This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1n5ZvGGHcMWh156hJbsn6DchPRs.roa File: 1n5ZvGGHcMWh156hJbsn6DchPRs.roa (raw, json) Hash identifier: MHw/k50gffwdp9T9shKP9NVrFWKtXldR8gF9pTW4VQw= Subject key identifier: D6:7E:59:BC:61:87:70:C5:A1:D7:9E:A1:25:BB:27:E8:37:21:3D:1B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BFBFABB2BC098D099AE2E3DBA42A65A8B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1n5ZvGGHcMWh156hJbsn6DchPRs.roa Signing time: Mon 26 Jan 2026 20:24:31 +0000 ROA not before: Mon 26 Jan 2026 20:24:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 31.56.49.0/24 maxlen: 24 31.56.98.0/24 maxlen: 24 31.56.103.0/24 maxlen: 24 31.56.210.0/24 maxlen: 24 31.56.212.0/24 maxlen: 24 31.56.223.0/24 maxlen: 24 31.56.234.0/24 maxlen: 24 31.56.235.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.121.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.57.225.0/24 maxlen: 24 31.58.47.0/24 maxlen: 24 31.58.90.0/24 maxlen: 24 31.58.168.0/24 maxlen: 24 31.59.171.0/24 maxlen: 24 31.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:fa:bb:2b:c0:98:d0:99:ae:2e:3d:ba:42:a6:5a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 26 20:24:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d67e59bc618770c5a1d79ea125bb27e837213d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:ee:67:99:4b:c0:1a:28:fc:f1:24:2a:49: d1:9e:b8:df:85:2b:88:81:86:64:6d:35:ff:c6:d5: 0b:bf:77:be:8c:2a:71:6b:50:8c:b1:77:fb:4d:c9: 04:e5:58:c8:a4:3a:db:8f:71:06:18:19:9e:8a:dc: 15:0b:04:79:0e:40:b4:7c:00:d4:95:a8:d8:76:59: 7d:56:ec:78:0c:00:06:11:85:2a:74:4a:0b:5a:73: 55:88:97:ed:59:26:fd:bc:93:13:90:8a:c3:e6:b1: a0:dc:f4:04:7c:c8:e4:f2:f4:8b:b0:20:dc:93:77: 3c:99:39:00:0b:4e:40:57:27:1d:76:b9:ca:6f:79: e7:f9:b3:5a:5e:3e:8d:02:e7:af:a7:13:f1:3e:30: 0e:4a:77:27:58:09:23:57:be:2c:9b:99:1f:72:9f: d3:4b:9a:26:34:9a:d8:ac:93:49:ab:1e:64:2a:2b: ff:f3:68:cb:fc:54:9f:36:5f:38:4f:ce:99:e3:7a: 53:98:e4:25:07:55:84:ed:42:6d:2d:b3:8f:ec:ca: f8:0b:26:8a:dc:f1:a2:58:03:b3:00:40:ea:b2:3b: bd:61:0f:72:f4:d6:0a:67:fc:2b:e0:69:74:1a:a6: 32:b2:d1:36:95:9c:b9:99:2e:44:bb:d2:76:6f:81: ae:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:59:BC:61:87:70:C5:A1:D7:9E:A1:25:BB:27:E8:37:21:3D:1B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1n5ZvGGHcMWh156hJbsn6DchPRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.49.0/24 31.56.98.0/24 31.56.103.0/24 31.56.210.0/24 31.56.212.0/24 31.56.223.0/24 31.56.234.0/23 31.57.35.0/24 31.57.121.0/24 31.57.206.0/24 31.57.225.0/24 31.58.47.0/24 31.58.90.0/24 31.58.168.0/24 31.59.171.0/24 31.59.236.0/22 Signature Algorithm: sha256WithRSAEncryption 07:ac:6d:db:2f:15:9e:4c:18:a5:17:96:1b:10:19:13:90:9e: 2c:ff:ef:11:41:42:f2:0c:3d:a2:d0:de:3f:68:3d:38:e8:42: f3:c1:b7:8c:cc:65:40:c2:c4:d1:08:bc:5a:f2:ad:85:bb:f1: 57:a1:48:5c:c4:24:0b:85:43:5d:4d:55:61:66:e2:54:6e:4b: 0f:8b:d2:0e:b4:3b:a5:96:d6:f8:e7:55:e3:ff:19:13:a6:57: e6:7a:e5:59:93:87:df:ab:58:86:6e:3e:e6:a5:db:20:3e:0d: c5:af:8b:aa:6e:cb:d4:bc:ea:d6:a5:db:ea:7a:4e:ee:63:d7: dd:45:41:dd:d8:83:3c:7b:85:0a:18:ea:a0:40:69:90:ff:06: 4c:bf:b2:b0:a0:6d:ee:03:2b:f1:c2:33:ad:b8:20:53:5c:5b: 1d:cb:b8:5f:f2:f6:28:16:2a:37:a9:79:19:aa:63:d9:17:e5: d3:20:0f:24:d5:c2:7b:15:f2:d8:0c:85:7c:89:2f:bd:ec:4f: 1e:d4:a2:e8:63:ab:79:2e:ea:f0:bb:52:5e:aa:cd:11:56:86: c9:1b:6c:95:e9:04:13:a0:74:af:99:b9:11:3c:97:12:c6:23: e3:67:6d:82:ed:84:46:36:18:83:f6:fe:25:b6:45:cc:59:5d: 99:5d:da:66 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZv7+rsrwJjQma4uPbpCplqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI2MjAyNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjdlNTliYzYxODc3MGM1YTFkNzllYTEyNWJiMjdlODM3MjEzZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dPuZ5lLwBoo/PEkKknRnrjfhSuI gYZkbTX/xtULv3e+jCpxa1CMsXf7TckE5VjIpDrbj3EGGBmeitwVCwR5DkC0fADU lajYdll9Vux4DAAGEYUqdEoLWnNViJftWSb9vJMTkIrD5rGg3PQEfMjk8vSLsCDc k3c8mTkAC05AVycddrnKb3nn+bNaXj6NAuevpxPxPjAOSncnWAkjV74sm5kfcp/T S5omNJrYrJNJqx5kKiv/82jL/FSfNl84T86Z43pTmOQlB1WE7UJtLbOP7Mr4CyaK 3PGiWAOzAEDqsju9YQ9y9NYKZ/wr4Gl0GqYystE2lZy5mS5Eu9J2b4GuzwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFNZ+Wbxhh3DFodeeoSW7J+g3IT0bMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMW41WnZHR0hjTVdoMTU2aEpic242RGNoUFJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAHzgxAwQA HzhiAwQAHzhnAwQAHzjSAwQAHzjUAwQAHzjfAwQBHzjqAwQAHzkjAwQAHzl5AwQA HznOAwQAHznhAwQAHzovAwQAHzpaAwQAHzqoAwQAHzurAwQCHzvsMA0GCSqGSIb3 DQEBCwUAA4IBAQAHrG3bLxWeTBilF5YbEBkTkJ4s/+8RQULyDD2i0N4/aD046ELz wbeMzGVAwsTRCLxa8q2Fu/FXoUhcxCQLhUNdTVVhZuJUbksPi9IOtDulltb451Xj /xkTplfmeuVZk4ffq1iGbj7mpdsgPg3Fr4uqbsvUvOrWpdvqek7uY9fdRUHd2IM8 e4UKGOqgQGmQ/wZMv7KwoG3uAyvxwjOtuCBTXFsdy7hf8vYoFio3qXkZqmPZF+XT IA8k1cJ7FfLYDIV8iS+97E8e1KLoY6t5Lurwu1Jeqs0RVobJG2yV6QQToHSvmbkR PJcSxiPjZ22C7YRGNhiD9v4ltkXMWV2ZXdpm -----END CERTIFICATE-----Generated at Tue Jan 27 12:39:29 2026 by rpki-client