This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDmWcc4xHMlE7KwM52oT0GOnCQk.roa File: VDmWcc4xHMlE7KwM52oT0GOnCQk.roa (raw, json) Hash identifier: uprhuLdXr2XerXuykgUpSP7QcFPq6soutrL/IDf/h5k= Subject key identifier: 54:39:96:71:CE:31:1C:C9:44:EC:AC:0C:E7:6A:13:D0:63:A7:09:09 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84DB672220CAFB3B7C548B1C6D7C32 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDmWcc4xHMlE7KwM52oT0GOnCQk.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273138 IP address blocks: 31.56.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:db:67:22:20:ca:fb:3b:7c:54:8b:1c:6d:7c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54399671ce311cc944ecac0ce76a13d063a70909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:c1:cd:09:29:4b:3b:96:cd:34:35:2d:6c: 19:34:d4:ea:c2:e9:4d:09:c6:69:8b:80:99:ec:9f: 49:80:88:20:62:c6:f6:bc:c5:de:f6:4d:ab:d0:01: 98:94:12:40:fa:04:31:52:75:1a:bf:5f:95:77:c2: e4:6f:45:54:c4:52:01:71:08:32:7d:0c:47:7f:3a: 3a:4e:8b:89:d9:50:a3:de:cd:8e:7d:7b:fb:58:7f: b1:2b:9b:19:c5:4b:f5:f1:da:4b:c1:fb:96:d4:0c: ab:c4:2e:01:c5:7d:04:d2:16:af:6b:a5:9e:7d:f4: 10:81:71:0e:0a:6b:90:ca:bc:b7:91:f2:c1:d1:19: 7c:8a:8e:fe:ce:f9:78:eb:d3:9a:2b:d2:9b:74:6e: be:5b:96:bd:aa:9e:ef:cc:4d:de:50:42:b7:3c:80: bc:e9:6e:9c:ae:72:31:ee:32:f4:01:15:8b:4a:d0: a2:6e:48:73:58:e2:4e:4b:15:6b:27:d4:56:de:db: 7d:b7:f9:2f:b5:69:2e:2f:14:10:a0:a3:ed:08:07: 5c:3e:6a:21:b6:3a:4a:29:86:77:95:af:fb:e9:61: ce:32:85:40:5f:10:11:09:8e:f6:29:b3:fe:00:20: a8:c4:4d:45:2f:93:b8:de:fd:f7:bf:cd:28:ed:e7: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:96:71:CE:31:1C:C9:44:EC:AC:0C:E7:6A:13:D0:63:A7:09:09 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDmWcc4xHMlE7KwM52oT0GOnCQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.215.0/24 Signature Algorithm: sha256WithRSAEncryption 51:d8:77:58:2a:28:37:6b:31:84:0f:b6:e1:3e:41:11:91:fd: dd:3f:11:92:11:5c:38:44:02:29:c8:95:70:a9:39:0e:13:9a: b8:2d:85:96:9b:0f:0c:48:24:91:84:f9:10:e7:99:92:14:f1: ab:0e:7b:3a:d5:73:60:1b:a9:e3:de:c6:11:45:5e:92:6d:01: 05:69:d6:73:29:4b:ad:40:d7:81:a9:dc:f2:80:53:ed:16:a3: 27:9d:7c:c2:64:e1:3a:37:31:89:f9:63:94:8e:d9:d3:47:20: b6:c8:8a:0e:cd:36:03:e6:6b:d5:92:99:f8:eb:ca:d5:76:44: fe:e3:0b:c1:74:e2:41:34:c1:d0:6a:cf:1b:12:23:f6:a9:64: 25:2e:d1:1c:51:b8:00:4d:30:04:47:70:cf:e6:20:ba:d4:ba: 3c:6c:7e:48:3c:5a:51:09:6c:23:60:5a:36:3f:43:73:79:fc: f7:c3:1f:42:42:8b:e1:5a:e5:96:49:f6:5a:df:15:36:56:44: 94:9c:e6:7c:0b:f4:83:be:c4:03:cd:c3:8e:8d:7a:5d:57:24: e5:d7:11:7a:15:a0:42:27:ef:a6:c7:75:6e:e2:7c:0f:74:d8: 67:a3:8f:69:a9:3b:83:41:31:ff:21:90:f2:63:a4:e2:c1:27: 93:58:50:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNtnIiDK+zt8VIscbXwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDM5OTY3MWNlMzExY2M5NDRlY2FjMGNlNzZhMTNkMDYzYTcwOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL3BzQkpSzuWzTQ1LWwZNNTqwulN CcZpi4CZ7J9JgIggYsb2vMXe9k2r0AGYlBJA+gQxUnUav1+Vd8Lkb0VUxFIBcQgy fQxHfzo6TouJ2VCj3s2OfXv7WH+xK5sZxUv18dpLwfuW1AyrxC4BxX0E0hava6We ffQQgXEOCmuQyry3kfLB0Rl8io7+zvl469OaK9KbdG6+W5a9qp7vzE3eUEK3PIC8 6W6crnIx7jL0ARWLStCibkhzWOJOSxVrJ9RW3tt9t/kvtWkuLxQQoKPtCAdcPmoh tjpKKYZ3la/76WHOMoVAXxARCY72KbP+ACCoxE1FL5O43v33v80o7ed/VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQ5lnHOMRzJROysDOdqE9BjpwkJMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVkRtV2NjNHhITWxFN0t3TTUyb1QwR09uQ1FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzjXMA0G CSqGSIb3DQEBCwUAA4IBAQBR2HdYKig3azGED7bhPkERkf3dPxGSEVw4RAIpyJVw qTkOE5q4LYWWmw8MSCSRhPkQ55mSFPGrDns61XNgG6nj3sYRRV6SbQEFadZzKUut QNeBqdzygFPtFqMnnXzCZOE6NzGJ+WOUjtnTRyC2yIoOzTYD5mvVkpn468rVdkT+ 4wvBdOJBNMHQas8bEiP2qWQlLtEcUbgATTAER3DP5iC61Lo8bH5IPFpRCWwjYFo2 P0Nzefz3wx9CQovhWuWWSfZa3xU2VkSUnOZ8C/SDvsQDzcOOjXpdVyTl1xF6FaBC J++mx3Vu4nwPdNhno49pqTuDQTH/IZDyY6TiwSeTWFAI -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:55 2026 by rpki-client