c5GOYRlLyY+ zu++9XBbeZADCAuC+Y/IKzs5PdiI+ONlVfm3WXJN6WdkfGTKeT5L -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:53 2026 by rpki-client