This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Opc4JLjhPMwaXsvQgE31GOyO1XA.roa File: Opc4JLjhPMwaXsvQgE31GOyO1XA.roa (raw, json) Hash identifier: kvNmQMgqPG0Nc8KHtHfYHEPpkPGiqNa1lLDBSWpkwLE= Subject key identifier: 3A:97:38:24:B8:E1:3C:CC:1A:5E:CB:D0:80:4D:F5:18:EC:8E:D5:70 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B4509D456155D7A156F54647C35E56B1A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Opc4JLjhPMwaXsvQgE31GOyO1XA.roa Signing time: Mon 22 Dec 2025 07:50:30 +0000 ROA not before: Mon 22 Dec 2025 07:50:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215238 IP address blocks: 31.56.214.0/24 maxlen: 24 31.59.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:09:d4:56:15:5d:7a:15:6f:54:64:7c:35:e5:6b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 22 07:50:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a973824b8e13ccc1a5ecbd0804df518ec8ed570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:40:7a:9a:23:f8:21:01:b4:f9:5a:57:5d: bf:31:55:6c:4b:c8:23:d0:1f:b3:7f:01:68:e8:0a: ef:af:03:19:4e:b1:81:c6:ef:c7:e2:23:67:f9:b6: 08:b7:2b:dc:7a:34:c8:95:13:c5:02:49:c9:03:18: 9e:a7:d3:10:c7:5f:32:ec:b0:56:35:b7:d9:29:77: a3:87:f1:0b:7c:ab:db:80:80:3c:eb:7a:5f:d9:3b: 36:a8:54:88:94:c8:29:15:a1:aa:15:78:13:ec:4b: 6e:1f:05:ce:28:4d:cb:6f:db:d4:94:01:18:07:b5: 3b:2c:27:12:95:19:f6:53:01:78:8e:44:de:7f:75: 21:f3:c4:a0:46:d0:f9:a3:5a:e0:09:ae:98:cb:f3: b2:ef:f8:f6:d3:12:53:02:0e:83:04:00:91:fe:9c: 54:48:1c:f3:8e:34:10:27:16:26:84:e2:72:2f:c1: 49:a6:0a:f9:fe:99:e2:26:d6:79:bd:56:81:f6:81: 60:25:e0:52:5d:ee:93:8e:1a:aa:8e:47:ec:d4:13: 8e:3f:d7:b9:7e:20:dc:b0:33:64:e8:87:69:01:a5: 28:2c:e7:20:3a:27:77:79:bb:6d:72:5f:da:d8:50: b0:c6:fe:cf:e2:cb:01:93:5e:81:fc:56:03:dc:35: a1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:38:24:B8:E1:3C:CC:1A:5E:CB:D0:80:4D:F5:18:EC:8E:D5:70 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Opc4JLjhPMwaXsvQgE31GOyO1XA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.214.0/24 31.59.131.0/24 Signature Algorithm: sha256WithRSAEncryption 99:13:a4:ef:30:da:19:10:65:dd:b2:46:a7:d2:b5:d9:b8:c7: e8:70:a7:54:6d:c2:17:a0:84:4f:09:3b:5d:da:44:9d:2f:38: 3b:fb:47:74:f6:a7:c5:55:80:cf:65:55:b1:7b:03:7d:07:67: ae:ee:3e:b8:12:2d:57:80:d8:e8:20:ae:d7:d8:d2:af:cb:42: bc:54:04:00:a9:3b:81:a7:29:2e:ad:b9:e9:a4:48:fc:93:3f: 99:25:a7:d2:9a:ce:f2:b7:2f:a2:8a:ca:c7:f7:5f:e5:21:5b: 03:81:bf:be:29:79:c5:1d:45:5a:84:35:0f:59:e1:f4:e9:fe: 33:b6:80:78:e1:0c:b7:51:fe:3f:56:0a:34:9f:37:79:b5:0f: 03:78:72:c9:c0:cf:f4:f8:86:4c:2a:16:a8:71:66:cf:36:21: a6:0a:31:df:14:5b:d7:fa:a0:f2:0e:20:a9:c8:ac:57:7a:eb: b2:db:7b:04:ce:40:fa:a6:75:96:54:7f:d3:48:34:29:cf:0a: d0:86:1e:a8:42:3e:b4:85:ce:5d:65:00:25:d5:eb:0c:2f:bc: cc:73:5e:1f:93:9d:6d:74:e4:82:12:6c:77:be:d9:05:7b:4b: 2c:b6:b0:cf:ea:fe:3e:85:a4:75:69:c9:62:b8:bb:b8:3d:ba: 97:2a:8b:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtFCdRWFV16FW9UZHw15WsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIyMDc1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk3MzgyNGI4ZTEzY2NjMWE1ZWNiZDA4MDRkZjUxOGVjOGVkNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvINAepoj+CEBtPlaV12/MVVsS8gj 0B+zfwFo6ArvrwMZTrGBxu/H4iNn+bYItyvcejTIlRPFAknJAxiep9MQx18y7LBW NbfZKXejh/ELfKvbgIA863pf2Ts2qFSIlMgpFaGqFXgT7EtuHwXOKE3Lb9vUlAEY B7U7LCcSlRn2UwF4jkTef3Uh88SgRtD5o1rgCa6Yy/Oy7/j20xJTAg6DBACR/pxU SBzzjjQQJxYmhOJyL8FJpgr5/pniJtZ5vVaB9oFgJeBSXe6Tjhqqjkfs1BOOP9e5 fiDcsDNk6IdpAaUoLOcgOid3ebttcl/a2FCwxv7P4ssBk16B/FYD3DWhsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDqXOCS44TzMGl7L0IBN9RjsjtVwMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvT3BjNEpMamhQTXdhWHN2UWdFMzFHT3lPMVhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjWAwQA HzuDMA0GCSqGSIb3DQEBCwUAA4IBAQCZE6TvMNoZEGXdskan0rXZuMfocKdUbcIX oIRPCTtd2kSdLzg7+0d09qfFVYDPZVWxewN9B2eu7j64Ei1XgNjoIK7X2NKvy0K8 VAQAqTuBpykurbnppEj8kz+ZJafSms7yty+iisrH91/lIVsDgb++KXnFHUVahDUP WeH06f4ztoB44Qy3Uf4/Vgo0nzd5tQ8DeHLJwM/0+IZMKhaocWbPNiGmCjHfFFvX +qDyDiCpyKxXeuuy23sEzkD6pnWWVH/TSDQpzwrQhh6oQj60hc5dZQAl1esML7zM c14fk51tdOSCEmx3vtkFe0sstrDP6v4+haR1acliuLu4PbqXKouX -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:37 2025 by rpki-client