This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SH5JHAu4IzI9VbPS_LP-lCTqxCQ.roa File: SH5JHAu4IzI9VbPS_LP-lCTqxCQ.roa (raw, json) Hash identifier: U6fBeDwIyzWeIlp5rTKroffYwGrNcXv0cD4HvyUnvlk= Subject key identifier: 48:7E:49:1C:0B:B8:23:32:3D:55:B3:D2:FC:B3:FE:94:24:EA:C4:24 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B12406C527063247521EE150E7F45ADD9 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SH5JHAu4IzI9VbPS_LP-lCTqxCQ.roa Signing time: Fri 12 Dec 2025 11:09:30 +0000 ROA not before: Fri 12 Dec 2025 11:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 31.56.52.0/22 maxlen: 22 31.56.83.0/24 maxlen: 24 31.56.219.0/24 maxlen: 24 31.57.161.0/24 maxlen: 24 31.57.199.0/24 maxlen: 24 31.59.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:40:6c:52:70:63:24:75:21:ee:15:0e:7f:45:ad:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 12 11:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=487e491c0bb823323d55b3d2fcb3fe9424eac424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:e2:7b:a8:7b:73:1b:92:7d:6f:28:b3:fe: 0c:0f:49:0c:01:3b:b2:5d:59:f5:9c:26:03:7f:4c: 9a:52:83:47:73:08:0d:1a:c3:38:06:13:6c:a2:29: 0d:93:ea:8c:6c:16:94:25:3a:4a:5b:38:8f:fd:a0: ff:f6:91:ed:eb:79:76:19:bc:ff:7f:79:d3:ff:4a: ff:89:8c:15:8e:42:61:77:d2:8f:26:b4:bd:0d:d5: 2e:53:5a:97:07:f1:f9:76:e8:76:b9:38:76:e7:e4: 35:08:02:a9:4f:1e:5c:7c:0e:94:a6:76:f6:58:98: a3:0c:37:4c:4e:67:1d:e7:59:c2:1d:d1:3e:a1:b0: d9:c4:8b:fa:e1:fc:c5:d7:9b:52:8e:a6:36:57:b5: 44:24:c2:bb:de:a3:b3:ad:a1:d9:0d:34:72:56:2e: 57:1a:82:8e:2a:39:ae:60:48:ef:0a:7a:2f:57:e7: 33:76:fb:df:b4:99:63:bd:d7:3a:eb:a9:03:57:20: aa:cc:15:cd:94:07:37:5c:83:ac:96:80:85:33:1c: 7f:9b:65:68:ae:57:e5:bf:82:09:13:63:a0:49:97: 02:31:6d:76:69:a0:20:95:7d:e9:cd:5b:bb:4a:0b: d2:37:2a:ba:0c:2b:9f:db:fe:ec:5e:44:99:9e:6f: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7E:49:1C:0B:B8:23:32:3D:55:B3:D2:FC:B3:FE:94:24:EA:C4:24 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SH5JHAu4IzI9VbPS_LP-lCTqxCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.52.0/22 31.56.83.0/24 31.56.219.0/24 31.57.161.0/24 31.57.199.0/24 31.59.68.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:b8:2d:62:d9:13:c9:b6:63:11:e6:5d:aa:97:c0:fe:1d:ce: 81:1f:a2:ba:9e:00:0b:64:81:f9:c5:5b:52:82:9d:ca:f3:89: 8e:f7:ef:f2:2e:f8:20:cf:49:09:c8:28:81:ce:80:55:a9:f8: 8a:95:40:e2:58:88:71:e3:ec:bb:e6:68:bc:5c:8d:56:bc:57: 1d:b0:1a:8e:56:0d:58:60:68:be:0a:04:4f:cd:32:c3:67:9f: 29:2f:9d:46:ef:92:1d:13:c7:bf:a1:af:5f:1d:54:f8:b8:d9: a8:78:e1:b1:81:02:94:66:e0:9e:f9:32:fa:b0:41:68:16:b9: 4a:17:b6:10:ec:b0:4c:b1:ac:56:c4:a1:7b:f5:34:c6:0e:2c: 28:a7:2e:27:af:b0:01:cd:56:e4:74:dc:f7:a1:30:30:80:eb: 03:9a:b1:75:e7:6c:41:17:b4:9f:28:eb:66:49:dd:b0:be:d1: 50:76:cd:f9:94:9e:3c:ef:51:94:c0:01:4e:6b:2c:f5:1b:5e: eb:24:81:9c:3d:0d:9b:c4:f5:e4:dd:d8:03:25:cc:aa:b9:6e: ae:16:58:18:45:81:f8:b5:fe:9d:3f:3d:c0:65:2e:30:bd:fa: 3f:a3:c4:55:7c:d3:00:14:0a:38:0c:37:b9:97:58:8b:3d:cb: 95:91:4a:03 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsSQGxScGMkdSHuFQ5/Ra3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjEyMTEwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODdlNDkxYzBiYjgyMzMyM2Q1NWIzZDJmY2IzZmU5NDI0ZWFjNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Tie6h7cxuSfW8os/4MD0kMATuy XVn1nCYDf0yaUoNHcwgNGsM4BhNsoikNk+qMbBaUJTpKWziP/aD/9pHt63l2Gbz/ f3nT/0r/iYwVjkJhd9KPJrS9DdUuU1qXB/H5duh2uTh25+Q1CAKpTx5cfA6Upnb2 WJijDDdMTmcd51nCHdE+obDZxIv64fzF15tSjqY2V7VEJMK73qOzraHZDTRyVi5X GoKOKjmuYEjvCnovV+czdvvftJljvdc666kDVyCqzBXNlAc3XIOsloCFMxx/m2Vo rlflv4IJE2OgSZcCMW12aaAglX3pzVu7SgvSNyq6DCuf2/7sXkSZnm9vMQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEh+SRwLuCMyPVWz0vyz/pQk6sQkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU0g1SkhBdTRJekk5VmJQU19MUC1sQ1RxeENRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCHzg0AwQA HzhTAwQAHzjbAwQAHzmhAwQAHznHAwQAHztEMA0GCSqGSIb3DQEBCwUAA4IBAQAP uC1i2RPJtmMR5l2ql8D+Hc6BH6K6ngALZIH5xVtSgp3K84mO9+/yLvggz0kJyCiB zoBVqfiKlUDiWIhx4+y75mi8XI1WvFcdsBqOVg1YYGi+CgRPzTLDZ58pL51G75Id E8e/oa9fHVT4uNmoeOGxgQKUZuCe+TL6sEFoFrlKF7YQ7LBMsaxWxKF79TTGDiwo py4nr7ABzVbkdNz3oTAwgOsDmrF152xBF7SfKOtmSd2wvtFQds35lJ4871GUwAFO ayz1G17rJIGcPQ2bxPXk3dgDJcyquW6uFlgYRYH4tf6dPz3AZS4wvfo/o8RVfNMA FAo4DDe5l1iLPcuVkUoD -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:06 2025 by rpki-client