This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A3_vrDYqGku_J3i4sOYhSQxOIFk.roa File: A3_vrDYqGku_J3i4sOYhSQxOIFk.roa (raw, json) Hash identifier: HVqMZCW+oBMgyAX6TKU4+REYjHEItUyUJebmSCEwJ0A= Subject key identifier: 03:7F:EF:AC:36:2A:1A:4B:BF:27:78:B8:B0:E6:21:49:0C:4E:20:59 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AA2D409E53C98A0929B1A5D94862AD292 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A3_vrDYqGku_J3i4sOYhSQxOIFk.roa Signing time: Thu 20 Nov 2025 19:53:16 +0000 ROA not before: Thu 20 Nov 2025 19:53:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.32.0/24 maxlen: 24 31.56.43.0/24 maxlen: 24 31.56.44.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.71.0/24 maxlen: 24 31.56.77.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.100.0/22 maxlen: 22 31.56.102.0/24 maxlen: 24 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:d4:09:e5:3c:98:a0:92:9b:1a:5d:94:86:2a:d2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 20 19:53:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=037fefac362a1a4bbf2778b8b0e621490c4e2059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:46:21:3f:a2:e1:b0:24:ea:41:e8:01:e3: 94:7c:ea:8f:15:0a:5d:2d:5d:30:05:a6:7f:94:be: 04:af:e6:b4:cc:3a:1d:a1:ab:43:41:27:8e:6f:25: 09:cb:00:e3:39:87:5e:fd:9f:52:75:a6:7b:e9:8f: 9d:13:c9:eb:23:fc:35:60:0a:5f:58:ec:c4:56:36: d3:fb:a6:0c:36:7e:be:e5:89:e9:e7:e8:11:a2:9f: 2c:f8:95:e9:c2:04:58:cf:44:5a:a5:11:5a:4a:19: 4e:35:35:34:ba:11:5e:3f:93:68:99:51:d3:b2:22: 35:10:74:5d:89:1b:62:21:e8:5c:5d:eb:f7:e3:48: 5b:70:7c:0f:19:b7:dc:ca:30:a2:13:6a:4a:a8:c3: b6:51:ae:6c:5e:73:89:b1:c8:30:05:7b:5e:26:cd: 6c:f8:8b:45:6d:b6:92:df:be:fa:ca:52:6a:c6:ba: 97:67:62:6f:b4:5f:68:81:30:9f:42:24:61:ff:13: e8:23:6f:d3:0f:98:a2:ac:9f:63:f1:f5:45:a6:34: c6:9d:6e:7e:ac:99:8b:ea:8d:cc:ce:25:02:1e:9c: cf:4f:38:7d:00:89:29:61:f3:25:b5:fe:72:a0:71: 0b:a8:3b:6d:ed:42:2d:21:2f:52:02:53:db:bd:b3: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:EF:AC:36:2A:1A:4B:BF:27:78:B8:B0:E6:21:49:0C:4E:20:59 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A3_vrDYqGku_J3i4sOYhSQxOIFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.28.0-31.56.32.255 31.56.43.0-31.56.44.255 31.56.57.0/24 31.56.71.0/24 31.56.77.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.156.0/24 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0/21 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.250.0-31.57.255.255 31.58.34.0/23 31.58.50.0-31.58.55.255 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.224.0/22 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 17:f1:f8:a7:48:1c:bd:33:0d:e7:66:69:00:ae:ef:be:82:34: c3:d0:d0:9d:dd:4c:56:ea:c2:fd:36:72:d6:9e:e0:bf:0a:f8: 64:27:82:3c:67:a5:b4:50:54:06:15:97:7a:27:34:4d:32:19: 25:b1:ac:d1:92:1e:ce:52:36:e5:4f:21:e8:ea:34:72:18:c5: 83:3c:d7:c9:56:96:6b:bc:99:27:5a:da:94:50:45:9c:6e:7d: 26:32:64:15:6e:ff:8e:78:d7:28:51:15:52:18:3e:3a:dc:2c: cb:91:5a:ba:5f:d7:b5:dd:b3:ed:f6:fe:5f:c5:0f:8c:f9:cc: 67:9f:d2:7b:14:ef:1f:74:a5:86:a4:75:82:55:ac:2e:2c:3d: 5e:81:61:4f:59:7d:7e:87:ae:2c:5e:9d:b6:ce:86:ca:02:d0: 80:97:38:6b:2b:d7:f5:d1:1f:16:a9:ad:28:ba:93:86:e1:bb: 0f:41:e9:25:98:e6:0e:a4:b4:e1:b4:ee:55:89:f3:c7:b1:12: e6:86:71:26:a1:f7:36:b0:b1:98:73:7a:fb:2b:76:35:31:27: 17:fa:15:7b:8e:d2:e3:4a:3e:98:d8:7d:a2:f3:51:a6:d8:d6: 58:70:51:c1:13:a1:b6:55:25:16:2e:b7:b0:ac:b9:b1:0f:0b: 28:c7:f3:72 -----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgISAZqi1AnlPJigkpsaXZSGKtKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIwMTk1MzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdmZWZhYzM2MmExYTRiYmYyNzc4YjhiMGU2MjE0OTBjNGUyMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuthGIT+i4bAk6kHoAeOUfOqPFQpd LV0wBaZ/lL4Er+a0zDodoatDQSeObyUJywDjOYde/Z9SdaZ76Y+dE8nrI/w1YApf WOzEVjbT+6YMNn6+5Ynp5+gRop8s+JXpwgRYz0RapRFaShlONTU0uhFeP5NomVHT siI1EHRdiRtiIehcXev340hbcHwPGbfcyjCiE2pKqMO2Ua5sXnOJscgwBXteJs1s +ItFbbaS3776ylJqxrqXZ2JvtF9ogTCfQiRh/xPoI2/TD5iirJ9j8fVFpjTGnW5+ rJmL6o3MziUCHpzPTzh9AIkpYfMltf5yoHELqDtt7UItIS9SAlPbvbPLYwIDAQAB o4IDpDCCA6AwHQYDVR0OBBYEFAN/76w2KhpLvyd4uLDmIUkMTiBZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQTNfdnJEWXFHa3VfSjNpNHNPWWhTUXhPSUZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBuAYIKwYBBQUHAQcBAf8EggGnMIIBozCCAZ8EAgABMIIB lwMEAR84BDAMAwQCHzgcAwQAHzggMAwDBAAfOCsDBAAfOCwDBAAfODkDBAAfOEcD BAAfOE0DBAIfOFADBAEfOFoDBAQfOGADBAEfOHIwDAMEAR84dgMEAh84eAMEAB84 nAMEAh84tDAMAwQCHzi8AwQCHzjAAwQCHzjIAwQDHzjQAwQBHzjcAwQBHzjgAwQC HzjkAwQCHzjsAwQCHzkMAwQDHzkYAwQCHzkkMAwDBAIfOTQDBAYfOQADBAEfOV4D BAMfOXgDBAEfOYQDBAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAh85uAMEAh85 wDAMAwQDHznIAwQAHznKMAwDBAQfOdADBAIfOeADBAIfOegwCwMEAR85+gMDAR84 AwQBHzoiMAwDBAEfOjIDBAMfOjADBAEfOkADBAIfOkQDBAIfOlQDBAIfOpgDBAIf OqwDBAIfOtQwDAMEAh863AMEAh864AMEAh87TAMEAh87YAMEAx87cDAMAwQDHzuI AwQDHzuQAwQDHzugAwQCHzvgAwQCHzvoMA0GCSqGSIb3DQEBCwUAA4IBAQAX8fin SBy9Mw3nZmkAru++gjTD0NCd3UxW6sL9NnLWnuC/CvhkJ4I8Z6W0UFQGFZd6JzRN MhklsazRkh7OUjblTyHo6jRyGMWDPNfJVpZrvJknWtqUUEWcbn0mMmQVbv+OeNco URVSGD463CzLkVq6X9e13bPt9v5fxQ+M+cxnn9J7FO8fdKWGpHWCVawuLD1egWFP WX1+h64sXp22zobKAtCAlzhrK9f10R8Wqa0oupOG4bsPQeklmOYOpLThtO5VifPH sRLmhnEmofc2sLGYc3r7K3Y1MScX+hV7jtLjSj6Y2H2i81Gm2NZYcFHBE6G2VSUW LrewrLmxDwsox/Ny -----END CERTIFICATE-----Generated at Fri Nov 21 07:30:48 2025 by rpki-client