This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YwXt2bTT43x7z3wiCq9E1A1SkaE.roa File: YwXt2bTT43x7z3wiCq9E1A1SkaE.roa (raw, json) Hash identifier: mViQ9v4bvyXq/x0/0z5/xxL01FENVp7HCh73Um815K4= Subject key identifier: 63:05:ED:D9:B4:D3:E3:7C:7B:CF:7C:22:0A:AF:44:D4:0D:52:91:A1 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A90EC7D6E25CE21F81384AEA21193E5C3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YwXt2bTT43x7z3wiCq9E1A1SkaE.roa Signing time: Mon 17 Nov 2025 08:26:49 +0000 ROA not before: Mon 17 Nov 2025 08:26:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213200 IP address blocks: 31.56.120.0/24 maxlen: 24 31.57.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:ec:7d:6e:25:ce:21:f8:13:84:ae:a2:11:93:e5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 17 08:26:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6305edd9b4d3e37c7bcf7c220aaf44d40d5291a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:be:c2:3e:2b:ac:ab:56:ca:e6:4c:0b:dd: 37:22:5d:86:0f:a7:75:2f:75:28:61:24:69:21:f9: ed:5a:b7:cf:1c:67:af:3c:d9:04:2a:85:e2:3d:c1: a8:44:b8:1f:eb:3b:7b:35:6a:0e:73:e7:36:29:1e: 98:aa:27:7b:09:09:4d:2d:b3:8e:12:18:80:20:b1: b6:62:8e:4b:75:b2:56:c7:f3:c9:c9:74:1a:42:68: c2:56:db:1e:64:e5:8f:a1:40:af:d9:82:ec:c2:4b: 0e:ec:14:d1:e3:ad:f0:ee:7a:a5:c0:b2:62:8a:fd: 96:24:69:b0:cb:e4:7c:94:b6:ab:4a:f4:11:bf:03: c2:3c:56:7d:80:84:77:49:ab:4f:07:77:7b:6b:60: 46:3b:5d:b2:25:39:97:e0:eb:23:c5:bb:cb:3c:56: 47:45:fb:66:14:85:4f:32:2f:f9:54:b0:24:ba:93: e3:05:ee:09:5a:7d:6c:b3:39:5e:9e:b9:76:23:23: 70:15:3b:28:e1:4e:3c:dc:16:9f:a1:2e:c7:cb:28: 0f:d6:f9:7a:b9:55:17:0e:fa:29:29:fd:8a:00:05: f3:e6:6d:eb:bf:a8:09:bb:04:66:b8:c2:f4:6a:68: 7b:25:43:a8:35:24:f0:8d:a6:0b:9a:b8:99:e7:87: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:05:ED:D9:B4:D3:E3:7C:7B:CF:7C:22:0A:AF:44:D4:0D:52:91:A1 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YwXt2bTT43x7z3wiCq9E1A1SkaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.120.0/24 31.57.97.0/24 Signature Algorithm: sha256WithRSAEncryption 45:da:1a:eb:9c:6d:48:70:d6:5f:9d:33:d9:7e:5a:e0:51:5c: df:b9:a8:ee:2b:ab:58:10:07:4a:47:b0:40:40:aa:77:27:db: a6:73:95:90:aa:e9:b1:c6:cf:c8:23:50:bf:43:27:ff:49:0d: 00:6f:e1:0f:78:a0:94:9c:5d:c5:56:64:6d:f6:1d:14:ea:36: 6c:7d:5f:2c:2e:be:c9:23:86:7a:4d:f8:8b:88:d1:be:b2:c5: f2:e4:86:7f:d9:85:13:ce:a7:fe:1d:3f:d3:26:49:7e:85:1b: 74:47:9c:90:b8:1f:bb:06:3b:cb:c7:75:72:e9:a8:ba:83:f1: 00:9f:03:0b:b2:36:dc:8e:56:c8:ee:3b:c8:2c:e2:4a:dd:dd: 53:48:4b:f9:0d:84:11:41:91:6d:4a:0b:49:ff:6a:3a:a5:3f: df:d0:31:5f:4f:15:f0:4e:c6:5d:37:1c:e1:2b:6c:41:b8:a1: ff:b5:27:ca:16:eb:39:0e:3b:d7:5b:2b:8e:97:12:67:eb:c1: 41:0b:c1:57:c6:29:d5:ea:72:d8:dd:c5:2e:ea:76:7d:59:d1: 91:21:50:f3:ea:31:ab:55:8f:9f:fd:27:54:d5:eb:e4:92:3a: 08:43:fb:4b:66:f6:da:b4:b6:33:f4:a8:f7:9e:4f:9d:c2:3d: 59:ad:bc:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqQ7H1uJc4h+BOErqIRk+XDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE3MDgyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzA1ZWRkOWI0ZDNlMzdjN2JjZjdjMjIwYWFmNDRkNDBkNTI5MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL2+wj4rrKtWyuZMC903Il2GD6d1 L3UoYSRpIfntWrfPHGevPNkEKoXiPcGoRLgf6zt7NWoOc+c2KR6Yqid7CQlNLbOO EhiAILG2Yo5LdbJWx/PJyXQaQmjCVtseZOWPoUCv2YLswksO7BTR463w7nqlwLJi iv2WJGmwy+R8lLarSvQRvwPCPFZ9gIR3SatPB3d7a2BGO12yJTmX4OsjxbvLPFZH RftmFIVPMi/5VLAkupPjBe4JWn1sszlenrl2IyNwFTso4U483BafoS7HyygP1vl6 uVUXDvopKf2KAAXz5m3rv6gJuwRmuML0amh7JUOoNSTwjaYLmriZ54cyhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGMF7dm00+N8e898IgqvRNQNUpGhMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWXdYdDJiVFQ0M3g3ejN3aUNxOUUxQTFTa2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzh4AwQA HzlhMA0GCSqGSIb3DQEBCwUAA4IBAQBF2hrrnG1IcNZfnTPZflrgUVzfuajuK6tY EAdKR7BAQKp3J9umc5WQqumxxs/II1C/Qyf/SQ0Ab+EPeKCUnF3FVmRt9h0U6jZs fV8sLr7JI4Z6TfiLiNG+ssXy5IZ/2YUTzqf+HT/TJkl+hRt0R5yQuB+7BjvLx3Vy 6ai6g/EAnwMLsjbcjlbI7jvILOJK3d1TSEv5DYQRQZFtSgtJ/2o6pT/f0DFfTxXw TsZdNxzhK2xBuKH/tSfKFus5DjvXWyuOlxJn68FBC8FXxinV6nLY3cUu6nZ9WdGR IVDz6jGrVY+f/SdU1evkkjoIQ/tLZvbatLYz9Kj3nk+dwj1ZrbyS -----END CERTIFICATE-----Generated at Wed Nov 19 13:29:42 2025 by rpki-client