This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CN036cvdnP-DoHtuwABA2-bpc4Q.roa File: CN036cvdnP-DoHtuwABA2-bpc4Q.roa (raw, json) Hash identifier: F6xYaK+n6PmnlK/YYmHAo/GTA3kXByYREQ2hNz7WeAU= Subject key identifier: 08:DD:37:E9:CB:DD:9C:FF:83:A0:7B:6E:C0:00:40:DB:E6:E9:73:84 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B6577D5BACCAD04837C4FBD58FD073D48 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CN036cvdnP-DoHtuwABA2-bpc4Q.roa Signing time: Sun 28 Dec 2025 14:58:30 +0000 ROA not before: Sun 28 Dec 2025 14:58:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 31.56.80.0/24 maxlen: 24 31.56.84.0/24 maxlen: 24 31.57.190.0/24 maxlen: 24 31.58.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:77:d5:ba:cc:ad:04:83:7c:4f:bd:58:fd:07:3d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 28 14:58:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08dd37e9cbdd9cff83a07b6ec00040dbe6e97384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:1f:41:de:32:2d:96:46:b9:8f:a1:2e:37: bb:6c:a1:9b:04:d4:5b:52:7f:dc:21:41:02:1c:5b: f5:b8:0f:ce:34:36:68:80:82:da:b0:a3:10:91:9a: 59:ad:4f:37:d4:b5:d8:b1:9b:d2:9d:2a:54:47:c1: ff:22:00:e3:e1:91:70:64:61:d9:36:d4:32:44:07: 9d:12:24:49:2c:2d:10:93:7d:38:9a:2e:5e:17:27: 1e:1d:1c:31:18:aa:12:b7:fa:7d:03:2f:83:ca:c9: 7d:05:df:17:d7:62:60:69:d7:f3:f7:c5:4d:ab:d3: f4:95:e0:49:a8:93:9d:ea:58:3b:51:22:ee:cb:25: 9d:4e:b8:91:ff:76:ff:09:9f:50:0e:8e:de:b8:2c: a7:92:78:2c:ca:22:ca:8f:8d:26:d4:c6:2b:3f:5e: d0:98:9d:58:79:45:2a:65:a6:2a:8b:52:0d:01:81: 7a:21:5f:bb:4f:51:c0:2b:0b:d7:74:98:04:b3:b8: 47:c3:9a:47:b8:98:94:f0:75:8b:37:3d:ed:cc:2f: 54:ca:f8:2f:a5:1d:46:c6:9c:90:68:d5:55:ff:ba: 74:a8:3c:87:74:6d:c0:05:64:e1:90:73:d8:b1:2f: b1:23:7d:7e:3d:7b:1f:6e:2c:4e:7a:57:30:3e:e6: b4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DD:37:E9:CB:DD:9C:FF:83:A0:7B:6E:C0:00:40:DB:E6:E9:73:84 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CN036cvdnP-DoHtuwABA2-bpc4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.80.0/24 31.56.84.0/24 31.57.190.0/24 31.58.131.0/24 Signature Algorithm: sha256WithRSAEncryption 85:f9:5c:46:74:f5:8a:ea:f8:1a:b6:34:de:5c:ef:a4:cc:8c: 08:bc:d6:78:c4:d6:1d:dd:cd:95:62:d8:95:74:a5:6f:4f:1f: 90:c1:12:4a:98:f3:23:20:3c:28:95:a3:ad:f1:b7:30:62:3d: f2:08:cd:da:f1:b1:1e:40:14:71:e9:44:79:43:b2:fd:6e:d5: b0:4c:ec:2a:29:09:54:d3:4a:1d:dd:ef:9c:d8:aa:b8:0d:02: 37:95:0d:d0:6e:7e:15:94:89:ca:49:09:71:c7:f0:b0:a0:95: b1:65:a0:b6:ac:b6:4e:0b:1e:ff:5b:39:cd:06:97:08:b3:e1: ff:66:88:f7:2c:0d:6d:97:e6:8e:d9:ed:0f:1e:7b:a9:c4:0d: 69:2a:da:b4:db:c0:0e:a4:d0:28:ad:15:87:8d:7c:a6:40:56: ea:b1:ea:58:30:97:39:be:e0:25:0b:24:ff:65:83:6b:05:85: 92:61:2d:19:ba:97:52:5c:85:b2:c2:b4:e2:16:4b:5c:91:1d: 9c:dd:67:4b:4f:f2:71:45:88:90:6d:1f:7d:c4:4d:e9:a8:88: 7c:c0:de:21:ff:3c:c0:36:9f:e6:3d:b9:42:a9:a8:8e:16:82: e0:59:5a:28:87:ec:17:5c:52:6f:c3:58:f4:53:d5:36:ce:79: 2a:ff:fa:3a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtld9W6zK0Eg3xPvVj9Bz1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI4MTQ1ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGRkMzdlOWNiZGQ5Y2ZmODNhMDdiNmVjMDAwNDBkYmU2ZTk3Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kofQd4yLZZGuY+hLje7bKGbBNRb Un/cIUECHFv1uA/ONDZogILasKMQkZpZrU831LXYsZvSnSpUR8H/IgDj4ZFwZGHZ NtQyRAedEiRJLC0Qk304mi5eFyceHRwxGKoSt/p9Ay+Dysl9Bd8X12Jgadfz98VN q9P0leBJqJOd6lg7USLuyyWdTriR/3b/CZ9QDo7euCynkngsyiLKj40m1MYrP17Q mJ1YeUUqZaYqi1INAYF6IV+7T1HAKwvXdJgEs7hHw5pHuJiU8HWLNz3tzC9Uyvgv pR1GxpyQaNVV/7p0qDyHdG3ABWThkHPYsS+xI31+PXsfbixOelcwPua0fQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAjdN+nL3Zz/g6B7bsAAQNvm6XOEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ04wMzZjdmRuUC1Eb0h0dXdBQkEyLWJwYzRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhQAwQA HzhUAwQAHzm+AwQAHzqDMA0GCSqGSIb3DQEBCwUAA4IBAQCF+VxGdPWK6vgatjTe XO+kzIwIvNZ4xNYd3c2VYtiVdKVvTx+QwRJKmPMjIDwolaOt8bcwYj3yCM3a8bEe QBRx6UR5Q7L9btWwTOwqKQlU00od3e+c2Kq4DQI3lQ3Qbn4VlInKSQlxx/CwoJWx ZaC2rLZOCx7/WznNBpcIs+H/Zoj3LA1tl+aO2e0PHnupxA1pKtq028AOpNAorRWH jXymQFbqsepYMJc5vuAlCyT/ZYNrBYWSYS0ZupdSXIWywrTiFktckR2c3WdLT/Jx RYiQbR99xE3pqIh8wN4h/zzANp/mPblCqaiOFoLgWVooh+wXXFJvw1j0U9U2znkq //o6 -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:59 2025 by rpki-client