This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5FR5IBirsVkqoBb6WB-fOA20Bsk.roa File: 5FR5IBirsVkqoBb6WB-fOA20Bsk.roa (raw, json) Hash identifier: Xf/l/2vR/ykUCNkqMPBndLvc0PUFyjqPeL8km/t6DMc= Subject key identifier: E4:54:79:20:18:AB:B1:59:2A:A0:16:FA:58:1F:9F:38:0D:B4:06:C9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AA56F76A85206E08C1BB814D24D0229CE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5FR5IBirsVkqoBb6WB-fOA20Bsk.roa Signing time: Fri 21 Nov 2025 08:02:16 +0000 ROA not before: Fri 21 Nov 2025 08:02:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214083 IP address blocks: 31.56.38.0/24 maxlen: 24 31.58.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:6f:76:a8:52:06:e0:8c:1b:b8:14:d2:4d:02:29:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 21 08:02:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e454792018abb1592aa016fa581f9f380db406c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:ce:cb:5d:03:09:90:74:d2:69:2a:d9:88: 65:a8:ad:08:a3:14:fc:80:e1:76:0d:fa:d7:53:06: 8a:d6:6b:6e:a6:60:74:53:32:c6:99:65:3c:71:7f: 9f:11:09:18:a7:0e:fd:85:8c:47:7a:fa:cb:a5:ab: b7:36:84:dd:84:31:5c:1e:d5:e8:70:5d:69:75:57: 2b:0a:c5:8a:50:e7:6e:6e:00:6c:33:1b:94:73:ff: ad:24:6b:84:6f:11:c6:8c:7c:81:0f:87:3e:0f:c1: 39:8c:e2:b2:65:c7:5a:67:33:70:1a:ab:f7:68:d5: d9:36:49:02:c0:30:70:9b:62:85:69:ad:84:57:56: 0e:cd:a9:c8:d1:ba:76:3f:94:9e:2e:50:c4:66:f5: 58:af:fd:e3:88:97:31:13:20:07:17:2e:52:b7:ea: ea:70:d4:da:39:b3:2c:d3:b2:66:91:39:4f:91:8a: 63:c0:68:84:c8:96:07:31:c3:31:a2:27:20:ae:a3: 13:f5:9a:b0:58:4c:2a:3f:31:3e:6e:a0:31:ef:ca: 59:da:77:f8:3a:5b:87:60:b1:4e:2e:8c:7a:6e:bb: 0e:90:8c:e0:d9:66:37:b4:ad:e4:bf:b4:0c:90:86: c9:63:fe:7b:ab:b0:3e:da:fc:53:bd:7c:bb:c9:ec: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:54:79:20:18:AB:B1:59:2A:A0:16:FA:58:1F:9F:38:0D:B4:06:C9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5FR5IBirsVkqoBb6WB-fOA20Bsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.38.0/24 31.58.170.0/24 Signature Algorithm: sha256WithRSAEncryption 14:9e:13:b4:89:5d:22:28:12:66:29:74:a7:f2:83:73:48:2f: e1:03:f0:b1:4a:1a:96:4b:75:db:d8:36:9e:a4:ac:1e:03:b7: db:73:dd:e1:5e:61:70:dc:11:c7:5a:a0:2c:56:a0:f3:02:01: 0f:3a:92:c7:18:49:49:bb:bd:9b:91:a2:90:d5:4e:44:28:0e: 61:67:a8:fe:9c:96:e2:70:da:e6:35:0d:9a:ef:be:4a:bb:cf: c8:70:16:cc:99:42:ae:94:5a:51:9a:a6:7c:62:6e:df:19:23: e2:f5:53:81:3f:6c:c9:99:b0:59:99:e7:ce:c6:55:82:06:c5: 21:42:e7:2b:e5:2a:67:1c:1b:08:c7:15:18:ac:9e:a5:a1:09: 47:1a:74:94:a2:97:b2:fc:39:6a:bb:3b:2f:02:d3:14:28:0c: 16:3f:59:70:00:7b:9d:4a:ea:90:62:f1:31:88:e4:00:9a:f5: f6:52:ef:22:0c:88:03:e4:dc:a1:f6:50:ef:62:a1:01:56:e8: 53:0c:02:24:2c:eb:0c:d7:07:7c:8c:60:bd:f4:4b:12:2e:43: c6:31:91:c2:39:c7:9f:9a:ed:58:e4:cc:d3:8c:eb:14:94:0d: 20:85:b6:49:11:c5:83:97:4f:51:3f:07:d0:05:b9:ef:8c:cc: 0c:cf:88:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqlb3aoUgbgjBu4FNJNAinOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIxMDgwMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDU0NzkyMDE4YWJiMTU5MmFhMDE2ZmE1ODFmOWYzODBkYjQwNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7zOy10DCZB00mkq2YhlqK0IoxT8 gOF2DfrXUwaK1mtupmB0UzLGmWU8cX+fEQkYpw79hYxHevrLpau3NoTdhDFcHtXo cF1pdVcrCsWKUOdubgBsMxuUc/+tJGuEbxHGjHyBD4c+D8E5jOKyZcdaZzNwGqv3 aNXZNkkCwDBwm2KFaa2EV1YOzanI0bp2P5SeLlDEZvVYr/3jiJcxEyAHFy5St+rq cNTaObMs07JmkTlPkYpjwGiEyJYHMcMxoicgrqMT9ZqwWEwqPzE+bqAx78pZ2nf4 OluHYLFOLox6brsOkIzg2WY3tK3kv7QMkIbJY/57q7A+2vxTvXy7yeyJdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFORUeSAYq7FZKqAW+lgfnzgNtAbJMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNUZSNUlCaXJzVmtxb0JiNldCLWZPQTIwQnNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgmAwQA HzqqMA0GCSqGSIb3DQEBCwUAA4IBAQAUnhO0iV0iKBJmKXSn8oNzSC/hA/CxShqW S3Xb2DaepKweA7fbc93hXmFw3BHHWqAsVqDzAgEPOpLHGElJu72bkaKQ1U5EKA5h Z6j+nJbicNrmNQ2a775Ku8/IcBbMmUKulFpRmqZ8Ym7fGSPi9VOBP2zJmbBZmefO xlWCBsUhQucr5SpnHBsIxxUYrJ6loQlHGnSUopey/DlquzsvAtMUKAwWP1lwAHud SuqQYvExiOQAmvX2Uu8iDIgD5Nyh9lDvYqEBVuhTDAIkLOsM1wd8jGC99EsSLkPG MZHCOcefmu1Y5MzTjOsUlA0ghbZJEcWDl09RPwfQBbnvjMwMz4hQ -----END CERTIFICATE-----Generated at Sat Nov 22 07:22:38 2025 by rpki-client