This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lfc13yE50yZ3kyeYGo_qfeXnTIc.roa File: Lfc13yE50yZ3kyeYGo_qfeXnTIc.roa (raw, json) Hash identifier: oHqdc+vVL8HqPfaWq5YNlq1EVZ23Ub84Q4qQJv+H+Go= Subject key identifier: 2D:F7:35:DF:21:39:D3:26:77:93:27:98:1A:8F:EA:7D:E5:E7:4C:87 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B645C05B1A106F7EE11A548727F1AF474 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lfc13yE50yZ3kyeYGo_qfeXnTIc.roa Signing time: Sun 28 Dec 2025 09:48:30 +0000 ROA not before: Sun 28 Dec 2025 09:48:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214828 IP address blocks: 31.56.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:5c:05:b1:a1:06:f7:ee:11:a5:48:72:7f:1a:f4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 28 09:48:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2df735df2139d326779327981a8fea7de5e74c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:1b:13:85:02:5e:dd:df:7c:75:06:11:11: 7d:b7:04:4b:33:09:89:e3:25:2e:d3:e1:ce:e1:88: 27:ff:4c:f1:4f:fb:e2:f7:44:b9:48:8f:2d:94:1a: 1f:76:44:e1:5b:bf:3d:85:cc:e7:bf:19:6a:17:67: b3:bc:58:e8:cd:6f:31:64:8a:84:d6:be:cc:c5:61: f5:ed:25:a6:81:d7:1f:7c:c4:3e:c4:31:0f:76:0a: 00:da:4f:b8:97:b1:95:fe:94:81:d3:c5:a6:c1:cb: 0c:a4:e7:b9:e5:ff:aa:a9:61:3d:04:b0:f3:fd:c9: 52:27:b3:d5:4c:ef:9f:29:fd:aa:1e:d4:4c:49:88: 7f:13:90:15:05:20:f1:0b:88:8a:fb:a7:5e:dc:fe: 20:aa:93:bc:95:b6:93:ef:5d:0b:68:5a:cd:2b:c6: 6d:2a:72:9f:0e:31:8e:6e:6e:ff:47:63:52:63:3e: b7:11:ae:1e:2a:10:e7:b7:52:f8:94:15:da:0c:d4: d2:2c:ff:f2:43:89:b9:3b:dd:43:8e:7d:09:b6:7c: eb:4d:6c:37:f5:40:4f:ab:70:49:3b:a7:d8:bc:18: e9:15:13:8c:4d:98:69:e0:5f:bb:d1:c2:61:f6:c8: cf:13:d9:5a:51:f6:c1:0e:6a:b7:35:e3:3e:c1:1b: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F7:35:DF:21:39:D3:26:77:93:27:98:1A:8F:EA:7D:E5:E7:4C:87 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lfc13yE50yZ3kyeYGo_qfeXnTIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.144.0/24 Signature Algorithm: sha256WithRSAEncryption 77:9f:bb:a4:cd:7f:6e:6e:48:da:0b:87:5b:b0:87:48:3b:1b: c3:61:b4:ff:5a:be:ea:0f:67:49:83:e1:5e:b3:18:93:0d:e5: 19:20:13:63:b9:a5:98:ce:3b:95:45:06:fa:67:ce:84:b9:ff: 89:f8:64:d1:ef:86:af:49:e3:49:84:07:b7:ec:3c:22:31:d4: 00:6d:a5:88:9b:ce:15:b2:8f:ee:f2:cf:82:98:71:80:50:64: 0d:8f:c4:7c:cf:61:08:49:9f:bc:c4:fc:fe:90:ba:77:84:36: e5:8e:c2:79:c5:f8:2c:55:8a:a3:9f:85:cf:e0:06:ed:85:66: ea:bb:29:71:41:78:2a:6c:76:36:bc:bf:56:5f:9f:33:e5:56: 99:8c:f2:8b:71:54:d8:97:cd:a0:ab:db:6a:09:5a:1b:7a:43: 4e:6f:5d:fb:ee:24:21:c8:5b:9a:20:42:82:39:d5:00:65:7e: ec:cc:e1:6e:18:32:18:ca:b4:c1:fe:e2:28:2f:8a:54:3c:0e: 19:f5:17:c7:e4:d9:25:88:ed:4c:37:fa:6b:63:09:31:ea:93: 12:8d:b7:2e:f8:7c:95:23:e5:de:3e:04:a0:52:22:b8:f1:db: ea:09:28:4c:64:35:f6:7a:e0:69:75:a6:06:82:af:34:3c:6e: 09:78:e9:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtkXAWxoQb37hGlSHJ/GvR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI4MDk0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGY3MzVkZjIxMzlkMzI2Nzc5MzI3OTgxYThmZWE3ZGU1ZTc0Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EAbE4UCXt3ffHUGERF9twRLMwmJ 4yUu0+HO4Ygn/0zxT/vi90S5SI8tlBofdkThW789hcznvxlqF2ezvFjozW8xZIqE 1r7MxWH17SWmgdcffMQ+xDEPdgoA2k+4l7GV/pSB08WmwcsMpOe55f+qqWE9BLDz /clSJ7PVTO+fKf2qHtRMSYh/E5AVBSDxC4iK+6de3P4gqpO8lbaT710LaFrNK8Zt KnKfDjGObm7/R2NSYz63Ea4eKhDnt1L4lBXaDNTSLP/yQ4m5O91Djn0JtnzrTWw3 9UBPq3BJO6fYvBjpFROMTZhp4F+70cJh9sjPE9laUfbBDmq3NeM+wRsDJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC33Nd8hOdMmd5MnmBqP6n3l50yHMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTGZjMTN5RTUweVoza3llWUdvX3FmZVhuVEljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHziQMA0G CSqGSIb3DQEBCwUAA4IBAQB3n7ukzX9ubkjaC4dbsIdIOxvDYbT/Wr7qD2dJg+Fe sxiTDeUZIBNjuaWYzjuVRQb6Z86Euf+J+GTR74avSeNJhAe37DwiMdQAbaWIm84V so/u8s+CmHGAUGQNj8R8z2EISZ+8xPz+kLp3hDbljsJ5xfgsVYqjn4XP4AbthWbq uylxQXgqbHY2vL9WX58z5VaZjPKLcVTYl82gq9tqCVobekNOb1377iQhyFuaIEKC OdUAZX7szOFuGDIYyrTB/uIoL4pUPA4Z9RfH5NkliO1MN/prYwkx6pMSjbcu+HyV I+XePgSgUiK48dvqCShMZDX2euBpdaYGgq80PG4JeOmv -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:58 2025 by rpki-client