This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FUOWKxSHzAtmzRyKLUtPgys_U40.roa File: FUOWKxSHzAtmzRyKLUtPgys_U40.roa (raw, json) Hash identifier: XU+E+3tRe3kNE0+qqx6SnpHt/Or1E5FXQYps0LLk9Ao= Subject key identifier: 15:43:96:2B:14:87:CC:0B:66:CD:1C:8A:2D:4B:4F:83:2B:3F:53:8D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B123F82D41AC926DC4FB46B5A35DDDC45 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FUOWKxSHzAtmzRyKLUtPgys_U40.roa Signing time: Fri 12 Dec 2025 11:08:30 +0000 ROA not before: Fri 12 Dec 2025 11:08:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 31.57.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:3f:82:d4:1a:c9:26:dc:4f:b4:6b:5a:35:dd:dc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 12 11:08:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1543962b1487cc0b66cd1c8a2d4b4f832b3f538d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:19:69:79:c7:c2:a2:26:54:a7:c1:98:da: f9:cb:a2:47:80:c3:60:30:cf:e4:b2:e5:8b:ec:38: c1:7a:ee:80:d2:b9:d4:75:80:41:c1:60:fb:e7:6c: e2:13:68:4d:4a:65:ca:c9:21:8c:89:0c:ae:59:d4: 17:05:9d:8d:7a:7f:19:2b:4b:f8:85:8e:cd:1a:6e: ad:79:c6:ba:bb:f2:2f:d7:19:14:97:31:89:3a:9b: 88:f3:2a:5b:41:73:3c:70:a1:01:ec:7b:4b:11:1d: 0c:54:2e:7d:ed:a5:18:a8:4e:a8:ab:36:8c:16:94: f5:ea:15:e8:29:c4:b8:c4:09:51:36:8d:29:5c:9b: 8a:47:bf:7f:3c:df:b5:3b:f3:72:c2:fc:53:8d:b9: c9:ad:23:36:11:ce:2a:e1:ff:06:87:24:06:74:28: 4f:8b:dd:50:4a:fa:30:82:28:d7:dd:6d:c1:e8:6d: 39:1b:19:16:40:67:ca:bc:b0:9f:0f:21:2f:94:ca: d4:dd:ea:db:d4:3f:7f:26:25:1e:1c:ac:00:0e:0e: 8c:78:db:9a:6f:21:2a:b2:6a:9c:cd:49:7f:4d:74: 2c:32:99:94:28:e1:91:f2:65:15:a4:5b:50:e2:97: 8c:79:70:e0:28:d5:f5:9a:19:fc:5d:fd:0b:ba:6b: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:43:96:2B:14:87:CC:0B:66:CD:1C:8A:2D:4B:4F:83:2B:3F:53:8D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FUOWKxSHzAtmzRyKLUtPgys_U40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.152.0/24 Signature Algorithm: sha256WithRSAEncryption b3:6d:fa:fb:80:b6:24:d9:23:06:d3:02:b4:bc:7c:79:3f:99: cc:85:39:e2:60:6b:95:5f:7c:5c:5a:e7:69:4e:c8:4e:73:8e: 29:1d:6c:85:1c:0b:82:de:57:6b:4a:3f:d6:84:5d:6a:0f:0d: 45:c0:6e:c0:58:ee:65:f0:44:ed:1b:4e:bc:6f:cb:35:d3:c6: 0f:e1:18:96:01:01:38:b9:e4:74:49:ae:ff:00:40:cb:f3:31: f3:64:df:cf:43:c0:c0:f9:75:c8:31:cd:64:3c:f5:34:46:a6: d3:92:5b:dc:16:31:5f:99:1c:bf:e0:08:12:cb:e0:b0:78:ad: c8:22:d7:24:3d:e7:b5:a9:fe:b9:5a:f4:99:b9:d3:c2:00:a9: 59:70:9e:10:b3:59:15:38:60:55:12:20:4e:b9:2e:77:b0:dc: f4:75:9b:2c:83:a2:d5:2b:e5:bf:3b:c1:0a:52:6b:3d:21:25: 53:6f:4a:27:1b:e6:35:3c:2e:0e:af:4a:9d:cf:40:a1:ff:d7: 9f:db:43:ed:da:26:ca:5b:74:65:d6:51:d4:cd:61:27:bb:60: 7d:eb:11:9d:d0:c1:53:bd:0e:67:95:ce:12:87:4a:c7:cf:f1: 22:ce:e1:c1:e7:84:e0:e7:6c:c5:09:63:fa:7a:6e:87:39:e1: a8:3c:66:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSP4LUGskm3E+0a1o13dxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjEyMTEwODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQzOTYyYjE0ODdjYzBiNjZjZDFjOGEyZDRiNGY4MzJiM2Y1MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG8ZaXnHwqImVKfBmNr5y6JHgMNg MM/ksuWL7DjBeu6A0rnUdYBBwWD752ziE2hNSmXKySGMiQyuWdQXBZ2Nen8ZK0v4 hY7NGm6teca6u/Iv1xkUlzGJOpuI8ypbQXM8cKEB7HtLER0MVC597aUYqE6oqzaM FpT16hXoKcS4xAlRNo0pXJuKR79/PN+1O/NywvxTjbnJrSM2Ec4q4f8GhyQGdChP i91QSvowgijX3W3B6G05GxkWQGfKvLCfDyEvlMrU3erb1D9/JiUeHKwADg6MeNua byEqsmqczUl/TXQsMpmUKOGR8mUVpFtQ4peMeXDgKNX1mhn8Xf0LumuUlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVDlisUh8wLZs0cii1LT4MrP1ONMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRlVPV0t4U0h6QXRtelJ5S0xVdFBneXNfVTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmYMA0G CSqGSIb3DQEBCwUAA4IBAQCzbfr7gLYk2SMG0wK0vHx5P5nMhTniYGuVX3xcWudp TshOc44pHWyFHAuC3ldrSj/WhF1qDw1FwG7AWO5l8ETtG068b8s108YP4RiWAQE4 ueR0Sa7/AEDL8zHzZN/PQ8DA+XXIMc1kPPU0RqbTklvcFjFfmRy/4AgSy+CweK3I ItckPee1qf65WvSZudPCAKlZcJ4Qs1kVOGBVEiBOuS53sNz0dZssg6LVK+W/O8EK Ums9ISVTb0onG+Y1PC4Or0qdz0Ch/9ef20Pt2ibKW3Rl1lHUzWEnu2B96xGd0MFT vQ5nlc4Sh0rHz/EizuHB54Tg52zFCWP6em6HOeGoPGbr -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:40 2025 by rpki-client