This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_wYMXL1UowS-2sR__iIExwa0E5A.roa File: _wYMXL1UowS-2sR__iIExwa0E5A.roa (raw, json) Hash identifier: kWxjz3US4rf/rXkfHGpp3/HnTAJblNm14Yh7zQaPPu0= Subject key identifier: FF:06:0C:5C:BD:54:A3:04:BE:DA:C4:7F:FE:22:04:C7:06:B4:13:90 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A974F762A8E52DD947DA4ED5C86149F11 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_wYMXL1UowS-2sR__iIExwa0E5A.roa Signing time: Tue 18 Nov 2025 14:12:38 +0000 ROA not before: Tue 18 Nov 2025 14:12:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135402 IP address blocks: 31.56.123.0/24 maxlen: 24 31.57.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:4f:76:2a:8e:52:dd:94:7d:a4:ed:5c:86:14:9f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 18 14:12:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff060c5cbd54a304bedac47ffe2204c706b41390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:b7:cf:00:15:44:d0:be:bc:8f:10:2c:cb: 5b:99:3c:16:f9:61:de:68:2e:71:5c:e7:ba:18:5a: ca:f2:3d:d2:52:e5:3a:16:ed:0e:64:d7:ea:ec:6e: 1a:87:84:f9:7d:92:67:1f:f3:2f:97:95:41:dd:64: 39:af:04:d1:db:10:d6:f2:57:df:6a:28:f3:7a:fa: b9:f9:30:ad:a2:6b:57:8e:71:22:6b:6b:84:63:0c: 7b:d7:9b:20:26:9b:35:fc:4b:d6:5b:5d:18:fc:1a: 1e:aa:85:7c:47:5a:5e:28:26:af:ba:19:cd:60:a2: 94:ac:e7:62:a7:ba:07:7d:34:14:29:d3:a2:24:27: 29:e6:b2:6c:a9:ec:81:06:e8:7c:07:b1:1e:f9:45: 63:30:05:27:3d:fe:af:52:2a:a1:ca:18:a5:8b:85: 84:6f:dd:3d:6b:fd:5d:bb:bc:e5:bb:13:5c:cb:99: a3:b0:bb:07:ee:be:89:25:41:f1:cc:24:3e:62:7a: cd:24:b3:cc:94:55:60:4e:a3:8a:67:6e:94:e4:73: 84:2d:bb:b1:e7:2c:0d:3f:32:d5:40:5b:07:ca:28: 31:37:8d:ef:ea:98:ef:a4:26:0a:5b:17:05:0e:cf: f3:5f:d4:44:b1:84:08:1b:5a:9c:bc:6e:cd:ec:c6: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:0C:5C:BD:54:A3:04:BE:DA:C4:7F:FE:22:04:C7:06:B4:13:90 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_wYMXL1UowS-2sR__iIExwa0E5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.123.0/24 31.57.182.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:fa:a4:f5:79:f9:70:50:30:69:7f:2a:04:8a:7c:f7:d2:9b: 5d:02:50:af:e0:ea:e0:94:dc:36:51:64:aa:2f:7f:26:98:98: 60:1c:a1:72:d0:d1:f8:9b:dd:f9:d2:11:ed:01:96:37:6c:a1: 31:1c:c2:15:c2:58:aa:d2:45:f5:6e:9e:e2:24:f0:55:f0:bd: 46:59:95:19:59:1c:c5:8a:6f:58:0a:b7:3a:dd:05:34:f4:c2: 14:a9:9a:5e:15:87:4b:a6:2d:2e:44:50:1b:03:35:42:76:af: 5c:fe:cf:f8:19:52:ed:5a:08:76:19:75:1e:a9:0b:15:43:a8: eb:5d:65:61:70:5a:81:bd:17:fe:1d:f0:68:de:45:cd:83:8f: 67:3b:03:3b:c8:c7:44:64:1a:8e:12:08:a1:24:1b:68:dc:c4: 9e:f4:e0:3d:8d:31:bb:2c:86:95:35:eb:08:b6:7f:57:03:0a: 08:17:6c:8c:67:f0:6d:d0:1d:89:2d:24:c1:14:e2:1c:35:fb: c5:af:3b:71:78:25:f4:01:1c:28:c7:22:9e:04:15:1d:5e:8e: 51:07:cd:e9:37:58:25:a7:0d:3c:23:9a:2d:6e:7b:4d:3c:bd: da:cb:07:7f:7e:79:f0:17:36:b2:2a:5c:f2:f5:f1:1b:bf:ae: f1:41:82:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqXT3YqjlLdlH2k7VyGFJ8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE4MTQxMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjA2MGM1Y2JkNTRhMzA0YmVkYWM0N2ZmZTIyMDRjNzA2YjQxMzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncy3zwAVRNC+vI8QLMtbmTwW+WHe aC5xXOe6GFrK8j3SUuU6Fu0OZNfq7G4ah4T5fZJnH/Mvl5VB3WQ5rwTR2xDW8lff aijzevq5+TCtomtXjnEia2uEYwx715sgJps1/EvWW10Y/BoeqoV8R1peKCavuhnN YKKUrOdip7oHfTQUKdOiJCcp5rJsqeyBBuh8B7Ee+UVjMAUnPf6vUiqhyhili4WE b909a/1du7zluxNcy5mjsLsH7r6JJUHxzCQ+YnrNJLPMlFVgTqOKZ26U5HOELbux 5ywNPzLVQFsHyigxN43v6pjvpCYKWxcFDs/zX9REsYQIG1qcvG7N7MZ8rwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP8GDFy9VKMEvtrEf/4iBMcGtBOQMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvX3dZTVhMMVVvd1MtMnNSX19pSUV4d2EwRTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzh7AwQA Hzm2MA0GCSqGSIb3DQEBCwUAA4IBAQAP+qT1eflwUDBpfyoEinz30ptdAlCv4Org lNw2UWSqL38mmJhgHKFy0NH4m9350hHtAZY3bKExHMIVwliq0kX1bp7iJPBV8L1G WZUZWRzFim9YCrc63QU09MIUqZpeFYdLpi0uRFAbAzVCdq9c/s/4GVLtWgh2GXUe qQsVQ6jrXWVhcFqBvRf+HfBo3kXNg49nOwM7yMdEZBqOEgihJBto3MSe9OA9jTG7 LIaVNesItn9XAwoIF2yMZ/Bt0B2JLSTBFOIcNfvFrztxeCX0ARwoxyKeBBUdXo5R B83pN1glpw08I5otbntNPL3aywd/fnnwFzayKlzy9fEbv67xQYJL -----END CERTIFICATE-----Generated at Wed Nov 19 13:29:16 2025 by rpki-client