This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KW_4ax7maUsgKoM3b6ofXJvJpqg.roa File: KW_4ax7maUsgKoM3b6ofXJvJpqg.roa (raw, json) Hash identifier: m0Mc2R0i1YeXaxQOf56RIrmE8EwGXV6PTFg90pTIA28= Subject key identifier: 29:6F:F8:6B:1E:E6:69:4B:20:2A:83:37:6F:AA:1F:5C:9B:C9:A6:A8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B400903D143C1EF79BEC47AD7E592A5F8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KW_4ax7maUsgKoM3b6ofXJvJpqg.roa Signing time: Sun 21 Dec 2025 08:31:31 +0000 ROA not before: Sun 21 Dec 2025 08:31:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215304 IP address blocks: 31.56.84.0/24 maxlen: 24 31.57.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:09:03:d1:43:c1:ef:79:be:c4:7a:d7:e5:92:a5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:31:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=296ff86b1ee6694b202a83376faa1f5c9bc9a6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:b4:0e:11:6a:e6:41:24:c1:aa:13:04:57: 31:55:78:4b:aa:05:e0:a1:0e:84:9c:03:70:0b:6b: 85:8b:59:61:70:9b:73:9e:39:07:c5:d3:67:91:f5: ca:24:c2:c7:06:b2:90:fa:36:1d:90:be:e3:c8:b5: 7b:dc:b3:13:c9:ad:61:1f:e6:75:f8:31:22:6f:bf: d0:07:0c:36:75:2e:4e:65:f4:24:6b:ae:ea:92:16: 2d:cd:5d:e4:bc:dc:a2:19:cc:77:8b:0c:a9:1e:2c: f5:bd:3d:a5:32:a7:c4:8c:ae:39:75:00:f8:21:4b: 7f:5f:d5:51:e5:84:75:b5:b6:96:44:21:16:92:87: 01:45:5c:d9:a4:18:f6:ef:e4:e0:83:09:2a:b0:6b: ae:4b:a5:b3:50:31:c1:42:0e:75:b6:3a:3f:bb:d2: 42:89:09:0d:ac:66:ed:91:7f:ba:5c:7a:8c:9e:17: d0:e5:a9:fd:d9:cb:35:07:13:a8:5d:83:ac:48:56: 20:3f:50:26:f6:fe:6d:15:23:7e:7e:11:fd:88:43: 1b:72:df:5b:ca:59:92:9e:a3:7a:80:76:77:5f:a4: 09:66:ab:ed:32:06:91:79:52:b4:57:d7:5b:b6:49: c2:07:9f:1e:f6:16:44:39:c9:fa:9e:c9:10:db:9f: 1d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6F:F8:6B:1E:E6:69:4B:20:2A:83:37:6F:AA:1F:5C:9B:C9:A6:A8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KW_4ax7maUsgKoM3b6ofXJvJpqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.84.0/24 31.57.104.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:23:7e:c7:ff:c0:ea:00:f6:1f:68:2f:21:9f:e4:36:18:16: 3d:1b:6b:42:86:1c:76:bf:c8:29:61:71:0f:60:29:42:2e:2d: ea:6f:97:8f:62:dd:e9:57:70:61:06:84:cc:fa:e5:e5:30:59: 02:94:18:d2:f9:16:f2:57:70:fe:91:2b:6a:ab:c2:ed:36:72: f4:76:80:94:2a:23:e2:70:c1:ff:54:cc:ef:29:28:fb:d6:0f: ec:e0:3e:68:94:1f:84:16:30:22:2a:e6:04:90:f7:e4:32:d9: 9b:a4:4e:52:c5:f1:44:76:23:df:46:f1:f1:44:b9:ca:ac:2d: 33:93:ee:aa:ba:e7:db:08:0c:37:bd:cc:a4:83:9f:d2:a6:57: 53:0d:8c:25:03:d5:d0:cb:10:0e:63:f9:83:51:40:30:ec:c8: 7f:35:32:1f:20:b1:10:ac:6e:5f:a2:5d:c6:8e:84:c6:d4:c3: 7a:f6:bf:cf:c1:93:31:4f:b5:a3:6b:42:f1:63:ba:82:c9:ff: 6b:fb:dd:4d:2b:aa:bb:6b:05:7b:cf:9a:9d:ab:0e:07:c5:bc: 64:87:1e:a3:c1:04:97:91:ba:d8:33:e3:ad:ba:5c:66:47:1b: bc:dc:52:1a:dd:1d:e8:93:31:23:b6:b9:44:d3:fc:03:f4:a2: 82:f5:66:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtACQPRQ8Hveb7EetflkqX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgzMTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTZmZjg2YjFlZTY2OTRiMjAyYTgzMzc2ZmFhMWY1YzliYzlhNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO60DhFq5kEkwaoTBFcxVXhLqgXg oQ6EnANwC2uFi1lhcJtznjkHxdNnkfXKJMLHBrKQ+jYdkL7jyLV73LMTya1hH+Z1 +DEib7/QBww2dS5OZfQka67qkhYtzV3kvNyiGcx3iwypHiz1vT2lMqfEjK45dQD4 IUt/X9VR5YR1tbaWRCEWkocBRVzZpBj27+TggwkqsGuuS6WzUDHBQg51tjo/u9JC iQkNrGbtkX+6XHqMnhfQ5an92cs1BxOoXYOsSFYgP1Am9v5tFSN+fhH9iEMbct9b ylmSnqN6gHZ3X6QJZqvtMgaReVK0V9dbtknCB58e9hZEOcn6nskQ258d8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFClv+Gse5mlLICqDN2+qH1ybyaaoMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS1dfNGF4N21hVXNnS29NM2I2b2ZYSnZKcHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhUAwQA HzloMA0GCSqGSIb3DQEBCwUAA4IBAQCaI37H/8DqAPYfaC8hn+Q2GBY9G2tChhx2 v8gpYXEPYClCLi3qb5ePYt3pV3BhBoTM+uXlMFkClBjS+RbyV3D+kStqq8LtNnL0 doCUKiPicMH/VMzvKSj71g/s4D5olB+EFjAiKuYEkPfkMtmbpE5SxfFEdiPfRvHx RLnKrC0zk+6quufbCAw3vcykg5/SpldTDYwlA9XQyxAOY/mDUUAw7Mh/NTIfILEQ rG5fol3GjoTG1MN69r/PwZMxT7Wja0LxY7qCyf9r+91NK6q7awV7z5qdqw4Hxbxk hx6jwQSXkbrYM+OtulxmRxu83FIa3R3okzEjtrlE0/wD9KKC9Wa2 -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:36 2025 by rpki-client