This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W7fV-YXkaOz_pVX8elKc5uHeNhg.roa File: W7fV-YXkaOz_pVX8elKc5uHeNhg.roa (raw, json) Hash identifier: VyZlaAcxjFLlOkQTv0T4s1HCarGGx3/Ii93g2nRiaPI= Subject key identifier: 5B:B7:D5:F9:85:E4:68:EC:FF:A5:55:FC:7A:52:9C:E6:E1:DE:36:18 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B13CCD8FCB0F57CD1FF31C3F859086F38 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W7fV-YXkaOz_pVX8elKc5uHeNhg.roa Signing time: Fri 12 Dec 2025 18:22:30 +0000 ROA not before: Fri 12 Dec 2025 18:22:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62425 IP address blocks: 31.58.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:cc:d8:fc:b0:f5:7c:d1:ff:31:c3:f8:59:08:6f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 12 18:22:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5bb7d5f985e468ecffa555fc7a529ce6e1de3618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:16:be:ef:fb:93:d9:dd:c3:78:2d:c1:a4: 54:7a:df:6e:5c:57:73:f1:17:69:ef:7a:da:47:4a: c7:aa:ca:c6:7d:90:e6:89:9d:88:0b:b9:67:ce:6b: c5:1d:9a:a6:e4:f3:b0:f4:7e:1f:61:21:42:1e:94: 3c:3c:7f:bd:5e:53:f8:f3:b3:73:2e:f7:93:fe:fe: 46:80:ae:a8:b8:08:41:64:75:77:0a:c1:9d:ed:8a: 50:18:44:42:d8:2a:80:fc:0a:84:d6:08:3a:4a:2e: 62:78:4a:dd:9f:59:fe:c5:4c:87:27:82:57:3b:8f: 71:aa:2d:a9:d4:1c:a1:b1:37:96:7b:5f:e7:62:de: ae:38:22:93:2d:7f:19:05:ae:f4:78:71:de:b4:42: 1e:fc:0e:bc:a8:5f:29:fa:a1:c3:54:50:ce:7f:83: 35:6b:95:e2:33:c3:48:94:01:7d:bb:75:bd:28:63: f5:6f:ed:3d:b0:f4:a6:0b:c9:3c:6c:06:71:3d:c0: 10:7d:df:68:0b:d7:35:77:db:47:f5:84:ef:07:be: 38:32:d1:cc:c2:0c:7a:7e:87:58:04:88:2a:99:04: 62:be:d9:8f:fd:60:13:74:dc:93:4d:81:5c:a8:1a: e6:70:7a:db:ef:2a:15:04:c1:68:83:c4:dc:29:6d: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B7:D5:F9:85:E4:68:EC:FF:A5:55:FC:7A:52:9C:E6:E1:DE:36:18 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W7fV-YXkaOz_pVX8elKc5uHeNhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.236.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:af:10:72:36:b5:9f:97:94:23:65:45:5a:7d:13:75:4f:6c: 7d:5b:54:ba:24:78:3f:cb:04:f8:3e:a5:88:f1:6b:82:71:3b: c3:7c:b9:29:ee:24:0f:7a:25:14:80:ab:d1:f6:04:5d:04:b6: a1:61:10:61:14:91:66:0e:a1:14:3f:76:7e:e9:f7:78:b1:3b: 4d:9d:56:39:e7:d8:d5:7d:0e:dc:ae:d5:42:0d:70:ad:e3:10: 4b:0f:7d:3c:b3:c8:0f:f3:25:85:a7:16:4c:87:52:39:7b:a8: aa:43:c6:97:74:54:c8:01:72:e7:4e:32:8f:ec:a4:cd:64:51: 4a:d2:f6:75:11:e8:df:22:31:fc:ef:cb:2f:f8:27:b1:ab:d6: 0e:a7:fd:1c:e0:22:70:03:d7:67:80:32:c0:e3:e7:5e:47:d6: bc:51:22:34:75:68:02:07:6c:27:39:9e:1d:12:e1:56:34:3b: 05:9a:52:e8:2d:70:57:33:74:0a:ee:04:83:1b:b1:0a:d1:bb: cc:f6:7b:87:2c:0b:53:03:31:5e:d6:0d:f2:19:4e:45:2f:50: 8c:0f:65:4d:f9:12:bf:41:17:f0:82:1d:59:8c:7c:a5:55:96: 2b:eb:d7:67:59:c0:f1:3b:ed:57:e4:b6:3c:a5:69:a0:3d:9d: f6:78:2d:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsTzNj8sPV80f8xw/hZCG84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjEyMTgyMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmI3ZDVmOTg1ZTQ2OGVjZmZhNTU1ZmM3YTUyOWNlNmUxZGUzNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu30Wvu/7k9ndw3gtwaRUet9uXFdz 8Rdp73raR0rHqsrGfZDmiZ2IC7lnzmvFHZqm5POw9H4fYSFCHpQ8PH+9XlP487Nz LveT/v5GgK6ouAhBZHV3CsGd7YpQGERC2CqA/AqE1gg6Si5ieErdn1n+xUyHJ4JX O49xqi2p1ByhsTeWe1/nYt6uOCKTLX8ZBa70eHHetEIe/A68qF8p+qHDVFDOf4M1 a5XiM8NIlAF9u3W9KGP1b+09sPSmC8k8bAZxPcAQfd9oC9c1d9tH9YTvB744MtHM wgx6fodYBIgqmQRivtmP/WATdNyTTYFcqBrmcHrb7yoVBMFog8TcKW04aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFu31fmF5Gjs/6VV/HpSnObh3jYYMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVzdmVi1ZWGthT3pfcFZYOGVsS2M1dUhlTmhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrsMA0G CSqGSIb3DQEBCwUAA4IBAQBKrxByNrWfl5QjZUVafRN1T2x9W1S6JHg/ywT4PqWI 8WuCcTvDfLkp7iQPeiUUgKvR9gRdBLahYRBhFJFmDqEUP3Z+6fd4sTtNnVY559jV fQ7crtVCDXCt4xBLD308s8gP8yWFpxZMh1I5e6iqQ8aXdFTIAXLnTjKP7KTNZFFK 0vZ1EejfIjH878sv+Cexq9YOp/0c4CJwA9dngDLA4+deR9a8USI0dWgCB2wnOZ4d EuFWNDsFmlLoLXBXM3QK7gSDG7EK0bvM9nuHLAtTAzFe1g3yGU5FL1CMD2VN+RK/ QRfwgh1ZjHylVZYr69dnWcDxO+1X5LY8pWmgPZ32eC3e -----END CERTIFICATE-----Generated at Sat Dec 20 10:27:40 2025 by rpki-client