This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QUPXskHythJC5qccnImzUSNSxM.roa File: 4QUPXskHythJC5qccnImzUSNSxM.roa (raw, json) Hash identifier: mSbEEIt2+wK9AZi801nFmSQRyCy5ySuyosyBISRAeUU= Subject key identifier: E1:05:0F:5E:C9:07:CA:D8:49:0B:9A:9C:72:72:26:CD:44:8D:4B:13 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B6E3707C0FA32355B944209F7B0DBC7AD Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QUPXskHythJC5qccnImzUSNSxM.roa Signing time: Tue 30 Dec 2025 07:44:18 +0000 ROA not before: Tue 30 Dec 2025 07:44:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215242 IP address blocks: 31.56.213.0/24 maxlen: 24 31.56.214.0/24 maxlen: 24 31.58.211.0/24 maxlen: 24 31.58.235.0/24 maxlen: 24 31.58.236.0/24 maxlen: 24 31.58.238.0/24 maxlen: 24 31.58.246.0/24 maxlen: 24 31.58.247.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 217.60.251.0/24 maxlen: 24 217.60.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:37:07:c0:fa:32:35:5b:94:42:09:f7:b0:db:c7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 30 07:44:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e1050f5ec907cad8490b9a9c727226cd448d4b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:85:af:1e:23:5d:9d:ea:e5:68:49:ba:c2: a0:24:ba:3a:26:32:9b:64:b7:1c:d0:48:9b:22:5a: 73:9c:8d:8c:cd:5f:f1:37:8c:15:cc:47:8c:62:28: f4:bd:e2:bd:8a:5e:2e:b6:82:01:07:b0:1d:9d:a0: a8:0b:a1:5c:64:2c:53:76:55:c6:c4:b1:d8:e8:dc: 22:4e:7a:c1:56:6e:7e:c7:dc:4a:86:79:94:cc:2b: 92:e2:b9:7e:90:c4:31:d6:48:a6:37:a1:84:82:29: 12:f2:ea:79:34:54:87:4b:07:56:6c:e3:af:76:2c: 05:ad:38:6f:9b:05:a4:af:d8:b0:17:a8:c2:0f:bb: 71:a9:d4:dd:4c:fc:46:d9:51:22:48:98:8b:c0:c0: ba:3f:4c:ec:d5:78:7a:42:0a:37:c6:1b:b1:f2:9d: 98:52:5d:23:f9:d9:ff:b6:a0:db:02:ea:63:c5:a9: 17:ad:6e:be:91:ac:7f:41:a0:6e:fa:54:82:31:cb: 76:41:36:d9:50:8e:ad:30:88:7d:13:f4:06:3c:98: e7:28:f5:eb:ba:ff:be:d2:d2:5c:d7:63:1b:f5:c8: 74:f8:fe:19:7a:c8:75:1c:a0:db:38:af:c7:d7:08: f8:f6:d2:91:46:a7:a6:7e:7c:44:b9:6b:5c:af:ae: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:05:0F:5E:C9:07:CA:D8:49:0B:9A:9C:72:72:26:CD:44:8D:4B:13 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QUPXskHythJC5qccnImzUSNSxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.213.0-31.56.214.255 31.58.211.0/24 31.58.235.0-31.58.236.255 31.58.238.0/24 31.58.246.0/23 31.58.249.0-31.58.251.255 217.60.251.0/24 217.60.254.0/24 Signature Algorithm: sha256WithRSAEncryption 02:1e:7c:c5:ed:fc:a8:75:61:1d:43:7f:52:40:54:e7:e6:15: 71:b7:95:7e:7a:7a:e0:94:9b:5a:de:06:df:93:c6:2f:78:08: b0:de:c2:92:5e:1f:f2:e8:92:6e:56:3a:23:d1:7d:df:b1:4a: 30:ed:01:fc:9c:8b:c6:60:07:17:80:6f:17:c1:04:f3:a6:17: 6d:78:0d:01:16:6b:e3:78:5d:11:1d:c6:57:1c:e3:83:a0:dd: 82:30:d1:9f:d4:29:27:4b:fb:04:40:41:df:74:8c:24:8b:d4: 82:97:03:eb:6b:25:0e:b7:7b:57:1e:14:2b:da:86:3e:ef:62: 6e:61:d2:30:75:c3:19:f4:76:86:0a:52:85:ef:cb:4f:6d:ac: 7e:b7:13:cd:57:81:5b:7f:b3:f9:93:66:8b:ac:20:e1:5c:e1: 2b:13:5d:2e:c9:0a:ec:b9:d4:eb:bc:14:84:fe:51:bb:3f:28: 1d:72:e0:66:ad:4c:d4:2c:ca:c9:1c:cc:d7:e2:f0:9b:57:45: 7a:be:99:b9:9c:1e:ad:96:ea:2c:c4:75:d6:8b:f0:10:a6:2c: 49:03:43:02:4c:11:4b:06:20:85:47:2a:5c:b5:ee:91:13:e2: f2:aa:36:d1:15:05:2e:97:41:62:62:23:f1:ae:0d:21:f4:f0: 1e:c4:37:d3 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZtuNwfA+jI1W5RCCfew28etMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjMwMDc0NDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTA1MGY1ZWM5MDdjYWQ4NDkwYjlhOWM3MjcyMjZjZDQ0OGQ0YjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LuFrx4jXZ3q5WhJusKgJLo6JjKb ZLcc0EibIlpznI2MzV/xN4wVzEeMYij0veK9il4utoIBB7AdnaCoC6FcZCxTdlXG xLHY6NwiTnrBVm5+x9xKhnmUzCuS4rl+kMQx1kimN6GEgikS8up5NFSHSwdWbOOv diwFrThvmwWkr9iwF6jCD7txqdTdTPxG2VEiSJiLwMC6P0zs1Xh6Qgo3xhux8p2Y Ul0j+dn/tqDbAupjxakXrW6+kax/QaBu+lSCMct2QTbZUI6tMIh9E/QGPJjnKPXr uv++0tJc12Mb9ch0+P4Zesh1HKDbOK/H1wj49tKRRqemfnxEuWtcr66QwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOEFD17JB8rYSQuanHJyJs1EjUsTMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNFFVUFhza0h5dGhKQzVxY2NuSW16VVNOU3hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAAfONUD BAAfONYDBAAfOtMwDAMEAB866wMEAB867AMEAB867gMEAR869jAMAwQAHzr5AwQC Hzr4AwQA2Tz7AwQA2Tz+MA0GCSqGSIb3DQEBCwUAA4IBAQACHnzF7fyodWEdQ39S QFTn5hVxt5V+enrglJta3gbfk8YveAiw3sKSXh/y6JJuVjoj0X3fsUow7QH8nIvG YAcXgG8XwQTzphdteA0BFmvjeF0RHcZXHOODoN2CMNGf1CknS/sEQEHfdIwki9SC lwPrayUOt3tXHhQr2oY+72JuYdIwdcMZ9HaGClKF78tPbax+txPNV4Fbf7P5k2aL rCDhXOErE10uyQrsudTrvBSE/lG7PygdcuBmrUzULMrJHMzX4vCbV0V6vpm5nB6t luosxHXWi/AQpixJA0MCTBFLBiCFRypcte6RE+LyqjbRFQUul0FiYiPxrg0h9PAe xDfT -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:59 2025 by rpki-client