This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sxk9r_ZGzNx1Vk5_7YpYG1GiYD4.roa File: sxk9r_ZGzNx1Vk5_7YpYG1GiYD4.roa (raw, json) Hash identifier: 6RRf/Jf0d+hvVYDsGFGYpIVPgyTH9TCpVnhHYRBL660= Subject key identifier: B3:19:3D:AF:F6:46:CC:DC:75:56:4E:7F:ED:8A:58:1B:51:A2:60:3E Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019ACAC09319EB221F69A1DAC39B1ABCEB09 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sxk9r_ZGzNx1Vk5_7YpYG1GiYD4.roa Signing time: Fri 28 Nov 2025 13:56:49 +0000 ROA not before: Fri 28 Nov 2025 13:56:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138415 IP address blocks: 31.57.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:c0:93:19:eb:22:1f:69:a1:da:c3:9b:1a:bc:eb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 28 13:56:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3193daff646ccdc75564e7fed8a581b51a2603e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:3a:3b:03:33:d8:28:8b:a0:c1:23:24:00: ac:e7:fd:c7:8e:8a:9f:ce:9b:9f:62:a2:3c:e1:98: 14:bb:d3:7e:8e:4a:2e:da:6f:f8:30:50:cc:f7:da: 5b:42:98:02:96:f3:46:66:a8:25:f1:14:7c:c9:c4: 04:86:e5:4b:5e:54:74:4d:37:08:fe:02:f1:4c:cd: 20:88:15:c2:19:1a:30:90:e1:c8:b2:ce:21:bf:52: 8f:e3:06:94:c9:cd:5f:67:43:7b:66:c8:c5:e0:2f: 66:7c:44:3b:8d:8c:40:76:56:e5:b4:49:1c:86:48: ee:eb:38:ae:b7:56:5f:bc:9c:cb:02:e1:f2:f1:92: a6:b7:1c:cd:34:52:60:b9:3a:09:6e:d4:14:18:f0: ed:73:4a:da:71:b3:de:95:13:20:b9:49:b7:22:27: 57:59:55:99:bc:d6:c4:fc:86:f9:63:86:e9:23:7b: 24:57:34:88:d5:9d:ac:d9:30:22:e7:d5:8c:78:3a: f7:27:2f:d9:9b:01:cc:c8:35:db:eb:11:2b:78:69: 84:12:a7:2a:fe:96:39:8b:16:f1:5c:5e:38:f1:ef: 0f:a2:ef:d3:c9:b8:02:a1:74:58:af:18:5a:7d:14: de:ac:3d:5b:dd:e1:9f:f5:12:28:74:14:fe:e7:e5: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:3D:AF:F6:46:CC:DC:75:56:4E:7F:ED:8A:58:1B:51:A2:60:3E X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sxk9r_ZGzNx1Vk5_7YpYG1GiYD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.51.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ea:a8:08:e5:0b:12:6f:ac:35:17:5d:39:32:57:05:08:81: d4:9b:3f:b4:28:49:dd:99:8b:23:50:11:12:d7:c8:86:e3:2e: 5c:52:e0:52:b7:65:31:9c:d3:95:18:d6:5e:8f:5b:6c:9a:a3: dd:fc:a7:01:ad:63:ca:bf:ec:63:c4:1d:4b:5a:ee:9c:1d:e4: 6b:cc:75:7b:1a:1c:7e:03:b2:88:87:0b:ec:3d:35:58:ef:88: 45:9d:47:d2:6b:d5:be:c6:58:ce:8b:6f:80:d7:a5:10:46:4e: de:d9:29:11:40:21:31:e1:f4:56:59:1f:42:9f:73:f1:4d:b3: 95:7a:ec:09:47:4f:42:cf:eb:f0:c6:a6:f7:be:df:d8:93:46: 71:74:00:31:18:1f:e5:29:38:ed:45:6c:66:61:ae:2d:34:d8: 14:0c:8f:f5:ed:a9:d1:c0:0f:9a:7c:4a:18:7d:61:5c:11:82: ce:9a:ab:80:40:4d:89:3c:c1:6b:c5:27:ea:b3:d2:0c:f0:fc: 17:f4:92:f0:ea:9e:23:b7:5b:78:1b:e2:6b:94:2e:d2:fd:f4: 35:d9:dc:e6:49:34:a2:2f:37:21:3e:08:c6:b9:1e:4b:1a:89: b3:cb:4d:eb:a7:d4:2b:08:68:34:1f:2f:5f:cd:62:03:eb:ad: ab:a2:62:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrKwJMZ6yIfaaHaw5savOsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI4MTM1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzE5M2RhZmY2NDZjY2RjNzU1NjRlN2ZlZDhhNTgxYjUxYTI2MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06s6OwMz2CiLoMEjJACs5/3Hjoqf zpufYqI84ZgUu9N+jkou2m/4MFDM99pbQpgClvNGZqgl8RR8ycQEhuVLXlR0TTcI /gLxTM0giBXCGRowkOHIss4hv1KP4waUyc1fZ0N7ZsjF4C9mfEQ7jYxAdlbltEkc hkju6ziut1ZfvJzLAuHy8ZKmtxzNNFJguToJbtQUGPDtc0racbPelRMguUm3IidX WVWZvNbE/Ib5Y4bpI3skVzSI1Z2s2TAi59WMeDr3Jy/ZmwHMyDXb6xEreGmEEqcq /pY5ixbxXF448e8Pou/TybgCoXRYrxhafRTerD1b3eGf9RIodBT+5+VEoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLMZPa/2RszcdVZOf+2KWBtRomA+MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvc3hrOXJfWkd6TngxVms1XzdZcFlHMUdpWUQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkzMA0G CSqGSIb3DQEBCwUAA4IBAQBo6qgI5QsSb6w1F105MlcFCIHUmz+0KEndmYsjUBES 18iG4y5cUuBSt2UxnNOVGNZej1tsmqPd/KcBrWPKv+xjxB1LWu6cHeRrzHV7Ghx+ A7KIhwvsPTVY74hFnUfSa9W+xljOi2+A16UQRk7e2SkRQCEx4fRWWR9Cn3PxTbOV euwJR09Cz+vwxqb3vt/Yk0ZxdAAxGB/lKTjtRWxmYa4tNNgUDI/17anRwA+afEoY fWFcEYLOmquAQE2JPMFrxSfqs9IM8PwX9JLw6p4jt1t4G+JrlC7S/fQ12dzmSTSi LzchPgjGuR5LGomzy03rp9QrCGg0Hy9fzWID662romIc -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:16 2025 by rpki-client