This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0F2RA0N9siFDokBe2XIkApSixNs.roa File: 0F2RA0N9siFDokBe2XIkApSixNs.roa (raw, json) Hash identifier: XJmHsSKz2Dhfy+T2roZtjXmac9rDEk/7jG8RDPEii+w= Subject key identifier: D0:5D:91:03:43:7D:B2:21:43:A2:40:5E:D9:72:24:02:94:A2:C4:DB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B645CEE6A4AFC531F51B59480207EE075 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0F2RA0N9siFDokBe2XIkApSixNs.roa Signing time: Sun 28 Dec 2025 09:49:30 +0000 ROA not before: Sun 28 Dec 2025 09:49:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42831 IP address blocks: 31.56.67.0/24 maxlen: 24 31.56.73.0/24 maxlen: 24 31.56.85.0/24 maxlen: 24 31.56.156.0/24 maxlen: 24 31.57.113.0/24 maxlen: 24 31.57.153.0/24 maxlen: 24 31.57.186.0/24 maxlen: 24 31.57.236.0/24 maxlen: 24 31.58.43.0/24 maxlen: 24 31.58.128.0/24 maxlen: 24 31.58.164.0/24 maxlen: 24 31.59.88.0/24 maxlen: 24 31.59.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:5c:ee:6a:4a:fc:53:1f:51:b5:94:80:20:7e:e0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 28 09:49:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d05d9103437db22143a2405ed972240294a2c4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:b1:8b:a3:df:1b:92:dc:42:ab:10:27:48: 74:9b:8a:ed:6b:21:76:9b:18:1f:8a:8d:6d:3c:84: 78:1b:1b:e1:7a:96:85:10:cc:f1:95:19:44:02:83: 31:66:ea:b5:6a:32:69:78:40:e1:1c:dd:c2:b4:12: 1a:c1:3a:62:74:03:4d:41:03:22:ae:34:8d:94:a8: 6c:1c:06:1d:78:c5:37:5a:c5:70:f5:d3:20:4a:ac: 88:17:d4:96:cd:de:00:79:86:3d:b2:db:0e:ee:c9: dc:b6:84:fd:0b:a4:d6:48:20:32:94:29:8b:f5:3a: 73:ff:9c:8d:50:b4:eb:5a:9c:02:85:b9:0c:49:73: ed:2c:fd:a3:62:46:7d:17:88:c2:39:5e:b4:c2:73: 7a:b1:91:37:48:1a:9f:af:a6:9a:a1:08:92:b0:44: 81:07:57:0f:bd:57:06:68:66:a8:dc:bb:70:58:4f: ad:8f:6d:ea:af:83:80:4c:e0:ab:f6:77:89:39:f9: df:2d:9f:46:e9:35:51:a8:a6:bc:27:b2:bf:81:ff: 2d:70:d4:ad:19:ef:2c:fb:9e:54:a1:57:61:67:d0: 49:0e:1f:b1:39:ed:8e:2c:ae:28:2b:b4:e5:ad:f1: 91:48:cb:93:43:e0:57:0b:64:e9:fc:f1:4c:53:73: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5D:91:03:43:7D:B2:21:43:A2:40:5E:D9:72:24:02:94:A2:C4:DB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0F2RA0N9siFDokBe2XIkApSixNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.67.0/24 31.56.73.0/24 31.56.85.0/24 31.56.156.0/24 31.57.113.0/24 31.57.153.0/24 31.57.186.0/24 31.57.236.0/24 31.58.43.0/24 31.58.128.0/24 31.58.164.0/24 31.59.88.0/24 31.59.123.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:60:40:0b:31:3c:2a:5e:5d:76:21:d0:93:79:f1:f4:a8:38: da:36:90:ff:07:64:8e:25:e3:85:78:ee:bd:cd:9d:5b:89:63: 92:60:0a:db:e2:cb:74:43:48:74:06:fd:29:05:04:9b:86:20: b7:25:52:21:a5:45:12:6a:9e:4e:7c:5e:4f:87:26:4a:1a:0d: 65:1b:d6:f9:31:76:e0:1c:17:36:ad:90:a3:e7:ad:c1:70:30: 04:c6:cd:06:6b:82:ee:d0:2b:fc:86:e0:de:de:a9:d4:e1:c9: f3:36:58:4d:fa:47:98:fb:28:d0:64:2c:f3:19:10:34:1c:bb: ed:69:91:ea:a6:ce:5c:b6:47:02:2d:71:8f:e5:ad:9f:c5:0f: fc:cf:42:cf:86:11:21:f5:8b:e7:83:0d:36:25:53:e6:f0:a9: 69:83:cf:c6:9e:bf:25:b6:3f:59:c5:75:cb:8c:df:6f:3e:74: 3e:0a:fe:a0:cc:64:0e:86:b2:25:bd:64:f8:b5:16:3f:ef:10: a8:56:9a:d3:1d:f4:3a:fb:48:20:28:93:0d:00:33:e6:e0:90: 3f:49:0b:5f:16:9a:d6:ae:39:aa:85:9d:2f:1f:d4:0a:16:98: ca:21:3e:8c:0f:13:27:01:fa:da:ca:2a:24:c9:88:47:f8:d3: 98:0d:51:9e -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZtkXO5qSvxTH1G1lIAgfuB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI4MDk0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDVkOTEwMzQzN2RiMjIxNDNhMjQwNWVkOTcyMjQwMjk0YTJjNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGmxi6PfG5LcQqsQJ0h0m4rtayF2 mxgfio1tPIR4GxvhepaFEMzxlRlEAoMxZuq1ajJpeEDhHN3CtBIawTpidANNQQMi rjSNlKhsHAYdeMU3WsVw9dMgSqyIF9SWzd4AeYY9stsO7snctoT9C6TWSCAylCmL 9Tpz/5yNULTrWpwChbkMSXPtLP2jYkZ9F4jCOV60wnN6sZE3SBqfr6aaoQiSsESB B1cPvVcGaGao3LtwWE+tj23qr4OATOCr9neJOfnfLZ9G6TVRqKa8J7K/gf8tcNSt Ge8s+55UoVdhZ9BJDh+xOe2OLK4oK7TlrfGRSMuTQ+BXC2Tp/PFMU3NuNQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFNBdkQNDfbIhQ6JAXtlyJAKUosTbMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMEYyUkEwTjlzaUZEb2tCZTJYSWtBcFNpeE5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAHzhDAwQA HzhJAwQAHzhVAwQAHzicAwQAHzlxAwQAHzmZAwQAHzm6AwQAHznsAwQAHzorAwQA HzqAAwQAHzqkAwQAHztYAwQAHzt7MA0GCSqGSIb3DQEBCwUAA4IBAQB7YEALMTwq Xl12IdCTefH0qDjaNpD/B2SOJeOFeO69zZ1biWOSYArb4st0Q0h0Bv0pBQSbhiC3 JVIhpUUSap5OfF5PhyZKGg1lG9b5MXbgHBc2rZCj563BcDAExs0Ga4Lu0Cv8huDe 3qnU4cnzNlhN+keY+yjQZCzzGRA0HLvtaZHqps5ctkcCLXGP5a2fxQ/8z0LPhhEh 9Yvngw02JVPm8Klpg8/Gnr8ltj9ZxXXLjN9vPnQ+Cv6gzGQOhrIlvWT4tRY/7xCo VprTHfQ6+0ggKJMNADPm4JA/SQtfFprWrjmqhZ0vH9QKFpjKIT6MDxMnAfrayiok yYhH+NOYDVGe -----END CERTIFICATE-----Generated at Tue Dec 30 23:54:00 2025 by rpki-client