This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LVfa3IR5XMJVHy3LyDL6Khb65UA.roa File: LVfa3IR5XMJVHy3LyDL6Khb65UA.roa (raw, json) Hash identifier: uiPxRKYl5/uBfp2lbfjzvYcB7BWgG/oNAjzLyRVa9SI= Subject key identifier: 2D:57:DA:DC:84:79:5C:C2:55:1F:2D:CB:C8:32:FA:2A:16:FA:E5:40 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AC11911DD14CF7596671EFC753C2718DE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LVfa3IR5XMJVHy3LyDL6Khb65UA.roa Signing time: Wed 26 Nov 2025 16:57:16 +0000 ROA not before: Wed 26 Nov 2025 16:57:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 31.56.160.0/21 maxlen: 24 217.60.128.0/19 maxlen: 24 217.60.128.0/20 maxlen: 24 217.60.152.0/21 maxlen: 21 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.200.0/21 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:19:11:dd:14:cf:75:96:67:1e:fc:75:3c:27:18:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 26 16:57:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d57dadc84795cc2551f2dcbc832fa2a16fae540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:e9:01:1d:b5:6a:fa:36:3f:69:28:80:84: 29:c9:1d:6d:41:f0:a4:8e:21:19:ce:1b:72:36:57: 0f:ba:ff:b3:4d:c9:eb:f6:17:66:d4:76:fc:7e:0c: b6:df:86:9a:62:71:43:a4:6e:ad:32:e6:f4:2b:d5: d7:87:8e:70:7c:f9:3b:4e:12:0d:3e:57:52:60:e5: 36:b3:c9:3c:c2:91:25:9f:ac:30:9a:25:e6:c1:29: c7:5c:99:30:e9:f8:15:06:f4:41:80:1e:a5:d4:81: 0b:28:ea:56:45:40:a8:f4:7f:b4:7e:22:25:82:cd: 76:e7:69:03:19:f1:af:bb:a5:ac:0d:ea:7f:3a:a6: 01:c2:e3:cb:cb:b1:1e:ae:e9:24:bd:4e:a8:e2:d5: c5:e3:de:f2:9a:b3:5e:eb:d5:50:48:2c:99:9a:c2: c0:2a:22:04:e1:da:15:a0:38:45:99:f0:18:27:59: c9:67:7b:4a:70:a7:4f:55:b1:ca:e8:18:91:df:79: ba:5e:c0:4f:41:82:a0:b4:15:13:4a:6c:36:e6:08: 77:4a:c3:1f:97:97:bc:93:72:97:2a:fa:e0:3f:1a: fe:de:47:f6:ce:84:d9:b0:b3:4c:cb:47:a0:ec:97: 06:57:1a:c5:38:b6:50:91:08:05:6b:cd:3d:c4:3a: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:DA:DC:84:79:5C:C2:55:1F:2D:CB:C8:32:FA:2A:16:FA:E5:40 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LVfa3IR5XMJVHy3LyDL6Khb65UA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.160.0/21 217.60.128.0-217.60.183.255 217.60.200.0-217.60.235.255 Signature Algorithm: sha256WithRSAEncryption 8e:17:56:a8:9f:c6:12:76:ef:41:81:32:c0:9a:0d:2a:d6:eb: 66:b2:92:e4:b4:ff:49:38:2e:74:2c:c0:06:43:ca:ea:8a:34: c3:91:c4:86:90:7d:01:44:09:e3:a0:e6:cf:d5:47:ff:f9:8e: 82:28:a0:35:c1:3b:10:a0:12:15:33:e7:61:8b:18:eb:99:5a: db:4b:dd:a8:b9:e4:df:17:b0:58:4f:e3:4c:19:b1:b0:13:eb: 76:c1:d7:7b:1b:79:c4:0e:4b:5a:ee:ee:0e:be:44:f8:f2:39: 90:c6:5b:6a:2a:d4:58:28:9d:26:06:5d:1d:05:1e:f7:68:47: f0:b3:b8:c1:4a:2c:24:3d:f9:76:73:85:78:f2:52:e5:c8:1b: 2f:0b:1e:69:95:ee:91:03:13:c1:04:90:d1:2e:98:11:1e:96: af:b3:db:c9:e5:14:34:12:ac:2c:ab:8a:9b:80:bf:e1:4d:c7: 35:df:71:80:29:83:17:5f:0d:5a:eb:1c:be:d4:81:60:fa:06: 5a:48:7f:d1:f9:e9:90:32:4c:5a:f5:b5:ee:7f:e0:5f:a0:23: 48:c7:3f:07:13:c4:36:1a:06:6c:3c:8d:ef:3e:5b:07:96:54: 55:1c:32:59:19:f3:45:98:90:8d:3a:d3:86:73:a2:7f:90:7b: 6f:57:ee:a2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrBGRHdFM91lmce/HU8JxjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI2MTY1NzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDU3ZGFkYzg0Nzk1Y2MyNTUxZjJkY2JjODMyZmEyYTE2ZmFlNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcPpAR21avo2P2kogIQpyR1tQfCk jiEZzhtyNlcPuv+zTcnr9hdm1Hb8fgy234aaYnFDpG6tMub0K9XXh45wfPk7ThIN PldSYOU2s8k8wpEln6wwmiXmwSnHXJkw6fgVBvRBgB6l1IELKOpWRUCo9H+0fiIl gs1252kDGfGvu6WsDep/OqYBwuPLy7EerukkvU6o4tXF497ymrNe69VQSCyZmsLA KiIE4doVoDhFmfAYJ1nJZ3tKcKdPVbHK6BiR33m6XsBPQYKgtBUTSmw25gh3SsMf l5e8k3KXKvrgPxr+3kf2zoTZsLNMy0eg7JcGVxrFOLZQkQgFa809xDoY9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC1X2tyEeVzCVR8ty8gy+ioW+uVAMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTFZmYTNJUjVYTUpWSHkzTHlETDZLaGI2NVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQDHzigMAwD BAfZPIADBAPZPLAwDAMEA9k8yAMEAtk86DANBgkqhkiG9w0BAQsFAAOCAQEAjhdW qJ/GEnbvQYEywJoNKtbrZrKS5LT/STgudCzABkPK6oo0w5HEhpB9AUQJ46Dmz9VH //mOgiigNcE7EKASFTPnYYsY65la20vdqLnk3xewWE/jTBmxsBPrdsHXext5xA5L Wu7uDr5E+PI5kMZbairUWCidJgZdHQUe92hH8LO4wUosJD35dnOFePJS5cgbLwse aZXukQMTwQSQ0S6YER6Wr7PbyeUUNBKsLKuKm4C/4U3HNd9xgCmDF18NWuscvtSB YPoGWkh/0fnpkDJMWvW17n/gX6AjSMc/BxPENhoGbDyN7z5bB5ZUVRwyWRnzRZiQ jTrThnOif5B7b1fuog== -----END CERTIFICATE-----Generated at Thu Nov 27 06:43:25 2025 by rpki-client