This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8gvS0O0xe24VG8Y4RHw7O8TdTvI.roa File: 8gvS0O0xe24VG8Y4RHw7O8TdTvI.roa (raw, json) Hash identifier: BkP+SvqpIGyL253UOpUpfTFI4IKkZNIas3BhfLLu11E= Subject key identifier: F2:0B:D2:D0:ED:31:7B:6E:15:1B:C6:38:44:7C:3B:3B:C4:DD:4E:F2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AC11AE69030468DE7248EBD6BC152617C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8gvS0O0xe24VG8Y4RHw7O8TdTvI.roa Signing time: Wed 26 Nov 2025 16:59:16 +0000 ROA not before: Wed 26 Nov 2025 16:59:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.92.0/22 maxlen: 24 31.59.102.0/23 maxlen: 24 31.59.104.0/23 maxlen: 24 31.59.106.0/24 maxlen: 24 31.59.186.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:1a:e6:90:30:46:8d:e7:24:8e:bd:6b:c1:52:61:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 26 16:59:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f20bd2d0ed317b6e151bc638447c3b3bc4dd4ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:58:7e:e1:26:72:52:e8:94:65:14:6d:e8: a6:a9:89:13:ca:e5:75:8d:7e:a8:d3:59:03:41:ab: 13:7a:84:17:b8:fd:43:2a:d9:0a:3a:0c:fa:19:45: d2:8d:f5:58:a1:18:33:49:bd:e0:12:29:21:a6:88: a4:46:36:21:1f:e0:22:e0:09:19:0c:13:61:3e:cc: 95:9e:9f:44:e9:cb:b5:22:76:7a:26:d1:2a:f2:c3: 39:89:5d:24:25:e6:b6:19:8d:e9:80:e3:cb:e8:2e: ad:79:30:79:a5:15:e4:ee:7c:77:78:5f:1f:e2:f4: 1b:bf:62:de:ff:3b:79:af:10:3c:a5:4d:9d:8b:01: c0:f0:0e:a4:a3:ec:e9:97:85:bb:62:88:74:37:43: cb:25:bc:92:77:41:86:a8:39:01:7c:95:ac:d4:35: 0e:8b:a2:3b:f7:f1:99:60:fe:f3:01:ee:a0:0f:3c: 05:1a:e4:2c:39:79:96:5a:98:f5:0a:1a:24:da:42: 8c:35:f9:da:72:c2:bd:48:f5:1b:b3:0e:80:aa:cb: 38:ac:56:ef:62:8b:c7:c1:17:f6:05:98:43:05:4e: f4:50:be:41:56:ed:8d:c2:89:36:83:e4:52:2a:ce: fd:d2:48:ea:ec:50:d5:f5:02:b5:75:fe:8a:95:fc: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:D2:D0:ED:31:7B:6E:15:1B:C6:38:44:7C:3B:3B:C4:DD:4E:F2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8gvS0O0xe24VG8Y4RHw7O8TdTvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.96.0/24 31.58.180.0-31.58.195.255 31.59.84.0/22 31.59.90.0-31.59.95.255 31.59.102.0-31.59.106.255 31.59.186.0/24 94.183.158.0/24 94.183.164.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.188.0-217.60.195.255 Signature Algorithm: sha256WithRSAEncryption 26:e0:18:13:7e:a9:53:82:75:85:09:68:65:c4:b0:b2:19:4d: 3e:b9:94:97:71:28:73:80:00:d1:c0:8a:d9:20:3c:31:cb:f0: d8:1d:04:ab:a4:44:56:a7:34:43:f7:eb:62:a3:bf:68:87:93: ee:03:c4:32:a5:06:48:71:fb:e4:9f:43:64:d2:f6:bd:01:5f: 22:87:af:b9:1f:07:94:77:5c:06:94:73:43:bf:8f:fa:3c:60: e0:a1:5d:99:6d:a7:85:72:5c:dc:3f:9c:ff:59:6b:18:34:8c: 3b:7d:fb:3c:60:4f:91:be:af:7e:76:fc:28:fb:4c:47:d3:76: 39:ec:6e:30:74:0e:3e:dd:4f:74:30:e8:84:f0:19:15:63:b7: d1:48:db:33:e8:3f:e3:06:fc:61:2f:03:3f:cd:28:fd:bb:6b: 88:22:a6:f7:73:7e:51:01:0f:ba:38:92:20:2d:8b:9b:77:99: 7f:90:70:dc:6b:9a:53:94:66:41:b9:c4:fb:f4:3b:80:1c:53: f1:7b:89:db:64:c5:87:91:0e:22:47:49:09:be:9e:94:64:a9: 5d:fa:8e:0b:e7:fc:34:23:26:78:4b:ab:2b:b0:b4:87:5a:c4: 2d:ac:64:9c:37:19:07:6e:07:6a:e4:9b:14:13:2b:bc:a1:d9: cc:49:35:7d -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZrBGuaQMEaN5ySOvWvBUmF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI2MTY1OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjBiZDJkMGVkMzE3YjZlMTUxYmM2Mzg0NDdjM2IzYmM0ZGQ0ZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDFYfuEmclLolGUUbeimqYkTyuV1 jX6o01kDQasTeoQXuP1DKtkKOgz6GUXSjfVYoRgzSb3gEikhpoikRjYhH+Ai4AkZ DBNhPsyVnp9E6cu1InZ6JtEq8sM5iV0kJea2GY3pgOPL6C6teTB5pRXk7nx3eF8f 4vQbv2Le/zt5rxA8pU2diwHA8A6ko+zpl4W7Yoh0N0PLJbySd0GGqDkBfJWs1DUO i6I79/GZYP7zAe6gDzwFGuQsOXmWWpj1Chok2kKMNfnacsK9SPUbsw6Aqss4rFbv YovHwRf2BZhDBU70UL5BVu2Nwok2g+RSKs790kjq7FDV9QK1df6KlfwU9QIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFPIL0tDtMXtuFRvGOER8OzvE3U7yMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOGd2UzBPMHhlMjRWRzhZNFJIdzdPOFRkVHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAB840wME AB85YDAMAwQCHzq0AwQCHzrAAwQCHztUMAwDBAEfO1oDBAUfO0AwDAMEAR87ZgME AB87agMEAB87ugMEAF63ngMEAF63pDAMAwQBXreuAwQAXrewAwQBXre0MAwDBALZ PLwDBALZPMAwDQYJKoZIhvcNAQELBQADggEBACbgGBN+qVOCdYUJaGXEsLIZTT65 lJdxKHOAANHAitkgPDHL8NgdBKukRFanNEP362Kjv2iHk+4DxDKlBkhx++SfQ2TS 9r0BXyKHr7kfB5R3XAaUc0O/j/o8YOChXZltp4VyXNw/nP9Zaxg0jDt9+zxgT5G+ r352/Cj7TEfTdjnsbjB0Dj7dT3Qw6ITwGRVjt9FI2zPoP+MG/GEvAz/NKP27a4gi pvdzflEBD7o4kiAti5t3mX+QcNxrmlOUZkG5xPv0O4AcU/F7idtkxYeRDiJHSQm+ npRkqV36jgvn/DQjJnhLqyuwtIdaxC2sZJw3GQduB2rkmxQTK7yh2cxJNX0= -----END CERTIFICATE-----Generated at Thu Nov 27 06:45:55 2025 by rpki-client