This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8-jjk9vyrDg02u8xpdlGlZzG_EA.roa File: 8-jjk9vyrDg02u8xpdlGlZzG_EA.roa (raw, json) Hash identifier: U2mHyQPOCQBm1jdBV0JqUemmfz6G1+Fn08rwpT807G8= Subject key identifier: F3:E8:E3:93:DB:F2:AC:38:34:DA:EF:31:A5:D9:46:95:9C:C6:FC:40 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84AEADCCDE45E98BBF90B4AEC63208 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8-jjk9vyrDg02u8xpdlGlZzG_EA.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 31.56.0.0/24 maxlen: 24 31.56.49.0/24 maxlen: 24 31.56.98.0/24 maxlen: 24 31.56.103.0/24 maxlen: 24 31.56.210.0/24 maxlen: 24 31.56.212.0/24 maxlen: 24 31.56.223.0/24 maxlen: 24 31.56.234.0/24 maxlen: 24 31.56.235.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.121.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.57.225.0/24 maxlen: 24 31.58.90.0/24 maxlen: 24 31.58.168.0/24 maxlen: 24 31.59.171.0/24 maxlen: 24 31.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ae:ad:cc:de:45:e9:8b:bf:90:b4:ae:c6:32:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3e8e393dbf2ac3834daef31a5d946959cc6fc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:ed:04:ae:21:6c:31:38:fb:15:97:31:f8: 84:fb:3c:fb:20:18:0d:d3:f9:5d:a7:19:0b:8a:96: ef:11:9d:16:f6:4a:8c:9c:67:d3:77:c5:02:30:6c: 06:27:22:26:a7:26:b1:62:51:bb:fc:1a:34:57:32: 09:27:69:7b:5d:f3:53:c9:c3:ff:78:8a:5e:0e:76: c3:e7:33:65:28:c3:a7:77:a4:48:07:ec:13:09:b5: d7:2c:fb:7e:fe:a7:65:36:6a:3c:21:74:c9:f1:13: 72:31:67:14:f9:08:89:76:41:c9:18:71:31:65:e2: 39:b7:18:0e:17:0c:77:35:6f:c5:44:08:81:10:10: 24:e2:c2:79:e7:10:3b:04:64:28:cb:42:47:ad:c3: cb:a5:e1:1c:6e:a1:a0:f7:82:dc:a8:a1:c5:64:63: 14:fb:38:92:49:88:2d:7c:8f:60:95:ba:b4:c8:3d: 26:72:53:14:87:39:3e:be:ff:3e:56:57:c4:82:db: e2:93:68:6f:e2:84:0a:d0:60:ac:3a:7f:c8:65:9b: 11:12:8d:96:dc:3b:a0:02:48:24:99:ea:12:3a:7b: e6:47:f9:dd:a4:b2:dc:f8:39:92:99:89:25:d6:00: a7:38:93:3f:69:0e:e0:5b:71:4b:12:9b:1c:fb:92: 30:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:E3:93:DB:F2:AC:38:34:DA:EF:31:A5:D9:46:95:9C:C6:FC:40 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8-jjk9vyrDg02u8xpdlGlZzG_EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.56.49.0/24 31.56.98.0/24 31.56.103.0/24 31.56.210.0/24 31.56.212.0/24 31.56.223.0/24 31.56.234.0/23 31.57.35.0/24 31.57.121.0/24 31.57.206.0/24 31.57.225.0/24 31.58.90.0/24 31.58.168.0/24 31.59.171.0/24 31.59.236.0/22 Signature Algorithm: sha256WithRSAEncryption 37:8a:5c:05:ca:e9:be:6b:3c:39:b8:3d:c0:da:b8:01:39:b2: 9a:c5:83:6a:20:e1:35:ae:bc:42:08:35:2f:2d:df:5e:59:df: dc:e2:4d:60:bd:66:d6:64:87:a9:de:21:77:66:d5:27:10:8e: ee:63:ed:b5:8b:1f:bd:e3:c9:c5:bc:f9:4c:ee:d8:6b:70:31: fb:1e:23:8b:b7:6b:51:76:07:46:4e:d2:96:8d:3f:fe:95:81: 1f:ba:68:53:9f:a7:ae:84:5f:ce:91:64:9f:e0:5a:34:98:60: f4:a7:2c:d9:22:9f:8a:79:26:bd:a0:fc:e8:02:5f:ed:d5:bf: 2c:f1:15:21:07:31:04:ba:da:cf:0b:12:7a:c8:ba:b0:eb:30: d8:e7:66:e1:fe:8b:7e:c4:a8:4b:7c:4c:45:1b:1d:51:56:db: 53:9c:18:b4:73:dc:48:33:2b:6d:5c:50:17:d4:24:33:30:0d: 2e:2b:df:f3:62:0f:0b:d7:35:d6:a8:f6:f3:f8:af:bf:02:c1: 62:20:57:6b:56:c6:6a:d8:d0:a2:af:86:9f:74:50:73:08:2f: a4:eb:90:56:07:5c:0b:88:57:4c:fb:3f:e1:1c:8d:ce:2f:09: 1e:ed:0e:8a:17:b4:a1:56:24:10:5c:d4:df:5e:57:d0:c3:cb: 46:99:3d:59 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt/hK6tzN5F6Yu/kLSuxjIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2U4ZTM5M2RiZjJhYzM4MzRkYWVmMzFhNWQ5NDY5NTljYzZmYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6jtBK4hbDE4+xWXMfiE+zz7IBgN 0/ldpxkLipbvEZ0W9kqMnGfTd8UCMGwGJyImpyaxYlG7/Bo0VzIJJ2l7XfNTycP/ eIpeDnbD5zNlKMOnd6RIB+wTCbXXLPt+/qdlNmo8IXTJ8RNyMWcU+QiJdkHJGHEx ZeI5txgOFwx3NW/FRAiBEBAk4sJ55xA7BGQoy0JHrcPLpeEcbqGg94LcqKHFZGMU +ziSSYgtfI9glbq0yD0mclMUhzk+vv8+VlfEgtvik2hv4oQK0GCsOn/IZZsREo2W 3DugAkgkmeoSOnvmR/ndpLLc+DmSmYkl1gCnOJM/aQ7gW3FLEpsc+5IwAQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFPPo45Pb8qw4NNrvMaXZRpWcxvxAMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOC1qams5dnlyRGcwMnU4eHBkbEdsWnpHX0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAHzgAAwQA HzgxAwQAHzhiAwQAHzhnAwQAHzjSAwQAHzjUAwQAHzjfAwQBHzjqAwQAHzkjAwQA Hzl5AwQAHznOAwQAHznhAwQAHzpaAwQAHzqoAwQAHzurAwQCHzvsMA0GCSqGSIb3 DQEBCwUAA4IBAQA3ilwFyum+azw5uD3A2rgBObKaxYNqIOE1rrxCCDUvLd9eWd/c 4k1gvWbWZIep3iF3ZtUnEI7uY+21ix+948nFvPlM7thrcDH7HiOLt2tRdgdGTtKW jT/+lYEfumhTn6euhF/OkWSf4Fo0mGD0pyzZIp+KeSa9oPzoAl/t1b8s8RUhBzEE utrPCxJ6yLqw6zDY52bh/ot+xKhLfExFGx1RVttTnBi0c9xIMyttXFAX1CQzMA0u K9/zYg8L1zXWqPbz+K+/AsFiIFdrVsZq2NCir4afdFBzCC+k65BWB1wLiFdM+z/h HI3OLwke7Q6KF7ShViQQXNTfXlfQw8tGmT1Z -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:41 2026 by rpki-client