This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JJgy5Q82q1Qo9E5K0hjDbq2llhA.roa File: JJgy5Q82q1Qo9E5K0hjDbq2llhA.roa (raw, json) Hash identifier: LdFmf9XZ5Pfv2H3FNeczVXhLP927Fiaf588qhsjngDI= Subject key identifier: 24:98:32:E5:0F:36:AB:54:28:F4:4E:4A:D2:18:C3:6E:AD:A5:96:10 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AC17C5D8D585445C097A988F5104FA6EF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JJgy5Q82q1Qo9E5K0hjDbq2llhA.roa Signing time: Wed 26 Nov 2025 18:45:44 +0000 ROA not before: Wed 26 Nov 2025 18:45:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.32.0/24 maxlen: 24 31.56.43.0/24 maxlen: 24 31.56.44.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.71.0/24 maxlen: 24 31.56.77.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.98.0/23 maxlen: 23 31.56.100.0/22 maxlen: 22 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.32.0/24 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.57.0/24 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.160.0/24 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.190.0/24 maxlen: 24 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.220.0/24 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.239.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.57.253.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.212.0/24 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:7c:5d:8d:58:54:45:c0:97:a9:88:f5:10:4f:a6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 26 18:45:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=249832e50f36ab5428f44e4ad218c36eada59610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:9a:48:9e:34:05:e6:39:48:a4:1e:82:7c: 6b:cc:64:10:1c:7a:02:1c:6c:8c:17:70:b0:52:6d: 3e:e2:43:1d:41:cb:f4:5c:03:90:0b:22:9c:18:45: bd:c1:c5:1d:ee:ff:12:e5:cc:84:41:f3:ba:2a:01: 4b:47:2c:3c:17:e0:1f:74:a0:2d:74:93:98:74:df: ff:26:0d:49:f5:85:52:17:80:44:e0:38:d5:e6:a2: a0:6c:6f:fe:57:b9:1d:57:86:6c:14:75:42:7f:30: ad:37:92:b6:96:e2:9a:fc:c8:c7:27:1c:e8:a6:58: e3:a6:e1:80:5d:09:fe:3e:ec:fe:9e:ba:28:17:49: 59:eb:70:14:d2:e4:ff:d2:91:37:ce:5f:fd:30:01: ed:fa:1b:dc:c4:b0:f0:c2:de:67:a8:5c:5c:ca:8b: fb:81:18:26:c2:6f:b4:82:27:14:c3:b9:a7:af:98: ae:f6:88:31:03:42:a4:6c:72:bc:c9:d1:4a:97:f7: b4:19:88:3c:75:5f:07:4b:32:2e:f4:cd:8e:a6:30: ff:40:ec:44:c5:8b:8a:c9:72:d2:c8:45:bc:a1:dd: 2e:b8:f3:4d:13:d7:ba:37:70:c5:7f:c1:31:ba:28: 85:a0:74:23:3c:a7:30:4b:3d:fa:72:61:1d:c3:01: 39:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:98:32:E5:0F:36:AB:54:28:F4:4E:4A:D2:18:C3:6E:AD:A5:96:10 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JJgy5Q82q1Qo9E5K0hjDbq2llhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.28.0-31.56.32.255 31.56.43.0-31.56.44.255 31.56.57.0/24 31.56.71.0/24 31.56.77.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.156.0/24 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0-31.57.32.255 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.160.0/24 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.190.0/24 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.239.0/24 31.57.250.0-31.57.255.255 31.58.34.0/23 31.58.50.0-31.58.55.255 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.224.0/22 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 25:de:69:eb:5f:a4:86:a2:9e:c8:3d:b2:fd:c2:7b:5d:d0:1c: 06:f7:c2:4d:82:66:24:e8:04:85:5b:b0:91:a9:9b:f7:1a:9c: 06:64:88:a2:db:50:e8:20:01:f5:d5:96:ea:9c:ef:0f:b7:39: 91:03:23:50:c3:45:00:84:df:71:e6:07:b3:bc:13:36:85:8c: 6b:dc:10:45:d8:5f:c1:95:c5:ea:9b:15:c4:e0:8d:44:5a:9c: 3d:a5:ba:71:25:66:8a:09:43:fa:64:c7:19:79:41:05:7a:f1: da:de:e0:8b:21:a3:1c:62:17:a2:27:a2:e1:33:bf:86:7a:26: 6f:48:4f:cc:00:28:64:c8:24:70:d8:72:66:c5:bc:83:39:4e: c7:5b:ab:44:09:1d:a0:ff:45:c1:0e:66:a7:d8:bf:d6:db:35: cb:ef:08:ad:83:45:c0:2e:98:dd:6b:99:a2:bb:49:5e:54:91: 99:ee:9a:a9:99:b9:ae:78:9b:92:ba:ba:db:c8:1e:9c:d8:3a: 1a:ba:97:8c:54:90:40:b0:f2:ea:07:ed:b4:68:41:3c:56:fa: a4:3b:b4:cd:03:28:f3:de:2f:cd:9e:ed:32:cc:be:5e:cf:16: 8b:b9:bf:f8:19:bc:a0:7c:3c:ae:57:9b:0b:9a:bb:0c:f9:38: 0d:cc:d8:26 -----BEGIN CERTIFICATE----- MIIGsjCCBZqgAwIBAgISAZrBfF2NWFRFwJepiPUQT6bvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI2MTg0NTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDk4MzJlNTBmMzZhYjU0MjhmNDRlNGFkMjE4YzM2ZWFkYTU5NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPWaSJ40BeY5SKQegnxrzGQQHHoC HGyMF3CwUm0+4kMdQcv0XAOQCyKcGEW9wcUd7v8S5cyEQfO6KgFLRyw8F+AfdKAt dJOYdN//Jg1J9YVSF4BE4DjV5qKgbG/+V7kdV4ZsFHVCfzCtN5K2luKa/MjHJxzo pljjpuGAXQn+Puz+nrooF0lZ63AU0uT/0pE3zl/9MAHt+hvcxLDwwt5nqFxcyov7 gRgmwm+0gicUw7mnr5iu9ogxA0KkbHK8ydFKl/e0GYg8dV8HSzIu9M2OpjD/QOxE xYuKyXLSyEW8od0uuPNNE9e6N3DFf8ExuiiFoHQjPKcwSz36cmEdwwE5hQIDAQAB o4IDvjCCA7owHQYDVR0OBBYEFCSYMuUPNqtUKPROStIYw26tpZYQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSkpneTVRODJxMVFvOUU1SzBoakRicTJsbGhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB0gYIKwYBBQUHAQcBAf8EggHBMIIBvTCCAbkEAgABMIIB sQMEAR84BDAMAwQCHzgcAwQAHzggMAwDBAAfOCsDBAAfOCwDBAAfODkDBAAfOEcD BAAfOE0DBAIfOFADBAEfOFoDBAQfOGADBAEfOHIwDAMEAR84dgMEAh84eAMEAB84 nAMEAh84tDAMAwQCHzi8AwQCHzjAAwQCHzjIAwQDHzjQAwQBHzjcAwQBHzjgAwQC HzjkAwQCHzjsAwQCHzkMMAwDBAMfORgDBAAfOSADBAIfOSQwDAMEAh85NAMEBh85 AAMEAR85XgMEAx85eAMEAR85hAMEAx85iAMEAR85kgMEAB85oAMEAh85qDAMAwQE HzmwAwQCHzm4AwQAHzm+AwQCHznAMAwDBAMfOcgDBAAfOcowDAMEBB850AMEAh85 4AMEAh856AMEAB857zALAwQBHzn6AwMBHzgDBAEfOiIwDAMEAR86MgMEAx86MAME AR86QAMEAh86RAMEAh86VAMEAh86mAMEAh86rAMEAh861DAMAwQCHzrcAwQCHzrg AwQCHztMAwQCHztgAwQDHztwMAwDBAMfO4gDBAMfO5ADBAMfO6ADBAIfO+ADBAIf O+gwDQYJKoZIhvcNAQELBQADggEBACXeaetfpIainsg9sv3Ce13QHAb3wk2CZiTo BIVbsJGpm/canAZkiKLbUOggAfXVluqc7w+3OZEDI1DDRQCE33HmB7O8EzaFjGvc EEXYX8GVxeqbFcTgjURanD2lunElZooJQ/pkxxl5QQV68dre4IshoxxiF6InouEz v4Z6Jm9IT8wAKGTIJHDYcmbFvIM5Tsdbq0QJHaD/RcEOZqfYv9bbNcvvCK2DRcAu mN1rmaK7SV5UkZnumqmZua54m5K6utvIHpzYOhq6l4xUkECw8uoH7bRoQTxW+qQ7 tM0DKPPeL82e7TLMvl7PFou5v/gZvKB8PK5Xmwuauwz5OA3M2CY= -----END CERTIFICATE-----Generated at Thu Nov 27 06:44:58 2025 by rpki-client