This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UXpXcFY2Xx7YRFhcPXZ1BObjEzU.roa File: UXpXcFY2Xx7YRFhcPXZ1BObjEzU.roa (raw, json) Hash identifier: gJ9dVg6eJlh8Dw2jaM00Vzp2wRC2FPyPgstqQOskHoI= Subject key identifier: 51:7A:57:70:56:36:5F:1E:D8:44:58:5C:3D:76:75:04:E6:E3:13:35 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AA7184481862D49972E3E907D5EF5D810 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UXpXcFY2Xx7YRFhcPXZ1BObjEzU.roa Signing time: Fri 21 Nov 2025 15:46:16 +0000 ROA not before: Fri 21 Nov 2025 15:46:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.32.0/24 maxlen: 24 31.56.43.0/24 maxlen: 24 31.56.44.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.71.0/24 maxlen: 24 31.56.77.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.100.0/22 maxlen: 22 31.56.102.0/24 maxlen: 24 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.190.0/24 maxlen: 24 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.220.0/24 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.239.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:18:44:81:86:2d:49:97:2e:3e:90:7d:5e:f5:d8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 21 15:46:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=517a577056365f1ed844585c3d767504e6e31335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:17:4b:35:20:70:42:1e:86:16:16:11:90: 4f:bd:ae:f2:b9:2d:ea:83:cc:e6:4f:1e:89:0d:b0: c3:1a:21:98:79:d2:40:07:63:11:7f:0a:65:9e:1f: 60:68:7f:ee:5a:7f:66:82:a5:a7:ca:c2:63:3d:6f: e5:d0:5e:b2:e2:66:38:db:8f:73:aa:24:98:8a:91: 83:2a:cb:16:86:4b:44:08:be:68:66:bf:29:59:d5: b1:50:4c:a0:ef:52:a3:e0:5c:e3:2d:27:46:99:5f: 12:36:fe:6b:51:a1:6d:00:35:1b:16:5e:60:16:1e: 63:92:44:85:ab:d6:27:b7:94:89:4e:eb:26:ef:f8: a2:76:15:93:be:77:d8:ae:1d:f1:11:0f:c2:f9:64: 03:48:11:58:06:69:d8:29:93:af:8f:61:cd:e7:0e: 64:d5:d0:b1:33:04:c1:a0:5a:b5:87:78:ce:a6:58: de:a1:d9:92:ad:0b:62:3b:26:6f:68:dd:4d:15:81: 2c:d2:6b:1d:ba:fb:d6:cb:e7:2b:20:27:ed:05:01: 51:19:80:1e:42:bd:50:1b:71:7e:1b:7f:12:0c:c2: c5:b5:ae:7d:64:18:90:2e:9d:53:23:b6:c3:bf:bb: f4:b3:aa:7d:3e:bf:6b:b7:1b:2d:f6:d8:28:0f:de: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7A:57:70:56:36:5F:1E:D8:44:58:5C:3D:76:75:04:E6:E3:13:35 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UXpXcFY2Xx7YRFhcPXZ1BObjEzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.28.0-31.56.32.255 31.56.43.0-31.56.44.255 31.56.57.0/24 31.56.71.0/24 31.56.77.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.156.0/24 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0/21 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.190.0/24 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.239.0/24 31.57.250.0-31.57.255.255 31.58.34.0/23 31.58.50.0-31.58.55.255 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.224.0/22 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:dd:eb:e8:fc:39:f2:74:99:2e:df:6b:46:05:a4:10:e2:f7: 58:70:d9:83:23:e8:56:9a:f5:c0:de:cd:4e:6a:67:27:5a:d4: fa:a8:5f:e1:fd:99:c9:e3:1c:10:96:21:59:46:d0:d9:00:2e: ae:cf:e8:ff:29:36:58:80:80:95:62:23:6d:2e:25:e4:f9:bc: 6c:91:29:be:60:46:12:ca:89:c8:5d:40:b4:46:d7:2d:1c:9c: ed:fc:8a:f0:f4:98:4e:74:bd:91:70:9b:98:32:8e:c6:ba:91: 78:dd:97:33:d2:3f:52:aa:58:da:3b:15:7e:38:cb:6b:a7:4c: 1b:eb:04:e4:8f:1d:61:6d:8c:6e:5a:26:f4:e3:53:ee:f7:36: a1:39:7e:f9:cc:e9:78:f4:c6:af:f8:62:65:c7:af:e3:6c:ae: ce:65:74:bf:f2:7f:58:90:7c:a4:13:c7:1e:62:a8:09:20:fa: 7c:45:43:d7:f9:66:79:67:f4:65:b4:98:66:fb:37:8f:1d:e7: 33:62:00:60:c2:b8:b3:d7:d7:38:3b:44:03:d0:b2:ed:1f:3b: 02:84:20:93:24:da:26:99:7a:52:3f:38:ab:c1:a3:3b:d7:d1: c2:b9:57:8b:7e:fd:81:38:91:3e:ef:42:69:63:d3:c0:93:13: 4a:95:8d:ed -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgISAZqnGESBhi1Jly4+kH1e9dgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIxMTU0NjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTdhNTc3MDU2MzY1ZjFlZDg0NDU4NWMzZDc2NzUwNGU2ZTMxMzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJwXSzUgcEIehhYWEZBPva7yuS3q g8zmTx6JDbDDGiGYedJAB2MRfwplnh9gaH/uWn9mgqWnysJjPW/l0F6y4mY4249z qiSYipGDKssWhktECL5oZr8pWdWxUEyg71Kj4FzjLSdGmV8SNv5rUaFtADUbFl5g Fh5jkkSFq9Ynt5SJTusm7/iidhWTvnfYrh3xEQ/C+WQDSBFYBmnYKZOvj2HN5w5k 1dCxMwTBoFq1h3jOpljeodmSrQtiOyZvaN1NFYEs0msduvvWy+crICftBQFRGYAe Qr1QG3F+G38SDMLFta59ZBiQLp1TI7bDv7v0s6p9Pr9rtxst9tgoD95+aQIDAQAB o4IDsDCCA6wwHQYDVR0OBBYEFFF6V3BWNl8e2ERYXD12dQTm4xM1MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVVhwWGNGWTJYeDdZUkZoY1BYWjFCT2JqRXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBxAYIKwYBBQUHAQcBAf8EggGzMIIBrzCCAasEAgABMIIB owMEAR84BDAMAwQCHzgcAwQAHzggMAwDBAAfOCsDBAAfOCwDBAAfODkDBAAfOEcD BAAfOE0DBAIfOFADBAEfOFoDBAQfOGADBAEfOHIwDAMEAR84dgMEAh84eAMEAB84 nAMEAh84tDAMAwQCHzi8AwQCHzjAAwQCHzjIAwQDHzjQAwQBHzjcAwQBHzjgAwQC HzjkAwQCHzjsAwQCHzkMAwQDHzkYAwQCHzkkMAwDBAIfOTQDBAYfOQADBAEfOV4D BAMfOXgDBAEfOYQDBAMfOYgDBAEfOZIDBAIfOagwDAMEBB85sAMEAh85uAMEAB85 vgMEAh85wDAMAwQDHznIAwQAHznKMAwDBAQfOdADBAIfOeADBAIfOegDBAAfOe8w CwMEAR85+gMDAR84AwQBHzoiMAwDBAEfOjIDBAMfOjADBAEfOkADBAIfOkQDBAIf OlQDBAIfOpgDBAIfOqwDBAIfOtQwDAMEAh863AMEAh864AMEAh87TAMEAh87YAME Ax87cDAMAwQDHzuIAwQDHzuQAwQDHzugAwQCHzvgAwQCHzvoMA0GCSqGSIb3DQEB CwUAA4IBAQBs3evo/DnydJku32tGBaQQ4vdYcNmDI+hWmvXA3s1OamcnWtT6qF/h /ZnJ4xwQliFZRtDZAC6uz+j/KTZYgICVYiNtLiXk+bxskSm+YEYSyonIXUC0Rtct HJzt/Irw9JhOdL2RcJuYMo7GupF43Zcz0j9SqljaOxV+OMtrp0wb6wTkjx1hbYxu Wib041Pu9zahOX75zOl49Mav+GJlx6/jbK7OZXS/8n9YkHykE8ceYqgJIPp8RUPX +WZ5Z/RltJhm+zePHeczYgBgwriz19c4O0QD0LLtHzsChCCTJNommXpSPzirwaM7 19HCuVeLfv2BOJE+70JpY9PAkxNKlY3t -----END CERTIFICATE-----Generated at Sat Nov 22 07:22:38 2025 by rpki-client