This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/11c98VobXos4GUCF1bDJt3DTnRs.roa File: 11c98VobXos4GUCF1bDJt3DTnRs.roa (raw, json) Hash identifier: DNXwolP60725C+LXBOo2uc7llorqkWBFlU0GoOGoxgU= Subject key identifier: D7:57:3D:F1:5A:1B:5E:8B:38:19:40:85:D5:B0:C9:B7:70:D3:9D:1B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AE040B9E24E84DB70082888865ED8F2F1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/11c98VobXos4GUCF1bDJt3DTnRs.roa Signing time: Tue 02 Dec 2025 18:08:49 +0000 ROA not before: Tue 02 Dec 2025 18:08:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 31.56.77.0/24 maxlen: 24 31.57.57.0/24 maxlen: 24 31.58.41.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:40:b9:e2:4e:84:db:70:08:28:88:86:5e:d8:f2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 2 18:08:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7573df15a1b5e8b38194085d5b0c9b770d39d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:66:59:85:ed:02:83:d8:2e:87:93:25:1d: 4b:b6:c0:7a:0a:36:f9:1f:1b:0e:0e:1e:f1:25:5e: 6b:a0:1a:85:78:dc:3d:27:8f:76:2d:c7:58:66:54: 1c:d5:1b:51:3b:e3:43:31:a8:b4:0c:a5:f7:be:e7: 00:87:94:55:28:98:3c:18:0d:a3:2a:bd:ff:fe:ec: 7c:ab:07:e5:e2:be:e6:6d:ff:4b:36:55:9b:ec:5a: e7:df:52:54:8f:85:46:b9:07:43:9b:8a:d6:83:7a: 34:3f:30:c3:8b:79:52:85:d1:2f:4f:f7:fc:86:2a: c5:58:a0:5c:df:cc:81:7d:9f:ee:57:a7:04:70:b2: f7:fe:9a:de:11:14:26:7a:e9:cc:e3:78:eb:5b:62: 7f:df:72:f8:d9:10:12:fd:b2:9f:8a:ee:4d:e2:d3: 42:b6:20:a8:24:84:4a:43:48:b7:a3:89:62:8b:43: 70:87:58:f4:4d:f1:7b:6f:60:9b:58:c6:be:e9:31: 89:9d:02:95:c9:b9:cc:58:0b:e3:18:68:09:54:38: d3:87:d3:69:27:3b:dc:6c:55:8d:04:f0:03:cf:42: 01:bb:5a:06:62:00:a0:52:c3:5b:bf:96:a3:18:95: a5:2e:04:fb:4d:12:39:8a:82:0f:47:b2:0d:52:d3: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:3D:F1:5A:1B:5E:8B:38:19:40:85:D5:B0:C9:B7:70:D3:9D:1B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/11c98VobXos4GUCF1bDJt3DTnRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.77.0/24 31.57.57.0/24 31.58.41.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption b1:0e:0f:3b:ce:4b:94:7a:ef:f7:3f:8f:25:3d:51:23:db:55: 05:4d:fc:08:82:59:9e:63:ba:48:a8:8e:1a:97:8c:0c:c9:cb: 0b:54:c5:e7:e6:5a:07:2d:92:84:6f:8c:16:9d:39:b8:8c:9e: d2:3d:07:7c:c3:17:54:28:71:f8:b1:f7:62:b4:7f:5e:db:65: dc:1f:9f:24:94:8f:d7:40:d1:fd:83:90:8a:1b:57:e4:07:35: 3b:08:59:0c:f7:fe:5e:d7:55:01:9f:4f:86:0c:04:3d:ae:20: a9:cc:0d:8e:42:30:e8:15:17:04:b2:4a:5b:ff:d8:bb:dd:32: 60:e5:c6:97:a6:e6:58:a0:09:53:d7:eb:54:44:40:8e:2d:05: 2f:d3:91:79:5c:68:18:71:04:f0:ce:0c:b2:16:78:cf:02:a9: 62:27:ce:02:72:33:58:35:46:20:fa:4b:86:4a:7e:bb:5c:ae: 5e:52:c8:88:f2:81:6d:a0:b6:49:c7:ac:9a:02:45:5f:fa:2f: 9b:7a:87:d4:51:d8:7f:6b:5b:04:2f:aa:af:61:e8:04:19:2a: 2d:cf:2a:9b:bd:6c:ec:06:62:ec:61:2b:db:1d:ad:1d:72:e1: b1:f9:d6:bf:79:e7:cc:25:91:e6:f3:1f:c3:58:da:7e:d9:e2: 14:84:ba:7f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrgQLniToTbcAgoiIZe2PLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjAyMTgwODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzU3M2RmMTVhMWI1ZThiMzgxOTQwODVkNWIwYzliNzcwZDM5ZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgtmWYXtAoPYLoeTJR1LtsB6Cjb5 HxsODh7xJV5roBqFeNw9J492LcdYZlQc1RtRO+NDMai0DKX3vucAh5RVKJg8GA2j Kr3//ux8qwfl4r7mbf9LNlWb7Frn31JUj4VGuQdDm4rWg3o0PzDDi3lShdEvT/f8 hirFWKBc38yBfZ/uV6cEcLL3/preERQmeunM43jrW2J/33L42RAS/bKfiu5N4tNC tiCoJIRKQ0i3o4lii0Nwh1j0TfF7b2CbWMa+6TGJnQKVybnMWAvjGGgJVDjTh9Np JzvcbFWNBPADz0IBu1oGYgCgUsNbv5ajGJWlLgT7TRI5ioIPR7INUtOWaQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNdXPfFaG16LOBlAhdWwybdw050bMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMTFjOThWb2JYb3M0R1VDRjFiREp0M0RUblJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhNAwQA Hzk5AwQAHzopAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQCxDg87zkuUeu/3P48l PVEj21UFTfwIglmeY7pIqI4al4wMycsLVMXn5loHLZKEb4wWnTm4jJ7SPQd8wxdU KHH4sfditH9e22XcH58klI/XQNH9g5CKG1fkBzU7CFkM9/5e11UBn0+GDAQ9riCp zA2OQjDoFRcEskpb/9i73TJg5caXpuZYoAlT1+tURECOLQUv05F5XGgYcQTwzgyy FnjPAqliJ84CcjNYNUYg+kuGSn67XK5eUsiI8oFtoLZJx6yaAkVf+i+beofUUdh/ a1sEL6qvYegEGSotzyqbvWzsBmLsYSvbHa0dcuGx+da/eefMJZHm8x/DWNp+2eIU hLp/ -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:02 2025 by rpki-client