This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TBToAbI8dc96WvCfPMk86Vv0fCk.roa File: TBToAbI8dc96WvCfPMk86Vv0fCk.roa (raw, json) Hash identifier: lUUWRjWWFSthbt85WFoJQwwCoLZsyLr3eIRfA81Z2bI= Subject key identifier: 4C:14:E8:01:B2:3C:75:CF:7A:5A:F0:9F:3C:C9:3C:E9:5B:F4:7C:29 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B3081CA7D425D13C47D68057855B0E7BD Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TBToAbI8dc96WvCfPMk86Vv0fCk.roa Signing time: Thu 18 Dec 2025 08:09:30 +0000 ROA not before: Thu 18 Dec 2025 08:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 31.57.221.0/24 maxlen: 24 31.59.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:81:ca:7d:42:5d:13:c4:7d:68:05:78:55:b0:e7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 18 08:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c14e801b23c75cf7a5af09f3cc93ce95bf47c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:bf:87:93:2c:66:7c:04:c3:d7:78:05:c2: e3:d4:2f:c1:10:51:4b:19:88:ea:50:35:16:70:63: 08:e2:49:42:3c:88:87:6d:fa:67:a1:c9:05:e3:74: 0c:6c:c2:93:49:31:92:3e:f1:2f:69:56:20:30:6f: 37:09:5a:c2:0d:cf:90:3d:b9:67:04:fd:62:84:22: 12:50:ed:e8:c2:e7:30:b0:aa:56:c3:b3:dd:2a:28: 6b:8f:a0:e6:88:21:b8:20:34:68:7a:87:e0:03:15: 97:b0:90:34:63:15:40:68:11:97:c4:b9:42:93:bc: 75:74:f6:e2:c0:31:65:b6:5b:e9:b4:70:4c:8e:4b: 31:f5:86:ad:e3:5a:55:15:01:ed:aa:fd:4e:71:96: 39:cd:f7:61:97:36:3a:d6:4d:df:3f:3c:d2:3c:a2: 4f:4b:79:ff:03:b5:d1:94:1f:14:12:69:10:10:1c: bb:77:4a:da:05:f8:60:d9:60:f0:b3:e2:d8:36:b5: 5e:1e:3d:1a:13:71:99:89:75:4d:08:33:ae:46:70: a7:4e:f7:90:ac:39:3e:08:61:c1:e8:19:14:aa:16: fc:6d:84:e2:33:09:c1:7f:1f:cb:d8:79:2c:18:de: 9f:fe:00:21:1f:77:20:ed:8c:dd:80:f0:fa:c0:f5: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:14:E8:01:B2:3C:75:CF:7A:5A:F0:9F:3C:C9:3C:E9:5B:F4:7C:29 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TBToAbI8dc96WvCfPMk86Vv0fCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.221.0/24 31.59.215.0/24 Signature Algorithm: sha256WithRSAEncryption 72:29:70:e9:b8:95:14:6a:c6:17:ba:0f:e6:90:a4:7d:7a:94: 95:b1:eb:5b:87:6b:22:8d:90:a5:51:38:d6:34:01:1f:a7:13: 5b:52:f3:7e:1c:02:6c:81:bd:0f:b4:03:a8:bc:16:ce:63:ec: d5:e4:62:9d:b8:4e:22:50:96:e9:27:e3:f6:cf:17:d9:8a:8a: 71:93:fb:ff:63:24:aa:18:98:c9:0e:6d:f3:2c:0d:5f:ed:78: 82:d6:68:56:2d:2d:e3:19:93:e9:2c:21:7b:c7:dc:a0:49:50: 70:c2:12:65:63:7e:06:32:a7:aa:69:22:ee:5e:ea:77:8a:59: 18:d1:e7:6c:96:4c:5f:5d:56:55:78:dd:ce:a9:a9:1a:69:a9: b5:69:fa:6a:9d:05:67:75:12:30:af:a8:ad:bb:69:ba:73:08: 44:c4:51:b9:23:99:53:b5:35:e6:1a:7d:4f:a7:01:a2:3c:3a: 15:55:19:f8:0a:5f:41:35:d4:3c:da:f0:5b:38:43:b7:f2:f4: f0:51:ba:c5:bc:63:d2:24:27:4a:ab:ab:ae:66:ab:5b:d5:02: 93:08:98:94:f1:8d:c8:b9:1a:72:31:d3:6c:a7:0c:f4:bb:df: fb:97:d8:ce:1a:88:43:f4:1c:09:bd:4f:5b:a0:9c:54:d3:3e: 66:2b:0e:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZswgcp9Ql0TxH1oBXhVsOe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE4MDgwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzE0ZTgwMWIyM2M3NWNmN2E1YWYwOWYzY2M5M2NlOTViZjQ3YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPa/h5MsZnwEw9d4BcLj1C/BEFFL GYjqUDUWcGMI4klCPIiHbfpnockF43QMbMKTSTGSPvEvaVYgMG83CVrCDc+QPbln BP1ihCISUO3owucwsKpWw7PdKihrj6DmiCG4IDRoeofgAxWXsJA0YxVAaBGXxLlC k7x1dPbiwDFltlvptHBMjksx9Yat41pVFQHtqv1OcZY5zfdhlzY61k3fPzzSPKJP S3n/A7XRlB8UEmkQEBy7d0raBfhg2WDws+LYNrVeHj0aE3GZiXVNCDOuRnCnTveQ rDk+CGHB6BkUqhb8bYTiMwnBfx/L2HksGN6f/gAhH3cg7YzdgPD6wPUdGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEwU6AGyPHXPelrwnzzJPOlb9HwpMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVEJUb0FiSThkYzk2V3ZDZlBNazg2VnYwZkNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzndAwQA HzvXMA0GCSqGSIb3DQEBCwUAA4IBAQByKXDpuJUUasYXug/mkKR9epSVsetbh2si jZClUTjWNAEfpxNbUvN+HAJsgb0PtAOovBbOY+zV5GKduE4iUJbpJ+P2zxfZiopx k/v/YySqGJjJDm3zLA1f7XiC1mhWLS3jGZPpLCF7x9ygSVBwwhJlY34GMqeqaSLu Xup3ilkY0edslkxfXVZVeN3Oqakaaam1afpqnQVndRIwr6itu2m6cwhExFG5I5lT tTXmGn1PpwGiPDoVVRn4Cl9BNdQ82vBbOEO38vTwUbrFvGPSJCdKq6uuZqtb1QKT CJiU8Y3IuRpyMdNspwz0u9/7l9jOGohD9BwJvU9boJxU0z5mKw7e -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:40 2025 by rpki-client