This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DbWE2IoDH7J6Y1MMO9mTNW1eQw8.roa File: DbWE2IoDH7J6Y1MMO9mTNW1eQw8.roa (raw, json) Hash identifier: msl1rRmRbJNYZEaIuYQmsfESH2UyeITP8tIliUb/Vh0= Subject key identifier: 0D:B5:84:D8:8A:03:1F:B2:7A:63:53:0C:3B:D9:93:35:6D:5E:43:0F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AE03D0FA04B96C55507176357583F7DDD Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DbWE2IoDH7J6Y1MMO9mTNW1eQw8.roa Signing time: Tue 02 Dec 2025 18:04:49 +0000 ROA not before: Tue 02 Dec 2025 18:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 31.56.0.0/24 maxlen: 24 31.56.49.0/24 maxlen: 24 31.56.103.0/24 maxlen: 24 31.56.210.0/24 maxlen: 24 31.56.212.0/24 maxlen: 24 31.56.223.0/24 maxlen: 24 31.56.234.0/24 maxlen: 24 31.56.235.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.121.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.57.225.0/24 maxlen: 24 31.58.90.0/24 maxlen: 24 31.58.168.0/24 maxlen: 24 31.59.171.0/24 maxlen: 24 31.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:3d:0f:a0:4b:96:c5:55:07:17:63:57:58:3f:7d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 2 18:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0db584d88a031fb27a63530c3bd993356d5e430f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:f8:be:f2:a5:e6:25:07:bf:00:e1:b0:31: 8a:2c:13:fc:81:1f:fc:25:63:1a:d2:f8:ea:14:67: 1c:d3:72:1e:0b:fe:b4:60:4e:54:d9:d5:6f:7a:31: 04:f5:0d:31:7a:60:1f:b1:63:e7:28:52:f3:ab:cf: f2:c9:58:0e:c4:77:1b:54:78:86:ff:60:0c:08:5f: 4d:b0:58:71:00:54:09:c5:33:5f:03:90:90:70:14: 47:ea:50:10:b2:d1:e2:3e:90:b6:7c:fb:60:9e:4f: 2d:06:69:61:02:a7:e5:7b:38:5c:fd:63:2c:72:69: 4c:e8:0b:f1:03:24:fe:5a:23:22:1a:1c:9d:16:62: ee:65:0a:7c:2a:87:fd:6e:04:ed:03:c7:f4:6e:8c: c7:4d:0c:e0:d0:a8:ab:85:eb:ff:4e:70:e6:5f:9c: f5:54:5f:a8:23:5b:ef:c7:95:9c:84:41:fa:3d:c4: ac:4f:97:3b:46:a1:5b:9d:b5:96:37:d6:66:b2:b8: 50:37:5b:5e:ce:b0:b4:6c:01:91:a7:ef:a5:b0:c1: bc:d5:f0:98:41:74:e5:7a:a3:79:17:d7:a0:74:39: 93:50:18:40:06:68:e2:8e:ce:1f:b7:03:3b:6d:84: dc:6b:74:7b:83:55:ca:46:2f:f4:7b:dc:5b:91:fc: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B5:84:D8:8A:03:1F:B2:7A:63:53:0C:3B:D9:93:35:6D:5E:43:0F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DbWE2IoDH7J6Y1MMO9mTNW1eQw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.56.49.0/24 31.56.103.0/24 31.56.210.0/24 31.56.212.0/24 31.56.223.0/24 31.56.234.0/23 31.57.35.0/24 31.57.121.0/24 31.57.206.0/24 31.57.225.0/24 31.58.90.0/24 31.58.168.0/24 31.59.171.0/24 31.59.236.0/22 Signature Algorithm: sha256WithRSAEncryption 13:b7:e6:35:99:14:53:91:ae:87:0f:f3:30:8d:10:c2:09:19: 4e:7d:21:75:59:16:02:44:06:e1:d1:b9:da:38:2e:98:12:37: 9c:5c:45:d2:cb:c2:eb:e1:2c:43:1c:91:d1:fb:eb:ca:58:13: ea:43:26:be:e3:8f:05:58:df:3a:4c:f8:33:bd:69:10:ae:25: 0e:3f:37:dd:26:2f:8b:77:62:9c:8a:1f:74:5e:66:77:1c:f8: 90:1d:e3:b6:53:7d:6e:bf:e0:05:f0:33:43:f7:67:a1:91:c2: 9f:3d:ce:6c:03:60:b0:1f:5f:d6:c1:86:e5:b1:0d:97:22:92: 95:1e:c0:36:fb:04:f6:97:cf:91:13:2b:3e:86:09:43:3f:5a: 36:9f:e1:ce:cd:ae:5c:05:a4:ca:75:84:88:c4:fb:d2:f4:7c: 68:99:04:bb:37:09:58:72:b2:62:e2:46:bc:92:a9:79:8b:91: 9f:53:1d:21:3f:84:29:cf:00:95:02:fe:f4:61:40:44:cb:08: 2d:f8:43:e2:a9:02:f5:71:ab:47:d2:4c:f2:bc:79:0b:34:96: 17:ce:e3:7d:e0:bb:e3:34:6e:09:6f:fa:7e:b5:3b:e1:5f:08: 4c:28:39:ee:d6:a9:7d:58:c8:6d:aa:25:2c:3e:22:bb:3b:cb: 6e:24:a3:2f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZrgPQ+gS5bFVQcXY1dYP33dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjAyMTgwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGI1ODRkODhhMDMxZmIyN2E2MzUzMGMzYmQ5OTMzNTZkNWU0MzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6r4vvKl5iUHvwDhsDGKLBP8gR/8 JWMa0vjqFGcc03IeC/60YE5U2dVvejEE9Q0xemAfsWPnKFLzq8/yyVgOxHcbVHiG /2AMCF9NsFhxAFQJxTNfA5CQcBRH6lAQstHiPpC2fPtgnk8tBmlhAqflezhc/WMs cmlM6AvxAyT+WiMiGhydFmLuZQp8Kof9bgTtA8f0bozHTQzg0Kirhev/TnDmX5z1 VF+oI1vvx5WchEH6PcSsT5c7RqFbnbWWN9ZmsrhQN1tezrC0bAGRp++lsMG81fCY QXTleqN5F9egdDmTUBhABmjijs4ftwM7bYTca3R7g1XKRi/0e9xbkfy1vwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFA21hNiKAx+yemNTDDvZkzVtXkMPMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRGJXRTJJb0RIN0o2WTFNTU85bVROVzFlUXc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAHzgAAwQA HzgxAwQAHzhnAwQAHzjSAwQAHzjUAwQAHzjfAwQBHzjqAwQAHzkjAwQAHzl5AwQA HznOAwQAHznhAwQAHzpaAwQAHzqoAwQAHzurAwQCHzvsMA0GCSqGSIb3DQEBCwUA A4IBAQATt+Y1mRRTka6HD/MwjRDCCRlOfSF1WRYCRAbh0bnaOC6YEjecXEXSy8Lr 4SxDHJHR++vKWBPqQya+448FWN86TPgzvWkQriUOPzfdJi+Ld2Kcih90XmZ3HPiQ HeO2U31uv+AF8DND92ehkcKfPc5sA2CwH1/WwYblsQ2XIpKVHsA2+wT2l8+REys+ hglDP1o2n+HOza5cBaTKdYSIxPvS9HxomQS7NwlYcrJi4ka8kql5i5GfUx0hP4Qp zwCVAv70YUBEywgt+EPiqQL1catH0kzyvHkLNJYXzuN94LvjNG4Jb/p+tTvhXwhM KDnu1ql9WMhtqiUsPiK7O8tuJKMv -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:00 2025 by rpki-client