This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_lT-7dk-tqkkDDQYIapGUlHN9NA.roa File: _lT-7dk-tqkkDDQYIapGUlHN9NA.roa (raw, json) Hash identifier: WLuKFm7d1+Yy7pRo/1gk+ahvDBT5gXkSoDtaPvD5vS8= Subject key identifier: FE:54:FE:ED:D9:3E:B6:A9:24:0C:34:18:21:AA:46:52:51:CD:F4:D0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84871484184B3855E28C02F116AECC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_lT-7dk-tqkkDDQYIapGUlHN9NA.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150249 IP address blocks: 31.56.30.0/24 maxlen: 24 31.56.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:87:14:84:18:4b:38:55:e2:8c:02:f1:16:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe54feedd93eb6a9240c341821aa465251cdf4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:58:b8:23:a6:56:1e:c5:b7:ee:97:57:92: e2:f5:26:11:1b:20:40:39:97:2a:37:f5:f1:b6:1c: 7d:9e:64:3c:db:6c:3f:da:41:7f:ab:87:de:0a:2b: a7:fb:50:72:23:2a:e0:69:dd:91:70:f2:c1:eb:a4: 90:32:d9:d4:21:6f:e3:9d:3e:30:87:08:cc:1b:40: 24:b1:71:a3:54:0e:22:8b:ef:d7:0b:4d:61:b4:cb: 76:aa:d0:e3:cf:f8:94:49:b5:46:9c:dd:64:e9:13: 06:a9:19:df:15:66:f7:3c:42:55:7b:5d:e2:7e:68: 1d:d9:0c:af:06:bd:6a:4d:67:19:d1:f1:ac:48:68: af:18:a4:f2:39:c8:d3:60:ba:09:c1:87:74:0e:ac: 51:f5:c9:fb:b9:a1:73:64:5b:be:d8:9b:e1:94:82: f2:97:38:e5:fa:31:00:38:e4:ee:27:b7:ff:79:1d: 3e:f8:79:32:95:9a:43:01:8e:03:30:00:d1:7f:79: a8:22:82:35:6a:e4:4d:41:05:fd:21:f1:0e:f0:0a: c4:a8:d8:d7:df:b7:7d:15:e5:0d:df:fb:81:21:fb: 25:09:cd:61:67:a6:82:f7:1a:5a:f0:55:4f:c4:3f: dc:6f:6a:bc:af:6a:44:49:7a:4d:c6:c3:44:0b:27: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:FE:ED:D9:3E:B6:A9:24:0C:34:18:21:AA:46:52:51:CD:F4:D0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_lT-7dk-tqkkDDQYIapGUlHN9NA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.30.0/24 31.56.43.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:45:8f:c4:b3:4d:7b:ab:a8:20:ac:94:aa:9c:a7:7a:be:82: 9a:da:5d:6c:2c:e6:4b:95:28:d8:7c:8a:2a:e3:38:96:68:ea: 4c:92:9b:4a:df:56:b0:fb:77:75:1c:14:98:cd:7a:25:27:f1: f7:9e:8b:22:4b:cf:ee:73:64:dc:b4:bd:48:e5:ff:ef:d9:2b: 25:21:15:32:be:02:4c:86:a7:bf:06:28:e3:80:71:13:c3:db: 42:a3:69:87:89:11:ab:32:c1:49:ef:8d:94:21:5a:91:5e:bf: 7c:71:40:2d:cf:9f:cd:c8:64:5d:03:7e:2e:ec:12:c8:03:57: aa:31:0b:59:9e:53:23:64:69:8b:d9:d2:b2:f5:b6:82:7d:ed: 95:bc:c4:f1:c3:db:04:37:14:20:4f:e1:b7:8d:56:f1:4a:d5: df:61:f4:d1:f5:d4:09:b0:58:f0:51:92:f2:b9:1e:3f:03:a8: 1f:5e:9e:d2:d3:ba:7f:29:eb:66:71:18:a4:fe:f1:61:3f:0a: db:31:2c:9d:2d:a1:2d:5c:eb:24:20:00:d4:6e:44:ef:d3:27: 2c:25:a2:f9:13:c8:33:ae:1b:83:84:46:a9:b9:4b:cc:47:7d: 6e:9b:82:0a:1c:d7:2a:9e:bd:9e:50:16:7a:49:af:54:58:f6: 9d:e9:95:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hIcUhBhLOFXijALxFq7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTU0ZmVlZGQ5M2ViNmE5MjQwYzM0MTgyMWFhNDY1MjUxY2RmNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJFYuCOmVh7Ft+6XV5Li9SYRGyBA OZcqN/Xxthx9nmQ822w/2kF/q4feCiun+1ByIyrgad2RcPLB66SQMtnUIW/jnT4w hwjMG0AksXGjVA4ii+/XC01htMt2qtDjz/iUSbVGnN1k6RMGqRnfFWb3PEJVe13i fmgd2QyvBr1qTWcZ0fGsSGivGKTyOcjTYLoJwYd0DqxR9cn7uaFzZFu+2JvhlILy lzjl+jEAOOTuJ7f/eR0++HkylZpDAY4DMADRf3moIoI1auRNQQX9IfEO8ArEqNjX 37d9FeUN3/uBIfslCc1hZ6aC9xpa8FVPxD/cb2q8r2pESXpNxsNECydjcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP5U/u3ZPrapJAw0GCGqRlJRzfTQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvX2xULTdkay10cWtrRERRWUlhcEdVbEhOOU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgeAwQA HzgrMA0GCSqGSIb3DQEBCwUAA4IBAQA8RY/Es017q6ggrJSqnKd6voKa2l1sLOZL lSjYfIoq4ziWaOpMkptK31aw+3d1HBSYzXolJ/H3nosiS8/uc2TctL1I5f/v2Ssl IRUyvgJMhqe/BijjgHETw9tCo2mHiRGrMsFJ742UIVqRXr98cUAtz5/NyGRdA34u 7BLIA1eqMQtZnlMjZGmL2dKy9baCfe2VvMTxw9sENxQgT+G3jVbxStXfYfTR9dQJ sFjwUZLyuR4/A6gfXp7S07p/KetmcRik/vFhPwrbMSydLaEtXOskIADUbkTv0ycs JaL5E8gzrhuDhEapuUvMR31um4IKHNcqnr2eUBZ6Sa9UWPad6ZVG -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:54 2026 by rpki-client