This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4O1YqaHHtVqKM7I24RJca00UjkU.roa File: 4O1YqaHHtVqKM7I24RJca00UjkU.roa (raw, json) Hash identifier: 45fFVdS4yzKSneq2e3xxWryHbfR2fTkTNIJgBGLXlm0= Subject key identifier: E0:ED:58:A9:A1:C7:B5:5A:8A:33:B2:36:E1:12:5C:6B:4D:14:8E:45 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B40090338B3D6D3F985F46DF52B24F6E3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4O1YqaHHtVqKM7I24RJca00UjkU.roa Signing time: Sun 21 Dec 2025 08:31:31 +0000 ROA not before: Sun 21 Dec 2025 08:31:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 31.56.80.0/24 maxlen: 24 31.56.84.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:09:03:38:b3:d6:d3:f9:85:f4:6d:f5:2b:24:f6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:31:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0ed58a9a1c7b55a8a33b236e1125c6b4d148e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:30:08:bb:c7:cb:ff:21:79:b6:b9:f3:08: 2f:ca:41:65:a7:82:e5:4f:be:f7:3b:b3:08:41:5e: 58:86:15:85:d4:39:23:30:3b:af:66:92:6c:cd:ac: eb:e0:43:1d:59:13:7b:05:c8:52:bf:03:b8:94:de: e7:08:7a:df:53:fd:eb:5a:2b:39:bb:0d:21:0c:0b: 38:ea:fe:86:05:fa:52:ab:d1:9e:10:09:08:f2:2c: 91:89:91:b1:07:86:be:da:8b:d8:67:56:1f:ff:a0: 79:99:f7:a0:f7:93:fe:4c:24:35:75:0f:32:70:71: e2:55:f2:6b:31:73:a8:14:8c:76:ea:4e:d7:e8:8e: 3f:7d:de:02:ed:bc:c0:11:cc:08:63:79:31:35:e1: 92:4b:60:b0:7a:4c:50:56:fe:32:de:b4:aa:5a:f3: a1:61:07:84:a2:ae:01:a4:4e:f8:1c:df:ea:4c:b2: 6f:28:57:1a:cb:f3:4f:f5:3f:44:e0:ce:19:33:49: 00:75:77:da:ab:74:87:67:a9:7a:34:5e:3e:a0:48: b1:80:ca:e0:b9:76:60:dc:b6:76:36:cc:d4:7d:7e: 15:ea:b0:6c:15:7d:3c:8c:10:d9:be:8a:7b:24:cf: b8:34:80:da:29:7e:d6:b2:13:b8:3c:72:44:e9:e3: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:ED:58:A9:A1:C7:B5:5A:8A:33:B2:36:E1:12:5C:6B:4D:14:8E:45 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4O1YqaHHtVqKM7I24RJca00UjkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.80.0/24 31.56.84.0/24 31.58.131.0/24 Signature Algorithm: sha256WithRSAEncryption a0:8c:c1:02:74:6a:7a:69:89:10:43:f5:70:11:ae:87:8a:87: 4c:08:b9:d5:58:fe:b5:30:00:e4:ff:99:b9:3c:c9:8a:23:0b: 3c:0b:2c:59:97:f8:9d:c0:33:51:82:fe:d9:5a:4b:82:a3:7b: e6:65:85:ca:d6:e6:e7:41:97:ea:60:23:d6:af:87:6c:de:e9: e9:35:2d:41:60:4a:44:bb:ab:ee:bf:ed:f8:e6:13:bb:50:4a: 92:dc:50:d6:10:8b:dd:dc:3d:a7:f2:48:bb:dd:c2:8f:af:00: 44:40:ad:2a:69:73:d3:13:5c:32:69:f7:b4:f6:05:3f:1b:b4: 1d:7c:48:0a:4b:60:31:82:22:3d:ca:61:84:10:44:9f:8d:a5: 5e:7e:17:2e:9b:90:b4:0f:cc:b0:7c:61:b5:99:fa:eb:3f:b3: 38:6c:65:90:a3:dd:05:aa:10:c9:f2:6d:84:12:76:b2:62:1e: 97:6e:a7:b3:68:b6:b0:3d:70:82:72:c3:b9:4c:ae:c7:07:fe: 0c:99:5e:f8:c3:1f:d6:0a:3c:45:a4:42:49:2f:70:c6:91:f7: 68:0e:1e:39:f3:e1:65:c6:bc:3b:67:88:ab:4a:9d:26:4a:10: ee:4b:5d:47:4c:30:5c:8a:65:13:7e:cd:d2:c1:00:a4:62:da: 8f:b0:cd:12 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtACQM4s9bT+YX0bfUrJPbjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgzMTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVkNThhOWExYzdiNTVhOGEzM2IyMzZlMTEyNWM2YjRkMTQ4ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VMwCLvHy/8heba58wgvykFlp4Ll T773O7MIQV5YhhWF1DkjMDuvZpJszazr4EMdWRN7BchSvwO4lN7nCHrfU/3rWis5 uw0hDAs46v6GBfpSq9GeEAkI8iyRiZGxB4a+2ovYZ1Yf/6B5mfeg95P+TCQ1dQ8y cHHiVfJrMXOoFIx26k7X6I4/fd4C7bzAEcwIY3kxNeGSS2CwekxQVv4y3rSqWvOh YQeEoq4BpE74HN/qTLJvKFcay/NP9T9E4M4ZM0kAdXfaq3SHZ6l6NF4+oEixgMrg uXZg3LZ2NszUfX4V6rBsFX08jBDZvop7JM+4NIDaKX7WshO4PHJE6eP/ZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFODtWKmhx7VaijOyNuESXGtNFI5FMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNE8xWXFhSEh0VnFLTTdJMjRSSmNhMDBVamtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhQAwQA HzhUAwQAHzqDMA0GCSqGSIb3DQEBCwUAA4IBAQCgjMECdGp6aYkQQ/VwEa6HiodM CLnVWP61MADk/5m5PMmKIws8CyxZl/idwDNRgv7ZWkuCo3vmZYXK1ubnQZfqYCPW r4ds3unpNS1BYEpEu6vuv+345hO7UEqS3FDWEIvd3D2n8ki73cKPrwBEQK0qaXPT E1wyafe09gU/G7QdfEgKS2AxgiI9ymGEEESfjaVefhcum5C0D8ywfGG1mfrrP7M4 bGWQo90FqhDJ8m2EEnayYh6XbqezaLawPXCCcsO5TK7HB/4MmV74wx/WCjxFpEJJ L3DGkfdoDh458+Flxrw7Z4irSp0mShDuS11HTDBcimUTfs3SwQCkYtqPsM0S -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:38 2025 by rpki-client