This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5L4sl6_PoWuqhwcU6qTveRq14jI.roa File: 5L4sl6_PoWuqhwcU6qTveRq14jI.roa (raw, json) Hash identifier: 4rWZWtLM57R0RgBKS1AVsB3tzElSU8m0b85peRP4qms= Subject key identifier: E4:BE:2C:97:AF:CF:A1:6B:AA:87:07:14:EA:A4:EF:79:1A:B5:E2:32 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F845D05A294B1F882993F94F73CACBE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5L4sl6_PoWuqhwcU6qTveRq14jI.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.58.138.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5d:05:a2:94:b1:f8:82:99:3f:94:f7:3c:ac:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4be2c97afcfa16baa870714eaa4ef791ab5e232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f4:65:44:9a:e9:82:87:79:16:ad:bb:1e:83: aa:a7:e1:af:fc:6a:a4:8c:84:a9:51:9d:3d:78:90: d0:8c:6a:5e:72:87:81:48:cf:7f:20:f4:d5:77:e9: 9f:54:38:f6:60:c9:f2:f1:1f:b1:84:4a:24:ae:1b: ad:e0:9b:76:87:bb:0e:e5:ac:c1:c3:48:00:ac:1f: ea:e9:e1:e4:33:b9:f1:37:f3:fa:21:5c:c9:25:c4: e1:66:c9:6b:35:28:16:6f:32:60:98:9b:56:71:c8: 89:3a:d6:8c:3e:f1:aa:fc:87:2b:da:bb:16:09:5c: 18:29:5f:67:95:29:f8:af:53:c8:f5:de:4f:e3:c1: 9d:e5:5c:b6:33:6f:27:c3:a8:6a:ef:8a:c0:56:07: 73:e7:80:fd:8d:35:f9:5f:42:f7:7b:27:aa:87:19: c9:88:1f:bb:9e:5b:2f:aa:b9:73:61:50:b6:15:9c: be:8c:06:cc:e9:95:9b:8b:98:c6:60:0a:3c:e1:c5: 85:b3:31:37:36:3d:ee:eb:5b:b4:ed:cf:01:27:64: 4e:4a:fe:cb:04:26:0d:3a:e4:74:80:86:ee:47:a7: 29:fa:f5:9b:02:c9:ac:4e:32:84:09:72:84:f5:60: 1e:06:99:5c:3a:01:cc:00:96:1d:b4:3f:f7:23:f1: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BE:2C:97:AF:CF:A1:6B:AA:87:07:14:EA:A4:EF:79:1A:B5:E2:32 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5L4sl6_PoWuqhwcU6qTveRq14jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.141.0/24 31.57.191.0/24 31.57.221.0/24 31.58.138.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption ab:89:2f:5f:f4:48:ec:67:ec:a8:6e:51:95:2d:2c:d3:0b:25: 96:fe:f3:f4:8a:16:73:96:44:30:28:42:3d:ec:24:09:6d:91: 9b:f0:3d:f0:db:cf:4f:f1:d6:2a:39:29:f2:7a:99:45:e1:d2: 47:41:57:da:af:38:80:78:0d:2a:32:36:fc:1d:99:e5:60:ae: c5:e3:6e:a6:76:43:b5:ca:fc:4e:de:66:07:c5:29:b4:19:10: 82:a0:9e:ed:dd:03:a1:40:f1:55:d6:df:09:86:f7:2d:cb:26: 0d:dd:88:e8:8f:dc:b5:b0:9c:7c:2f:cb:26:0d:54:49:43:10: b5:80:39:67:8f:3e:1d:b6:93:4a:c2:73:99:92:2a:b5:02:62: c7:3d:f1:05:fc:c3:ef:de:2f:22:d5:91:b0:6a:7b:de:de:9a: d5:a8:ef:49:86:fe:df:61:33:95:83:51:23:f4:ee:24:97:2a: 0f:59:a2:89:fa:ba:90:ed:a6:32:77:50:3e:a3:6d:4c:59:58: 4f:f8:6a:b7:dc:ae:92:8f:e7:36:5e:0c:ef:e3:b7:ac:bb:c7: 7a:86:ab:b1:07:a5:b1:e9:b6:2b:b6:c3:69:d0:34:77:27:0b: 01:d2:34:39:44:e8:7a:62:9a:8e:e2:83:fb:2d:a7:c5:e5:89: e8:84:bb:b9 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hF0FopSx+IKZP5T3PKy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJlMmM5N2FmY2ZhMTZiYWE4NzA3MTRlYWE0ZWY3OTFhYjVlMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvRlRJrpgod5Fq27HoOqp+Gv/Gqk jISpUZ09eJDQjGpecoeBSM9/IPTVd+mfVDj2YMny8R+xhEokrhut4Jt2h7sO5azB w0gArB/q6eHkM7nxN/P6IVzJJcThZslrNSgWbzJgmJtWcciJOtaMPvGq/Icr2rsW CVwYKV9nlSn4r1PI9d5P48Gd5Vy2M28nw6hq74rAVgdz54D9jTX5X0L3eyeqhxnJ iB+7nlsvqrlzYVC2FZy+jAbM6ZWbi5jGYAo84cWFszE3Nj3u61u07c8BJ2ROSv7L BCYNOuR0gIbuR6cp+vWbAsmsTjKECXKE9WAeBplcOgHMAJYdtD/3I/HHxQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFOS+LJevz6FrqocHFOqk73kateIyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNUw0c2w2X1BvV3VxaHdjVTZxVHZlUnExNGpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzh9AwQA HziNAwQAHzm/AwQAHzndAwQAHzqKAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQCr iS9f9EjsZ+yoblGVLSzTCyWW/vP0ihZzlkQwKEI97CQJbZGb8D3w289P8dYqOSny eplF4dJHQVfarziAeA0qMjb8HZnlYK7F426mdkO1yvxO3mYHxSm0GRCCoJ7t3QOh QPFV1t8JhvctyyYN3Yjoj9y1sJx8L8smDVRJQxC1gDlnjz4dtpNKwnOZkiq1AmLH PfEF/MPv3i8i1ZGwanve3prVqO9Jhv7fYTOVg1Ej9O4klyoPWaKJ+rqQ7aYyd1A+ o21MWVhP+Gq33K6Sj+c2Xgzv47esu8d6hquxB6Wx6bYrtsNp0DR3JwsB0jQ5ROh6 YpqO4oP7LafF5YnohLu5 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:23 2026 by rpki-client