This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bjacajSTXJhRxxBMpmch_ONO0kg.roa File: bjacajSTXJhRxxBMpmch_ONO0kg.roa (raw, json) Hash identifier: OwfhukGRWdiG54awcKe67Q9QTGfivye7ru3AHSciisQ= Subject key identifier: 6E:36:9C:6A:34:93:5C:98:51:C7:10:4C:A6:67:21:FC:E3:4E:D2:48 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84D6A9CC8260C8B3334CA424EDC6F5 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bjacajSTXJhRxxBMpmch_ONO0kg.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 266400 IP address blocks: 31.57.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d6:a9:cc:82:60:c8:b3:33:4c:a4:24:ed:c6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e369c6a34935c9851c7104ca66721fce34ed248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:f4:81:b2:e2:da:33:d5:db:48:05:04:52: 3a:8d:e1:49:03:0a:16:d3:0e:f3:67:ab:67:8d:d0: 8a:5e:2b:cb:dc:ec:14:83:c0:95:9c:07:cd:89:12: 83:dc:9f:e0:66:08:1d:75:25:73:01:25:22:01:e5: c8:1e:70:13:2e:7c:08:ab:f4:8a:a3:d7:bc:25:1d: 96:ba:a3:74:a1:bb:ff:12:17:bc:ac:be:4b:25:b1: 31:9c:72:76:10:be:bd:ae:f2:87:d6:5d:f9:06:c6: 12:ba:be:24:a4:e6:6b:2c:f1:7b:73:05:c9:73:a6: ba:2b:cd:16:50:87:58:1e:47:e6:0e:de:0c:4f:a6: 2e:d9:62:04:bd:76:9f:72:94:43:0f:d0:f5:c8:c4: 7c:c0:c3:fc:56:be:6b:7e:ff:53:c2:d0:f8:65:da: a2:a9:77:d4:17:e8:4b:f3:76:30:df:23:78:51:ac: ac:4f:db:86:db:3e:e8:98:d3:0b:8d:04:29:db:8d: 3b:5b:59:25:43:23:26:2f:9a:27:1b:28:99:25:21: d6:c2:e4:77:4d:ee:c1:77:ef:22:ee:01:06:a2:03: 5d:43:c6:c3:1f:24:5a:6b:c4:ac:c6:35:9e:d3:35: 58:b5:74:74:ce:f5:6d:cc:dc:98:04:a0:3e:8f:12: a9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:36:9C:6A:34:93:5C:98:51:C7:10:4C:A6:67:21:FC:E3:4E:D2:48 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bjacajSTXJhRxxBMpmch_ONO0kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.174.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:16:bc:e6:de:54:3f:f2:1f:ed:bb:3a:af:01:d4:e7:9f:4a: de:ba:34:c1:49:7e:79:1e:2f:10:0b:8e:ef:a8:e3:9d:70:b6: a9:ee:39:16:b6:71:f7:de:cb:c0:7a:89:e9:43:e3:7f:7c:56: e0:fe:c4:12:4d:14:3e:54:c8:55:d7:96:fb:d5:c6:00:fb:f1: 6f:ff:89:f1:cb:ab:18:ce:7c:13:2a:71:63:b7:85:d3:80:32: 1b:08:0d:df:35:33:9b:1e:40:98:7c:7b:34:03:6f:8b:a7:d1: 65:86:db:71:8c:15:87:9e:0a:0e:df:f4:b7:1a:cb:b2:26:da: 06:b8:1f:c3:e1:17:36:a9:fc:f4:3f:7d:6e:a3:a1:d7:32:73: 04:66:88:f5:41:74:5f:c1:78:74:40:4b:e5:40:43:c0:12:25: 46:e4:f9:4e:c5:5f:c4:ed:51:62:5c:9f:37:d1:83:cf:04:8e: e9:e9:ac:1d:a5:6d:ae:7f:13:71:c0:46:be:ed:29:8f:f1:a6: e7:e8:b3:b9:33:e8:a8:de:21:60:46:d8:08:5e:f6:e7:a3:e2: 86:f6:a1:73:cf:9c:06:71:cb:d3:33:4d:f6:c7:0b:72:ee:de: 4e:4e:5a:22:ff:ea:d4:c5:b6:fc:2e:9b:9c:33:55:56:00:96: 71:fa:cd:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNapzIJgyLMzTKQk7cb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTM2OWM2YTM0OTM1Yzk4NTFjNzEwNGNhNjY3MjFmY2UzNGVkMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnT0gbLi2jPV20gFBFI6jeFJAwoW 0w7zZ6tnjdCKXivL3OwUg8CVnAfNiRKD3J/gZggddSVzASUiAeXIHnATLnwIq/SK o9e8JR2WuqN0obv/Ehe8rL5LJbExnHJ2EL69rvKH1l35BsYSur4kpOZrLPF7cwXJ c6a6K80WUIdYHkfmDt4MT6Yu2WIEvXafcpRDD9D1yMR8wMP8Vr5rfv9TwtD4Zdqi qXfUF+hL83Yw3yN4UaysT9uG2z7omNMLjQQp2407W1klQyMmL5onGyiZJSHWwuR3 Te7Bd+8i7gEGogNdQ8bDHyRaa8SsxjWe0zVYtXR0zvVtzNyYBKA+jxKp4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG42nGo0k1yYUccQTKZnIfzjTtJIMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYmphY2FqU1RYSmhSeHhCTXBtY2hfT05PMGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzmuMA0G CSqGSIb3DQEBCwUAA4IBAQBrFrzm3lQ/8h/tuzqvAdTnn0reujTBSX55Hi8QC47v qOOdcLap7jkWtnH33svAeonpQ+N/fFbg/sQSTRQ+VMhV15b71cYA+/Fv/4nxy6sY znwTKnFjt4XTgDIbCA3fNTObHkCYfHs0A2+Lp9FlhttxjBWHngoO3/S3GsuyJtoG uB/D4Rc2qfz0P31uo6HXMnMEZoj1QXRfwXh0QEvlQEPAEiVG5PlOxV/E7VFiXJ83 0YPPBI7p6awdpW2ufxNxwEa+7SmP8abn6LO5M+io3iFgRtgIXvbno+KG9qFzz5wG ccvTM032xwty7t5OTloi/+rUxbb8LpucM1VWAJZx+s3f -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:50 2026 by rpki-client