This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WkbLKu2eEmhnT5XDV8HuL0eJR3c.roa File: WkbLKu2eEmhnT5XDV8HuL0eJR3c.roa (raw, json) Hash identifier: yySZSQFVlbBOVSVu1HOujUhohg/4Rtj+nQ+ZjYySkAg= Subject key identifier: 5A:46:CB:2A:ED:9E:12:68:67:4F:95:C3:57:C1:EE:2F:47:89:47:77 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A97505E48876579918E8154607E4944E8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WkbLKu2eEmhnT5XDV8HuL0eJR3c.roa Signing time: Tue 18 Nov 2025 14:13:37 +0000 ROA not before: Tue 18 Nov 2025 14:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.192.0/24 maxlen: 24 31.56.193.0/24 maxlen: 24 31.56.195.0/24 maxlen: 24 31.56.218.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:50:5e:48:87:65:79:91:8e:81:54:60:7e:49:44:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 18 14:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a46cb2aed9e1268674f95c357c1ee2f47894777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:8b:5b:25:d9:8d:ec:50:e1:95:4a:41:a5: 8e:87:4d:fb:e9:01:b7:65:63:c0:c0:d9:de:7e:13: a2:85:17:d5:5c:1c:7c:3f:d1:7e:80:1c:66:0c:50: 7d:f1:90:49:52:ab:b5:18:7b:93:3d:f5:bf:81:de: d3:5d:94:9b:7b:2a:53:27:2e:5b:d6:5b:8d:39:96: 3e:74:9f:9c:c7:58:41:02:c8:97:65:e7:03:9d:c0: 96:4d:83:5c:d0:0a:fe:67:c6:b3:cc:d3:0e:99:c9: b9:c9:f5:4e:b4:7d:5b:df:f4:e3:77:33:9f:f9:17: d9:03:b8:07:b9:4d:5e:2a:5e:a5:4e:cb:77:a8:98: b5:ce:3f:e3:80:80:65:e1:91:3c:e7:51:e7:d3:ae: 0a:18:aa:ac:19:da:0e:72:0b:dc:7d:28:91:61:a8: e2:ac:1a:2b:dd:15:dc:41:2f:83:59:67:0a:fe:b9: e5:4b:bd:0a:47:c9:fd:14:5d:2a:f5:ec:98:09:b6: ea:01:f6:01:d8:50:55:78:ee:a0:68:26:6c:4f:f6: a7:81:b9:d9:a9:9e:78:8d:9f:bd:8f:c1:f8:4d:d2: 85:1a:ac:c2:f8:91:66:81:e7:56:d2:a9:9b:01:cf: 8e:8f:22:bd:d3:92:7f:d7:7a:f2:ae:23:00:a9:01: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:CB:2A:ED:9E:12:68:67:4F:95:C3:57:C1:EE:2F:47:89:47:77 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WkbLKu2eEmhnT5XDV8HuL0eJR3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.192.0/23 31.56.195.0/24 31.56.218.0/24 31.57.221.0/24 31.57.237.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 28:a7:d0:23:eb:5c:da:69:ba:37:60:47:0e:f8:e2:11:af:1d: a8:69:c3:00:4e:8f:8f:2b:9f:b8:5e:c0:80:22:00:75:49:c1: 11:78:ba:f0:81:b0:ec:36:43:26:ba:62:6b:3b:d1:7f:a3:56: c7:61:09:00:d3:d9:36:56:d2:b0:54:ac:58:94:0a:2d:c9:ed: d6:ef:3b:74:61:72:04:08:c7:b5:d0:a7:f6:cb:ef:04:ff:8d: 8b:e3:f1:4c:db:b7:06:29:6d:d9:d5:73:9f:4d:da:a5:b3:69: 53:e9:dd:cc:ac:f9:20:21:56:81:98:7c:74:dc:95:f7:66:1c: 8b:73:9c:1c:52:36:21:a9:93:36:12:15:8e:d9:4b:57:96:e3: 78:90:96:6f:8f:98:bf:2c:ad:1d:04:02:3b:57:2e:07:e6:b8: 91:43:2c:9c:26:1c:f1:4a:81:ba:d7:45:72:de:7f:11:40:77: ba:f7:0f:42:fb:ed:6e:56:be:49:ca:1f:61:00:55:cf:ff:de: fc:06:f7:bf:d0:cf:5f:4e:95:fc:e8:12:08:68:01:a5:30:7e: 71:fd:24:74:f7:51:ae:bd:83:9a:23:7d:e5:a4:39:a7:f4:cb: 10:9a:16:ea:2c:fb:1f:cb:3b:16:c0:0b:07:dc:16:4b:f1:00: a3:73:b7:88 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZqXUF5Ih2V5kY6BVGB+SUToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE4MTQxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTQ2Y2IyYWVkOWUxMjY4Njc0Zjk1YzM1N2MxZWUyZjQ3ODk0Nzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PuLWyXZjexQ4ZVKQaWOh0376QG3 ZWPAwNnefhOihRfVXBx8P9F+gBxmDFB98ZBJUqu1GHuTPfW/gd7TXZSbeypTJy5b 1luNOZY+dJ+cx1hBAsiXZecDncCWTYNc0Ar+Z8azzNMOmcm5yfVOtH1b3/TjdzOf +RfZA7gHuU1eKl6lTst3qJi1zj/jgIBl4ZE851Hn064KGKqsGdoOcgvcfSiRYaji rBor3RXcQS+DWWcK/rnlS70KR8n9FF0q9eyYCbbqAfYB2FBVeO6gaCZsT/angbnZ qZ54jZ+9j8H4TdKFGqzC+JFmgedW0qmbAc+OjyK905J/13ryriMAqQGLIwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFpGyyrtnhJoZ0+Vw1fB7i9HiUd3MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvV2tiTEt1MmVFbWhuVDVYRFY4SHVMMGVKUjNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHzh9AwQB HzjAAwQAHzjDAwQAHzjaAwQAHzndAwQAHzntAwQAHzrnMA0GCSqGSIb3DQEBCwUA A4IBAQAop9Aj61zaabo3YEcO+OIRrx2oacMATo+PK5+4XsCAIgB1ScEReLrwgbDs NkMmumJrO9F/o1bHYQkA09k2VtKwVKxYlAotye3W7zt0YXIECMe10Kf2y+8E/42L 4/FM27cGKW3Z1XOfTdqls2lT6d3MrPkgIVaBmHx03JX3ZhyLc5wcUjYhqZM2EhWO 2UtXluN4kJZvj5i/LK0dBAI7Vy4H5riRQyycJhzxSoG610Vy3n8RQHe69w9C++1u Vr5Jyh9hAFXP/978Bve/0M9fTpX86BIIaAGlMH5x/SR091GuvYOaI33lpDmn9MsQ mhbqLPsfyzsWwAsH3BZL8QCjc7eI -----END CERTIFICATE-----Generated at Wed Nov 19 13:27:41 2025 by rpki-client