This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KcVHBrpi0KQCdPkVmtBWr-m4gv0.roa File: KcVHBrpi0KQCdPkVmtBWr-m4gv0.roa (raw, json) Hash identifier: lukbQBRMYII63hig0NrQ+0SaOC9l76EqRLQlpy3bc6M= Subject key identifier: 29:C5:47:06:BA:62:D0:A4:02:74:F9:15:9A:D0:56:AF:E9:B8:82:FD Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A90EB697957E019095B70438E460CF985 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KcVHBrpi0KQCdPkVmtBWr-m4gv0.roa Signing time: Mon 17 Nov 2025 08:25:38 +0000 ROA not before: Mon 17 Nov 2025 08:25:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199414 IP address blocks: 31.56.0.0/24 maxlen: 24 31.58.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:eb:69:79:57:e0:19:09:5b:70:43:8e:46:0c:f9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 17 08:25:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=29c54706ba62d0a40274f9159ad056afe9b882fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:a0:ed:4c:8b:6e:4e:fc:07:ad:9a:b5:e4: 1e:d9:52:14:95:03:7c:08:ac:68:ca:81:13:67:c2: 08:09:b0:c6:8a:da:62:96:6c:0c:6e:2b:98:81:10: 45:44:a7:ec:a0:76:94:f6:f6:73:7e:cd:fc:19:27: f1:6c:18:bd:10:f7:25:62:17:58:99:5a:ea:9c:ff: 6c:39:ff:f0:32:17:0c:9e:f9:32:38:93:dc:50:76: f9:f5:88:33:fb:0a:30:da:cf:80:c3:c9:55:99:c3: a0:cc:73:34:f3:7a:21:c4:7b:7b:c6:c3:5d:ee:70: 33:a8:9a:ac:fe:3d:45:b4:b8:f3:de:d3:69:81:58: 6b:55:cb:4c:9e:ff:1c:5b:b8:31:e1:67:6e:12:26: 9a:35:d9:6d:cf:cf:d8:f2:07:7c:6e:94:2d:68:1b: f3:d1:48:5f:db:7d:cb:2b:34:25:00:df:4a:c7:d2: 78:5f:73:ca:da:84:ea:b9:54:77:0b:5c:b5:42:d2: 5d:79:30:1a:58:24:f0:29:6b:5d:c1:79:02:5c:76: 97:04:e1:c0:4b:c9:c2:14:5e:27:4b:ae:52:01:5a: 5d:eb:98:e3:48:7a:b1:35:3c:0a:7e:a0:b5:a3:37: f4:75:fd:6e:5f:fd:c5:96:ae:0a:5b:fb:53:4b:fb: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C5:47:06:BA:62:D0:A4:02:74:F9:15:9A:D0:56:AF:E9:B8:82:FD X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KcVHBrpi0KQCdPkVmtBWr-m4gv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.58.228.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:0e:e2:d8:ea:19:44:e6:70:49:d1:0b:96:63:87:b8:e6:08: f3:c2:9f:ed:d9:c3:87:ba:58:df:85:a4:38:2b:a0:69:a4:1c: f3:7c:27:3f:2c:4f:6b:cd:79:79:c0:6c:2d:5c:6d:60:17:45: 5b:a3:64:20:1c:7d:ae:01:2e:1d:85:30:70:68:e1:8c:7c:52: e6:45:98:32:23:bc:62:e3:95:eb:ac:93:ec:15:74:3b:f8:3b: 94:2e:c8:ca:bc:85:d2:f0:55:4c:ac:39:50:83:34:6f:2f:e7: a6:46:42:12:d3:57:9d:00:0a:1b:62:64:d9:cd:bf:43:6b:a4: 72:bd:22:d3:23:ce:15:4e:53:11:73:6d:7a:5b:75:f6:db:91: 9e:fe:57:25:1b:e6:cc:a7:5d:e9:95:3c:1b:b7:41:8b:2c:60: 65:91:28:fd:5b:85:1b:bc:9a:93:d0:dc:20:37:0e:34:e8:1a: d2:5c:5e:b6:91:8e:e8:4c:61:be:a0:23:25:e5:0c:ff:21:fc: e9:8c:0a:cd:0d:ea:cc:fc:2b:a0:5c:25:05:cd:60:a6:49:64: 7b:a9:2d:86:49:d3:2a:d9:04:ab:f9:0f:fc:28:b6:56:f3:33: bf:d9:3c:3b:45:ad:42:74:9c:b4:a3:dc:5c:7c:43:ea:84:0a: 11:68:da:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqQ62l5V+AZCVtwQ45GDPmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE3MDgyNTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWM1NDcwNmJhNjJkMGE0MDI3NGY5MTU5YWQwNTZhZmU5Yjg4MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzGg7UyLbk78B62ateQe2VIUlQN8 CKxoyoETZ8IICbDGitpilmwMbiuYgRBFRKfsoHaU9vZzfs38GSfxbBi9EPclYhdY mVrqnP9sOf/wMhcMnvkyOJPcUHb59Ygz+wow2s+Aw8lVmcOgzHM083ohxHt7xsNd 7nAzqJqs/j1FtLjz3tNpgVhrVctMnv8cW7gx4WduEiaaNdltz8/Y8gd8bpQtaBvz 0Uhf233LKzQlAN9Kx9J4X3PK2oTquVR3C1y1QtJdeTAaWCTwKWtdwXkCXHaXBOHA S8nCFF4nS65SAVpd65jjSHqxNTwKfqC1ozf0df1uX/3Flq4KW/tTS/vZvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCnFRwa6YtCkAnT5FZrQVq/puIL9MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvS2NWSEJycGkwS1FDZFBrVm10QldyLW00Z3YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgAAwQA HzrkMA0GCSqGSIb3DQEBCwUAA4IBAQB8DuLY6hlE5nBJ0QuWY4e45gjzwp/t2cOH uljfhaQ4K6BppBzzfCc/LE9rzXl5wGwtXG1gF0Vbo2QgHH2uAS4dhTBwaOGMfFLm RZgyI7xi45XrrJPsFXQ7+DuULsjKvIXS8FVMrDlQgzRvL+emRkIS01edAAobYmTZ zb9Da6RyvSLTI84VTlMRc216W3X225Ge/lclG+bMp13plTwbt0GLLGBlkSj9W4Ub vJqT0NwgNw406BrSXF62kY7oTGG+oCMl5Qz/IfzpjArNDerM/CugXCUFzWCmSWR7 qS2GSdMq2QSr+Q/8KLZW8zO/2Tw7Ra1CdJy0o9xcfEPqhAoRaNpV -----END CERTIFICATE-----Generated at Wed Nov 19 13:29:43 2025 by rpki-client