This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/agclBUnG4UmKB-i1J9_7R7iTLxk.roa File: agclBUnG4UmKB-i1J9_7R7iTLxk.roa (raw, json) Hash identifier: bQNj4/wz/zzxgPN0+vxe3QhMrbxjU09loV+Jh1NWAE0= Subject key identifier: 6A:07:25:05:49:C6:E1:49:8A:07:E8:B5:27:DF:FB:47:B8:93:2F:19 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AF3A8168E3A7FB777F0CA47B101538C9B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/agclBUnG4UmKB-i1J9_7R7iTLxk.roa Signing time: Sat 06 Dec 2025 12:34:30 +0000 ROA not before: Sat 06 Dec 2025 12:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 31.56.16.0/22 maxlen: 24 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.16.0/21 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.135.0/24 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.176.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.200.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.216.0/22 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.240.0/22 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.245.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 31.58.252.0/22 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.64.0/22 maxlen: 24 31.59.80.0/22 maxlen: 24 31.59.124.0/22 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 31.59.176.0/21 maxlen: 24 31.59.188.0/22 maxlen: 24 31.59.192.0/22 maxlen: 24 31.59.216.0/22 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.8.0/22 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.187.0/24 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:a8:16:8e:3a:7f:b7:77:f0:ca:47:b1:01:53:8c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 6 12:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a07250549c6e1498a07e8b527dffb47b8932f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:43:55:91:b5:11:6b:f7:34:86:06:1b:1f: 43:17:68:1d:a4:4e:1b:2e:13:15:2d:59:43:e1:ba: 5e:20:3f:cd:a3:0c:34:64:c1:80:3b:75:84:27:15: 3a:ed:73:d8:53:72:74:a4:8a:67:2a:99:37:eb:5a: 74:6c:25:6f:71:e5:41:5f:7f:5d:a6:92:8f:46:9c: 2e:65:d6:4f:03:e1:28:9e:1d:6c:45:e1:9a:f5:86: 11:2f:21:cf:aa:05:0f:2e:49:5f:72:01:5f:f3:f9: db:97:ca:39:1f:d8:4c:0d:5e:1f:c0:30:4b:bd:7b: 48:22:73:15:06:0e:d3:b4:a7:78:86:4a:69:36:52: 96:8c:25:fd:04:b1:9e:bd:35:d6:fd:4f:39:49:7b: ec:e0:7f:eb:58:d7:0f:9b:bf:fb:c7:52:92:5f:77: 9b:8a:09:8b:4c:8b:bb:07:28:bd:64:a5:96:0e:be: 05:cb:51:ee:2d:a7:fd:46:f4:88:89:9e:68:ec:ce: 75:bc:c1:44:71:3b:66:b6:20:e6:80:4e:0d:28:e6: b8:35:1c:15:28:3c:86:7f:94:3b:ca:70:c1:ec:52: eb:25:5d:6f:29:de:40:7a:80:56:5a:91:65:61:24: 39:07:21:8b:81:d6:b0:71:68:c2:07:bd:94:a2:55: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:07:25:05:49:C6:E1:49:8A:07:E8:B5:27:DF:FB:47:B8:93:2F:19 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/agclBUnG4UmKB-i1J9_7R7iTLxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.16.0/22 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.16.0/21 31.57.36.0/23 31.57.135.0/24 31.57.168.0/23 31.57.184.0/23 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.176.0/22 31.58.196.0-31.58.209.255 31.58.216.0/22 31.58.232.0/23 31.58.240.0-31.58.245.255 31.58.249.0-31.58.255.255 31.59.36.0/22 31.59.44.0/22 31.59.64.0/22 31.59.80.0/22 31.59.124.0/22 31.59.140.0/22 31.59.148.0-31.59.165.255 31.59.176.0/21 31.59.188.0-31.59.195.255 31.59.216.0/22 94.183.152.0/22 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.8.0/22 217.60.16.0/21 217.60.28.0-217.60.35.255 217.60.40.0-217.60.59.255 217.60.187.0/24 217.60.196.0/23 217.60.244.0/23 Signature Algorithm: sha256WithRSAEncryption bc:93:a7:23:c5:35:b8:04:9e:52:c1:e0:18:80:13:48:e2:24: f3:cd:8e:e2:47:6c:a7:b0:86:8b:e9:b5:db:c6:fc:02:8e:27: 2e:f9:a1:86:79:9f:c8:79:f4:92:98:2a:31:15:e4:5a:bb:e7: c3:6a:b1:a8:5c:8c:45:06:c6:ea:11:2d:db:83:59:27:1c:57: d1:c1:1e:13:bb:c5:1f:27:c5:d6:89:e5:75:4a:0d:d5:72:89: de:f9:8e:72:e5:4e:ed:67:db:a4:f7:5c:23:75:47:22:17:99: 9f:a8:88:19:b7:7f:32:86:42:4e:44:13:5f:9a:b8:e9:4a:8a: 8b:3e:3a:07:cb:d7:7c:72:6a:d0:cf:cb:0f:9e:94:31:2a:c8: a8:b0:7d:af:2b:cc:e5:5e:cf:a2:15:d1:19:30:87:99:6a:57: 02:65:a2:bd:8b:26:19:9b:41:9f:8c:8b:ea:42:6f:c8:5a:23: c5:8e:89:c4:96:25:1f:30:ed:48:0e:90:aa:84:6c:91:6b:c9: a1:1b:c4:de:f9:b0:a8:d1:2e:23:1f:28:b2:d6:9d:b8:0a:f9: 16:df:e0:2a:6c:14:01:67:25:5f:e9:95:3a:42:81:24:a2:b9: 55:0d:60:be:2e:1c:76:c2:1a:c5:9c:31:98:9e:93:67:69:9f: 46:99:93:0f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgISAZrzqBaOOn+3d/DKR7EBU4ybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA2MTIzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTA3MjUwNTQ5YzZlMTQ5OGEwN2U4YjUyN2RmZmI0N2I4OTMyZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJVDVZG1EWv3NIYGGx9DF2gdpE4b LhMVLVlD4bpeID/Noww0ZMGAO3WEJxU67XPYU3J0pIpnKpk361p0bCVvceVBX39d ppKPRpwuZdZPA+Eonh1sReGa9YYRLyHPqgUPLklfcgFf8/nbl8o5H9hMDV4fwDBL vXtIInMVBg7TtKd4hkppNlKWjCX9BLGevTXW/U85SXvs4H/rWNcPm7/7x1KSX3eb igmLTIu7Byi9ZKWWDr4Fy1HuLaf9RvSIiZ5o7M51vMFEcTtmtiDmgE4NKOa4NRwV KDyGf5Q7ynDB7FLrJV1vKd5AeoBWWpFlYSQ5ByGLgdawcWjCB72UolWxFwIDAQAB o4IDUTCCA00wHQYDVR0OBBYEFGoHJQVJxuFJigfotSff+0e4ky8ZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYWdjbEJVbkc0VW1LQi1pMUo5XzdSN2lUTHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgABMIIB RAMEAh84EAMEAh84sDAMAwQBHzi2AwQBHzi8AwQBHzjQAwQBHzjkAwQDHzkQAwQB HzkkAwQAHzmHAwQBHzmoAwQBHzm4AwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQC HzpcAwQCHzqwMAwDBAIfOsQDBAEfOtADBAIfOtgDBAEfOugwDAMEBB868AMEAR86 9DALAwQAHzr5AwMAHzoDBAIfOyQDBAIfOywDBAIfO0ADBAIfO1ADBAIfO3wDBAIf O4wwDAMEAh87lAMEAR87pAMEAx87sDAMAwQCHzu8AwQCHzvAAwQCHzvYAwQCXreY MAwDBAZet8ADBANet+AwCwMEAl637AMDA16wAwQC2TwIAwQD2TwQMAwDBALZPBwD BALZPCAwDAMEA9k8KAMEAtk8OAMEANk8uwMEAdk8xAMEAdk89DANBgkqhkiG9w0B AQsFAAOCAQEAvJOnI8U1uASeUsHgGIATSOIk882O4kdsp7CGi+m128b8Ao4nLvmh hnmfyHn0kpgqMRXkWrvnw2qxqFyMRQbG6hEt24NZJxxX0cEeE7vFHyfF1onldUoN 1XKJ3vmOcuVO7WfbpPdcI3VHIheZn6iIGbd/MoZCTkQTX5q46UqKiz46B8vXfHJq 0M/LD56UMSrIqLB9ryvM5V7PohXRGTCHmWpXAmWivYsmGZtBn4yL6kJvyFojxY6J xJYlHzDtSA6QqoRskWvJoRvE3vmwqNEuIx8ostaduAr5Ft/gKmwUAWclX+mVOkKB JKK5VQ1gvi4cdsIaxZwxmJ6TZ2mfRpmTDw== -----END CERTIFICATE-----Generated at Wed Dec 10 09:04:01 2025 by rpki-client