This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S84xPK0Sg0pkcaHa320-aRnv8RQ.roa File: S84xPK0Sg0pkcaHa320-aRnv8RQ.roa (raw, json) Hash identifier: piK3yanAzlVl3m1tSk1kQ1PDMgHyDQOvJQkjsi5DAII= Subject key identifier: 4B:CE:31:3C:AD:12:83:4A:64:71:A1:DA:DF:6D:3E:69:19:EF:F1:14 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019ACDFE0A9306FF9B62F57A082CE4809AEE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S84xPK0Sg0pkcaHa320-aRnv8RQ.roa Signing time: Sat 29 Nov 2025 05:02:49 +0000 ROA not before: Sat 29 Nov 2025 05:02:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 31.56.16.0/22 maxlen: 24 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.16.0/21 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.135.0/24 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.176.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.200.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.216.0/22 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.240.0/22 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 31.58.252.0/22 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.64.0/22 maxlen: 24 31.59.80.0/22 maxlen: 24 31.59.124.0/22 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 31.59.176.0/21 maxlen: 24 31.59.188.0/22 maxlen: 24 31.59.192.0/22 maxlen: 24 31.59.216.0/22 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.8.0/22 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.187.0/24 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cd:fe:0a:93:06:ff:9b:62:f5:7a:08:2c:e4:80:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 29 05:02:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4bce313cad12834a6471a1dadf6d3e6919eff114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:15:85:90:1e:ac:fd:dc:65:a1:b0:a8:81: 90:2a:64:3d:8a:10:e7:c0:71:1d:90:15:92:81:fc: 84:1e:56:9b:53:86:6d:ea:5f:ee:39:89:12:94:09: fb:5a:81:60:aa:bc:2e:96:4d:57:54:43:59:9a:dc: e3:27:c5:a1:10:6e:91:d8:5b:40:a4:df:5f:ee:fc: c5:e7:3d:23:58:89:64:bb:b0:71:4b:78:28:24:92: 62:13:90:94:d9:8c:f4:9a:c0:d8:10:f2:30:e2:4c: 58:c9:f1:63:52:7d:25:ad:0f:e7:37:11:9b:28:cb: a7:a3:d8:bf:35:67:76:24:74:94:0b:40:e0:29:82: 43:57:71:f1:47:55:90:06:65:72:b8:22:26:c5:5d: 5e:77:fd:e9:ea:35:e9:8f:06:fd:d3:6e:d7:f1:43: 73:03:4c:0c:d0:55:99:ed:a8:cf:55:c9:1e:75:53: 10:a8:6c:81:e8:c1:dd:31:7b:5b:a7:f1:6f:aa:e2: a2:6a:0a:b7:47:74:73:b3:b2:ea:6f:82:df:70:16: b2:5f:e6:02:d6:9c:19:aa:3d:04:3a:35:b9:8d:b4: 6d:db:2c:e0:d3:6a:d8:7a:25:07:f9:13:5e:6b:8e: 44:c7:86:c3:fb:1c:4a:c5:51:aa:e5:d8:b6:46:7f: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CE:31:3C:AD:12:83:4A:64:71:A1:DA:DF:6D:3E:69:19:EF:F1:14 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S84xPK0Sg0pkcaHa320-aRnv8RQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.16.0/22 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.16.0/21 31.57.36.0/23 31.57.135.0/24 31.57.168.0/23 31.57.184.0/23 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.176.0/22 31.58.196.0-31.58.209.255 31.58.216.0/22 31.58.232.0/23 31.58.240.0-31.58.244.255 31.58.249.0-31.58.255.255 31.59.36.0/22 31.59.44.0/22 31.59.64.0/22 31.59.80.0/22 31.59.124.0/22 31.59.140.0/22 31.59.148.0-31.59.165.255 31.59.176.0/21 31.59.188.0-31.59.195.255 31.59.216.0/22 94.183.152.0/22 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.8.0/22 217.60.16.0/21 217.60.28.0-217.60.35.255 217.60.40.0-217.60.59.255 217.60.187.0/24 217.60.196.0/23 217.60.244.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:a6:fc:69:72:3d:a5:30:02:39:f0:ca:f3:9b:24:4d:ca:95: d5:a7:c5:0e:8d:65:29:97:30:bc:6f:66:7d:e8:57:6e:f5:98: f0:cc:87:ef:a3:5d:c7:82:ae:bf:a7:8a:c3:f2:0f:4b:f7:fc: 42:95:31:c0:db:2c:0f:7d:83:6e:6b:65:42:dc:e5:e3:3a:b2: 0a:2c:9b:9a:ae:dc:97:36:e1:52:5f:04:8a:69:e2:b0:2d:47: e8:5d:01:05:53:52:ab:14:b4:c4:eb:cc:17:81:40:90:c5:25: bc:fd:30:49:fa:8d:0e:67:e1:e4:d9:bc:c9:58:42:48:63:60: e9:bc:4b:b3:38:91:35:c0:a7:d3:35:35:03:0a:81:95:b4:5c: d1:7a:7e:96:da:03:ae:a9:07:05:b2:4b:5a:5d:77:d1:32:80: e9:3d:6c:f5:e0:f6:fb:79:d9:e1:e3:69:51:8c:df:b8:90:f3: e1:fb:86:13:00:a4:5d:f0:7c:ab:5d:91:a7:06:e3:17:ee:06: 1e:50:a0:40:b8:57:8d:1a:b6:29:9a:e1:b7:36:6b:36:07:7e: 72:0a:42:87:04:48:65:db:2e:f5:8d:64:39:28:80:cb:0e:ad: a8:d9:ea:a4:a6:37:12:4e:a8:b1:7b:11:fa:63:e2:f6:fe:ab: 0e:99:1e:6d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgISAZrN/gqTBv+bYvV6CCzkgJruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI5MDUwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmNlMzEzY2FkMTI4MzRhNjQ3MWExZGFkZjZkM2U2OTE5ZWZmMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLQVhZAerP3cZaGwqIGQKmQ9ihDn wHEdkBWSgfyEHlabU4Zt6l/uOYkSlAn7WoFgqrwulk1XVENZmtzjJ8WhEG6R2FtA pN9f7vzF5z0jWIlku7BxS3goJJJiE5CU2Yz0msDYEPIw4kxYyfFjUn0lrQ/nNxGb KMuno9i/NWd2JHSUC0DgKYJDV3HxR1WQBmVyuCImxV1ed/3p6jXpjwb9027X8UNz A0wM0FWZ7ajPVckedVMQqGyB6MHdMXtbp/FvquKiagq3R3Rzs7Lqb4LfcBayX+YC 1pwZqj0EOjW5jbRt2yzg02rYeiUH+RNea45Ex4bD+xxKxVGq5di2Rn/x8wIDAQAB o4IDUTCCA00wHQYDVR0OBBYEFEvOMTytEoNKZHGh2t9tPmkZ7/EUMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUzg0eFBLMFNnMHBrY2FIYTMyMC1hUm52OFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgABMIIB RAMEAh84EAMEAh84sDAMAwQBHzi2AwQBHzi8AwQBHzjQAwQBHzjkAwQDHzkQAwQB HzkkAwQAHzmHAwQBHzmoAwQBHzm4AwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQC HzpcAwQCHzqwMAwDBAIfOsQDBAEfOtADBAIfOtgDBAEfOugwDAMEBB868AMEAB86 9DALAwQAHzr5AwMAHzoDBAIfOyQDBAIfOywDBAIfO0ADBAIfO1ADBAIfO3wDBAIf O4wwDAMEAh87lAMEAR87pAMEAx87sDAMAwQCHzu8AwQCHzvAAwQCHzvYAwQCXreY MAwDBAZet8ADBANet+AwCwMEAl637AMDA16wAwQC2TwIAwQD2TwQMAwDBALZPBwD BALZPCAwDAMEA9k8KAMEAtk8OAMEANk8uwMEAdk8xAMEAdk89DANBgkqhkiG9w0B AQsFAAOCAQEAX6b8aXI9pTACOfDK85skTcqV1afFDo1lKZcwvG9mfehXbvWY8MyH 76Ndx4Kuv6eKw/IPS/f8QpUxwNssD32DbmtlQtzl4zqyCiybmq7clzbhUl8Eimni sC1H6F0BBVNSqxS0xOvMF4FAkMUlvP0wSfqNDmfh5Nm8yVhCSGNg6bxLsziRNcCn 0zU1AwqBlbRc0Xp+ltoDrqkHBbJLWl130TKA6T1s9eD2+3nZ4eNpUYzfuJDz4fuG EwCkXfB8q12RpwbjF+4GHlCgQLhXjRq2KZrhtzZrNgd+cgpChwRIZdsu9Y1kOSiA yw6tqNnqpKY3Ek6osXsR+mPi9v6rDpkebQ== -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:45 2025 by rpki-client