This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YFZZhkCs_b53rSuXTkish0cQpBA.roa File: YFZZhkCs_b53rSuXTkish0cQpBA.roa (raw, json) Hash identifier: MUD09tBQwsEnlcsoWzXnCp7R5emQRJh2kL1Be6LWNKc= Subject key identifier: 60:56:59:86:40:AC:FD:BE:77:AD:2B:97:4E:48:AC:87:47:10:A4:10 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AE03D0F2FF989B5F4F4ADCE9A547CD51D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YFZZhkCs_b53rSuXTkish0cQpBA.roa Signing time: Tue 02 Dec 2025 18:04:49 +0000 ROA not before: Tue 02 Dec 2025 18:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.192.0/24 maxlen: 24 31.56.193.0/24 maxlen: 24 31.56.218.0/24 maxlen: 24 31.57.132.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:3d:0f:2f:f9:89:b5:f4:f4:ad:ce:9a:54:7c:d5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 2 18:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6056598640acfdbe77ad2b974e48ac874710a410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:df:b0:62:62:f0:2f:f8:d9:9a:68:1b:44: 02:e9:12:ed:01:44:c2:94:60:54:83:b1:c9:35:46: 54:d5:87:04:d1:79:eb:83:22:a5:5e:85:bf:06:1b: ea:25:7e:cc:c8:07:e3:83:ea:fc:a2:4e:43:55:04: 03:91:34:40:5f:42:f4:5a:b5:f3:6a:d1:4f:e5:00: 9e:ad:f5:ce:cf:e4:d7:ca:a6:ad:39:14:fa:45:7f: 70:d5:dd:d4:70:71:33:10:e0:fe:e3:d3:9e:21:bf: 8b:66:17:1e:00:1b:fc:ad:47:25:ab:da:c8:d1:e7: 2e:b7:2e:4f:59:87:11:be:d9:a9:8b:0c:ba:c3:07: da:10:0f:fa:e2:d5:a3:b3:dc:c9:0c:51:55:d5:e0: 11:68:2d:72:ad:8b:16:be:bc:e8:af:77:d1:f9:ff: ae:a7:0f:aa:83:27:44:21:9c:89:79:bb:4a:a5:9c: 18:48:df:76:61:77:59:37:f8:16:4b:ee:76:00:6f: 95:ea:5d:e0:94:6f:84:91:c4:1b:38:c9:6d:52:d3: c0:51:2f:9f:c2:0d:96:37:5b:d4:47:85:ee:87:7f: 39:e6:a0:57:cc:c6:00:8f:fc:bd:c2:42:35:38:f5: 57:6f:c4:c0:05:14:44:55:fd:a7:dc:db:3b:16:ab: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:56:59:86:40:AC:FD:BE:77:AD:2B:97:4E:48:AC:87:47:10:A4:10 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YFZZhkCs_b53rSuXTkish0cQpBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.192.0/23 31.56.218.0/24 31.57.132.0/24 31.57.191.0/24 31.57.221.0/24 31.57.237.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:b6:d5:71:72:fd:4c:26:5c:d1:7e:50:d1:78:aa:ef:bd:61: 49:ac:fe:3e:bf:74:a2:26:12:0f:0c:b8:ef:77:68:a5:a1:e9: 61:dc:f1:31:e4:a3:af:ac:5c:3e:91:9f:a3:1b:7c:21:35:4c: 48:ab:27:84:1d:16:79:49:96:57:89:e4:9d:14:42:1b:80:34: ed:45:6c:c2:17:e1:3b:b2:47:97:b0:bf:98:67:6f:53:bd:e3: d8:49:03:cc:80:24:52:07:0f:f3:58:a1:05:b5:d7:62:26:80: 8f:7f:7e:19:04:c9:5b:c7:a8:df:28:96:4e:15:48:d4:dd:8e: ba:4f:c0:5e:76:ab:d9:6f:c6:cc:0a:2d:b1:f4:a0:28:b1:57: 3c:01:54:29:58:ef:6a:60:54:60:e4:55:fd:d4:61:67:b6:98: e4:aa:a0:9b:01:2e:7c:16:c0:3b:28:ba:8c:f6:8a:04:74:ba: 99:7c:ec:e1:e5:ec:66:95:67:b3:1e:58:2a:37:fe:e9:8f:31: 97:eb:94:df:77:6e:81:de:2c:3c:f8:1c:77:56:7f:84:40:09: 4a:9f:f3:4a:0c:9d:e0:85:90:89:22:ad:3b:ce:e0:74:92:45: 47:83:0e:0f:5c:94:68:cb:9e:28:f0:75:10:21:f1:86:d8:82: 78:30:bb:a2 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrgPQ8v+Ym19PStzppUfNUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjAyMTgwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDU2NTk4NjQwYWNmZGJlNzdhZDJiOTc0ZTQ4YWM4NzQ3MTBhNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKbfsGJi8C/42ZpoG0QC6RLtAUTC lGBUg7HJNUZU1YcE0XnrgyKlXoW/BhvqJX7MyAfjg+r8ok5DVQQDkTRAX0L0WrXz atFP5QCerfXOz+TXyqatORT6RX9w1d3UcHEzEOD+49OeIb+LZhceABv8rUclq9rI 0ecuty5PWYcRvtmpiwy6wwfaEA/64tWjs9zJDFFV1eARaC1yrYsWvrzor3fR+f+u pw+qgydEIZyJebtKpZwYSN92YXdZN/gWS+52AG+V6l3glG+EkcQbOMltUtPAUS+f wg2WN1vUR4Xuh3855qBXzMYAj/y9wkI1OPVXb8TABRREVf2n3Ns7FqvzgQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGBWWYZArP2+d60rl05IrIdHEKQQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWUZaWmhrQ3NfYjUzclN1WFRraXNoMGNRcEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAHzh9AwQB HzjAAwQAHzjaAwQAHzmEAwQAHzm/AwQAHzndAwQAHzntAwQAHzrnMA0GCSqGSIb3 DQEBCwUAA4IBAQAMttVxcv1MJlzRflDReKrvvWFJrP4+v3SiJhIPDLjvd2iloelh 3PEx5KOvrFw+kZ+jG3whNUxIqyeEHRZ5SZZXieSdFEIbgDTtRWzCF+E7skeXsL+Y Z29TvePYSQPMgCRSBw/zWKEFtddiJoCPf34ZBMlbx6jfKJZOFUjU3Y66T8BedqvZ b8bMCi2x9KAosVc8AVQpWO9qYFRg5FX91GFntpjkqqCbAS58FsA7KLqM9ooEdLqZ fOzh5exmlWezHlgqN/7pjzGX65Tfd26B3iw8+Bx3Vn+EQAlKn/NKDJ3ghZCJIq07 zuB0kkVHgw4PXJRoy54o8HUQIfGG2IJ4MLui -----END CERTIFICATE-----Generated at Fri Dec 5 09:27:19 2025 by rpki-client