This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CaRGnDyKjdRyt25iEqTEDpSvoiA.roa File: CaRGnDyKjdRyt25iEqTEDpSvoiA.roa (raw, json) Hash identifier: sBplC6YnVUk11fVFITniR2VDn+8XJCntXKKsvyp7em4= Subject key identifier: 09:A4:46:9C:3C:8A:8D:D4:72:B7:6E:62:12:A4:C4:0E:94:AF:A2:20 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AAC651423B779918088214CFE79FCC734 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CaRGnDyKjdRyt25iEqTEDpSvoiA.roa Signing time: Sat 22 Nov 2025 16:28:16 +0000 ROA not before: Sat 22 Nov 2025 16:28:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 31.56.141.0/24 maxlen: 24 31.57.155.0/24 maxlen: 24 31.57.226.0/24 maxlen: 24 31.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:65:14:23:b7:79:91:80:88:21:4c:fe:79:fc:c7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 22 16:28:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09a4469c3c8a8dd472b76e6212a4c40e94afa220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:19:76:c8:d5:e8:9a:87:4c:87:7a:04:01: 24:7e:14:f7:cb:55:e4:25:8d:8d:52:92:82:db:4f: 1e:96:3a:f0:f6:12:46:38:e6:51:5e:be:9c:18:a9: b3:4f:97:2f:a4:73:f1:b7:57:02:42:23:87:58:75: 4b:af:0a:69:43:3f:25:6f:c0:17:3f:9b:a4:1f:9d: a4:28:eb:6a:41:10:b8:5b:a2:23:8c:44:d8:a9:f2: f2:d4:52:f8:31:06:d6:54:d7:a3:ab:22:df:ba:31: eb:4a:72:1a:e5:08:36:e0:b3:f0:06:c3:82:e4:f8: ed:0c:ff:9c:ae:e2:fb:2b:79:c4:4b:cc:09:e0:2d: cf:e5:f4:31:85:a1:5a:ee:4b:31:de:15:e8:72:cc: 82:1a:5b:08:28:6a:f1:f2:51:ee:e1:66:85:db:0b: 8e:ac:38:07:c4:04:52:16:af:0d:62:d8:ac:5d:52: 79:1f:27:1d:95:5b:35:08:05:64:01:8f:6f:13:24: 3e:b8:4e:2b:49:b3:61:b4:ff:21:c9:12:4f:aa:b2: 99:8d:3b:e1:1e:26:02:d6:84:cc:b1:38:a1:e0:4c: f0:42:58:22:b1:53:2e:18:09:a1:76:a4:22:ca:27: 70:94:fb:f2:a9:d8:27:7d:78:c5:30:56:22:8a:3a: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A4:46:9C:3C:8A:8D:D4:72:B7:6E:62:12:A4:C4:0E:94:AF:A2:20 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CaRGnDyKjdRyt25iEqTEDpSvoiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.141.0/24 31.57.155.0/24 31.57.226.0/24 31.59.99.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:eb:87:ce:1a:2f:ce:32:95:e7:bf:44:b2:da:75:c9:f0:03: 18:32:6e:3f:bb:6e:4d:b7:5b:b1:e2:f7:22:c3:16:1b:34:5f: c1:c2:7a:fc:77:6c:da:81:1a:8e:63:34:39:33:77:85:4e:f4: 9f:9c:29:d8:55:0f:7c:d1:ca:30:b8:38:3e:a1:f6:bd:87:e1: 76:cf:ec:e8:a1:80:c6:43:17:26:3c:49:4e:2a:e3:e9:83:28: 52:e6:31:ec:d3:7e:1e:04:d3:ce:13:a6:2c:bc:dd:09:9c:b7: 66:6e:84:1b:7d:2a:84:e6:a1:ee:45:81:a7:a0:79:60:2d:f1: a8:d6:0a:49:48:1d:39:33:70:8a:ce:bd:dc:63:58:12:50:55: e6:56:86:62:23:46:35:e6:57:3a:ca:25:ae:54:ec:c6:cd:3d: e0:34:0e:78:df:9d:9d:63:f4:32:b1:2d:65:a7:9b:57:04:92: bb:d4:32:42:49:ff:9d:21:5f:8b:a9:ff:f1:16:7a:22:43:5d: fc:1b:3a:cd:b9:f1:92:59:58:fd:be:f6:e7:c7:ee:75:88:0f: 90:72:8c:de:c4:cc:53:e3:d5:a9:74:cb:37:14:cf:d2:d9:1f: fd:54:fd:ba:59:82:05:4f:88:f9:9e:82:7f:94:00:0a:e4:c1: 55:07:a1:ab -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqsZRQjt3mRgIghTP55/Mc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIyMTYyODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWE0NDY5YzNjOGE4ZGQ0NzJiNzZlNjIxMmE0YzQwZTk0YWZhMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlboZdsjV6JqHTId6BAEkfhT3y1Xk JY2NUpKC208eljrw9hJGOOZRXr6cGKmzT5cvpHPxt1cCQiOHWHVLrwppQz8lb8AX P5ukH52kKOtqQRC4W6IjjETYqfLy1FL4MQbWVNejqyLfujHrSnIa5Qg24LPwBsOC 5PjtDP+cruL7K3nES8wJ4C3P5fQxhaFa7ksx3hXocsyCGlsIKGrx8lHu4WaF2wuO rDgHxARSFq8NYtisXVJ5HycdlVs1CAVkAY9vEyQ+uE4rSbNhtP8hyRJPqrKZjTvh HiYC1oTMsTih4EzwQlgisVMuGAmhdqQiyidwlPvyqdgnfXjFMFYiijpCIwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAmkRpw8io3UcrduYhKkxA6Ur6IgMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ2FSR25EeUtqZFJ5dDI1aUVxVEVEcFN2b2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHziNAwQA HzmbAwQAHzniAwQAHztjMA0GCSqGSIb3DQEBCwUAA4IBAQBL64fOGi/OMpXnv0Sy 2nXJ8AMYMm4/u25Nt1ux4vciwxYbNF/Bwnr8d2zagRqOYzQ5M3eFTvSfnCnYVQ98 0cowuDg+ofa9h+F2z+zooYDGQxcmPElOKuPpgyhS5jHs034eBNPOE6YsvN0JnLdm boQbfSqE5qHuRYGnoHlgLfGo1gpJSB05M3CKzr3cY1gSUFXmVoZiI0Y15lc6yiWu VOzGzT3gNA54352dY/QysS1lp5tXBJK71DJCSf+dIV+Lqf/xFnoiQ138GzrNufGS WVj9vvbnx+51iA+QcozexMxT49WpdMs3FM/S2R/9VP26WYIFT4j5noJ/lAAK5MFV B6Gr -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:14 2025 by rpki-client