This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/57S09xO5QibM1jMZ6pNuQRE-inU.roa File: 57S09xO5QibM1jMZ6pNuQRE-inU.roa (raw, json) Hash identifier: MfCbPKtuQL++HrsIUNU7Pem/Itt0cRxWu9Xp8+zpLCY= Subject key identifier: E7:B4:B4:F7:13:B9:42:26:CC:D6:33:19:EA:93:6E:41:11:3E:8A:75 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E17ABBAEAF9FD770EA6F1547FC2D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/57S09xO5QibM1jMZ6pNuQRE-inU.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399073 IP address blocks: 31.56.49.0/24 maxlen: 24 31.56.115.0/24 maxlen: 24 31.56.210.0/24 maxlen: 24 31.56.212.0/24 maxlen: 24 31.56.216.0/24 maxlen: 24 31.56.221.0/24 maxlen: 24 31.56.223.0/24 maxlen: 24 31.56.224.0/24 maxlen: 24 31.56.234.0/24 maxlen: 24 31.56.235.0/24 maxlen: 24 31.57.40.0/24 maxlen: 24 31.57.52.0/24 maxlen: 24 31.57.67.0/24 maxlen: 24 31.57.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e1:7a:bb:ae:af:9f:d7:70:ea:6f:15:47:fc:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7b4b4f713b94226ccd63319ea936e41113e8a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:08:84:d6:d9:2c:48:aa:34:c7:6b:38:4f: e5:fe:7b:6d:90:d0:74:1c:86:4e:8c:e9:34:fe:32: 08:63:bb:70:de:ed:9a:27:e8:a8:5a:bf:4e:de:62: 15:3e:b5:a0:44:f5:b0:c6:8e:db:68:ae:b2:a2:fb: 60:c6:e9:14:ef:44:0a:86:7e:80:83:f3:2c:e1:b3: 7f:a1:29:dc:e7:27:67:e5:14:a3:92:3b:f1:64:bf: 12:b8:ad:60:4e:59:8d:d8:1f:7c:cf:fd:a7:2e:e9: da:6e:b6:b6:01:66:95:55:23:f8:93:87:8d:39:8f: 96:8e:56:02:dd:69:30:2e:2c:cc:78:7e:3f:c1:9b: 17:ca:1a:aa:e1:2e:13:4b:e1:4b:51:ae:3d:f7:a2: 39:42:b3:49:a3:4e:56:f0:c2:8b:7e:d9:fa:02:b7: f1:3d:39:0e:b7:7a:e7:b9:64:de:6a:f2:ae:3b:16: 47:e4:ba:20:ae:c9:dc:f4:88:69:7f:b0:1d:f9:f6: 5e:cd:b3:98:46:c7:03:b1:bb:f2:94:9b:4c:0b:2d: 60:0b:bc:ee:16:57:8a:f0:69:bc:ef:68:6a:7b:3f: 94:ff:19:45:74:f6:49:ec:d1:8c:30:2f:0a:fd:aa: 5b:ef:e6:aa:a9:8f:a2:4d:36:43:f0:9e:e2:c1:8b: d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B4:B4:F7:13:B9:42:26:CC:D6:33:19:EA:93:6E:41:11:3E:8A:75 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/57S09xO5QibM1jMZ6pNuQRE-inU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.49.0/24 31.56.115.0/24 31.56.210.0/24 31.56.212.0/24 31.56.216.0/24 31.56.221.0/24 31.56.223.0-31.56.224.255 31.56.234.0/23 31.57.40.0/24 31.57.52.0/24 31.57.67.0/24 31.57.95.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:e0:a8:52:30:0c:a3:17:3b:1c:7e:cb:34:7e:d2:9b:08:f6: 97:25:19:40:d4:34:51:2b:36:66:99:eb:d1:a8:89:13:ce:bc: 79:dd:2b:ab:46:86:42:65:30:f3:99:19:01:85:b8:9e:5d:9b: 68:07:46:4a:d4:d6:d3:e2:d5:5c:bf:44:ea:42:bb:06:06:4f: 31:16:1b:5f:0e:72:70:22:3e:9f:69:aa:56:2e:dc:5c:33:9f: fb:39:a2:5b:2c:e7:c5:7b:ee:b1:8f:c4:e3:f7:ec:0a:1c:4b: 63:85:4f:f7:fa:1b:7a:86:4e:e1:4c:40:e6:85:23:70:6c:17: a9:7e:b3:ca:ce:4a:92:aa:56:0a:04:df:c9:25:5a:a5:52:03: c8:db:31:82:5a:c4:2b:34:cf:a9:98:36:46:d9:41:48:31:6b: 4c:44:f0:49:38:9d:e3:a2:25:72:8e:b1:e1:a0:70:97:42:21: 21:59:3a:77:52:a3:a6:7f:d1:a5:07:f1:9f:35:ba:f9:f5:0d: 8d:85:9a:5f:10:40:dd:05:52:e3:fa:f5:8e:ab:53:e8:bf:62: af:fb:06:29:01:3e:1d:4e:71:ef:df:33:d4:9d:e1:8d:f8:64: 22:43:f0:39:f3:52:af:0f:2c:1a:88:8d:20:14:e8:70:25:0f: 31:6a:26:48 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt/hOF6u66vn9dw6m8VR/wtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2I0YjRmNzEzYjk0MjI2Y2NkNjMzMTllYTkzNmU0MTExM2U4YTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS8IhNbZLEiqNMdrOE/l/nttkNB0 HIZOjOk0/jIIY7tw3u2aJ+ioWr9O3mIVPrWgRPWwxo7baK6yovtgxukU70QKhn6A g/Ms4bN/oSnc5ydn5RSjkjvxZL8SuK1gTlmN2B98z/2nLunabra2AWaVVSP4k4eN OY+WjlYC3WkwLizMeH4/wZsXyhqq4S4TS+FLUa4996I5QrNJo05W8MKLftn6Arfx PTkOt3rnuWTeavKuOxZH5Logrsnc9Ihpf7Ad+fZezbOYRscDsbvylJtMCy1gC7zu FleK8Gm872hqez+U/xlFdPZJ7NGMMC8K/apb7+aqqY+iTTZD8J7iwYvQzQIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFOe0tPcTuUImzNYzGeqTbkERPop1MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNTdTMDl4TzVRaWJNMWpNWjZwTnVRUkUtaW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAHzgxAwQA HzhzAwQAHzjSAwQAHzjUAwQAHzjYAwQAHzjdMAwDBAAfON8DBAAfOOADBAEfOOoD BAAfOSgDBAAfOTQDBAAfOUMDBAAfOV8wDQYJKoZIhvcNAQELBQADggEBAA/gqFIw DKMXOxx+yzR+0psI9pclGUDUNFErNmaZ69GoiRPOvHndK6tGhkJlMPOZGQGFuJ5d m2gHRkrU1tPi1Vy/ROpCuwYGTzEWG18OcnAiPp9pqlYu3Fwzn/s5olss58V77rGP xOP37AocS2OFT/f6G3qGTuFMQOaFI3BsF6l+s8rOSpKqVgoE38klWqVSA8jbMYJa xCs0z6mYNkbZQUgxa0xE8Ek4neOiJXKOseGgcJdCISFZOndSo6Z/0aUH8Z81uvn1 DY2Fml8QQN0FUuP69Y6rU+i/Yq/7BikBPh1Oce/fM9Sd4Y34ZCJD8DnzUq8PLBqI jSAU6HAlDzFqJkg= -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:35 2026 by rpki-client