This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B0_V1TvU28FqWwML9YKfFUfad0w.roa File: B0_V1TvU28FqWwML9YKfFUfad0w.roa (raw, json) Hash identifier: eIbyhGOLBx3rRwG0wnYGT5JWdVc8VWiYKia+xJitei8= Subject key identifier: 07:4F:D5:D5:3B:D4:DB:C1:6A:5B:03:0B:F5:82:9F:15:47:DA:77:4C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A9C12EF388248E6311661D19E7596888A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B0_V1TvU28FqWwML9YKfFUfad0w.roa Signing time: Wed 19 Nov 2025 12:24:37 +0000 ROA not before: Wed 19 Nov 2025 12:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 31.56.16.0/22 maxlen: 24 31.57.16.0/21 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.135.0/24 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.176.0/22 maxlen: 24 31.58.200.0/22 maxlen: 24 31.58.216.0/22 maxlen: 24 31.58.240.0/22 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 31.58.252.0/22 maxlen: 24 31.59.64.0/22 maxlen: 24 31.59.80.0/22 maxlen: 24 31.59.124.0/22 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 31.59.176.0/21 maxlen: 24 31.59.188.0/22 maxlen: 24 31.59.192.0/22 maxlen: 24 31.59.216.0/22 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.16.0/21 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.64.0/18 maxlen: 24 217.60.187.0/24 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:12:ef:38:82:48:e6:31:16:61:d1:9e:75:96:88:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 19 12:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=074fd5d53bd4dbc16a5b030bf5829f1547da774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:30:cc:48:66:a4:bd:41:1a:2e:c4:96:03: ab:11:24:c8:76:c7:a1:38:f3:39:9f:bf:06:35:99: 1c:fe:e1:fd:7b:f3:27:e5:68:eb:e9:04:2e:36:db: ee:8b:ca:16:f3:17:57:ac:54:a5:8f:70:87:c2:db: 5d:2e:f5:d8:5d:4a:05:7e:e2:c7:f9:f8:02:16:25: 6c:69:b6:c2:13:ca:86:c9:d5:59:58:68:59:43:3d: a2:2f:7b:4b:fe:d8:3a:87:3e:71:16:71:47:71:87: d5:77:fb:a7:4a:e9:bd:8f:f8:34:2f:89:46:c6:e1: 9d:d1:34:6f:86:02:49:b9:fd:ab:29:8f:05:25:ee: 46:be:7d:16:60:52:84:3b:ee:74:86:1c:b3:e8:ff: 4c:59:a1:5c:84:0b:c4:d9:e0:97:ba:b1:1c:dd:79: 5f:fc:cd:5b:3a:f5:f5:ab:79:65:88:6d:a7:36:2f: 8b:64:98:fd:88:34:22:6d:bd:38:fe:fa:7b:f7:74: f9:09:a8:31:94:df:b4:7b:08:13:fe:5a:a1:d4:9d: 47:6d:04:49:fa:19:42:af:f8:45:aa:bd:36:71:d7: 0b:4f:5b:6e:4f:7f:39:dd:74:ed:81:e6:46:9a:59: 9b:eb:3c:ab:10:54:4c:2b:b3:83:12:6c:a0:a8:83: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4F:D5:D5:3B:D4:DB:C1:6A:5B:03:0B:F5:82:9F:15:47:DA:77:4C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B0_V1TvU28FqWwML9YKfFUfad0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.16.0/22 31.57.16.0/21 31.57.36.0/23 31.57.135.0/24 31.57.168.0/23 31.57.184.0/23 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.176.0/22 31.58.200.0/22 31.58.216.0/22 31.58.240.0-31.58.244.255 31.58.249.0-31.58.255.255 31.59.64.0/22 31.59.80.0/22 31.59.124.0/22 31.59.140.0/22 31.59.148.0-31.59.165.255 31.59.176.0/21 31.59.188.0-31.59.195.255 31.59.216.0/22 94.183.152.0/22 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.16.0/21 217.60.28.0/22 217.60.40.0/22 217.60.64.0/18 217.60.187.0/24 217.60.196.0/23 217.60.244.0/23 Signature Algorithm: sha256WithRSAEncryption be:1d:17:75:02:12:14:22:9c:92:7a:47:bb:c1:5d:7f:46:8d: d6:84:95:07:77:3c:97:21:ba:c6:be:f4:1a:94:e7:be:7c:9f: 8d:0b:27:19:71:11:37:ac:26:e0:81:ad:a1:b3:23:03:68:35: 54:7e:67:c1:21:b3:0a:89:5e:e4:42:4e:f4:4c:08:c8:3b:6a: 61:5c:1f:82:1a:c2:05:cc:90:10:23:1b:67:10:44:ff:3d:43: 63:76:13:70:65:52:27:9a:eb:ba:95:80:4f:54:a9:0e:0c:a4: 37:d0:77:24:dc:62:40:6a:88:b9:ae:f8:25:00:99:63:d6:20: 62:33:d1:fc:25:c8:6c:e6:d6:b6:e0:c6:d1:c5:20:93:1f:85: 27:13:6c:8f:1f:37:c0:a3:0c:45:76:8d:fc:48:36:0b:dd:ab: 62:bf:c5:85:d0:22:8e:04:1a:db:4e:5c:7d:75:db:17:c6:e8: 3d:ca:01:7e:f5:a9:d2:58:c8:ec:af:e1:a7:20:a4:31:93:b5: c9:08:73:a3:ed:26:d5:24:59:b7:50:23:51:b7:d1:e6:6f:bc: ab:d0:78:c0:e5:e5:6c:a0:79:bb:35:93:24:5e:e5:ce:33:b7: a2:62:93:e4:40:d6:d4:ef:49:7d:5b:7c:16:76:c5:a1:7a:ee: 0a:84:73:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgISAZqcEu84gkjmMRZh0Z51loiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE5MTIyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzRmZDVkNTNiZDRkYmMxNmE1YjAzMGJmNTgyOWYxNTQ3ZGE3NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJYwzEhmpL1BGi7ElgOrESTIdseh OPM5n78GNZkc/uH9e/Mn5Wjr6QQuNtvui8oW8xdXrFSlj3CHwttdLvXYXUoFfuLH +fgCFiVsabbCE8qGydVZWGhZQz2iL3tL/tg6hz5xFnFHcYfVd/unSum9j/g0L4lG xuGd0TRvhgJJuf2rKY8FJe5Gvn0WYFKEO+50hhyz6P9MWaFchAvE2eCXurEc3Xlf /M1bOvX1q3lliG2nNi+LZJj9iDQibb04/vp793T5CagxlN+0ewgT/lqh1J1HbQRJ +hlCr/hFqr02cdcLT1tuT3853XTtgeZGmlmb6zyrEFRMK7ODEmygqIPdkQIDAQAB o4IDBjCCAwIwHQYDVR0OBBYEFAdP1dU71NvBalsDC/WCnxVH2ndMMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQjBfVjFUdlUyOEZxV3dNTDlZS2ZGVWZhZDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBGgYIKwYBBQUHAQcBAf8EggEJMIIBBTCCAQEEAgABMIH6 AwQCHzgQAwQDHzkQAwQBHzkkAwQAHzmHAwQBHzmoAwQBHzm4AwQCHznQAwQBHznY AwQBHzn6AwQCHzpMAwQCHzpcAwQCHzqwAwQCHzrIAwQCHzrYMAwDBAQfOvADBAAf OvQwCwMEAB86+QMDAB86AwQCHztAAwQCHztQAwQCHzt8AwQCHzuMMAwDBAIfO5QD BAEfO6QDBAMfO7AwDAMEAh87vAMEAh87wAMEAh872AMEAl63mDAMAwQGXrfAAwQD XrfgMAsDBAJet+wDAwNesAMEA9k8EAMEAtk8HAMEAtk8KAMEBtk8QAMEANk8uwME Adk8xAMEAdk89DANBgkqhkiG9w0BAQsFAAOCAQEAvh0XdQISFCKcknpHu8Fdf0aN 1oSVB3c8lyG6xr70GpTnvnyfjQsnGXERN6wm4IGtobMjA2g1VH5nwSGzCole5EJO 9EwIyDtqYVwfghrCBcyQECMbZxBE/z1DY3YTcGVSJ5rrupWAT1SpDgykN9B3JNxi QGqIua74JQCZY9YgYjPR/CXIbObWtuDG0cUgkx+FJxNsjx83wKMMRXaN/Eg2C92r Yr/FhdAijgQa205cfXXbF8boPcoBfvWp0ljI7K/hpyCkMZO1yQhzo+0m1SRZt1Aj UbfR5m+8q9B4wOXlbKB5uzWTJF7lzjO3omKT5EDW1O9JfVt8FnbFoXruCoRzDQ== -----END CERTIFICATE-----Generated at Fri Nov 21 07:28:57 2025 by rpki-client