This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9xUyJ55ZA8r6l4SFv9I4gydSBnw.roa File: 9xUyJ55ZA8r6l4SFv9I4gydSBnw.roa (raw, json) Hash identifier: N/XliGuguMkp4TkD48Hu27fd7BQyDL12uzma7+donRY= Subject key identifier: F7:15:32:27:9E:59:03:CA:FA:97:84:85:BF:D2:38:83:27:52:06:7C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B1BD23A7AC3DC1D968CF009E0DC6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9xUyJ55ZA8r6l4SFv9I4gydSBnw.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212742 IP address blocks: 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.232.0/23 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 217.60.8.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b1:bd:23:a7:ac:3d:c1:d9:68:cf:00:9e:0d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f71532279e5903cafa978485bfd238832752067c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:50:0b:e5:3a:30:03:40:f8:90:9a:f5:56: b7:28:01:4f:76:16:d7:61:6a:6f:27:0e:e6:74:2b: de:ad:40:ab:c3:70:0a:c0:f9:76:45:c2:37:a9:18: d2:22:53:5d:61:fd:07:e5:aa:fa:3c:9b:39:bc:dd: 8c:51:17:1b:ba:47:6a:01:89:d4:48:db:da:86:20: 22:5c:0a:fd:e5:6b:25:7e:16:84:cf:f6:da:8a:42: af:d8:64:41:b6:86:89:68:06:db:2b:28:ad:4b:c9: 9f:4d:7a:5d:93:d6:a2:a2:2a:b1:5a:5d:5d:a4:98: 83:53:9b:fd:eb:88:4e:da:51:90:3d:5a:31:76:10: 6f:6f:02:4b:c4:e7:53:e7:d0:03:b0:64:c1:b3:eb: 63:ca:50:73:63:9e:7a:df:29:5a:13:ae:92:9f:8a: 80:1d:dc:e7:79:74:ad:2f:1f:8a:80:b6:61:b3:49: e0:8f:ba:16:96:5a:20:5c:ec:36:0d:47:ab:b0:67: 54:e6:3c:66:f1:c8:2e:f6:3b:09:8d:2b:90:6f:0e: 30:4f:22:52:5e:be:8b:32:d3:72:ce:c6:f0:38:db: 85:8d:43:f0:c1:16:37:49:70:dc:61:1c:0a:e4:bf: 39:3f:b8:dc:a3:62:d0:4f:67:01:33:30:31:19:33: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:15:32:27:9E:59:03:CA:FA:97:84:85:BF:D2:38:83:27:52:06:7C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9xUyJ55ZA8r6l4SFv9I4gydSBnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.58.196.0/22 31.58.204.0-31.58.209.255 31.58.232.0/23 31.59.36.0/22 31.59.44.0/22 217.60.8.0/22 217.60.32.0/22 217.60.44.0-217.60.59.255 Signature Algorithm: sha256WithRSAEncryption a4:22:8b:8e:6d:f6:91:d8:22:bc:df:a7:89:bd:b8:cb:1c:55: a0:e3:93:40:4c:18:83:04:63:75:2b:01:67:8f:24:be:0f:f5: 22:a7:91:77:18:a4:82:96:fb:88:e8:42:6a:47:3d:4a:ef:d2: 46:11:ba:69:c1:23:31:3b:53:f4:c3:b7:50:3f:77:33:f3:cc: 70:c5:f2:f9:15:e0:b8:63:d1:e2:67:03:12:cd:69:b9:86:26: 46:79:51:86:de:55:be:4e:8f:88:81:63:d4:d4:7f:95:a2:18: 80:52:6a:2f:02:4b:76:87:18:ae:8d:d8:75:5f:c2:f9:92:e0: f0:e9:1c:f7:56:11:28:52:48:9f:4f:05:a7:16:97:21:df:4e: 59:70:27:12:6b:b7:8c:54:cf:8a:a8:27:cd:11:9b:cf:41:21: ae:70:ed:c3:0e:50:0d:ab:e0:74:16:19:18:ec:e4:23:1e:8c: ca:f8:93:a2:d2:13:47:6c:6f:45:38:e0:58:f7:6f:ba:d3:2f: c1:29:da:12:c2:34:60:71:5a:22:2c:b5:61:3a:7d:34:f4:68: 36:88:54:13:a0:59:eb:65:4a:84:65:e3:b6:27:a6:8b:2f:ac: 3f:37:04:c5:a5:e9:0e:06:53:d1:3d:43:06:fc:a2:fc:7d:2c: b5:86:4f:7f -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt/hLG9I6esPcHZaM8Ang3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzE1MzIyNzllNTkwM2NhZmE5Nzg0ODViZmQyMzg4MzI3NTIwNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws9QC+U6MANA+JCa9Va3KAFPdhbX YWpvJw7mdCverUCrw3AKwPl2RcI3qRjSIlNdYf0H5ar6PJs5vN2MURcbukdqAYnU SNvahiAiXAr95WslfhaEz/baikKv2GRBtoaJaAbbKyitS8mfTXpdk9aioiqxWl1d pJiDU5v964hO2lGQPVoxdhBvbwJLxOdT59ADsGTBs+tjylBzY5563ylaE66Sn4qA HdzneXStLx+KgLZhs0ngj7oWllogXOw2DUersGdU5jxm8cgu9jsJjSuQbw4wTyJS Xr6LMtNyzsbwONuFjUPwwRY3SXDcYRwK5L85P7jco2LQT2cBMzAxGTPz5QIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFPcVMieeWQPK+peEhb/SOIMnUgZ8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOXhVeUo1NVpBOHI2bDRTRnY5STRneWRTQm53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQCHziwMAwD BAEfOLYDBAEfOLwDBAEfONADBAEfOOQDBAIfOsQwDAMEAh86zAMEAR860AMEAR86 6AMEAh87JAMEAh87LAMEAtk8CAMEAtk8IDAMAwQC2TwsAwQC2Tw4MA0GCSqGSIb3 DQEBCwUAA4IBAQCkIouObfaR2CK836eJvbjLHFWg45NATBiDBGN1KwFnjyS+D/Ui p5F3GKSClvuI6EJqRz1K79JGEbppwSMxO1P0w7dQP3cz88xwxfL5FeC4Y9HiZwMS zWm5hiZGeVGG3lW+To+IgWPU1H+VohiAUmovAkt2hxiujdh1X8L5kuDw6Rz3VhEo UkifTwWnFpch305ZcCcSa7eMVM+KqCfNEZvPQSGucO3DDlANq+B0FhkY7OQjHozK +JOi0hNHbG9FOOBY92+60y/BKdoSwjRgcVoiLLVhOn009Gg2iFQToFnrZUqEZeO2 J6aLL6w/NwTFpekOBlPRPUMG/KL8fSy1hk9/ -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:59 2026 by rpki-client