This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NoE7G6NsUf69d81mmEvScEMUmIs.roa File: NoE7G6NsUf69d81mmEvScEMUmIs.roa (raw, json) Hash identifier: /Q7YFEuodmQ8GhZveIOh3v6LNS/uGTRf0WElBZgEJ8U= Subject key identifier: 36:81:3B:1B:A3:6C:51:FE:BD:77:CD:66:98:4B:D2:70:43:14:98:8B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AE844BD5153EFA4D49023168C0D502E4A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NoE7G6NsUf69d81mmEvScEMUmIs.roa Signing time: Thu 04 Dec 2025 07:30:10 +0000 ROA not before: Thu 04 Dec 2025 07:30:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 31.57.155.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:44:bd:51:53:ef:a4:d4:90:23:16:8c:0d:50:2e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 4 07:30:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36813b1ba36c51febd77cd66984bd2704314988b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:5d:cb:4e:db:8f:55:e2:19:59:e9:ef:0a: 68:32:6f:16:f0:be:07:94:c3:72:e2:30:b0:bc:c6: 61:1a:ad:f0:77:93:0d:93:c1:79:36:98:f7:53:b0: 13:44:34:0d:53:f5:f8:f9:a2:7c:a6:a8:7f:de:1a: eb:d6:c5:1e:1f:cc:1c:db:41:f5:f4:59:41:09:77: 7e:50:ec:14:ea:86:e6:4d:8a:d0:5c:7c:0d:03:eb: 78:54:23:c0:49:70:26:bc:fd:4b:19:2d:0b:4c:7c: 89:c3:9b:6c:3a:ca:41:52:9e:13:1e:2d:37:5f:79: f6:e7:e6:b7:40:d5:bc:41:83:e7:92:50:d6:10:c0: f8:08:9f:35:d8:a9:de:d7:62:92:4d:a8:02:4d:f0: 22:44:b7:2a:e5:03:44:39:a5:50:82:d9:5f:90:bd: fa:3a:a8:00:04:44:e2:54:9e:0e:a0:fb:7f:f7:91: 53:b1:ed:a3:7e:9a:1a:1c:54:4a:95:9b:2b:f1:8a: 1f:9b:90:5c:77:42:90:46:4a:ef:23:e9:bb:4c:15: ea:7f:33:bd:75:ae:c4:3d:fc:d4:90:d4:dd:c4:d5: 41:de:75:5a:4f:1a:ce:15:04:a3:18:78:a3:d5:84: 9f:66:33:7d:64:97:5a:0f:5d:c0:65:04:17:28:a1: 5d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:81:3B:1B:A3:6C:51:FE:BD:77:CD:66:98:4B:D2:70:43:14:98:8B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NoE7G6NsUf69d81mmEvScEMUmIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.155.0/24 31.57.206.0/24 31.59.99.0/24 Signature Algorithm: sha256WithRSAEncryption 55:05:ea:22:0c:bf:bb:6e:00:a1:9b:95:0c:f9:5e:b9:d4:5e: 06:0d:71:88:5e:00:8b:c5:ed:3d:d6:b9:9b:31:f8:de:f4:a0: 0b:da:88:ed:39:16:3b:37:1a:5c:e7:e7:54:d5:ce:dc:14:f8: 8b:33:35:6c:9d:69:20:93:c7:69:fe:c0:6d:5e:32:83:3d:c6: 69:96:5b:9a:7e:70:81:aa:72:39:e8:48:6b:e1:ea:72:e0:bb: 0b:ca:ac:e1:ce:67:68:23:b0:aa:5e:63:e7:d2:b2:dc:a1:64: 5e:fd:f4:e7:8d:77:10:bb:b5:76:97:73:c8:64:b6:59:5b:96: 0d:7f:75:f8:56:f4:32:db:b0:17:d0:20:f7:b9:fa:3a:51:bd: b4:13:18:45:1a:a6:38:fd:64:ba:0a:f5:c1:3f:75:ff:86:53: 2d:41:b7:c8:50:54:3c:d1:55:82:58:d1:56:1b:fc:6d:37:f1: 35:d3:51:6b:d6:f8:7d:e9:1a:85:21:55:d5:56:7a:4b:9e:27: 2c:16:3a:a5:8a:fe:59:94:3a:9c:48:98:e9:34:af:63:ad:16: b6:ff:15:b2:aa:b8:ea:63:dc:a5:ac:31:28:6c:47:18:90:d9: 64:50:de:ec:33:75:ca:d0:00:1d:eb:52:ce:96:85:ed:ee:e4: ce:19:05:95 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZroRL1RU++k1JAjFowNUC5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA0MDczMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjgxM2IxYmEzNmM1MWZlYmQ3N2NkNjY5ODRiZDI3MDQzMTQ5ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmchdy07bj1XiGVnp7wpoMm8W8L4H lMNy4jCwvMZhGq3wd5MNk8F5Npj3U7ATRDQNU/X4+aJ8pqh/3hrr1sUeH8wc20H1 9FlBCXd+UOwU6obmTYrQXHwNA+t4VCPASXAmvP1LGS0LTHyJw5tsOspBUp4THi03 X3n25+a3QNW8QYPnklDWEMD4CJ812Kne12KSTagCTfAiRLcq5QNEOaVQgtlfkL36 OqgABETiVJ4OoPt/95FTse2jfpoaHFRKlZsr8Yofm5Bcd0KQRkrvI+m7TBXqfzO9 da7EPfzUkNTdxNVB3nVaTxrOFQSjGHij1YSfZjN9ZJdaD13AZQQXKKFdAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDaBOxujbFH+vXfNZphL0nBDFJiLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTm9FN0c2TnNVZjY5ZDgxbW1FdlNjRU1VbUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzmbAwQA HznOAwQAHztjMA0GCSqGSIb3DQEBCwUAA4IBAQBVBeoiDL+7bgChm5UM+V651F4G DXGIXgCLxe091rmbMfje9KAL2ojtORY7Nxpc5+dU1c7cFPiLMzVsnWkgk8dp/sBt XjKDPcZplluafnCBqnI56Ehr4epy4LsLyqzhzmdoI7CqXmPn0rLcoWRe/fTnjXcQ u7V2l3PIZLZZW5YNf3X4VvQy27AX0CD3ufo6Ub20ExhFGqY4/WS6CvXBP3X/hlMt QbfIUFQ80VWCWNFWG/xtN/E101Fr1vh96RqFIVXVVnpLnicsFjqliv5ZlDqcSJjp NK9jrRa2/xWyqrjqY9ylrDEobEcYkNlkUN7sM3XK0AAd61LOloXt7uTOGQWV -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:49 2025 by rpki-client