This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/82D10Ce7nnYSp6hm7H8vFCPiTNk.roa File: 82D10Ce7nnYSp6hm7H8vFCPiTNk.roa (raw, json) Hash identifier: W0D5nY8FUl4z0SHxN1cljN4AeeUxKNyK30XzwPArUSM= Subject key identifier: F3:60:F5:D0:27:BB:9E:76:12:A7:A8:66:EC:7F:2F:14:23:E2:4C:D9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AAC65FFB232E48950563011F536AA6F64 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/82D10Ce7nnYSp6hm7H8vFCPiTNk.roa Signing time: Sat 22 Nov 2025 16:29:16 +0000 ROA not before: Sat 22 Nov 2025 16:29:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209630 IP address blocks: 31.56.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:65:ff:b2:32:e4:89:50:56:30:11:f5:36:aa:6f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 22 16:29:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f360f5d027bb9e7612a7a866ec7f2f1423e24cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:84:a8:95:26:1f:e3:0d:e2:1e:70:4a:01: 91:e4:1d:5b:d9:8d:09:5f:04:ae:f3:91:ba:a7:c8: 00:91:4a:a0:0d:c4:f5:88:93:52:49:45:15:1f:56: e4:3a:2e:ac:c2:e1:ed:26:ca:8e:9d:c9:1c:ef:59: fa:b3:fd:f0:e2:2c:db:c6:37:f4:b6:24:d7:a9:21: 5e:b9:85:5b:36:fd:9b:ad:1d:f9:fc:79:3e:c3:12: 71:4e:62:5c:12:e0:72:49:49:40:63:d2:2b:f5:d3: 23:3f:01:ba:4f:a4:2b:d7:81:6e:4e:94:04:27:32: 20:3e:41:59:56:84:fe:fe:a8:90:54:af:e6:42:b5: be:69:18:fb:df:ae:4f:3b:43:45:74:61:2b:31:77: ca:6b:5c:aa:79:ce:a5:32:05:3e:8e:ae:02:4a:6d: 83:ad:3c:06:1d:e8:35:cc:09:be:e9:57:3d:be:f7: c5:78:4a:c8:a2:6f:09:9b:27:a6:ae:38:6b:f8:c4: 3b:cf:c3:68:5f:65:1e:3a:f5:3b:05:f3:30:00:48: 8c:d8:2b:66:c4:00:7d:f6:ba:d1:f9:39:9f:34:1e: 48:84:14:2a:10:b5:cd:12:4f:3d:54:2f:15:28:ac: ad:4e:b7:e8:b9:7d:77:f7:92:e1:08:89:bb:f1:37: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:60:F5:D0:27:BB:9E:76:12:A7:A8:66:EC:7F:2F:14:23:E2:4C:D9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/82D10Ce7nnYSp6hm7H8vFCPiTNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.102.0/24 Signature Algorithm: sha256WithRSAEncryption 40:74:a9:e7:5d:80:e4:ab:73:bc:6b:e8:cc:20:e1:68:22:e9: 3e:5a:72:87:04:b9:29:84:35:32:d1:23:79:5f:8a:e1:47:68: 0f:d9:b9:e2:27:ba:ca:5e:70:f3:ce:8d:96:f9:3c:d5:34:5a: 91:2e:49:23:ec:54:ac:39:6a:04:95:eb:68:af:1c:bd:46:ee: 44:3e:9f:7d:ef:ed:64:64:75:40:c0:87:42:07:23:f4:12:0f: da:c2:95:b6:80:c3:72:44:4c:85:26:2d:60:3a:3d:0f:57:0c: 3a:28:a3:10:80:69:a8:0a:76:72:d9:60:62:cd:98:72:c4:20: 1c:ff:c4:81:e6:36:e3:a0:ee:13:f8:5a:0f:07:52:16:97:a0: ab:4a:80:74:a4:2e:fa:e7:f3:85:81:b2:40:25:2f:d5:1c:fc: d0:4a:24:fc:e1:5b:e3:23:0a:1f:68:db:9e:b8:e7:6f:ab:b1: 3b:a3:c0:2e:24:3d:4d:b5:ce:ea:71:1e:e9:51:f8:c7:38:7b: e1:74:e9:2c:2f:41:bd:fc:fd:5e:e4:57:06:5b:ec:22:dd:39: 0a:4b:42:0b:77:f6:e5:34:44:b9:91:a7:db:b3:0e:0d:04:e4: 7c:f5:f5:72:c4:a0:0d:73:03:51:34:04:be:7f:09:da:13:cc: 70:e5:28:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqsZf+yMuSJUFYwEfU2qm9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIyMTYyOTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzYwZjVkMDI3YmI5ZTc2MTJhN2E4NjZlYzdmMmYxNDIzZTI0Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeCEqJUmH+MN4h5wSgGR5B1b2Y0J XwSu85G6p8gAkUqgDcT1iJNSSUUVH1bkOi6swuHtJsqOnckc71n6s/3w4izbxjf0 tiTXqSFeuYVbNv2brR35/Hk+wxJxTmJcEuBySUlAY9Ir9dMjPwG6T6Qr14FuTpQE JzIgPkFZVoT+/qiQVK/mQrW+aRj7365PO0NFdGErMXfKa1yqec6lMgU+jq4CSm2D rTwGHeg1zAm+6Vc9vvfFeErIom8Jmyemrjhr+MQ7z8NoX2UeOvU7BfMwAEiM2Ctm xAB99rrR+TmfNB5IhBQqELXNEk89VC8VKKytTrfouX1395LhCIm78Te42wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNg9dAnu552EqeoZux/LxQj4kzZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvODJEMTBDZTdubllTcDZobTdIOHZGQ1BpVE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhmMA0G CSqGSIb3DQEBCwUAA4IBAQBAdKnnXYDkq3O8a+jMIOFoIuk+WnKHBLkphDUy0SN5 X4rhR2gP2bniJ7rKXnDzzo2W+TzVNFqRLkkj7FSsOWoEletorxy9Ru5EPp997+1k ZHVAwIdCByP0Eg/awpW2gMNyREyFJi1gOj0PVww6KKMQgGmoCnZy2WBizZhyxCAc /8SB5jbjoO4T+FoPB1IWl6CrSoB0pC765/OFgbJAJS/VHPzQSiT84VvjIwofaNue uOdvq7E7o8AuJD1Ntc7qcR7pUfjHOHvhdOksL0G9/P1e5FcGW+wi3TkKS0ILd/bl NES5kafbsw4NBOR89fVyxKANcwNRNAS+fwnaE8xw5Sgv -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:15 2025 by rpki-client