This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AsoeqAsSvR7dTmLFUiDbAjvNmWw.roa File: AsoeqAsSvR7dTmLFUiDbAjvNmWw.roa (raw, json) Hash identifier: +wK3ftZ78fl1YmJAJffwL4yB+jNC7ar7eDXr9Vd4AOY= Subject key identifier: 02:CA:1E:A8:0B:12:BD:1E:DD:4E:62:C5:52:20:DB:02:3B:CD:99:6C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AAC65145614AD26F6D99182A359F54321 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AsoeqAsSvR7dTmLFUiDbAjvNmWw.roa Signing time: Sat 22 Nov 2025 16:28:16 +0000 ROA not before: Sat 22 Nov 2025 16:28:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 31.56.141.0/24 maxlen: 24 31.57.155.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:65:14:56:14:ad:26:f6:d9:91:82:a3:59:f5:43:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 22 16:28:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=02ca1ea80b12bd1edd4e62c55220db023bcd996c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:e7:82:af:da:26:4a:3d:50:e3:d6:af:c2: 34:6d:05:83:8f:31:5a:a9:5f:3e:c5:1b:72:ea:a8: e4:c3:8e:9c:dd:b4:4b:ca:ed:26:05:4a:b5:24:d4: 8f:83:5e:ac:df:c0:5c:f6:e7:22:0a:ee:17:1f:69: 16:9c:99:89:ad:f6:97:6d:01:f4:79:59:0d:70:1e: ef:9c:62:f5:63:7a:43:00:3f:f6:ac:e2:2c:ef:32: 6d:1d:87:35:0d:aa:0a:50:c5:a2:61:2b:a5:7b:b8: e3:22:28:6b:48:95:a7:c4:48:a1:f2:d9:3c:f5:78: a6:c8:cc:28:df:ed:c1:7b:53:2a:5b:9b:50:da:69: bf:bf:cf:a5:b5:05:c0:fa:a9:48:df:cb:9b:77:a2: 31:ef:d6:94:fd:b2:7e:2e:d4:80:13:00:9f:c1:2e: f0:d8:8c:92:c8:a2:f8:98:73:11:9d:fd:03:7d:c4: 30:ae:31:51:3e:2b:94:21:0d:02:ef:89:2c:90:1f: 32:37:9a:f1:da:db:1d:b7:15:82:56:38:7d:d7:f6: c7:d4:93:5c:47:c5:49:d4:df:fe:af:0d:ae:6c:bf: c3:34:02:c3:97:e3:9a:92:ec:fa:41:84:9b:68:74: 74:11:50:32:2f:ba:35:a7:5f:63:28:57:82:75:f5: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:1E:A8:0B:12:BD:1E:DD:4E:62:C5:52:20:DB:02:3B:CD:99:6C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AsoeqAsSvR7dTmLFUiDbAjvNmWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.141.0/24 31.57.155.0/24 31.57.206.0/24 31.59.99.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:94:1a:09:fa:20:01:fc:85:e7:13:b3:3c:64:7d:1f:12:62: e9:26:b0:01:d6:fc:e9:05:d9:e5:d4:5d:7c:c0:b5:fa:d1:24: ba:2c:24:3a:01:ab:82:78:29:33:79:d6:e4:d6:a4:b0:97:ed: 97:83:da:3b:d1:9d:ec:f1:8e:b6:5d:68:bc:06:eb:be:90:1d: 99:f1:72:a1:5d:d4:3e:0b:ea:9b:59:01:a5:c0:ac:8e:f4:cb: b1:2f:2e:ec:af:9f:2a:b8:ba:70:d8:69:d9:7a:44:6e:16:8f: df:57:a3:c0:be:4b:74:f2:b6:e2:bd:52:d8:14:6e:c7:6e:6e: 7c:73:fc:3b:94:da:93:1f:12:10:ff:1d:08:e7:9e:80:11:a0: 94:17:d5:d3:43:95:9c:48:2c:41:00:d6:6b:0d:c5:39:bf:df: 78:00:69:ab:77:a9:a7:91:4d:99:ee:bb:1b:94:fc:97:ac:6b: 8b:fc:57:a6:d0:c1:25:08:c2:f2:c3:12:40:fa:82:7e:26:18: 48:78:22:b1:72:95:16:e0:5a:e4:59:1e:90:1a:10:a1:a5:f8: 38:9c:e0:3a:a0:84:83:0d:f2:bb:e5:9a:08:c7:a8:ce:ff:e8: 72:23:56:bf:35:85:c3:b1:ad:0a:bc:17:f6:86:39:37:b9:82: 43:62:f0:92 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqsZRRWFK0m9tmRgqNZ9UMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIyMTYyODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmNhMWVhODBiMTJiZDFlZGQ0ZTYyYzU1MjIwZGIwMjNiY2Q5OTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Lngq/aJko9UOPWr8I0bQWDjzFa qV8+xRty6qjkw46c3bRLyu0mBUq1JNSPg16s38Bc9uciCu4XH2kWnJmJrfaXbQH0 eVkNcB7vnGL1Y3pDAD/2rOIs7zJtHYc1DaoKUMWiYSule7jjIihrSJWnxEih8tk8 9XimyMwo3+3Be1MqW5tQ2mm/v8+ltQXA+qlI38ubd6Ix79aU/bJ+LtSAEwCfwS7w 2IySyKL4mHMRnf0DfcQwrjFRPiuUIQ0C74kskB8yN5rx2tsdtxWCVjh91/bH1JNc R8VJ1N/+rw2ubL/DNALDl+Oakuz6QYSbaHR0EVAyL7o1p19jKFeCdfV1lQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFALKHqgLEr0e3U5ixVIg2wI7zZlsMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQXNvZXFBc1N2UjdkVG1MRlVpRGJBanZObVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHziNAwQA HzmbAwQAHznOAwQAHztjMA0GCSqGSIb3DQEBCwUAA4IBAQCMlBoJ+iAB/IXnE7M8 ZH0fEmLpJrAB1vzpBdnl1F18wLX60SS6LCQ6AauCeCkzedbk1qSwl+2Xg9o70Z3s 8Y62XWi8Buu+kB2Z8XKhXdQ+C+qbWQGlwKyO9MuxLy7sr58quLpw2GnZekRuFo/f V6PAvkt08rbivVLYFG7Hbm58c/w7lNqTHxIQ/x0I556AEaCUF9XTQ5WcSCxBANZr DcU5v994AGmrd6mnkU2Z7rsblPyXrGuL/Fem0MElCMLywxJA+oJ+JhhIeCKxcpUW 4FrkWR6QGhChpfg4nOA6oISDDfK75ZoIx6jO/+hyI1a/NYXDsa0KvBf2hjk3uYJD YvCS -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:14 2025 by rpki-client