This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QKn-3GowFMoNFBuAoD8z1nzbHM.roa File: 4QKn-3GowFMoNFBuAoD8z1nzbHM.roa (raw, json) Hash identifier: s82oXTZD2nYCNWzPk6zT+0dteRIQxAT5vjcqvxpseAQ= Subject key identifier: E1:02:A7:FB:71:A8:C0:53:28:34:50:6E:02:80:FC:CF:59:F3:6C:73 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B072C1F83FDA15EFB9BEE80E4DA95A2D3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QKn-3GowFMoNFBuAoD8z1nzbHM.roa Signing time: Wed 10 Dec 2025 07:31:30 +0000 ROA not before: Wed 10 Dec 2025 07:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207994 IP address blocks: 31.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:2c:1f:83:fd:a1:5e:fb:9b:ee:80:e4:da:95:a2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 10 07:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e102a7fb71a8c0532834506e0280fccf59f36c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:69:9b:c6:1b:87:4c:ff:ba:bb:fe:b5:3c: 74:ab:ae:82:61:07:dc:0a:7e:18:fa:cd:da:ee:ad: 15:d1:07:f3:8e:cd:04:c2:9f:64:d5:3e:63:39:90: b3:f2:74:8c:8e:52:8f:a7:06:7f:cc:ee:bf:06:10: 39:45:8a:da:75:66:2f:96:14:0a:27:36:34:91:28: 2c:ba:5d:58:2f:a1:8e:7c:60:3b:7c:fd:a7:ec:2c: b0:2b:87:17:b8:3e:06:f8:25:63:3c:30:c3:21:06: 8d:2c:47:c1:68:61:97:08:47:68:5e:d6:9a:26:f2: 49:3c:fb:cf:1e:08:00:1f:fa:ef:dc:3c:98:fb:99: 61:0d:bc:e8:0f:fa:33:32:97:b9:4f:94:d6:c1:5c: 0c:51:8c:df:5a:ec:84:a6:4f:32:ee:85:e3:ad:a1: 6c:56:9b:4d:f0:f0:f7:2f:8f:08:18:51:72:ed:8a: f9:e9:96:8a:92:61:7b:45:22:1b:73:57:bb:ad:c3: 0d:58:a7:f3:f0:4d:cd:b2:69:e6:9f:14:8d:de:45: 0e:b8:52:1a:da:c6:4d:ca:5b:02:4f:a6:12:f3:08: 0c:ee:23:a1:b2:2a:1e:2d:da:cf:aa:b8:15:ab:4d: 5e:9c:f8:1e:3c:04:53:5e:bd:bb:b9:50:ac:b2:e8: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:02:A7:FB:71:A8:C0:53:28:34:50:6E:02:80:FC:CF:59:F3:6C:73 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QKn-3GowFMoNFBuAoD8z1nzbHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.34.0/24 Signature Algorithm: sha256WithRSAEncryption af:9e:ff:62:7e:cc:36:49:73:21:b7:6a:d9:56:ac:b8:77:64: 07:84:f7:5f:64:74:cb:89:38:ab:e8:aa:c8:a1:ca:be:04:56: 6d:7f:48:d1:2b:65:68:78:da:39:bd:de:51:60:4e:e0:62:b4: 57:c9:62:c9:34:b4:ce:25:59:ca:4a:80:fd:84:a6:3d:ee:56: 46:df:33:b8:95:1b:4b:b6:93:1d:9c:22:3a:b2:02:8d:41:64: f9:c0:9f:f6:5f:f3:1a:a6:fe:50:03:da:a3:c3:77:96:e9:91: 42:61:c5:ca:36:66:87:3a:55:4a:bd:3a:04:e8:c8:03:5e:27: ca:9b:ec:10:26:67:67:1f:f5:f4:41:0f:ed:e6:57:c2:72:a9: 65:f8:35:2e:17:0a:8a:0f:96:4b:71:f7:5f:fb:1f:b6:d2:21: 2e:c6:ac:1c:20:c6:ff:cb:87:06:05:66:90:c6:08:c4:55:9b: b1:38:c1:ac:90:ec:6c:3f:41:54:cf:d0:56:d2:fd:fd:0b:36: 5e:b9:b9:7e:59:cb:1e:9e:74:0c:7e:5e:b5:a4:69:6b:4c:db: 63:41:8b:59:98:8e:0d:d0:1d:da:29:32:4a:8c:eb:2b:60:49: dd:eb:c1:59:81:12:0f:c3:09:86:aa:b0:8e:90:64:c9:ee:d2: 7c:8a:8a:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHLB+D/aFe+5vugOTalaLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjEwMDczMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTAyYTdmYjcxYThjMDUzMjgzNDUwNmUwMjgwZmNjZjU5ZjM2YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHtpm8Ybh0z/urv+tTx0q66CYQfc Cn4Y+s3a7q0V0Qfzjs0Ewp9k1T5jOZCz8nSMjlKPpwZ/zO6/BhA5RYradWYvlhQK JzY0kSgsul1YL6GOfGA7fP2n7CywK4cXuD4G+CVjPDDDIQaNLEfBaGGXCEdoXtaa JvJJPPvPHggAH/rv3DyY+5lhDbzoD/ozMpe5T5TWwVwMUYzfWuyEpk8y7oXjraFs VptN8PD3L48IGFFy7Yr56ZaKkmF7RSIbc1e7rcMNWKfz8E3NsmnmnxSN3kUOuFIa 2sZNylsCT6YS8wgM7iOhsioeLdrPqrgVq01enPgePARTXr27uVCssujn1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOECp/txqMBTKDRQbgKA/M9Z82xzMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNFFLbi0zR293Rk1vTkZCdUFvRDh6MW56YkhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkiMA0G CSqGSIb3DQEBCwUAA4IBAQCvnv9ifsw2SXMht2rZVqy4d2QHhPdfZHTLiTir6KrI ocq+BFZtf0jRK2VoeNo5vd5RYE7gYrRXyWLJNLTOJVnKSoD9hKY97lZG3zO4lRtL tpMdnCI6sgKNQWT5wJ/2X/Mapv5QA9qjw3eW6ZFCYcXKNmaHOlVKvToE6MgDXifK m+wQJmdnH/X0QQ/t5lfCcqll+DUuFwqKD5ZLcfdf+x+20iEuxqwcIMb/y4cGBWaQ xgjEVZuxOMGskOxsP0FUz9BW0v39CzZeubl+WcsennQMfl61pGlrTNtjQYtZmI4N 0B3aKTJKjOsrYEnd68FZgRIPwwmGqrCOkGTJ7tJ8iooK -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:41 2025 by rpki-client