This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CuRM6qD3D-CFg6moNursVHYGJ4s.roa File: CuRM6qD3D-CFg6moNursVHYGJ4s.roa (raw, json) Hash identifier: RCu5R8X/0pfWFCL18g2Y1grR/4xijAUY3M/aCjG9j9A= Subject key identifier: 0A:E4:4C:EA:A0:F7:0F:E0:85:83:A9:A8:36:EA:EC:54:76:06:27:8B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AB9D3CD4453F1D92C09709AE22EE958BA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CuRM6qD3D-CFg6moNursVHYGJ4s.roa Signing time: Tue 25 Nov 2025 07:04:16 +0000 ROA not before: Tue 25 Nov 2025 07:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.0.0/24 maxlen: 24 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.32.0/24 maxlen: 24 31.56.43.0/24 maxlen: 24 31.56.44.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.71.0/24 maxlen: 24 31.56.77.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.98.0/23 maxlen: 23 31.56.100.0/22 maxlen: 22 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.32.0/24 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.57.0/24 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.160.0/24 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.190.0/24 maxlen: 24 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.220.0/24 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.239.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.57.253.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.212.0/24 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 07:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:d3:cd:44:53:f1:d9:2c:09:70:9a:e2:2e:e9:58:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 25 07:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ae44ceaa0f70fe08583a9a836eaec547606278b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:da:b5:2a:ed:77:ca:d8:b3:26:1a:f4:ec: d9:d3:af:e4:6a:f3:df:1e:48:ed:54:bd:9d:1c:44: 8b:c8:b9:74:0b:c4:a9:4a:bf:3a:36:3a:07:ce:a8: 63:88:c3:97:66:58:b2:b3:2b:2e:0b:80:4e:d7:94: ee:b6:5e:57:2c:6c:21:78:0b:6a:a3:6f:a1:38:5e: 48:8e:49:24:88:f4:f7:a0:a7:40:3d:a2:b2:40:a3: c3:87:e7:73:b9:47:91:55:d8:42:9e:fe:da:ac:cd: 76:35:89:f7:bf:ea:e8:2e:8e:1d:e8:78:22:9c:95: 9e:fc:a8:fc:0a:f6:b2:1a:39:33:3b:54:67:81:1a: 14:03:48:42:66:ef:91:eb:87:1c:aa:0f:c0:6a:b2: af:b6:4a:82:9f:38:08:f3:c3:db:cd:c0:f2:40:f7: c3:02:04:42:3c:99:11:6a:b6:e1:1c:cb:df:98:93: 73:94:e8:f7:25:c1:75:06:d7:43:62:74:bc:83:04: 46:db:f7:77:87:b8:60:e9:17:13:ea:fe:11:1a:68: 8e:ca:22:87:9e:ea:ba:72:c0:28:f7:56:da:d8:70: 46:59:96:f4:87:d6:c4:58:20:35:db:32:7f:83:87: 86:e0:ad:0f:f1:10:0c:84:07:70:da:6e:35:08:5c: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E4:4C:EA:A0:F7:0F:E0:85:83:A9:A8:36:EA:EC:54:76:06:27:8B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CuRM6qD3D-CFg6moNursVHYGJ4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.56.4.0/23 31.56.28.0-31.56.32.255 31.56.43.0-31.56.44.255 31.56.57.0/24 31.56.71.0/24 31.56.77.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.156.0/24 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0-31.57.32.255 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.160.0/24 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.190.0/24 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.239.0/24 31.57.250.0-31.57.255.255 31.58.34.0/23 31.58.50.0-31.58.55.255 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.224.0/22 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:45:fa:d6:95:c5:2f:69:48:91:ed:88:55:b7:c7:0c:0d:c0: f1:d0:2b:20:f3:68:ff:3f:f6:90:93:66:69:00:d9:2f:df:f2: 2a:e5:64:f4:6d:dc:e0:63:d1:fa:d1:35:73:5f:2a:b6:e0:61: fb:ee:27:75:ee:b3:26:e2:ff:51:3c:68:bc:54:e0:03:a6:5f: 27:e1:f4:37:eb:be:6e:47:6f:fc:1b:79:cd:a1:00:30:1f:5b: 78:3e:09:9b:8a:f3:8c:bd:e6:b0:ce:a2:2c:47:de:a3:39:2c: 82:3d:ce:67:63:45:28:b7:2c:80:2b:f0:ff:21:c1:9e:b6:48: f9:ff:bf:f0:80:85:01:22:da:fb:72:a9:db:89:eb:26:54:ab: eb:51:b9:a3:e2:41:ed:11:0c:48:a4:99:e0:df:15:ed:af:87: 4e:78:07:2a:f5:42:cf:ce:94:8d:7c:d6:f3:e9:71:6d:23:bb: 5a:91:a6:0e:92:a7:25:5d:16:fe:b2:8f:17:e2:97:db:29:48: 81:0d:fb:cd:e6:a7:0e:be:5a:03:9c:63:96:24:ac:bd:c8:7f: 00:e6:95:0b:0b:ad:56:a1:d1:46:fc:be:16:4c:33:21:8e:3b: e4:6b:12:a0:e9:7d:17:6d:bc:94:32:55:d7:d7:34:e6:e6:d8: 60:52:5c:c9 -----BEGIN CERTIFICATE----- MIIGuDCCBaCgAwIBAgISAZq5081EU/HZLAlwmuIu6Vi6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI1MDcwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWU0NGNlYWEwZjcwZmUwODU4M2E5YTgzNmVhZWM1NDc2MDYyNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ/atSrtd8rYsyYa9OzZ06/kavPf HkjtVL2dHESLyLl0C8SpSr86NjoHzqhjiMOXZliysysuC4BO15Tutl5XLGwheAtq o2+hOF5IjkkkiPT3oKdAPaKyQKPDh+dzuUeRVdhCnv7arM12NYn3v+roLo4d6Hgi nJWe/Kj8CvayGjkzO1RngRoUA0hCZu+R64ccqg/AarKvtkqCnzgI88PbzcDyQPfD AgRCPJkRarbhHMvfmJNzlOj3JcF1BtdDYnS8gwRG2/d3h7hg6RcT6v4RGmiOyiKH nuq6csAo91ba2HBGWZb0h9bEWCA12zJ/g4eG4K0P8RAMhAdw2m41CFxLAwIDAQAB o4IDxDCCA8AwHQYDVR0OBBYEFArkTOqg9w/ghYOpqDbq7FR2BieLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ3VSTTZxRDNELUNGZzZtb051cnNWSFlHSjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB2AYIKwYBBQUHAQcBAf8EggHHMIIBwzCCAb8EAgABMIIB twMEAB84AAMEAR84BDAMAwQCHzgcAwQAHzggMAwDBAAfOCsDBAAfOCwDBAAfODkD BAAfOEcDBAAfOE0DBAIfOFADBAEfOFoDBAQfOGADBAEfOHIwDAMEAR84dgMEAh84 eAMEAB84nAMEAh84tDAMAwQCHzi8AwQCHzjAAwQCHzjIAwQDHzjQAwQBHzjcAwQB HzjgAwQCHzjkAwQCHzjsAwQCHzkMMAwDBAMfORgDBAAfOSADBAIfOSQwDAMEAh85 NAMEBh85AAMEAR85XgMEAx85eAMEAR85hAMEAx85iAMEAR85kgMEAB85oAMEAh85 qDAMAwQEHzmwAwQCHzm4AwQAHzm+AwQCHznAMAwDBAMfOcgDBAAfOcowDAMEBB85 0AMEAh854AMEAh856AMEAB857zALAwQBHzn6AwMBHzgDBAEfOiIwDAMEAR86MgME Ax86MAMEAR86QAMEAh86RAMEAh86VAMEAh86mAMEAh86rAMEAh861DAMAwQCHzrc AwQCHzrgAwQCHztMAwQCHztgAwQDHztwMAwDBAMfO4gDBAMfO5ADBAMfO6ADBAIf O+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBACpF+taVxS9pSJHtiFW3xwwNwPHQ KyDzaP8/9pCTZmkA2S/f8irlZPRt3OBj0frRNXNfKrbgYfvuJ3Xusybi/1E8aLxU 4AOmXyfh9Dfrvm5Hb/wbec2hADAfW3g+CZuK84y95rDOoixH3qM5LII9zmdjRSi3 LIAr8P8hwZ62SPn/v/CAhQEi2vtyqduJ6yZUq+tRuaPiQe0RDEikmeDfFe2vh054 Byr1Qs/OlI181vPpcW0ju1qRpg6SpyVdFv6yjxfil9spSIEN+83mpw6+WgOcY5Yk rL3IfwDmlQsLrVah0Ub8vhZMMyGOO+RrEqDpfRdtvJQyVdfXNObm2GBSXMk= -----END CERTIFICATE-----Generated at Tue Nov 25 11:23:47 2025 by rpki-client