This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FQ1KgOKn3v8hbDXqdUT4SZAisGQ.roa File: FQ1KgOKn3v8hbDXqdUT4SZAisGQ.roa (raw, json) Hash identifier: rdGFxfNYH3tCkC1RJs15dXzWXOcOEtn/jDCuPEXu23Y= Subject key identifier: 15:0D:4A:80:E2:A7:DE:FF:21:6C:35:EA:75:44:F8:49:90:22:B0:64 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BC0F2DE6A00645509CA79F1B5B29D9625 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FQ1KgOKn3v8hbDXqdUT4SZAisGQ.roa Signing time: Thu 15 Jan 2026 09:18:20 +0000 ROA not before: Thu 15 Jan 2026 09:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.64.0/24 maxlen: 24 31.56.68.0/24 maxlen: 24 31.56.69.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.82.0/23 maxlen: 23 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.97.0/24 maxlen: 24 31.56.98.0/23 maxlen: 23 31.56.100.0/22 maxlen: 22 31.56.100.0/23 maxlen: 23 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.122.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.54.0/24 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.152.0/24 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.192.0/22 maxlen: 24 31.57.196.0/24 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.222.0/23 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.238.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.58.33.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.36.0/22 maxlen: 24 31.58.44.0/22 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.54.0/24 maxlen: 24 31.58.55.0/24 maxlen: 24 31.58.59.0/24 maxlen: 24 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.157.0/24 maxlen: 24 31.58.162.0/24 maxlen: 24 31.58.163.0/24 maxlen: 24 31.58.166.0/24 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.212.0/24 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.58.224.0/24 maxlen: 24 31.59.57.0/24 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.172.0/24 maxlen: 24 31.59.196.0/22 maxlen: 24 31.59.200.0/22 maxlen: 24 31.59.204.0/22 maxlen: 24 31.59.208.0/22 maxlen: 24 31.59.220.0/22 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 31.59.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:f2:de:6a:00:64:55:09:ca:79:f1:b5:b2:9d:96:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 15 09:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=150d4a80e2a7deff216c35ea7544f8499022b064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:a0:98:f7:fa:7c:e8:4f:67:3d:83:74:4f: 19:0d:81:76:aa:a6:cc:9a:c0:6c:6c:42:d5:e1:d9: ab:d0:8e:ba:d8:dd:0e:e0:b0:24:33:46:e3:f5:be: 56:62:c0:d1:00:f9:44:12:38:77:85:ce:ae:37:3b: 4e:f8:16:27:53:2d:f9:42:7a:7f:33:56:22:e8:b4: 7d:bb:ed:67:f0:92:11:92:b5:22:98:bc:71:16:20: d6:65:bb:f1:aa:e3:20:ed:ba:05:86:d8:94:12:2b: 1a:9c:56:a1:90:50:bf:ef:bf:e9:2a:97:4a:7d:ef: 57:76:b8:35:5a:4c:54:bb:9d:57:ed:82:b2:f8:1b: 8c:47:6c:b9:2a:d1:34:13:33:c5:cd:8f:26:87:8d: ea:96:10:fd:04:10:f9:dd:da:10:47:8c:71:3c:10: 77:ba:cf:e1:bb:2d:53:a0:8e:66:4f:c5:35:3f:59: 7f:e2:84:2a:77:56:4d:9e:41:05:1c:ab:05:c2:89: 76:15:ed:c4:13:96:86:97:7f:23:9a:3c:cf:74:86: 51:7e:73:1f:f2:fe:dc:71:ad:04:ff:11:b9:da:b3: 7f:26:d0:87:38:0f:27:69:d0:7d:f3:0c:42:f7:a2: 20:8d:87:9d:2a:42:15:7a:56:50:4f:dd:0c:d2:46: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0D:4A:80:E2:A7:DE:FF:21:6C:35:EA:75:44:F8:49:90:22:B0:64 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FQ1KgOKn3v8hbDXqdUT4SZAisGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.28.0/22 31.56.57.0/24 31.56.64.0/24 31.56.68.0/23 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0/21 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.152.0/24 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.192.0-31.57.196.255 31.57.200.0/23 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.238.0/24 31.57.250.0-31.57.255.255 31.58.33.0-31.58.39.255 31.58.44.0/22 31.58.50.0-31.58.55.255 31.58.59.0/24 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.157.0/24 31.58.162.0/23 31.58.166.0/24 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.57.0/24 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.172.0/24 31.59.196.0-31.59.211.255 31.59.220.0-31.59.227.255 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption bc:28:5f:75:66:cf:e8:49:2e:c4:d6:b2:7f:6b:d8:72:47:58: c0:a7:f5:e4:0a:6f:f5:c5:78:dd:a5:e2:3a:01:b7:4c:70:58: 37:ff:1c:47:93:84:e2:da:fa:8c:24:a0:e4:02:b1:4f:35:50: e7:05:fe:32:01:ea:56:7e:03:bc:cf:b5:d1:c9:8b:c4:28:bd: 2d:64:56:1f:3e:a2:77:f5:66:62:8e:a0:75:84:a9:a2:55:01: 30:9c:7b:67:0a:4c:85:5a:26:74:cd:9e:d7:e1:2b:5c:fe:31: 74:01:db:28:52:e5:7c:52:ee:4c:f4:fd:b9:21:f1:84:a5:e0: af:56:97:bb:8f:df:b6:23:6b:7d:41:d4:8c:61:fd:b3:eb:2b: 37:18:3e:a7:fc:74:e7:bd:0c:90:39:3e:d4:d4:dc:2e:81:f7: 3c:34:94:8d:48:d2:d4:9d:c1:21:22:30:17:3c:5b:07:3d:7d: a0:a7:8f:81:7f:56:43:84:00:8b:c3:4e:00:1b:d1:0f:55:ef: 9e:23:2b:ea:4e:10:40:1e:fb:dd:48:f1:53:08:c3:3c:3c:f2: 8a:64:55:52:e9:14:bb:7a:eb:be:2f:64:72:6d:c6:5d:01:76: b4:e1:6c:7d:d5:7c:a4:51:75:21:11:8f:c0:ca:4a:f1:ab:15: 4f:b4:d6:39 -----BEGIN CERTIFICATE----- MIIG0DCCBbigAwIBAgISAZvA8t5qAGRVCcp58bWynZYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE1MDkxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTBkNGE4MGUyYTdkZWZmMjE2YzM1ZWE3NTQ0Zjg0OTkwMjJiMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWygmPf6fOhPZz2DdE8ZDYF2qqbM msBsbELV4dmr0I662N0O4LAkM0bj9b5WYsDRAPlEEjh3hc6uNztO+BYnUy35Qnp/ M1Yi6LR9u+1n8JIRkrUimLxxFiDWZbvxquMg7boFhtiUEisanFahkFC/77/pKpdK fe9Xdrg1WkxUu51X7YKy+BuMR2y5KtE0EzPFzY8mh43qlhD9BBD53doQR4xxPBB3 us/huy1ToI5mT8U1P1l/4oQqd1ZNnkEFHKsFwol2Fe3EE5aGl38jmjzPdIZRfnMf 8v7cca0E/xG52rN/JtCHOA8nadB98wxC96IgjYedKkIVelZQT90M0kbDfwIDAQAB o4ID3DCCA9gwHQYDVR0OBBYEFBUNSoDip97/IWw16nVE+EmQIrBkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRlExS2dPS24zdjhoYkRYcWRVVDRTWkFpc0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB8AYIKwYBBQUHAQcBAf8EggHfMIIB2zCCAdcEAgABMIIB zwMEAR84BAMEAh84HAMEAB84OQMEAB84QAMEAR84RAMEAh84UAMEAR84WgMEBB84 YAMEAR84cjAMAwQBHzh2AwQCHzh4AwQCHzi0MAwDBAIfOLwDBAIfOMADBAIfOMgD BAMfONADBAEfONwDBAEfOOADBAIfOOQDBAIfOOwDBAIfOQwDBAMfORgDBAIfOSQw DAMEAh85NAMEBh85AAMEAR85XgMEAx85eAMEAR85hAMEAx85iAMEAR85kgMEAB85 mAMEAh85qDAMAwQEHzmwAwQCHzm4MAwDBAYfOcADBAAfOcQDBAEfOcgwDAMEBB85 0AMEAh854AMEAh856AMEAB857jALAwQBHzn6AwMBHzgwDAMEAB86IQMEAx86IAME Ah86LDAMAwQBHzoyAwQDHzowAwQAHzo7AwQBHzpAAwQCHzpEAwQCHzpUAwQCHzqY AwQAHzqdAwQBHzqiAwQAHzqmAwQCHzqsAwQCHzrUMAwDBAIfOtwDBAIfOuADBAAf OzkDBAIfO0wDBAIfO2ADBAMfO3AwDAMEAx87iAMEAx87kAMEAx87oAMEAB87rDAM AwQCHzvEAwQCHzvQMAwDBAIfO9wDBAIfO+ADBAIfO+gwDQYJKoZIhvcNAQELBQAD ggEBALwoX3Vmz+hJLsTWsn9r2HJHWMCn9eQKb/XFeN2l4joBt0xwWDf/HEeThOLa +owkoOQCsU81UOcF/jIB6lZ+A7zPtdHJi8QovS1kVh8+onf1ZmKOoHWEqaJVATCc e2cKTIVaJnTNntfhK1z+MXQB2yhS5XxS7kz0/bkh8YSl4K9Wl7uP37Yja31B1Ixh /bPrKzcYPqf8dOe9DJA5PtTU3C6B9zw0lI1I0tSdwSEiMBc8Wwc9faCnj4F/VkOE AIvDTgAb0Q9V754jK+pOEEAe+91I8VMIwzw88opkVVLpFLt6674vZHJtxl0BdrTh bH3VfKRRdSERj8DKSvGrFU+01jk= -----END CERTIFICATE-----Generated at Thu Jan 15 22:43:46 2026 by rpki-client