This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7XnjtA4lrUlhagTDcodR8L7i4iY.roa File: 7XnjtA4lrUlhagTDcodR8L7i4iY.roa (raw, json) Hash identifier: QQVWowq8v3fNkcc0jDruUqZlJjjNfa9iTNADd8EES7s= Subject key identifier: ED:79:E3:B4:0E:25:AD:49:61:6A:04:C3:72:87:51:F0:BE:E2:E2:26 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B6F6C79788BAF84926B46354FFBCA12AE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7XnjtA4lrUlhagTDcodR8L7i4iY.roa Signing time: Tue 30 Dec 2025 13:22:18 +0000 ROA not before: Tue 30 Dec 2025 13:22:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.64.0/24 maxlen: 24 31.56.77.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.82.0/23 maxlen: 23 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.97.0/24 maxlen: 24 31.56.98.0/23 maxlen: 23 31.56.100.0/22 maxlen: 22 31.56.100.0/23 maxlen: 23 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.190.0/24 maxlen: 24 31.56.192.0/22 maxlen: 22 31.56.192.0/24 maxlen: 24 31.56.193.0/24 maxlen: 24 31.56.195.0/24 maxlen: 24 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.218.0/24 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.56.239.0/24 maxlen: 24 31.57.12.0/23 maxlen: 24 31.57.12.0/24 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.31.0/24 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.54.0/24 maxlen: 24 31.57.55.0/24 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.57.0/24 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.138.0/24 maxlen: 24 31.57.143.0/24 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.155.0/24 maxlen: 24 31.57.160.0/24 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.205.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.220.0/24 maxlen: 24 31.57.222.0/23 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.239.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.57.253.0/24 maxlen: 24 31.58.33.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.36.0/22 maxlen: 24 31.58.44.0/22 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.54.0/24 maxlen: 24 31.58.55.0/24 maxlen: 24 31.58.57.0/24 maxlen: 24 31.58.59.0/24 maxlen: 24 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.138.0/23 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.157.0/24 maxlen: 24 31.58.162.0/24 maxlen: 24 31.58.163.0/24 maxlen: 24 31.58.166.0/24 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.212.0/24 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.58.224.0/24 maxlen: 24 31.58.228.0/24 maxlen: 24 31.59.57.0/24 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.196.0/22 maxlen: 24 31.59.200.0/22 maxlen: 24 31.59.204.0/22 maxlen: 24 31.59.208.0/22 maxlen: 24 31.59.220.0/22 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 31.59.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:6c:79:78:8b:af:84:92:6b:46:35:4f:fb:ca:12:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 30 13:22:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed79e3b40e25ad49616a04c3728751f0bee2e226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:b7:ea:95:d3:37:6b:d4:9b:66:56:a8:4d: 0c:5b:17:db:da:37:2d:a3:7b:0a:5c:52:92:42:03: 82:f4:8c:79:ae:2c:eb:0d:34:cf:e5:8b:44:7c:60: 1a:09:b3:32:50:04:3c:d4:0f:81:a7:2e:b6:87:49: ab:3a:ee:da:00:6d:b3:a0:83:85:ec:5c:c1:2d:74: c9:b3:ce:3d:74:0c:45:cd:1d:04:c4:34:8d:10:89: 24:38:6b:68:db:e9:96:bf:29:0e:9c:84:9c:64:84: 1f:6a:d8:9a:aa:08:19:7e:bf:20:98:7e:49:cc:ae: 5d:40:c1:82:e5:28:26:95:2d:69:d8:fd:d8:7c:72: 44:f0:ae:0d:f7:75:a9:85:17:4e:3f:6e:57:68:ba: 9b:4b:9b:97:cf:d6:06:0c:ef:f6:db:13:0e:d7:46: 93:fe:bd:7d:2c:7f:c4:54:73:17:49:ab:9e:9d:30: 68:c9:62:65:0f:2d:ce:e6:d2:84:7f:ea:3b:fb:9d: ca:14:87:61:29:91:c3:51:cf:96:93:19:b1:4b:f5: a6:6b:7e:d8:00:7d:0f:27:34:02:cf:e6:b1:75:26: 7c:8a:dc:44:ee:b6:7f:37:da:9e:11:6b:d2:26:f0: 22:6b:9a:fb:87:af:27:02:ca:3e:72:f7:5d:4a:93: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:79:E3:B4:0E:25:AD:49:61:6A:04:C3:72:87:51:F0:BE:E2:E2:26 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7XnjtA4lrUlhagTDcodR8L7i4iY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.28.0/22 31.56.57.0/24 31.56.64.0/24 31.56.77.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.218.0/24 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0/21 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.155.0/24 31.57.160.0/24 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.205.0/24 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.239.0/24 31.57.250.0-31.57.255.255 31.58.33.0-31.58.39.255 31.58.44.0/22 31.58.50.0-31.58.55.255 31.58.57.0/24 31.58.59.0/24 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.138.0/23 31.58.152.0/22 31.58.157.0/24 31.58.162.0/23 31.58.166.0/24 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.228.255 31.59.57.0/24 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.196.0-31.59.211.255 31.59.220.0-31.59.227.255 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:8f:79:95:76:bd:c0:55:28:b2:1e:10:40:8c:98:53:c8:f9: 8a:8a:17:65:a1:c0:fe:d0:5d:1f:c3:01:7c:ab:71:13:3c:18: 89:d7:e1:0e:e1:42:64:8d:aa:ef:c2:dc:8b:10:ca:eb:07:12: 87:3f:d7:9f:a9:1d:9c:02:4d:be:dc:c5:63:f9:1a:86:ae:0b: e6:58:27:26:c3:76:db:a8:95:1c:7c:5a:7f:8b:82:ef:5c:fb: 16:7d:37:3d:df:66:ae:37:ac:2a:fb:d9:fe:f9:8b:11:7d:b8: 4e:05:80:1f:20:33:06:2f:de:56:c1:5c:09:aa:80:9b:ae:02: b4:a8:b9:07:e0:67:68:80:b9:0a:0a:9d:e5:c1:e0:fc:28:3e: d8:b9:0a:7e:e7:97:2e:77:ba:27:74:54:a0:cf:9f:90:3f:04: 65:40:ef:9f:da:7e:9b:6e:9a:c6:de:f0:7c:64:64:aa:9c:4e: c3:79:b1:03:f9:ee:21:c3:e4:86:73:72:6b:39:fe:54:f9:a8: 53:76:cc:db:6f:c6:e0:0f:e2:2a:92:4d:75:f4:6b:eb:23:85: 67:fb:33:f4:5f:b5:8f:1c:7d:d5:bf:6b:47:9b:3a:fa:aa:70: a0:e6:15:f7:72:b1:ce:24:e3:bb:52:9b:ab:44:c6:82:ea:5e: 8c:90:44:6e -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgISAZtvbHl4i6+EkmtGNU/7yhKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjMwMTMyMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDc5ZTNiNDBlMjVhZDQ5NjE2YTA0YzM3Mjg3NTFmMGJlZTJlMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNO36pXTN2vUm2ZWqE0MWxfb2jct o3sKXFKSQgOC9Ix5rizrDTTP5YtEfGAaCbMyUAQ81A+Bpy62h0mrOu7aAG2zoIOF 7FzBLXTJs849dAxFzR0ExDSNEIkkOGto2+mWvykOnIScZIQfatiaqggZfr8gmH5J zK5dQMGC5SgmlS1p2P3YfHJE8K4N93WphRdOP25XaLqbS5uXz9YGDO/22xMO10aT /r19LH/EVHMXSauenTBoyWJlDy3O5tKEf+o7+53KFIdhKZHDUc+WkxmxS/Wma37Y AH0PJzQCz+axdSZ8itxE7rZ/N9qeEWvSJvAia5r7h68nAso+cvddSpN9jwIDAQAB o4ID9DCCA/AwHQYDVR0OBBYEFO1547QOJa1JYWoEw3KHUfC+4uImMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvN1huanRBNGxyVWxoYWdURGNvZFI4TDdpNGlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCAYIKwYBBQUHAQcBAf8EggH3MIIB8zCCAe8EAgABMIIB 5wMEAR84BAMEAh84HAMEAB84OQMEAB84QAMEAB84TQMEAh84UAMEAR84WgMEBB84 YAMEAR84cjAMAwQBHzh2AwQCHzh4AwQCHzi0MAwDBAIfOLwDBAIfOMADBAIfOMgD BAMfONADBAAfONoDBAEfONwDBAEfOOADBAIfOOQDBAIfOOwDBAIfOQwDBAMfORgD BAIfOSQwDAMEAh85NAMEBh85AAMEAR85XgMEAx85eAMEAR85hAMEAx85iAMEAR85 kgMEAB85mwMEAB85oAMEAh85qDAMAwQEHzmwAwQCHzm4AwQCHznAMAwDBAMfOcgD BAAfOcoDBAAfOc0wDAMEBB850AMEAh854AMEAh856AMEAB857zALAwQBHzn6AwMB HzgwDAMEAB86IQMEAx86IAMEAh86LDAMAwQBHzoyAwQDHzowAwQAHzo5AwQAHzo7 AwQBHzpAAwQCHzpEAwQCHzpUAwQBHzqKAwQCHzqYAwQAHzqdAwQBHzqiAwQAHzqm AwQCHzqsAwQCHzrUMAwDBAIfOtwDBAAfOuQDBAAfOzkDBAIfO0wDBAIfO2ADBAMf O3AwDAMEAx87iAMEAx87kAMEAx87oDAMAwQCHzvEAwQCHzvQMAwDBAIfO9wDBAIf O+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAAqPeZV2vcBVKLIeEECMmFPI+YqK F2WhwP7QXR/DAXyrcRM8GInX4Q7hQmSNqu/C3IsQyusHEoc/15+pHZwCTb7cxWP5 GoauC+ZYJybDdtuolRx8Wn+Lgu9c+xZ9Nz3fZq43rCr72f75ixF9uE4FgB8gMwYv 3lbBXAmqgJuuArSouQfgZ2iAuQoKneXB4PwoPti5Cn7nly53uid0VKDPn5A/BGVA 75/afptumsbe8HxkZKqcTsN5sQP57iHD5IZzcms5/lT5qFN2zNtvxuAP4iqSTXX0 a+sjhWf7M/RftY8cfdW/a0ebOvqqcKDmFfdysc4k47tSm6tExoLqXoyQRG4= -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:16 2025 by rpki-client