This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B3eDGnmOAG-FK3t9MOTeJ24BFAs.roa File: B3eDGnmOAG-FK3t9MOTeJ24BFAs.roa (raw, json) Hash identifier: 5Bt5EP1TQDzXlvNLD2L+MLk1EOx7u7vyb0AMPAyb2UY= Subject key identifier: 07:77:83:1A:79:8E:00:6F:85:2B:7B:7D:30:E4:DE:27:6E:01:14:0B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846030685906C6D9736FE32135AB2F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B3eDGnmOAG-FK3t9MOTeJ24BFAs.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 31.56.88.0/24 maxlen: 24 31.57.30.0/24 maxlen: 24 31.57.131.0/24 maxlen: 24 31.57.150.0/24 maxlen: 24 31.57.176.0/24 maxlen: 24 31.57.194.0/24 maxlen: 24 31.58.71.0/24 maxlen: 24 31.58.146.0/24 maxlen: 24 31.58.160.0/24 maxlen: 24 31.59.14.0/24 maxlen: 24 31.59.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:60:30:68:59:06:c6:d9:73:6f:e3:21:35:ab:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0777831a798e006f852b7b7d30e4de276e01140b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:f0:90:7a:a4:39:8d:93:fa:78:f8:7b:20:07: 87:76:fb:30:b5:27:a0:c8:a1:43:f9:e6:36:ca:c9: 69:e0:26:8e:4c:d9:19:0f:79:af:9f:a7:23:66:2e: 25:65:7c:5c:ce:c4:91:59:f0:99:2d:b8:48:ae:26: f8:75:0b:19:72:54:cb:40:48:75:74:77:20:5e:29: 4a:d2:5e:03:1b:f0:b7:f5:c7:d3:e0:50:2a:6f:2a: 36:3b:6e:08:79:02:78:e8:44:fe:59:2f:fb:38:e8: 2e:1c:01:f0:50:15:ed:da:d0:fc:7b:fe:92:6d:a5: 26:c3:50:1a:22:ed:5b:fd:42:4f:99:46:5e:da:16: cb:d7:0f:f4:9e:d3:f7:bb:ec:99:cc:18:79:bc:40: 7a:d3:4c:11:33:d8:5e:59:fa:13:02:bf:72:4c:95: 9f:11:42:81:34:2e:5d:d8:2a:29:d6:28:70:dd:d2: b5:70:cb:56:be:7b:f5:7d:22:5c:99:28:93:74:5c: c3:b9:09:6f:c5:ec:98:43:67:a7:b2:d1:bb:a8:2c: 5c:ee:cd:57:9c:a7:0a:dc:de:03:c7:45:99:5f:53: 6a:24:22:2b:fe:05:b8:e8:be:da:75:7b:dd:cd:33: 96:f8:84:c5:2e:75:1a:ef:e0:70:9d:46:47:b7:90: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:77:83:1A:79:8E:00:6F:85:2B:7B:7D:30:E4:DE:27:6E:01:14:0B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B3eDGnmOAG-FK3t9MOTeJ24BFAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.88.0/24 31.57.30.0/24 31.57.131.0/24 31.57.150.0/24 31.57.176.0/24 31.57.194.0/24 31.58.71.0/24 31.58.146.0/24 31.58.160.0/24 31.59.14.0/24 31.59.30.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:ce:dc:6f:3e:c3:49:f5:d3:68:9c:d1:a3:6d:29:7b:22:49: 62:8a:e4:bf:7e:56:6c:97:6c:8c:8e:ca:46:d2:8c:38:04:1d: fb:ff:0f:c2:48:48:46:7d:9e:0e:65:17:dc:26:ec:00:83:c4: a9:3d:cc:e1:ce:94:b0:e9:70:12:73:da:02:f9:aa:c9:17:c7: 34:6a:0a:0b:59:4a:12:ff:45:b8:6f:16:1b:06:81:15:6b:e5: df:e1:cd:74:e8:04:aa:fd:75:c4:ee:e1:cb:2f:0a:85:ea:63: d1:4b:06:93:c1:e5:1c:c6:27:d5:0c:2b:c5:5a:81:8b:e7:81: bb:54:c5:66:f9:ab:10:3e:50:d5:ab:2f:f9:a0:d7:06:4d:53: e3:ab:80:54:cc:35:21:02:f6:6c:ad:5e:df:86:e2:63:57:e3: 15:b1:6d:0e:66:7d:af:8c:e4:17:49:78:e7:de:8a:54:d4:57: af:0c:58:ec:f8:c0:a1:26:b7:2d:07:be:59:28:9b:70:0e:3c: 34:8d:ef:4f:12:c1:bd:94:5d:1f:cc:f4:f2:02:d8:91:8d:27: d6:15:42:36:c9:b2:5b:bf:75:8f:13:ac:f6:71:02:74:af:bd: 6b:dd:10:36:ef:01:b2:25:8d:c4:17:5a:57:ac:ee:a4:93:bf: a8:ff:ed:82 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt/hGAwaFkGxtlzb+MhNasvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzc3ODMxYTc5OGUwMDZmODUyYjdiN2QzMGU0ZGUyNzZlMDExNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/PCQeqQ5jZP6ePh7IAeHdvswtSeg yKFD+eY2yslp4CaOTNkZD3mvn6cjZi4lZXxczsSRWfCZLbhIrib4dQsZclTLQEh1 dHcgXilK0l4DG/C39cfT4FAqbyo2O24IeQJ46ET+WS/7OOguHAHwUBXt2tD8e/6S baUmw1AaIu1b/UJPmUZe2hbL1w/0ntP3u+yZzBh5vEB600wRM9heWfoTAr9yTJWf EUKBNC5d2Cop1ihw3dK1cMtWvnv1fSJcmSiTdFzDuQlvxeyYQ2enstG7qCxc7s1X nKcK3N4Dx0WZX1NqJCIr/gW46L7adXvdzTOW+ITFLnUa7+BwnUZHt5Cj/QIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFAd3gxp5jgBvhSt7fTDk3iduARQLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQjNlREdubU9BRy1GSzN0OU1PVGVKMjRCRkFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAHzhYAwQA HzkeAwQAHzmDAwQAHzmWAwQAHzmwAwQAHznCAwQAHzpHAwQAHzqSAwQAHzqgAwQA HzsOAwQAHzseMA0GCSqGSIb3DQEBCwUAA4IBAQAOztxvPsNJ9dNonNGjbSl7Ikli iuS/flZsl2yMjspG0ow4BB37/w/CSEhGfZ4OZRfcJuwAg8SpPczhzpSw6XASc9oC +arJF8c0agoLWUoS/0W4bxYbBoEVa+Xf4c106ASq/XXE7uHLLwqF6mPRSwaTweUc xifVDCvFWoGL54G7VMVm+asQPlDVqy/5oNcGTVPjq4BUzDUhAvZsrV7fhuJjV+MV sW0OZn2vjOQXSXjn3opU1FevDFjs+MChJrctB75ZKJtwDjw0je9PEsG9lF0fzPTy AtiRjSfWFUI2ybJbv3WPE6z2cQJ0r71r3RA27wGyJY3EF1pXrO6kk7+o/+2C -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:07 2026 by rpki-client