This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SXFFJa2UBMrrbHfZl6uaR3_LaoE.roa File: SXFFJa2UBMrrbHfZl6uaR3_LaoE.roa (raw, json) Hash identifier: OUnSicWRmsEJVITwvDMSuV5fw082Z/XTTvAiEdKNtMY= Subject key identifier: 49:71:45:25:AD:94:04:CA:EB:6C:77:D9:97:AB:9A:47:7F:CB:6A:81 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B22B287702BCE99EE082A1BD53EFB5B12 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SXFFJa2UBMrrbHfZl6uaR3_LaoE.roa Signing time: Mon 15 Dec 2025 15:48:03 +0000 ROA not before: Mon 15 Dec 2025 15:48:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 31.57.191.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:b2:87:70:2b:ce:99:ee:08:2a:1b:d5:3e:fb:5b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 15 15:48:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=49714525ad9404caeb6c77d997ab9a477fcb6a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:af:83:08:43:65:ae:e0:48:e6:3a:b6:0d: fb:89:9c:6b:97:47:a8:6d:df:84:95:ff:5f:f8:3a: e4:31:bf:9e:94:c1:3d:19:ac:f1:25:ae:9b:1a:0c: 0e:1f:ea:ec:76:f3:3c:7d:45:96:59:73:8b:13:65: c6:bd:15:67:a7:a8:83:d2:35:0a:3a:d5:34:bb:b4: a0:2a:6f:20:fa:03:cc:cb:83:df:04:e5:f1:6a:35: 3d:ea:2a:5a:78:25:68:47:68:1f:38:fb:40:eb:fa: 38:39:80:f9:03:96:e7:fe:00:1a:90:d1:0c:df:02: 07:56:4c:5c:41:46:9f:04:56:e6:b8:66:a7:a7:79: 59:69:15:68:c3:90:e0:37:e5:9e:cb:96:59:c4:0d: a4:0b:f2:2b:68:73:0a:8d:58:95:b0:a2:7b:a2:9f: 03:58:69:3b:79:17:32:46:de:e4:94:85:1d:4c:c6: b3:2e:c5:80:02:3b:f1:ec:b9:51:5b:fd:c0:f9:b2: 29:2f:90:52:fa:29:a0:54:de:fb:e5:ad:10:3c:6a: b4:71:83:1f:93:bd:c3:30:46:e3:4e:ea:0d:b4:bb: 07:89:8f:29:fa:64:ca:e0:21:67:79:e7:96:c0:37: da:b6:ca:34:72:c4:f9:60:f8:83:6b:66:ee:a3:98: fb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:71:45:25:AD:94:04:CA:EB:6C:77:D9:97:AB:9A:47:7F:CB:6A:81 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SXFFJa2UBMrrbHfZl6uaR3_LaoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.191.0/24 31.57.237.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption aa:7e:e3:2b:01:89:f4:8d:5e:87:0d:12:79:85:c0:2c:9b:ee: f8:c8:20:3f:40:f6:dc:c5:d2:e9:ae:a4:a8:26:54:97:fc:57: 5c:43:23:07:c0:03:0e:54:4a:a9:2e:bc:c1:c9:45:fe:5c:35: 9b:00:d4:04:2c:b8:74:13:ea:d8:10:85:f7:cc:fe:fe:91:f9: ff:65:06:c5:e0:1f:39:00:df:06:52:d7:b4:af:ec:c3:56:f6: 7c:d7:f3:ed:98:a5:ea:b7:9d:4f:9b:39:4f:08:1c:89:50:06: 76:e5:57:2f:9d:17:00:81:b2:de:80:d8:b2:c9:f0:3e:1e:e1: d9:ed:e9:5e:29:a1:d8:8d:a3:0d:25:91:98:7d:89:d0:58:7e: 51:af:5b:04:96:77:57:da:46:d6:51:7c:ff:d4:a4:15:4f:4b: 70:50:19:e0:5c:1c:24:ce:05:09:15:71:13:cb:f5:10:74:49: 0e:ce:7d:29:9c:6f:2e:23:ed:ba:a7:48:3a:d1:d5:c3:4e:95: 10:6c:97:69:7c:05:21:d0:45:45:c5:ca:b8:b8:3e:67:c6:45: 12:68:06:2a:02:4c:13:9c:ec:2d:dd:01:08:e0:5a:30:99:52: f2:13:85:5e:38:e6:6f:87:3a:40:00:58:86:0a:8e:ed:b6:ab: 76:4a:8d:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsisodwK86Z7ggqG9U++1sSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE1MTU0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTcxNDUyNWFkOTQwNGNhZWI2Yzc3ZDk5N2FiOWE0NzdmY2I2YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZyvgwhDZa7gSOY6tg37iZxrl0eo bd+Elf9f+DrkMb+elME9GazxJa6bGgwOH+rsdvM8fUWWWXOLE2XGvRVnp6iD0jUK OtU0u7SgKm8g+gPMy4PfBOXxajU96ipaeCVoR2gfOPtA6/o4OYD5A5bn/gAakNEM 3wIHVkxcQUafBFbmuGanp3lZaRVow5DgN+Wey5ZZxA2kC/IraHMKjViVsKJ7op8D WGk7eRcyRt7klIUdTMazLsWAAjvx7LlRW/3A+bIpL5BS+imgVN775a0QPGq0cYMf k73DMEbjTuoNtLsHiY8p+mTK4CFneeeWwDfatso0csT5YPiDa2buo5j7dQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFElxRSWtlATK62x32Zermkd/y2qBMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU1hGRkphMlVCTXJyYkhmWmw2dWFSM19MYW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzm/AwQA HzntAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQCqfuMrAYn0jV6HDRJ5hcAsm+74 yCA/QPbcxdLprqSoJlSX/FdcQyMHwAMOVEqpLrzByUX+XDWbANQELLh0E+rYEIX3 zP7+kfn/ZQbF4B85AN8GUte0r+zDVvZ81/PtmKXqt51PmzlPCByJUAZ25VcvnRcA gbLegNiyyfA+HuHZ7eleKaHYjaMNJZGYfYnQWH5Rr1sElndX2kbWUXz/1KQVT0tw UBngXBwkzgUJFXETy/UQdEkOzn0pnG8uI+26p0g60dXDTpUQbJdpfAUh0EVFxcq4 uD5nxkUSaAYqAkwTnOwt3QEI4FowmVLyE4VeOOZvhzpAAFiGCo7ttqt2So0I -----END CERTIFICATE-----Generated at Tue Dec 16 11:46:31 2025 by rpki-client