This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2wnZbdQTd99wDX2aukRfumD6Cfk.roa File: 2wnZbdQTd99wDX2aukRfumD6Cfk.roa (raw, json) Hash identifier: i/35qYfF5UOrs5nU03FdkARgRC4Xe3cLWvGpoSJ+xg0= Subject key identifier: DB:09:D9:6D:D4:13:77:DF:70:0D:7D:9A:BA:44:5F:BA:60:FA:09:F9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AB52D9C7997A0013F67655BC3F063E49E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2wnZbdQTd99wDX2aukRfumD6Cfk.roa Signing time: Mon 24 Nov 2025 09:24:16 +0000 ROA not before: Mon 24 Nov 2025 09:24:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 31.56.16.0/22 maxlen: 24 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.16.0/21 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.135.0/24 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.176.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.200.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.216.0/22 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.240.0/22 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 31.58.252.0/22 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.64.0/22 maxlen: 24 31.59.80.0/22 maxlen: 24 31.59.124.0/22 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 31.59.176.0/21 maxlen: 24 31.59.188.0/22 maxlen: 24 31.59.192.0/22 maxlen: 24 31.59.216.0/22 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.8.0/22 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.64.0/18 maxlen: 24 217.60.187.0/24 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 07:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:2d:9c:79:97:a0:01:3f:67:65:5b:c3:f0:63:e4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 24 09:24:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=db09d96dd41377df700d7d9aba445fba60fa09f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:cf:78:ce:f2:e3:1f:70:e5:c4:33:43:b5: a9:36:f5:e8:43:15:0e:f4:f6:a7:13:b7:44:83:12: c5:fc:89:7c:da:22:c3:ef:df:2d:3d:91:92:d7:fa: 55:91:87:af:aa:4d:1a:54:b7:61:16:10:4f:d5:5c: 4d:85:47:76:36:50:b4:20:9c:eb:11:47:d4:8b:7b: 41:a1:ee:e4:df:18:70:57:8f:97:29:09:2c:9b:30: 25:ec:ba:97:b2:54:48:67:7b:fa:12:a9:8c:06:04: 2e:d4:16:03:27:23:f4:2f:40:56:45:72:f3:79:30: fc:4d:37:26:02:5a:47:77:01:1c:9e:39:2d:87:16: 9e:c9:ad:b0:17:43:5d:86:a1:08:a2:a6:6a:b9:32: 08:48:58:28:6a:5b:0b:d4:44:9a:5a:33:5b:b0:24: 0f:47:46:40:8f:df:3d:9d:03:e0:74:39:92:8e:68: 2d:01:07:6c:43:09:3c:5a:b1:1a:42:d7:e0:30:fc: 8d:0c:e8:89:59:52:a8:a3:e4:4c:78:09:8d:18:28: c5:f8:16:cb:dd:26:7c:c8:6f:36:18:20:b8:40:91: d1:84:24:dc:51:a8:52:d4:2b:a2:0e:70:eb:6a:b6: 9a:ec:91:c9:69:4f:b8:80:15:96:aa:8a:fe:8c:13: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:09:D9:6D:D4:13:77:DF:70:0D:7D:9A:BA:44:5F:BA:60:FA:09:F9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2wnZbdQTd99wDX2aukRfumD6Cfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.16.0/22 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.16.0/21 31.57.36.0/23 31.57.135.0/24 31.57.168.0/23 31.57.184.0/23 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.176.0/22 31.58.196.0-31.58.209.255 31.58.216.0/22 31.58.232.0/23 31.58.240.0-31.58.244.255 31.58.249.0-31.58.255.255 31.59.36.0/22 31.59.44.0/22 31.59.64.0/22 31.59.80.0/22 31.59.124.0/22 31.59.140.0/22 31.59.148.0-31.59.165.255 31.59.176.0/21 31.59.188.0-31.59.195.255 31.59.216.0/22 94.183.152.0/22 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.8.0/22 217.60.16.0/21 217.60.28.0-217.60.35.255 217.60.40.0-217.60.59.255 217.60.64.0/18 217.60.187.0/24 217.60.196.0/23 217.60.244.0/23 Signature Algorithm: sha256WithRSAEncryption bd:55:e8:0d:6e:f7:0d:59:f5:18:a3:16:fe:c6:9a:0b:a6:aa: d7:ed:4a:81:74:71:e5:22:4d:9f:6e:c5:1f:db:c2:44:59:fb: c4:e3:36:06:00:fe:71:06:29:22:22:83:a6:8b:62:a3:47:c9: 88:d4:95:c7:1b:57:65:06:61:b7:96:e4:31:7f:40:89:50:a1: 4d:4e:82:5e:88:b1:15:61:ac:d8:42:44:7f:da:ec:c0:4c:a2: 8b:29:ab:5f:af:92:ad:37:3f:c6:98:d3:9c:f1:ae:26:dc:65: 24:75:7a:01:d2:a8:a1:1e:fa:20:6c:c8:21:9e:8c:1f:bc:0b: 8a:a6:c0:e4:98:d0:f7:9a:85:82:dc:44:54:38:87:1a:70:63: fd:d8:c4:e0:be:cf:96:aa:55:83:60:a0:28:f6:03:77:3c:13: cc:7c:9e:04:fe:be:6c:c0:0e:09:d4:1d:51:d4:a6:b7:15:4f: a9:46:3d:a7:d4:5d:10:74:46:58:c5:9f:f8:e6:d6:ab:8a:ae: ac:c3:70:ba:52:cd:13:72:3b:3c:2e:66:34:33:97:cf:d6:f9: 96:84:b7:90:9a:9c:45:12:79:e5:df:eb:12:93:d1:f0:15:f2: be:6d:1a:76:91:a1:89:48:4e:75:97:0f:ae:2f:d5:12:ef:46: fa:52:37:8a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISAZq1LZx5l6ABP2dlW8PwY+SeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI0MDkyNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjA5ZDk2ZGQ0MTM3N2RmNzAwZDdkOWFiYTQ0NWZiYTYwZmEwOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVTPeM7y4x9w5cQzQ7WpNvXoQxUO 9PanE7dEgxLF/Il82iLD798tPZGS1/pVkYevqk0aVLdhFhBP1VxNhUd2NlC0IJzr EUfUi3tBoe7k3xhwV4+XKQksmzAl7LqXslRIZ3v6EqmMBgQu1BYDJyP0L0BWRXLz eTD8TTcmAlpHdwEcnjkthxaeya2wF0NdhqEIoqZquTIISFgoalsL1ESaWjNbsCQP R0ZAj989nQPgdDmSjmgtAQdsQwk8WrEaQtfgMPyNDOiJWVKoo+RMeAmNGCjF+BbL 3SZ8yG82GCC4QJHRhCTcUahS1CuiDnDraraa7JHJaU+4gBWWqor+jBNMxQIDAQAB o4IDVzCCA1MwHQYDVR0OBBYEFNsJ2W3UE3ffcA19mrpEX7pg+gn5MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMnduWmJkUVRkOTl3RFgyYXVrUmZ1bUQ2Q2ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBawYIKwYBBQUHAQcBAf8EggFaMIIBVjCCAVIEAgABMIIB SgMEAh84EAMEAh84sDAMAwQBHzi2AwQBHzi8AwQBHzjQAwQBHzjkAwQDHzkQAwQB HzkkAwQAHzmHAwQBHzmoAwQBHzm4AwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQC HzpcAwQCHzqwMAwDBAIfOsQDBAEfOtADBAIfOtgDBAEfOugwDAMEBB868AMEAB86 9DALAwQAHzr5AwMAHzoDBAIfOyQDBAIfOywDBAIfO0ADBAIfO1ADBAIfO3wDBAIf O4wwDAMEAh87lAMEAR87pAMEAx87sDAMAwQCHzu8AwQCHzvAAwQCHzvYAwQCXreY MAwDBAZet8ADBANet+AwCwMEAl637AMDA16wAwQC2TwIAwQD2TwQMAwDBALZPBwD BALZPCAwDAMEA9k8KAMEAtk8OAMEBtk8QAMEANk8uwMEAdk8xAMEAdk89DANBgkq hkiG9w0BAQsFAAOCAQEAvVXoDW73DVn1GKMW/saaC6aq1+1KgXRx5SJNn27FH9vC RFn7xOM2BgD+cQYpIiKDpotio0fJiNSVxxtXZQZht5bkMX9AiVChTU6CXoixFWGs 2EJEf9rswEyiiymrX6+SrTc/xpjTnPGuJtxlJHV6AdKooR76IGzIIZ6MH7wLiqbA 5JjQ95qFgtxEVDiHGnBj/djE4L7PlqpVg2CgKPYDdzwTzHyeBP6+bMAOCdQdUdSm txVPqUY9p9RdEHRGWMWf+ObWq4qurMNwulLNE3I7PC5mNDOXz9b5loS3kJqcRRJ5 5d/rEpPR8BXyvm0adpGhiUhOdZcPri/VEu9G+lI3ig== -----END CERTIFICATE-----Generated at Tue Nov 25 11:23:39 2025 by rpki-client