This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0e-xz1VC1Dn9THNi9LJgpyS4VUY.roa File: 0e-xz1VC1Dn9THNi9LJgpyS4VUY.roa (raw, json) Hash identifier: 5EJ+tSzVCsqUsvJv/ZPK4PTIhtBFlyirrw/J1/1movg= Subject key identifier: D1:EF:B1:CF:55:42:D4:39:FD:4C:73:62:F4:B2:60:A7:24:B8:55:46 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BE1A69F789D280745F21C8423F2D79F8A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0e-xz1VC1Dn9THNi9LJgpyS4VUY.roa Signing time: Wed 21 Jan 2026 17:42:31 +0000 ROA not before: Wed 21 Jan 2026 17:42:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 31.56.6.0/24 maxlen: 24 31.56.34.0/24 maxlen: 24 31.56.35.0/24 maxlen: 24 31.56.59.0/24 maxlen: 24 31.56.69.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.56.190.0/24 maxlen: 24 31.56.192.0/24 maxlen: 24 31.56.195.0/24 maxlen: 24 31.56.218.0/24 maxlen: 24 31.56.231.0/24 maxlen: 24 31.56.239.0/24 maxlen: 24 31.57.11.0/24 maxlen: 24 31.57.25.0/24 maxlen: 24 31.57.31.0/24 maxlen: 24 31.57.53.0/24 maxlen: 24 31.57.54.0/24 maxlen: 24 31.57.55.0/24 maxlen: 24 31.57.59.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.120.0/24 maxlen: 24 31.57.129.0/24 maxlen: 24 31.57.138.0/24 maxlen: 24 31.57.142.0/24 maxlen: 24 31.57.143.0/24 maxlen: 24 31.57.146.0/24 maxlen: 24 31.57.151.0/24 maxlen: 24 31.57.152.0/24 maxlen: 24 31.57.155.0/24 maxlen: 24 31.57.160.0/24 maxlen: 24 31.57.170.0/24 maxlen: 24 31.57.171.0/24 maxlen: 24 31.57.196.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.249.0/24 maxlen: 24 31.57.253.0/24 maxlen: 24 31.58.36.0/24 maxlen: 24 31.58.37.0/24 maxlen: 24 31.58.38.0/24 maxlen: 24 31.58.39.0/24 maxlen: 24 31.58.57.0/24 maxlen: 24 31.58.213.0/24 maxlen: 24 31.59.108.0/24 maxlen: 24 31.59.109.0/24 maxlen: 24 31.59.110.0/24 maxlen: 24 31.59.197.0/24 maxlen: 24 31.59.203.0/24 maxlen: 24 31.59.204.0/24 maxlen: 24 31.59.205.0/24 maxlen: 24 31.59.206.0/24 maxlen: 24 31.59.207.0/24 maxlen: 24 31.59.209.0/24 maxlen: 24 31.59.210.0/24 maxlen: 24 31.59.211.0/24 maxlen: 24 31.59.215.0/24 maxlen: 24 31.59.220.0/24 maxlen: 24 31.59.221.0/24 maxlen: 24 31.59.222.0/24 maxlen: 24 31.59.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:a6:9f:78:9d:28:07:45:f2:1c:84:23:f2:d7:9f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 21 17:42:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1efb1cf5542d439fd4c7362f4b260a724b85546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:97:63:c7:12:3a:fe:33:9b:f7:8c:d0:0f: fa:05:00:42:b6:15:4c:d0:5a:83:a1:bf:da:da:8e: ef:6f:54:a4:a6:ae:b5:6c:2b:82:64:74:3c:f0:c8: 06:f7:be:62:77:b8:e4:03:8f:6e:91:07:ad:68:8d: bf:dc:c0:cb:d4:87:24:9d:c6:94:ad:82:9a:02:f5: e9:24:fe:b5:19:4a:64:7c:87:fd:e3:61:5f:c0:f8: c7:7d:50:01:78:48:66:0c:05:d9:72:86:22:cf:82: a1:de:c2:b0:49:ae:a7:e9:95:70:bf:4a:e3:97:9e: f2:cc:12:c3:e0:b5:4a:81:fe:bd:eb:b3:6c:4e:22: 0d:d4:f4:1f:ed:0c:3b:e9:f6:11:f5:ec:e9:f9:d3: 07:61:fa:f0:1a:23:8b:2c:2f:b0:02:0b:8f:83:ab: 24:b0:23:6b:12:78:e0:9d:05:40:f3:f5:f8:83:ca: cc:7b:32:b0:12:b2:4e:bc:4d:84:01:f3:e6:ef:1d: e5:be:f0:0f:6a:24:54:ba:3f:54:a6:51:65:17:61: 35:d3:36:b3:12:94:a7:be:01:ec:f7:48:80:d1:27: 46:5d:24:b3:7f:fe:d3:60:23:10:08:f6:16:68:42: a6:85:b9:99:9a:96:03:de:ed:ea:68:de:04:27:33: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EF:B1:CF:55:42:D4:39:FD:4C:73:62:F4:B2:60:A7:24:B8:55:46 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0e-xz1VC1Dn9THNi9LJgpyS4VUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.6.0/24 31.56.34.0/23 31.56.59.0/24 31.56.69.0/24 31.56.141.0/24 31.56.190.0/24 31.56.192.0/24 31.56.195.0/24 31.56.218.0/24 31.56.231.0/24 31.56.239.0/24 31.57.11.0/24 31.57.25.0/24 31.57.31.0/24 31.57.53.0-31.57.55.255 31.57.59.0/24 31.57.96.0/24 31.57.120.0/24 31.57.129.0/24 31.57.138.0/24 31.57.142.0/23 31.57.146.0/24 31.57.151.0-31.57.152.255 31.57.155.0/24 31.57.160.0/24 31.57.170.0/23 31.57.196.0/24 31.57.202.0/24 31.57.249.0/24 31.57.253.0/24 31.58.36.0/22 31.58.57.0/24 31.58.213.0/24 31.59.108.0-31.59.110.255 31.59.197.0/24 31.59.203.0-31.59.207.255 31.59.209.0-31.59.211.255 31.59.215.0/24 31.59.220.0-31.59.222.255 31.59.232.0/24 Signature Algorithm: sha256WithRSAEncryption b7:f7:4f:76:58:19:fa:9c:d9:44:73:19:fa:63:cf:b6:ee:6b: 51:2c:8c:9f:5e:76:ce:89:1f:3b:a5:2c:80:1a:40:bf:39:23: 73:ff:32:53:af:da:c5:03:12:10:75:e0:88:d0:4d:61:e1:0e: b3:0f:c3:10:41:29:2a:e5:e2:49:8d:ff:1d:43:28:84:b7:54: eb:d0:72:d5:01:5b:9a:ec:cc:1d:dd:5c:3b:a7:d8:c6:8c:c9: 20:72:1e:a6:1d:25:1d:4a:ab:f0:da:1d:29:90:09:0e:51:76: 1f:83:39:58:a6:1b:52:6a:64:99:82:53:0d:12:a0:41:fd:75: 64:2e:8b:4e:50:e2:23:c2:09:2a:d8:53:46:1b:b6:e2:a2:b7: c8:24:e7:12:63:bc:ee:bc:58:ed:a0:02:6e:5a:24:27:26:ff: 77:fc:d4:cc:ae:01:e4:0f:65:6b:ef:01:42:7b:67:12:25:a5: 07:85:71:dd:e6:f0:21:60:02:66:aa:ac:5c:e4:6b:21:74:f4: ae:fe:87:95:40:06:e8:71:78:73:2e:2c:73:6a:75:e2:3d:8d: 87:21:1d:13:09:9b:2f:02:dd:67:7d:fe:96:f2:11:5f:e6:73: d9:6a:4f:79:23:a1:73:da:47:1b:18:e1:ca:b1:1d:71:fe:0f: 8d:0c:36:b2 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgISAZvhpp94nSgHRfIchCPy15+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIxMTc0MjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWVmYjFjZjU1NDJkNDM5ZmQ0YzczNjJmNGIyNjBhNzI0Yjg1NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl2XY8cSOv4zm/eM0A/6BQBCthVM 0FqDob/a2o7vb1Skpq61bCuCZHQ88MgG975id7jkA49ukQetaI2/3MDL1IckncaU rYKaAvXpJP61GUpkfIf942FfwPjHfVABeEhmDAXZcoYiz4Kh3sKwSa6n6ZVwv0rj l57yzBLD4LVKgf6967NsTiIN1PQf7Qw76fYR9ezp+dMHYfrwGiOLLC+wAguPg6sk sCNrEnjgnQVA8/X4g8rMezKwErJOvE2EAfPm7x3lvvAPaiRUuj9UplFlF2E10zaz EpSnvgHs90iA0SdGXSSzf/7TYCMQCPYWaEKmhbmZmpYD3u3qaN4EJzPbHQIDAQAB o4IDLTCCAykwHQYDVR0OBBYEFNHvsc9VQtQ5/UxzYvSyYKckuFVGMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMGUteHoxVkMxRG45VEhOaTlMSmdweVM0VlVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBQQYIKwYBBQUHAQcBAf8EggEwMIIBLDCCASgEAgABMIIB IAMEAB84BgMEAR84IgMEAB84OwMEAB84RQMEAB84jQMEAB84vgMEAB84wAMEAB84 wwMEAB842gMEAB845wMEAB847wMEAB85CwMEAB85GQMEAB85HzAMAwQAHzk1AwQD HzkwAwQAHzk7AwQAHzlgAwQAHzl4AwQAHzmBAwQAHzmKAwQBHzmOAwQAHzmSMAwD BAAfOZcDBAAfOZgDBAAfOZsDBAAfOaADBAEfOaoDBAAfOcQDBAAfOcoDBAAfOfkD BAAfOf0DBAIfOiQDBAAfOjkDBAAfOtUwDAMEAh87bAMEAB87bgMEAB87xTAMAwQA HzvLAwQEHzvAMAwDBAAfO9EDBAIfO9ADBAAfO9cwDAMEAh873AMEAB873gMEAB87 6DANBgkqhkiG9w0BAQsFAAOCAQEAt/dPdlgZ+pzZRHMZ+mPPtu5rUSyMn152zokf O6UsgBpAvzkjc/8yU6/axQMSEHXgiNBNYeEOsw/DEEEpKuXiSY3/HUMohLdU69By 1QFbmuzMHd1cO6fYxozJIHIeph0lHUqr8NodKZAJDlF2H4M5WKYbUmpkmYJTDRKg Qf11ZC6LTlDiI8IJKthTRhu24qK3yCTnEmO87rxY7aACblokJyb/d/zUzK4B5A9l a+8BQntnEiWlB4Vx3ebwIWACZqqsXORrIXT0rv6HlUAG6HF4cy4sc2p14j2NhyEd EwmbLwLdZ33+lvIRX+Zz2WpPeSOhc9pHGxjhyrEdcf4PjQw2sg== -----END CERTIFICATE-----Generated at Thu Jan 22 00:45:13 2026 by rpki-client