This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U7QEbX_Vk5_c8K_hrmDMpAq9-hI.roa File: U7QEbX_Vk5_c8K_hrmDMpAq9-hI.roa (raw, json) Hash identifier: vximzR9e/0zbZSOGa7qnbNMFyIOLKAQLIEh4nxLZC8I= Subject key identifier: 53:B4:04:6D:7F:D5:93:9F:DC:F0:AF:E1:AE:60:CC:A4:0A:BD:FA:12 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A90EC7D3537CCA38DF0142FAC725D4E57 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U7QEbX_Vk5_c8K_hrmDMpAq9-hI.roa Signing time: Mon 17 Nov 2025 08:26:48 +0000 ROA not before: Mon 17 Nov 2025 08:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 31.56.112.0/24 maxlen: 24 31.57.31.0/24 maxlen: 24 31.57.132.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.205.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.157.0/24 maxlen: 24 31.58.163.0/24 maxlen: 24 31.59.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:ec:7d:35:37:cc:a3:8d:f0:14:2f:ac:72:5d:4e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 17 08:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53b4046d7fd5939fdcf0afe1ae60cca40abdfa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:fa:13:fb:5b:95:c6:b2:ef:c0:16:a7:a4: 47:3a:fa:da:6c:ba:b9:79:c4:0f:34:08:aa:1e:07: e3:12:fe:79:9c:0a:cd:c3:67:d2:ee:38:65:14:b2: 93:6d:cb:e6:3f:55:37:1e:23:63:d1:8e:e4:4b:13: 64:96:4e:bb:2f:ea:a4:02:8a:94:aa:3b:76:5b:00: d8:9a:36:47:67:8b:b2:a6:aa:ae:a0:65:fe:46:ed: 62:0d:00:f9:3e:96:45:50:53:85:4b:9d:33:c2:fc: fe:fc:3a:b9:50:76:71:b2:54:a1:8f:ed:05:a3:72: c3:af:01:8f:80:8a:77:6a:69:bc:a3:1b:19:ab:98: 10:18:74:7b:3c:41:3a:d6:33:5a:c4:9d:f1:8d:36: 6d:a0:39:ec:bd:e9:5b:4b:41:3f:94:0b:91:1a:f9: de:4a:ac:42:07:07:3e:17:07:53:c3:8b:27:08:96: 7c:c4:b9:c7:fd:6a:f5:1b:71:9b:01:ef:7e:40:44: 1e:a3:65:d4:1c:24:4a:5d:53:5f:19:f1:6b:21:31: 9e:46:30:82:0e:b8:f2:7a:7f:34:2a:e3:5f:12:84: 64:e8:56:a0:05:4e:1b:65:15:8c:58:47:55:bc:10: 50:95:b0:cc:f1:d4:76:91:96:23:09:2b:07:99:47: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B4:04:6D:7F:D5:93:9F:DC:F0:AF:E1:AE:60:CC:A4:0A:BD:FA:12 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U7QEbX_Vk5_c8K_hrmDMpAq9-hI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.112.0/24 31.57.31.0/24 31.57.132.0/24 31.57.191.0/24 31.57.205.0/24 31.57.237.0/24 31.58.157.0/24 31.58.163.0/24 31.59.57.0/24 Signature Algorithm: sha256WithRSAEncryption 27:41:8d:81:50:78:c3:18:55:49:7e:5c:6d:a0:02:fc:fc:e2: 42:79:85:22:1c:9b:bf:e0:d6:e3:02:d1:75:af:b4:7b:16:23: 69:c3:ee:03:72:94:e2:a7:27:52:1b:33:b9:e0:a1:3e:1d:ad: 17:0a:d3:2d:d5:b7:08:ea:91:3e:94:13:ac:5d:08:39:db:ea: 0b:7d:93:8a:a8:a3:88:59:5e:0e:77:35:75:a7:24:d3:45:12: da:f7:7c:c1:56:8d:bf:5f:49:66:ec:17:71:d2:62:90:b2:d1: cc:9d:26:49:87:5d:b4:13:4d:4d:34:cb:d9:21:e8:43:a4:d6: 08:6e:ca:ff:d9:3d:62:a4:1a:91:0e:bd:69:d3:d3:09:e4:aa: 47:93:75:c9:50:1e:66:56:29:d8:e9:b5:b8:4f:58:9e:8d:93: 9a:ba:7b:01:be:3c:61:63:b8:35:74:57:02:54:03:33:43:f5: 6a:07:6b:58:d0:30:d5:71:88:81:a3:dd:2a:07:c8:76:41:4b: e6:ec:e9:5d:7e:5a:e9:11:74:ab:1c:39:41:c0:b5:f6:d6:ee: 69:fa:5f:2c:6d:46:4b:21:d0:5e:e4:94:cd:c3:69:10:1d:ce: 39:06:1a:61:fc:a7:69:55:7b:44:c8:49:ad:fc:1f:b3:6b:79: e5:87:18:25 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZqQ7H01N8yjjfAUL6xyXU5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE3MDgyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I0MDQ2ZDdmZDU5MzlmZGNmMGFmZTFhZTYwY2NhNDBhYmRmYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo/6E/tblcay78AWp6RHOvrabLq5 ecQPNAiqHgfjEv55nArNw2fS7jhlFLKTbcvmP1U3HiNj0Y7kSxNklk67L+qkAoqU qjt2WwDYmjZHZ4uypqquoGX+Ru1iDQD5PpZFUFOFS50zwvz+/Dq5UHZxslShj+0F o3LDrwGPgIp3amm8oxsZq5gQGHR7PEE61jNaxJ3xjTZtoDnsvelbS0E/lAuRGvne SqxCBwc+FwdTw4snCJZ8xLnH/Wr1G3GbAe9+QEQeo2XUHCRKXVNfGfFrITGeRjCC Drjyen80KuNfEoRk6FagBU4bZRWMWEdVvBBQlbDM8dR2kZYjCSsHmUf0XQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFO0BG1/1ZOf3PCv4a5gzKQKvfoSMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVTdRRWJYX1ZrNV9jOEtfaHJtRE1wQXE5LWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAHzhwAwQA HzkfAwQAHzmEAwQAHzm/AwQAHznNAwQAHzntAwQAHzqdAwQAHzqjAwQAHzs5MA0G CSqGSIb3DQEBCwUAA4IBAQAnQY2BUHjDGFVJflxtoAL8/OJCeYUiHJu/4NbjAtF1 r7R7FiNpw+4DcpTipydSGzO54KE+Ha0XCtMt1bcI6pE+lBOsXQg52+oLfZOKqKOI WV4OdzV1pyTTRRLa93zBVo2/X0lm7Bdx0mKQstHMnSZJh120E01NNMvZIehDpNYI bsr/2T1ipBqRDr1p09MJ5KpHk3XJUB5mVinY6bW4T1iejZOaunsBvjxhY7g1dFcC VAMzQ/VqB2tY0DDVcYiBo90qB8h2QUvm7OldflrpEXSrHDlBwLX21u5p+l8sbUZL IdBe5JTNw2kQHc45Bhph/KdpVXtEyEmt/B+za3nlhxgl -----END CERTIFICATE-----Generated at Wed Nov 19 13:26:50 2025 by rpki-client