This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jisCzl_4s823tWRMkon-rpQFBXI.roa File: jisCzl_4s823tWRMkon-rpQFBXI.roa (raw, json) Hash identifier: ulHrWYuYlTpZfwW8nYc0YwzGdrhoNUNM/oQusaUq+RQ= Subject key identifier: 8E:2B:02:CE:5F:F8:B3:CD:B7:B5:64:4C:92:89:FE:AE:94:05:05:72 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AD06373B0CF75EB4DD4800662EDC0FD15 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jisCzl_4s823tWRMkon-rpQFBXI.roa Signing time: Sat 29 Nov 2025 16:12:49 +0000 ROA not before: Sat 29 Nov 2025 16:12:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207590 IP address blocks: 31.56.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:63:73:b0:cf:75:eb:4d:d4:80:06:62:ed:c0:fd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 29 16:12:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e2b02ce5ff8b3cdb7b5644c9289feae94050572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:18:6b:91:87:67:90:b5:7b:65:c4:b4:d6: b9:8e:2e:bd:4f:fc:c2:0d:f2:ee:3d:10:51:9b:b7: 56:e0:83:28:25:36:9c:89:f9:6b:5b:ec:35:6a:bd: a9:14:d7:c0:33:07:e2:8f:5c:a1:88:53:ac:c7:0b: 72:f2:95:b9:7e:28:1a:29:84:a5:86:5a:2d:37:fd: 59:cc:66:af:39:22:b7:16:a2:41:76:5a:28:32:63: 6e:89:53:31:43:8c:21:87:04:ba:86:82:60:cc:66: a4:54:a8:5e:df:a8:5d:a9:2c:f2:89:9f:2d:ff:a9: b7:48:35:94:eb:a5:60:b4:31:35:d1:07:3c:8a:e4: be:16:c7:02:59:fe:f7:17:3c:13:e8:25:34:4b:64: 8b:01:14:79:32:4c:19:75:22:ba:d7:24:43:c4:7f: 14:b2:05:25:ed:53:b0:0b:cf:31:21:e1:b8:ad:4d: 62:1c:7e:9c:54:99:a8:7d:dc:37:c3:8c:af:1f:10: 59:5c:08:61:0e:7f:c5:da:48:cf:5f:52:c5:a3:97: 72:4b:55:9f:57:1c:66:4b:af:02:a2:5e:c2:fc:94: ed:6a:de:cc:7a:17:0d:be:12:af:aa:4e:9d:ec:a7: ad:0b:90:5c:aa:fc:00:4a:c1:06:4e:6d:df:41:63: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2B:02:CE:5F:F8:B3:CD:B7:B5:64:4C:92:89:FE:AE:94:05:05:72 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jisCzl_4s823tWRMkon-rpQFBXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.32.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:17:65:39:57:58:36:9a:95:f8:e3:85:2a:2f:79:1b:87:c8: 68:bb:39:8e:fe:10:d5:7c:db:41:e0:45:4a:7d:76:97:af:de: 59:6d:75:ff:7f:ba:f6:c7:e3:f9:30:dd:15:2b:a4:bd:77:ae: 59:c9:7a:46:7d:64:9d:da:5d:8e:41:61:7a:ce:3a:32:fd:67: 46:ed:c8:db:b8:95:be:80:c1:d8:7a:7b:e8:f3:3a:b4:45:07: 8c:3a:1b:a3:15:3a:a2:37:0d:c9:54:91:fd:b6:7f:de:c5:56: 51:67:7e:e0:41:fe:52:b1:fa:b8:d8:bf:c6:b8:0e:5c:85:27: 91:df:27:f2:3b:2a:84:b8:e1:68:bb:82:4a:7f:01:e1:a7:ab: 62:d7:1f:69:f4:5e:94:af:5d:dc:d0:56:6a:69:d7:a3:80:16: fc:b8:ad:f2:e1:d9:34:f3:61:b8:2b:01:ec:ce:8d:ce:04:9b: 92:7d:9f:3f:a4:7b:d8:48:fb:69:ed:47:93:9c:3f:56:34:41: 21:e9:cf:74:58:cb:e9:a7:e2:da:fe:07:b9:fb:05:8d:6a:0d: 92:29:06:4e:1b:d3:46:8a:cb:4d:37:9c:8b:cd:64:a1:c3:89: 55:47:87:5e:61:ee:54:b9:82:eb:49:bd:f6:b2:03:a2:73:2e: 6e:cf:7f:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrQY3Owz3XrTdSABmLtwP0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI5MTYxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTJiMDJjZTVmZjhiM2NkYjdiNTY0NGM5Mjg5ZmVhZTk0MDUwNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps4Ya5GHZ5C1e2XEtNa5ji69T/zC DfLuPRBRm7dW4IMoJTaciflrW+w1ar2pFNfAMwfij1yhiFOsxwty8pW5figaKYSl hlotN/1ZzGavOSK3FqJBdlooMmNuiVMxQ4whhwS6hoJgzGakVKhe36hdqSzyiZ8t /6m3SDWU66VgtDE10Qc8iuS+FscCWf73FzwT6CU0S2SLARR5MkwZdSK61yRDxH8U sgUl7VOwC88xIeG4rU1iHH6cVJmofdw3w4yvHxBZXAhhDn/F2kjPX1LFo5dyS1Wf VxxmS68Col7C/JTtat7MehcNvhKvqk6d7KetC5BcqvwASsEGTm3fQWNCcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4rAs5f+LPNt7VkTJKJ/q6UBQVyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvamlzQ3psXzRzODIzdFdSTWtvbi1ycFFGQlhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzggMA0G CSqGSIb3DQEBCwUAA4IBAQBcF2U5V1g2mpX444UqL3kbh8houzmO/hDVfNtB4EVK fXaXr95ZbXX/f7r2x+P5MN0VK6S9d65ZyXpGfWSd2l2OQWF6zjoy/WdG7cjbuJW+ gMHYenvo8zq0RQeMOhujFTqiNw3JVJH9tn/exVZRZ37gQf5Ssfq42L/GuA5chSeR 3yfyOyqEuOFou4JKfwHhp6ti1x9p9F6Ur13c0FZqadejgBb8uK3y4dk082G4KwHs zo3OBJuSfZ8/pHvYSPtp7UeTnD9WNEEh6c90WMvpp+La/ge5+wWNag2SKQZOG9NG istNN5yLzWShw4lVR4deYe5UuYLrSb32sgOicy5uz38j -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:03 2025 by rpki-client