This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TFTmNCzzdLoUt4ZQcxXEZXAJ0oM.roa File: TFTmNCzzdLoUt4ZQcxXEZXAJ0oM.roa (raw, json) Hash identifier: wUKaId54VCgfhBsliV9QlbMSpFENO22I1v3AfImjNWY= Subject key identifier: 4C:54:E6:34:2C:F3:74:BA:14:B7:86:50:73:15:C4:65:70:09:D2:83 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A9B966EE6A49A2D94A19EAC3A1531B125 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TFTmNCzzdLoUt4ZQcxXEZXAJ0oM.roa Signing time: Wed 19 Nov 2025 10:08:38 +0000 ROA not before: Wed 19 Nov 2025 10:08:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 31.56.34.0/24 maxlen: 24 31.56.96.0/24 maxlen: 24 31.57.120.0/24 maxlen: 24 31.57.146.0/24 maxlen: 24 31.57.171.0/24 maxlen: 24 31.57.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:96:6e:e6:a4:9a:2d:94:a1:9e:ac:3a:15:31:b1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 19 10:08:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c54e6342cf374ba14b786507315c4657009d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:40:00:e5:2c:e5:46:fa:0b:8d:92:81:e5: ce:b5:1e:b4:ce:31:f7:16:d2:9d:06:c8:43:2a:80: 9d:bf:d9:ad:86:06:61:20:15:fd:ab:3c:f1:90:6e: bf:f4:a5:7c:89:a3:08:3c:17:16:0f:8e:b9:38:df: 13:1b:a2:55:f3:8e:49:d4:d2:b0:98:39:7a:7c:99: 04:6d:0a:06:e6:b5:20:c1:79:93:a4:89:aa:a3:ab: 54:4d:2f:09:82:c4:c8:ed:dd:2c:af:c8:b9:6e:d6: d0:63:4f:17:7c:f4:2a:a4:34:df:b1:70:83:05:ee: 4f:59:10:af:ea:fa:14:14:65:b7:da:7a:96:ab:ee: 97:37:5a:dd:ed:cf:0b:53:fb:10:24:2a:10:c3:8f: 9c:b7:23:71:67:b2:0b:9c:b7:0b:dc:55:8d:56:c9: 04:38:9c:0d:4d:a1:54:20:d7:f3:3a:5f:32:51:5f: 0d:70:93:c4:f1:83:e9:f9:69:47:19:db:3f:2a:5f: 80:eb:c7:b9:e7:c1:7a:bb:10:55:cd:b6:9e:91:14: fb:c6:7c:4d:70:a7:96:c6:4c:6e:64:25:45:93:cc: 85:e7:7e:20:ef:1e:ec:95:ab:f4:76:37:61:28:6d: 9b:53:03:a2:1f:c5:1f:a7:a0:ff:02:1d:33:ce:f1: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:54:E6:34:2C:F3:74:BA:14:B7:86:50:73:15:C4:65:70:09:D2:83 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TFTmNCzzdLoUt4ZQcxXEZXAJ0oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.34.0/24 31.56.96.0/24 31.57.120.0/24 31.57.146.0/24 31.57.171.0/24 31.57.222.0/23 Signature Algorithm: sha256WithRSAEncryption 45:1f:5e:ce:d3:f0:3a:72:2d:38:88:df:8f:8a:61:1a:1c:8e: 61:6b:6b:f1:6a:24:a4:c2:7b:b1:73:6c:15:62:07:19:58:56: 6c:9b:2f:03:d1:d9:2c:6d:b2:80:ba:bc:ec:ed:9c:50:6f:3b: c1:c9:20:1a:71:95:c5:06:2f:8b:fc:02:28:75:b6:84:da:5c: 2d:ab:6d:b6:6f:6f:69:2e:ba:88:0b:56:17:07:d5:c9:10:f4: 5f:ba:8a:fb:79:cb:f1:7a:a5:03:e7:72:82:34:82:a6:e5:90: 93:6b:db:57:c4:91:9d:d0:25:f1:86:fe:f0:2b:f0:69:e9:5e: bf:a3:20:43:2b:d6:3c:94:cb:3c:56:8a:8b:f7:9e:65:d0:6b: 33:fa:c0:73:00:72:fa:fb:2b:f6:45:fa:b5:b9:7b:dc:3c:89: a1:88:8e:16:18:03:fd:42:4d:3f:83:96:80:20:ff:32:c5:47: 4e:1d:e2:b8:46:7b:d9:23:ad:9d:1a:fa:d1:1f:f7:67:c9:49: ba:34:ff:f9:87:bb:f5:24:e9:0d:35:00:c2:9c:09:92:2b:1d: cc:60:a3:0e:06:65:38:90:75:c3:28:8e:b2:70:4a:a8:ac:9e: 8c:21:2a:4f:fc:dc:dc:15:32:ef:30:a7:b7:7a:b5:2a:cf:54: 08:37:84:5b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZqblm7mpJotlKGerDoVMbElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE5MTAwODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzU0ZTYzNDJjZjM3NGJhMTRiNzg2NTA3MzE1YzQ2NTcwMDlkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSRAAOUs5Ub6C42SgeXOtR60zjH3 FtKdBshDKoCdv9mthgZhIBX9qzzxkG6/9KV8iaMIPBcWD465ON8TG6JV845J1NKw mDl6fJkEbQoG5rUgwXmTpImqo6tUTS8JgsTI7d0sr8i5btbQY08XfPQqpDTfsXCD Be5PWRCv6voUFGW32nqWq+6XN1rd7c8LU/sQJCoQw4+ctyNxZ7ILnLcL3FWNVskE OJwNTaFUINfzOl8yUV8NcJPE8YPp+WlHGds/Kl+A68e558F6uxBVzbaekRT7xnxN cKeWxkxuZCVFk8yF534g7x7slav0djdhKG2bUwOiH8Ufp6D/Ah0zzvHXfQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFExU5jQs83S6FLeGUHMVxGVwCdKDMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVEZUbU5DenpkTG9VdDRaUWN4WEVaWEFKMG9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzgiAwQA HzhgAwQAHzl4AwQAHzmSAwQAHzmrAwQBHzneMA0GCSqGSIb3DQEBCwUAA4IBAQBF H17O0/A6ci04iN+PimEaHI5ha2vxaiSkwnuxc2wVYgcZWFZsmy8D0dksbbKAurzs 7ZxQbzvBySAacZXFBi+L/AIodbaE2lwtq222b29pLrqIC1YXB9XJEPRfuor7ecvx eqUD53KCNIKm5ZCTa9tXxJGd0CXxhv7wK/Bp6V6/oyBDK9Y8lMs8VoqL955l0Gsz +sBzAHL6+yv2Rfq1uXvcPImhiI4WGAP9Qk0/g5aAIP8yxUdOHeK4RnvZI62dGvrR H/dnyUm6NP/5h7v1JOkNNQDCnAmSKx3MYKMOBmU4kHXDKI6ycEqorJ6MISpP/Nzc FTLvMKe3erUqz1QIN4Rb -----END CERTIFICATE-----Generated at Wed Nov 19 13:26:50 2025 by rpki-client