This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wfd2XcEKVLYyvvvzg2FVAh_TO6Y.roa File: Wfd2XcEKVLYyvvvzg2FVAh_TO6Y.roa (raw, json) Hash identifier: 4hpZgh/0enHztsJwg1qhE1PBA2E6qrwYdqzjrbRGSXU= Subject key identifier: 59:F7:76:5D:C1:0A:54:B6:32:BE:FB:F3:83:61:55:02:1F:D3:3B:A6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B615BE3C1C7C4BE358CA5CE1E55F88769 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wfd2XcEKVLYyvvvzg2FVAh_TO6Y.roa Signing time: Sat 27 Dec 2025 19:49:30 +0000 ROA not before: Sat 27 Dec 2025 19:49:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.92.0/22 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.199.0/24 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:5b:e3:c1:c7:c4:be:35:8c:a5:ce:1e:55:f8:87:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 27 19:49:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59f7765dc10a54b632befbf3836155021fd33ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e4:95:a0:83:c6:5c:da:71:bf:ee:71:70:fe: 43:65:0e:51:c8:11:4f:c1:5a:a8:25:ac:83:d9:ca: fb:87:42:51:5f:54:9f:f7:e6:82:34:e3:9f:15:2e: 78:ee:75:ea:ba:3d:7a:e3:70:16:f2:e0:91:d9:b9: 29:5f:1a:7b:04:b1:b3:82:b3:f5:93:c9:17:c7:40: c0:72:a1:ba:70:81:7e:4c:84:03:d6:fa:62:10:5f: 66:34:63:67:ac:5e:08:57:4c:d0:bc:49:87:63:98: 6f:54:a7:97:2f:c9:cf:a5:04:49:16:b5:14:8d:c2: 87:de:52:ed:d3:80:e6:03:51:0b:44:d7:c6:a4:58: ac:ef:46:fc:df:89:b6:df:c7:2c:28:5f:16:1e:59: 3c:04:8a:7e:7a:22:2b:3e:e7:02:9b:75:91:24:82: fb:89:5d:3d:d1:fe:4e:51:eb:1f:53:07:5d:17:37: 66:84:05:af:de:5d:15:fc:1a:86:97:29:fd:0c:81: 0e:7c:8c:68:93:f1:a8:b4:6f:9c:4d:b6:a8:1f:06: d8:2c:b8:b7:16:3f:fe:d2:56:b5:3d:eb:54:57:b1: cc:ef:5d:17:56:be:7d:31:92:fa:a2:a0:5b:fb:02: aa:86:a9:bf:69:64:b3:15:7d:fa:f5:4a:96:e9:a5: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F7:76:5D:C1:0A:54:B6:32:BE:FB:F3:83:61:55:02:1F:D3:3B:A6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wfd2XcEKVLYyvvvzg2FVAh_TO6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.96.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.59.84.0/22 31.59.90.0-31.59.95.255 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.199.0/24 217.60.208.0-217.60.235.255 Signature Algorithm: sha256WithRSAEncryption 94:72:94:5e:1d:71:77:59:d3:ff:4c:db:e3:8b:ec:11:b1:14: 1a:96:cf:d3:b9:e5:6e:2b:97:a3:47:53:2d:74:a4:a8:40:19: 61:5c:52:26:38:8c:a3:67:a1:5a:c0:d0:df:80:11:c0:aa:76: 44:4e:e8:cf:bb:2a:60:5a:d0:dd:9f:f0:0a:7a:98:e8:3e:fd: 78:ef:54:0a:98:11:5c:f8:52:81:f8:8a:8d:70:91:d8:ed:88: 30:14:51:a5:fe:36:48:84:54:29:95:31:91:76:76:2d:bb:62: 5b:90:0e:7e:0f:4f:30:a0:21:1d:ed:b6:5a:9d:32:d0:e9:46: 03:eb:2c:31:de:1e:92:8d:46:47:55:d4:d6:81:44:7e:55:a8: 8c:e6:c2:41:b9:ef:0d:f3:45:d6:53:38:3a:80:e8:14:14:35: 76:a5:c8:af:02:74:99:86:59:1a:f8:37:cd:53:40:4c:aa:68: 1e:76:0a:25:83:19:96:47:4c:6c:63:44:c5:0f:ac:3d:53:fe: d2:2f:f9:f1:2e:c2:b8:ea:b6:22:1b:d0:2e:c6:e5:31:a8:9d: 68:3b:b7:b6:98:72:ee:e2:d3:8d:9e:bc:d9:e2:8d:0d:ab:a5: 4b:9b:fc:43:58:93:ee:d6:ad:0c:fd:4d:52:80:25:b6:fd:0f: bf:10:4f:96 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZthW+PBx8S+NYylzh5V+IdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI3MTk0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWY3NzY1ZGMxMGE1NGI2MzJiZWZiZjM4MzYxNTUwMjFmZDMzYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguSVoIPGXNpxv+5xcP5DZQ5RyBFP wVqoJayD2cr7h0JRX1Sf9+aCNOOfFS547nXquj1643AW8uCR2bkpXxp7BLGzgrP1 k8kXx0DAcqG6cIF+TIQD1vpiEF9mNGNnrF4IV0zQvEmHY5hvVKeXL8nPpQRJFrUU jcKH3lLt04DmA1ELRNfGpFis70b834m238csKF8WHlk8BIp+eiIrPucCm3WRJIL7 iV090f5OUesfUwddFzdmhAWv3l0V/BqGlyn9DIEOfIxok/GotG+cTbaoHwbYLLi3 Fj/+0la1PetUV7HM710XVr59MZL6oqBb+wKqhqm/aWSzFX369UqW6aWv6QIDAQAB o4ICljCCApIwHQYDVR0OBBYEFFn3dl3BClS2Mr7784NhVQIf0zumMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvV2ZkMlhjRUtWTFl5dnZ2emcyRlZBaF9UTzZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAAf ONMDBAAfOWADBAAfOcgwDAMEAh86tAMEAh86wAMEAh87VDAMAwQBHztaAwQFHztA AwQAXreXAwQAXreeAwQAXrekAwQAXremMAwDBAFet64DBABet7ADBAFet7QDBADZ PA8wDAMEBdk8oAMEA9k8sAMEAtk8vAMEANk8xzAMAwQE2TzQAwQC2TzoMA0GCSqG SIb3DQEBCwUAA4IBAQCUcpReHXF3WdP/TNvji+wRsRQals/TueVuK5ejR1MtdKSo QBlhXFImOIyjZ6FawNDfgBHAqnZETujPuypgWtDdn/AKepjoPv1471QKmBFc+FKB +IqNcJHY7YgwFFGl/jZIhFQplTGRdnYtu2JbkA5+D08woCEd7bZanTLQ6UYD6ywx 3h6SjUZHVdTWgUR+VaiM5sJBue8N80XWUzg6gOgUFDV2pcivAnSZhlka+DfNU0BM qmgedgolgxmWR0xsY0TFD6w9U/7SL/nxLsK46rYiG9AuxuUxqJ1oO7e2mHLu4tON nrzZ4o0Nq6VLm/xDWJPu1q0M/U1SgCW2/Q+/EE+W -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:58 2025 by rpki-client