This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0CdgLRFKJS91xR2gv6POxlGI6Bc.roa File: 0CdgLRFKJS91xR2gv6POxlGI6Bc.roa (raw, json) Hash identifier: obXIwMnGmYjrKFdQroZJF3DqYWcBB8vZyXdDzWRkodA= Subject key identifier: D0:27:60:2D:11:4A:25:2F:75:C5:1D:A0:BF:A3:CE:C6:51:88:E8:17 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B50943D3AA3A5B9B94163EDB7A45430A7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0CdgLRFKJS91xR2gv6POxlGI6Bc.roa Signing time: Wed 24 Dec 2025 13:37:30 +0000 ROA not before: Wed 24 Dec 2025 13:37:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 31.56.5.0/24 maxlen: 24 31.56.119.0/24 maxlen: 24 31.56.128.0/24 maxlen: 24 31.56.129.0/24 maxlen: 24 31.56.130.0/24 maxlen: 24 31.56.131.0/24 maxlen: 24 31.56.132.0/24 maxlen: 24 31.56.133.0/24 maxlen: 24 31.56.134.0/24 maxlen: 24 31.56.135.0/24 maxlen: 24 31.56.136.0/24 maxlen: 24 31.56.137.0/24 maxlen: 24 31.56.207.0/24 maxlen: 24 31.56.246.0/24 maxlen: 24 31.56.247.0/24 maxlen: 24 31.56.248.0/24 maxlen: 24 31.56.249.0/24 maxlen: 24 31.56.250.0/24 maxlen: 24 31.56.251.0/24 maxlen: 24 31.56.252.0/24 maxlen: 24 31.56.253.0/24 maxlen: 24 31.56.254.0/24 maxlen: 24 31.56.255.0/24 maxlen: 24 31.57.41.0/24 maxlen: 24 31.57.42.0/24 maxlen: 24 31.57.82.0/24 maxlen: 24 31.58.96.0/22 maxlen: 24 31.58.116.0/22 maxlen: 24 31.59.0.0/24 maxlen: 24 31.59.1.0/24 maxlen: 24 31.59.2.0/24 maxlen: 24 31.59.3.0/24 maxlen: 24 31.59.4.0/24 maxlen: 24 31.59.5.0/24 maxlen: 24 31.59.6.0/24 maxlen: 24 31.59.7.0/24 maxlen: 24 31.59.8.0/24 maxlen: 24 31.59.9.0/24 maxlen: 24 31.59.52.0/22 maxlen: 24 31.59.246.0/24 maxlen: 24 31.59.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:94:3d:3a:a3:a5:b9:b9:41:63:ed:b7:a4:54:30:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 24 13:37:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d027602d114a252f75c51da0bfa3cec65188e817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:1c:08:3e:5b:1d:e0:76:3d:17:cb:0a:67: 69:54:cd:7c:77:5a:ec:84:47:a9:e2:d7:bf:c2:8a: 1e:ca:4f:c8:65:60:61:48:fb:1c:16:36:c8:a1:0f: d8:b5:3d:38:b1:e3:00:a3:5c:7f:a1:c8:8c:79:d4: 9e:fd:09:81:e1:99:51:6e:47:b0:e8:9b:4d:30:b2: 2c:44:ae:96:27:ec:61:b7:7f:78:b2:74:c0:e9:67: a4:b6:1d:ac:5e:fc:ba:fc:7d:c4:8e:4d:e7:f6:ee: 4a:b7:41:95:1e:0e:a6:d7:e7:22:ea:56:b6:bc:53: e0:6f:da:61:32:86:bb:4e:17:05:34:e1:45:f9:79: c8:29:b6:14:db:0a:e5:69:f0:a1:46:1b:25:6f:11: ea:2c:14:6d:e9:67:94:7e:67:0c:ad:09:a0:0c:16: 20:4f:13:0f:57:0c:fd:37:76:b4:e5:9f:38:bb:6a: 6e:89:82:11:51:09:59:03:0f:6f:9c:b1:87:e6:91: 7e:f2:10:34:6b:d3:54:2d:53:a8:cb:17:61:cc:94: a0:4c:2d:0d:16:e6:bc:6b:35:5f:ce:ad:7c:63:44: 57:e7:a5:cf:e3:a2:f8:d2:83:e6:55:8b:5f:3d:19: 04:5e:ab:a2:3d:6d:b0:40:28:e1:77:9a:d4:db:1c: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:27:60:2D:11:4A:25:2F:75:C5:1D:A0:BF:A3:CE:C6:51:88:E8:17 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0CdgLRFKJS91xR2gv6POxlGI6Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.5.0/24 31.56.119.0/24 31.56.128.0-31.56.137.255 31.56.207.0/24 31.56.246.0-31.56.255.255 31.57.41.0-31.57.42.255 31.57.82.0/24 31.58.96.0/22 31.58.116.0/22 31.59.0.0-31.59.9.255 31.59.52.0/22 31.59.246.0/23 Signature Algorithm: sha256WithRSAEncryption 31:de:c2:dd:d0:79:fa:b7:1e:be:fa:bd:bc:42:dc:4b:f8:8d: ef:53:9a:88:75:7e:3f:c4:8e:70:4e:f8:c3:82:d7:41:6f:43: 7f:90:68:a7:70:ee:5c:74:ab:f7:a5:93:5f:8f:59:7c:e0:87: a3:5d:a1:48:32:44:7c:f5:11:55:d8:5c:11:39:6d:8e:09:58: 6a:92:8a:f2:8c:ba:75:bb:b9:b3:52:0b:13:21:fc:cc:ec:a5: 04:32:f1:a5:74:89:17:4e:76:13:0e:62:7a:d8:5e:0b:0d:4f: b7:dd:1a:93:a5:ad:90:23:ff:f8:23:42:57:17:44:c9:78:a8: d7:ba:c5:74:89:6d:d1:fe:ae:15:27:9f:3a:52:74:04:13:53: 87:17:a7:61:53:74:fa:26:09:95:b7:50:9e:19:13:e4:da:47: 9c:2d:93:dc:f8:0f:c3:cc:78:eb:6e:ed:87:a8:cd:2d:86:12: ae:c0:10:b6:85:c7:60:b8:a1:42:f6:c0:75:6b:b1:a9:82:1b: 46:c5:79:45:8a:be:bd:b0:fa:cd:99:2b:17:0f:d3:f9:76:2b: 2e:07:b5:c5:b9:2a:e8:e5:6b:a7:4c:32:5d:ec:7f:6b:62:ce: fb:69:39:22:c7:33:f0:f0:e8:f3:4d:ea:62:cb:2f:28:18:5a: 3a:f9:82:6a -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZtQlD06o6W5uUFj7bekVDCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI0MTMzNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDI3NjAyZDExNGEyNTJmNzVjNTFkYTBiZmEzY2VjNjUxODhlODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq8cCD5bHeB2PRfLCmdpVM18d1rs hEep4te/wooeyk/IZWBhSPscFjbIoQ/YtT04seMAo1x/ociMedSe/QmB4ZlRbkew 6JtNMLIsRK6WJ+xht394snTA6Wekth2sXvy6/H3Ejk3n9u5Kt0GVHg6m1+ci6la2 vFPgb9phMoa7ThcFNOFF+XnIKbYU2wrlafChRhslbxHqLBRt6WeUfmcMrQmgDBYg TxMPVwz9N3a05Z84u2puiYIRUQlZAw9vnLGH5pF+8hA0a9NULVOoyxdhzJSgTC0N Fua8azVfzq18Y0RX56XP46L40oPmVYtfPRkEXquiPW2wQCjhd5rU2xyMrwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFNAnYC0RSiUvdcUdoL+jzsZRiOgXMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMENkZ0xSRktKUzkxeFIyZ3Y2UE94bEdJNkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAHzgFAwQA Hzh3MAwDBAcfOIADBAEfOIgDBAAfOM8wCwMEAR849gMDAB84MAwDBAAfOSkDBAAf OSoDBAAfOVIDBAIfOmADBAIfOnQwCwMDAB87AwQBHzsIAwQCHzs0AwQBHzv2MA0G CSqGSIb3DQEBCwUAA4IBAQAx3sLd0Hn6tx6++r28QtxL+I3vU5qIdX4/xI5wTvjD gtdBb0N/kGincO5cdKv3pZNfj1l84IejXaFIMkR89RFV2FwROW2OCVhqkoryjLp1 u7mzUgsTIfzM7KUEMvGldIkXTnYTDmJ62F4LDU+33RqTpa2QI//4I0JXF0TJeKjX usV0iW3R/q4VJ586UnQEE1OHF6dhU3T6JgmVt1CeGRPk2kecLZPc+A/DzHjrbu2H qM0thhKuwBC2hcdguKFC9sB1a7GpghtGxXlFir69sPrNmSsXD9P5disuB7XFuSro 5WunTDJd7H9rYs77aTkixzPw8OjzTepiyy8oGFo6+YJq -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:04 2025 by rpki-client