This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MMiz5oR_uGz9D342v7OEuX2aRWc.roa File: MMiz5oR_uGz9D342v7OEuX2aRWc.roa (raw, json) Hash identifier: EwIs9hK8BsurnI7ISHyZFgglJVwKzKtfDNzrfpUddZI= Subject key identifier: 30:C8:B3:E6:84:7F:B8:6C:FD:0F:7E:36:BF:B3:84:B9:7D:9A:45:67 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BF62002C8EFDBFBE2785342E587A2A453 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MMiz5oR_uGz9D342v7OEuX2aRWc.roa Signing time: Sun 25 Jan 2026 17:07:31 +0000 ROA not before: Sun 25 Jan 2026 17:07:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 31.56.0.0/24 maxlen: 24 31.56.49.0/24 maxlen: 24 31.56.98.0/24 maxlen: 24 31.56.103.0/24 maxlen: 24 31.56.210.0/24 maxlen: 24 31.56.212.0/24 maxlen: 24 31.56.223.0/24 maxlen: 24 31.56.234.0/24 maxlen: 24 31.56.235.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.121.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.57.225.0/24 maxlen: 24 31.58.47.0/24 maxlen: 24 31.58.90.0/24 maxlen: 24 31.58.168.0/24 maxlen: 24 31.59.171.0/24 maxlen: 24 31.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:20:02:c8:ef:db:fb:e2:78:53:42:e5:87:a2:a4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 25 17:07:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30c8b3e6847fb86cfd0f7e36bfb384b97d9a4567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:03:df:5c:d4:40:b8:5c:e6:32:e0:ce:f0: 9d:59:07:69:4a:ff:8f:90:92:12:58:3a:53:76:32: 58:ee:b2:25:44:55:5a:5f:62:99:74:d8:02:d7:35: 0c:2f:1b:c9:03:47:fa:20:5c:a3:67:0f:d3:e4:42: f1:78:29:ec:ca:ca:79:41:e1:ca:11:c7:be:c3:0e: a3:8b:4c:87:28:bd:a2:40:cc:b7:8c:c6:87:c6:18: 1d:c8:62:8b:f5:02:21:d9:2e:c0:43:f3:bc:7d:d6: 5e:4b:a8:5b:35:05:77:da:ea:b1:30:f6:c5:b6:a6: 69:9a:f9:2f:97:de:68:e2:7c:02:46:ff:0b:18:6f: 93:af:3c:76:ad:95:11:0d:fb:2e:2e:2b:7f:6d:25: c3:41:83:cb:a7:d4:5f:7d:3c:f2:34:a4:2c:64:fe: 36:ba:d0:d5:76:db:32:a0:a3:ca:be:48:ae:28:7f: bd:b7:73:d8:a2:22:e6:5e:9c:3f:06:21:ae:d9:42: 9f:f4:bf:04:3a:b7:eb:4f:40:40:6e:b2:9c:34:ed: 52:13:5f:2a:4a:cb:a8:94:87:70:bd:c9:f6:77:95: 1e:a4:a8:f7:4f:cf:a1:69:cd:a0:90:5d:24:83:4b: 9c:05:ae:21:ae:e0:a9:9d:3b:25:a1:b6:cf:56:e1: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C8:B3:E6:84:7F:B8:6C:FD:0F:7E:36:BF:B3:84:B9:7D:9A:45:67 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MMiz5oR_uGz9D342v7OEuX2aRWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.56.49.0/24 31.56.98.0/24 31.56.103.0/24 31.56.210.0/24 31.56.212.0/24 31.56.223.0/24 31.56.234.0/23 31.57.35.0/24 31.57.121.0/24 31.57.206.0/24 31.57.225.0/24 31.58.47.0/24 31.58.90.0/24 31.58.168.0/24 31.59.171.0/24 31.59.236.0/22 Signature Algorithm: sha256WithRSAEncryption 43:cf:d3:1c:32:b2:92:6f:d4:44:d3:9f:37:a1:d1:a2:1b:61: cf:ed:55:cd:37:51:7e:b6:36:ae:f5:37:ff:45:eb:9c:2d:a7: 37:60:54:c6:61:38:cd:0e:38:e0:b7:0a:8e:ca:de:4a:b9:da: c3:48:ce:8b:60:13:76:02:db:53:7f:0b:23:8e:f2:8a:b6:dd: fe:d4:fa:f9:4a:0b:1e:4c:c6:5d:61:af:ec:3b:24:37:04:5b: 60:da:91:49:a9:b7:78:08:67:95:1e:d9:1e:f0:6a:37:3a:fd: a9:8d:e5:59:c8:cb:b5:56:8f:24:40:c7:76:d4:fe:ae:70:ce: 58:3a:6b:f1:12:e8:e2:76:15:57:e1:7c:0f:00:f4:53:16:a3: e3:e4:86:3b:18:32:2e:0a:a6:f3:d9:ae:25:f1:1f:25:30:47: 92:a8:50:d2:65:7c:90:1c:1a:41:9d:97:c1:c1:56:e9:60:fe: fb:26:02:6b:0e:dc:f1:eb:e9:c2:11:41:14:19:01:3e:bf:03: 73:ec:75:db:71:57:6a:cd:07:88:0c:64:a1:e3:f6:3c:cd:17: c1:de:b6:ad:20:70:63:7a:6d:59:4e:46:7e:b1:21:c1:e3:b3: 0f:71:75:20:81:70:09:6b:c5:86:61:8d:dd:de:d6:ac:aa:46: 02:25:7d:4b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZv2IALI79v74nhTQuWHoqRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI1MTcwNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGM4YjNlNjg0N2ZiODZjZmQwZjdlMzZiZmIzODRiOTdkOWE0NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4msD31zUQLhc5jLgzvCdWQdpSv+P kJISWDpTdjJY7rIlRFVaX2KZdNgC1zUMLxvJA0f6IFyjZw/T5ELxeCnsysp5QeHK Ece+ww6ji0yHKL2iQMy3jMaHxhgdyGKL9QIh2S7AQ/O8fdZeS6hbNQV32uqxMPbF tqZpmvkvl95o4nwCRv8LGG+Trzx2rZURDfsuLit/bSXDQYPLp9RffTzyNKQsZP42 utDVdtsyoKPKvkiuKH+9t3PYoiLmXpw/BiGu2UKf9L8EOrfrT0BAbrKcNO1SE18q SsuolIdwvcn2d5UepKj3T8+hac2gkF0kg0ucBa4hruCpnTslobbPVuEkGwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFDDIs+aEf7hs/Q9+Nr+zhLl9mkVnMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTU1pejVvUl91R3o5RDM0MnY3T0V1WDJhUldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAHzgAAwQA HzgxAwQAHzhiAwQAHzhnAwQAHzjSAwQAHzjUAwQAHzjfAwQBHzjqAwQAHzkjAwQA Hzl5AwQAHznOAwQAHznhAwQAHzovAwQAHzpaAwQAHzqoAwQAHzurAwQCHzvsMA0G CSqGSIb3DQEBCwUAA4IBAQBDz9McMrKSb9RE0583odGiG2HP7VXNN1F+tjau9Tf/ ReucLac3YFTGYTjNDjjgtwqOyt5KudrDSM6LYBN2AttTfwsjjvKKtt3+1Pr5Sgse TMZdYa/sOyQ3BFtg2pFJqbd4CGeVHtke8Go3Ov2pjeVZyMu1Vo8kQMd21P6ucM5Y OmvxEujidhVX4XwPAPRTFqPj5IY7GDIuCqbz2a4l8R8lMEeSqFDSZXyQHBpBnZfB wVbpYP77JgJrDtzx6+nCEUEUGQE+vwNz7HXbcVdqzQeIDGSh4/Y8zRfB3ratIHBj em1ZTkZ+sSHB47MPcXUggXAJa8WGYY3d3tasqkYCJX1L -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:30 2026 by rpki-client