This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R-ZEExA5Mg43pdhFFta6UdNWWBU.roa File: R-ZEExA5Mg43pdhFFta6UdNWWBU.roa (raw, json) Hash identifier: WhAh/7UqroLvmCzOgHS45qmspFPAupPFjmRn4AvgGyk= Subject key identifier: 47:E6:44:13:10:39:32:0E:37:A5:D8:45:16:D6:BA:51:D3:56:58:15 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B50943C3FE39B4ED23E9E18B70291F8C1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R-ZEExA5Mg43pdhFFta6UdNWWBU.roa Signing time: Wed 24 Dec 2025 13:37:30 +0000 ROA not before: Wed 24 Dec 2025 13:37:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.92.0/22 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.199.0/24 maxlen: 24 217.60.200.0/21 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:94:3c:3f:e3:9b:4e:d2:3e:9e:18:b7:02:91:f8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 24 13:37:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=47e644131039320e37a5d84516d6ba51d3565815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:de:d9:09:77:0a:82:25:a1:8f:33:49:44: 32:c0:fe:29:f6:9b:d1:f0:83:7f:79:8c:55:81:d8: f3:08:11:3b:8a:0c:14:1c:d7:f1:8f:e1:02:5e:4e: 9a:71:4f:24:be:af:d8:4a:71:96:b5:16:f8:35:cc: d0:de:a5:bd:32:2b:1e:09:f4:88:44:b6:5e:31:f6: 80:30:9e:b2:8d:6e:01:e3:3d:f3:b9:ca:5d:d2:c5: 98:ea:90:c4:71:7d:61:e7:b7:97:8e:d4:95:66:1c: 54:67:21:53:da:69:83:d5:81:bb:ed:ff:8f:8d:0a: 2d:04:43:fc:76:97:38:a7:4d:a2:85:0b:5a:58:ec: 17:92:79:53:1d:92:1e:0b:37:ce:6c:01:5f:0d:c1: 6c:52:92:4d:10:1e:3f:6c:b1:71:69:32:02:30:fc: 4f:08:a9:dd:8e:d1:79:bd:fc:0e:7e:ed:64:6e:80: 77:98:4d:28:42:10:12:3c:78:21:59:a7:08:55:4e: 27:38:1c:d3:24:1e:bc:c2:d3:71:ce:63:04:42:00: ac:fd:01:ec:03:94:d5:12:72:52:af:fe:7d:92:d6: d7:ad:6e:1a:f2:c2:20:cd:92:3b:66:33:11:06:6f: d8:55:9f:39:9e:05:d6:b2:1d:5d:92:6d:9f:87:34: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E6:44:13:10:39:32:0E:37:A5:D8:45:16:D6:BA:51:D3:56:58:15 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R-ZEExA5Mg43pdhFFta6UdNWWBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.96.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.59.84.0/22 31.59.90.0-31.59.95.255 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.199.0-217.60.235.255 Signature Algorithm: sha256WithRSAEncryption 4d:7d:53:52:16:27:bd:80:a0:a0:eb:c0:4b:09:d5:36:33:0e: 36:98:19:73:cf:5c:d8:66:16:a7:6b:ee:33:ea:0a:b1:40:0e: 19:11:e1:fc:1a:b1:87:8d:ed:10:b1:0f:1c:ef:e5:08:3b:fe: a7:63:35:65:3b:ac:d3:88:be:0d:91:0c:dd:b5:86:07:fb:7f: 3d:93:6b:b4:74:ed:a0:65:0b:37:89:74:fd:4b:15:5a:80:d1: 70:b3:4b:db:7e:fa:3a:ae:5c:41:29:51:e6:50:6d:99:60:85: 52:60:b5:4f:77:df:46:e7:33:6c:44:84:51:9e:cb:00:76:4e: e9:38:fc:3f:62:5f:71:a4:54:d0:00:3e:57:ba:b3:14:36:14: 80:29:d9:8a:0c:38:d3:56:7f:2e:47:32:33:91:a8:81:3b:1a: b7:75:2c:88:89:93:6d:35:24:be:f2:36:59:fb:90:e9:fc:8d: 25:12:1b:87:85:ee:df:95:bb:0a:97:8a:f1:33:2f:4a:0b:c7: 72:33:45:7c:ad:de:03:c7:88:1f:7d:97:42:21:86:67:ca:0b: 99:c4:00:97:09:e5:ec:86:26:86:12:89:95:c6:f2:94:17:90: 7e:9d:41:2a:33:9f:03:fe:55:8d:59:22:56:ab:1c:2c:eb:f4: 07:83:1f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZtQlDw/45tO0j6eGLcCkfjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI0MTMzNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2U2NDQxMzEwMzkzMjBlMzdhNWQ4NDUxNmQ2YmE1MWQzNTY1ODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTPe2Ql3CoIloY8zSUQywP4p9pvR 8IN/eYxVgdjzCBE7igwUHNfxj+ECXk6acU8kvq/YSnGWtRb4NczQ3qW9MiseCfSI RLZeMfaAMJ6yjW4B4z3zucpd0sWY6pDEcX1h57eXjtSVZhxUZyFT2mmD1YG77f+P jQotBEP8dpc4p02ihQtaWOwXknlTHZIeCzfObAFfDcFsUpJNEB4/bLFxaTICMPxP CKndjtF5vfwOfu1kboB3mE0oQhASPHghWacIVU4nOBzTJB68wtNxzmMEQgCs/QHs A5TVEnJSr/59ktbXrW4a8sIgzZI7ZjMRBm/YVZ85ngXWsh1dkm2fhzRAtQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFEfmRBMQOTION6XYRRbWulHTVlgVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUi1aRUV4QTVNZzQzcGRoRkZ0YTZVZE5XV0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAAf ONMDBAAfOWADBAAfOcgwDAMEAh86tAMEAh86wAMEAh87VDAMAwQBHztaAwQFHztA AwQAXreXAwQAXreeAwQAXrekAwQAXremMAwDBAFet64DBABet7ADBAFet7QDBADZ PA8wDAMEBdk8oAMEA9k8sAMEAtk8vDAMAwQA2TzHAwQC2TzoMA0GCSqGSIb3DQEB CwUAA4IBAQBNfVNSFie9gKCg68BLCdU2Mw42mBlzz1zYZhana+4z6gqxQA4ZEeH8 GrGHje0QsQ8c7+UIO/6nYzVlO6zTiL4NkQzdtYYH+389k2u0dO2gZQs3iXT9SxVa gNFws0vbfvo6rlxBKVHmUG2ZYIVSYLVPd99G5zNsRIRRnssAdk7pOPw/Yl9xpFTQ AD5XurMUNhSAKdmKDDjTVn8uRzIzkaiBOxq3dSyIiZNtNSS+8jZZ+5Dp/I0lEhuH he7flbsKl4rxMy9KC8dyM0V8rd4Dx4gffZdCIYZnyguZxACXCeXshiaGEomVxvKU F5B+nUEqM58D/lWNWSJWqxws6/QHgx/F -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:06 2025 by rpki-client