This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K4f-ofwOC6peEhIV1IUgK5wdNsQ.roa File: K4f-ofwOC6peEhIV1IUgK5wdNsQ.roa (raw, json) Hash identifier: JNMy9xzIf0VkFPwzpIsDQFavepeS+RYh44UkP+Zicck= Subject key identifier: 2B:87:FE:A1:FC:0E:0B:AA:5E:12:12:15:D4:85:20:2B:9C:1D:36:C4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B4009026C90CB4E5B4522F8E29CDEAC6C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K4f-ofwOC6peEhIV1IUgK5wdNsQ.roa Signing time: Sun 21 Dec 2025 08:31:30 +0000 ROA not before: Sun 21 Dec 2025 08:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 31.56.84.0/24 maxlen: 24 31.56.91.0/24 maxlen: 24 31.57.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:09:02:6c:90:cb:4e:5b:45:22:f8:e2:9c:de:ac:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2b87fea1fc0e0baa5e121215d485202b9c1d36c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6a:06:e7:83:cf:96:52:8e:2f:61:f3:83:21: 08:e7:e2:1f:bd:af:65:15:a5:93:27:a1:a6:99:62: 5f:9d:d1:8e:ea:4e:05:c9:33:86:3c:13:17:18:0c: db:89:56:ac:6f:59:b6:e7:89:54:3f:ea:a5:bb:02: 28:a7:4e:b1:59:34:df:36:3a:57:71:cd:8a:54:b6: e9:c9:d1:94:3f:1d:dd:d4:2f:f6:45:b5:b5:b2:94: c6:ce:46:1f:a7:7d:99:bb:36:1f:52:e2:c0:d6:03: b3:f7:a5:45:4c:8d:86:5a:57:fe:ad:77:f5:33:a3: 0b:4a:67:44:54:cc:e1:89:38:70:c3:29:b7:72:3d: ec:9f:25:13:07:89:33:31:93:88:4f:3f:42:35:4b: 03:3c:fb:d5:24:d2:a7:d0:db:2b:cb:b2:8e:70:45: a5:86:60:14:dd:9e:3b:f3:e9:43:0e:77:69:16:97: 40:ec:cb:55:7e:4f:98:14:d8:27:12:cd:5e:3c:25: 14:da:3c:1d:7c:77:b1:fc:e9:a0:cf:86:59:66:05: 1d:80:1c:99:3b:bd:69:80:4a:09:0c:c4:f3:fb:99: 1b:b6:f7:21:7b:fb:bf:d1:65:51:1a:37:e3:4f:7d: 82:6f:38:b3:28:30:a5:90:8e:66:a4:68:d0:14:b7: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:FE:A1:FC:0E:0B:AA:5E:12:12:15:D4:85:20:2B:9C:1D:36:C4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K4f-ofwOC6peEhIV1IUgK5wdNsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.84.0/24 31.56.91.0/24 31.57.104.0/24 Signature Algorithm: sha256WithRSAEncryption 25:53:fa:f0:bb:4d:30:a3:77:a7:50:b1:0f:63:69:bf:29:c8: 0c:d3:ad:e6:5a:52:b6:54:22:74:16:cc:3f:15:ce:7e:58:a7: d6:57:68:d3:60:7d:69:e2:4e:b4:64:a7:45:81:1d:f8:de:b1: 91:22:52:f2:03:c9:cf:2d:bc:91:dd:a9:4e:2f:98:48:2b:d4: 63:51:82:6d:b5:2e:7e:e0:12:f2:2c:32:61:34:73:17:28:9c: 0d:03:82:fb:36:7b:dc:21:28:cc:a1:be:fb:bd:85:ef:9b:1d: b1:4c:2a:24:e1:03:34:8b:26:98:fd:8f:78:80:1c:06:8a:e6: 3a:f1:a8:d9:70:4a:0d:ec:8d:07:24:c8:7c:54:07:c3:f6:c3: 76:ef:3a:f4:8f:25:12:02:d4:c5:b9:bd:dc:62:e5:a8:b0:a4: df:f8:b7:fb:b0:c4:eb:85:ad:6e:a9:a4:31:34:30:ca:0c:84: b2:fc:15:72:6d:5e:3a:51:3a:15:64:ef:a4:11:78:6d:5e:e7: 3d:3c:d1:57:8a:0c:1e:33:b2:b4:ce:a8:df:75:66:31:4d:26: d2:c0:19:71:58:4f:94:c7:4c:8f:6f:bc:6c:8e:73:bf:0f:2e: ab:65:d9:c9:73:06:29:a6:bf:7a:59:b8:25:81:bd:98:7f:3c: f5:6c:ae:48 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtACQJskMtOW0Ui+OKc3qxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjg3ZmVhMWZjMGUwYmFhNWUxMjEyMTVkNDg1MjAyYjljMWQzNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2oG54PPllKOL2HzgyEI5+Ifva9l FaWTJ6GmmWJfndGO6k4FyTOGPBMXGAzbiVasb1m254lUP+qluwIop06xWTTfNjpX cc2KVLbpydGUPx3d1C/2RbW1spTGzkYfp32ZuzYfUuLA1gOz96VFTI2GWlf+rXf1 M6MLSmdEVMzhiThwwym3cj3snyUTB4kzMZOITz9CNUsDPPvVJNKn0Nsry7KOcEWl hmAU3Z478+lDDndpFpdA7MtVfk+YFNgnEs1ePCUU2jwdfHex/Omgz4ZZZgUdgByZ O71pgEoJDMTz+5kbtvche/u/0WVRGjfjT32CbzizKDClkI5mpGjQFLcsVwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCuH/qH8DguqXhISFdSFICucHTbEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSzRmLW9md09DNnBlRWhJVjFJVWdLNXdkTnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhUAwQA HzhbAwQAHzloMA0GCSqGSIb3DQEBCwUAA4IBAQAlU/rwu00wo3enULEPY2m/KcgM 063mWlK2VCJ0Fsw/Fc5+WKfWV2jTYH1p4k60ZKdFgR343rGRIlLyA8nPLbyR3alO L5hIK9RjUYJttS5+4BLyLDJhNHMXKJwNA4L7NnvcISjMob77vYXvmx2xTCok4QM0 iyaY/Y94gBwGiuY68ajZcEoN7I0HJMh8VAfD9sN27zr0jyUSAtTFub3cYuWosKTf +Lf7sMTrha1uqaQxNDDKDISy/BVybV46UToVZO+kEXhtXuc9PNFXigweM7K0zqjf dWYxTSbSwBlxWE+Ux0yPb7xsjnO/Dy6rZdnJcwYppr96Wbglgb2Yfzz1bK5I -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:39 2025 by rpki-client