This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c1VcwdgB9u44UUE3S32Kr_PZR7U.roa File: c1VcwdgB9u44UUE3S32Kr_PZR7U.roa (raw, json) Hash identifier: GBK3yPzxHzw+Yddo+3N86n1kbPruvvpytgqdctJy5m0= Subject key identifier: 73:55:5C:C1:D8:01:F6:EE:38:51:41:37:4B:7D:8A:AF:F3:D9:47:B5 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B45638E0C69F616EB9C3416FEF1EA2156 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c1VcwdgB9u44UUE3S32Kr_PZR7U.roa Signing time: Mon 22 Dec 2025 09:28:30 +0000 ROA not before: Mon 22 Dec 2025 09:28:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 31.56.64.0/24 maxlen: 24 31.56.83.0/24 maxlen: 24 31.57.55.0/24 maxlen: 24 31.58.41.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:63:8e:0c:69:f6:16:eb:9c:34:16:fe:f1:ea:21:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 22 09:28:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73555cc1d801f6ee385141374b7d8aaff3d947b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:9c:a5:0b:46:06:48:6e:bc:77:dc:32:d3: 93:be:64:fa:8f:c8:a7:d7:02:d4:3f:4f:8d:bf:bf: 68:58:8c:69:37:d0:a1:2b:7b:e9:9d:e0:91:07:0f: 55:ad:00:6e:fb:12:a2:5e:7e:35:05:2c:42:c8:ac: 6b:69:1b:88:c8:8c:18:7f:5d:e5:e5:45:ef:d7:49: e5:69:be:86:70:b2:19:f2:0b:54:79:fa:39:a7:55: 4c:b8:2d:93:d5:55:6d:c1:27:33:e1:79:e5:fa:26: 67:ee:16:75:18:29:98:1a:e8:64:2f:95:6b:5d:91: 13:05:05:ee:5d:ab:9a:c0:07:3e:20:65:88:27:61: 44:56:98:af:14:e0:6b:9e:06:21:69:59:70:5b:1f: e7:93:4f:17:9e:95:02:ed:6a:d9:96:c5:34:0d:be: 5e:1b:ca:e2:77:b9:22:3e:c2:8d:ee:33:62:47:4d: d5:0e:d8:27:f9:5d:b9:13:4c:24:3c:6f:89:dd:85: 36:36:48:74:95:af:b7:d5:9d:7c:4a:e4:9f:62:52: 67:dc:7c:91:f9:68:63:01:6d:d0:b9:09:9c:44:f6: 87:1e:8e:ae:87:df:c5:33:02:46:0a:e0:99:f3:5e: 39:b8:88:46:54:a3:05:37:cd:bd:8f:1e:f7:a9:ba: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:55:5C:C1:D8:01:F6:EE:38:51:41:37:4B:7D:8A:AF:F3:D9:47:B5 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c1VcwdgB9u44UUE3S32Kr_PZR7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.64.0/24 31.56.83.0/24 31.57.55.0/24 31.58.41.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:05:36:b3:b0:ca:47:ea:e3:84:ac:f5:41:71:77:18:3b:2f: 1d:05:a4:75:f6:63:9e:43:ee:e6:33:89:92:30:28:d4:3c:23: 44:15:3a:4b:07:1e:b8:61:9a:d4:b9:13:f9:aa:51:75:ff:5f: 0d:ed:55:3f:56:5a:1a:b9:c5:a1:36:49:62:99:a2:b2:35:68: 6c:35:38:09:53:42:38:18:fc:ab:30:77:f2:9e:47:8f:bb:5a: 74:6f:df:d6:a5:4d:df:09:19:af:6d:19:08:7b:cc:fe:f1:18: fd:6e:f2:cb:b8:2f:58:53:2c:25:71:08:ce:5e:88:3f:f4:20: 16:d5:e1:e6:95:8d:20:6d:81:2d:0d:31:a6:f9:7d:61:68:b6: c4:1b:6f:c4:2d:e0:55:11:27:23:ac:5d:02:4d:36:21:07:05: 61:94:08:73:5c:02:70:df:49:0c:29:2a:0b:9c:04:36:cd:9a: 63:de:c0:a6:b6:65:f3:ce:5c:fd:bf:16:3d:c9:8a:00:69:e6: 12:14:a0:2f:e1:34:24:ec:8a:37:95:95:35:6d:21:9d:d0:4b: 49:dd:c0:e7:f7:86:bd:e2:91:95:e7:6f:72:a7:e0:42:dd:75: d6:e4:9f:42:9c:fb:fe:4f:99:55:bb:33:07:89:08:79:59:dd: d1:a4:97:fe -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZtFY44MafYW65w0Fv7x6iFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIyMDkyODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzU1NWNjMWQ4MDFmNmVlMzg1MTQxMzc0YjdkOGFhZmYzZDk0N2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUScpQtGBkhuvHfcMtOTvmT6j8in 1wLUP0+Nv79oWIxpN9ChK3vpneCRBw9VrQBu+xKiXn41BSxCyKxraRuIyIwYf13l 5UXv10nlab6GcLIZ8gtUefo5p1VMuC2T1VVtwScz4Xnl+iZn7hZ1GCmYGuhkL5Vr XZETBQXuXauawAc+IGWIJ2FEVpivFOBrngYhaVlwWx/nk08XnpUC7WrZlsU0Db5e G8rid7kiPsKN7jNiR03VDtgn+V25E0wkPG+J3YU2Nkh0la+31Z18SuSfYlJn3HyR +WhjAW3QuQmcRPaHHo6uh9/FMwJGCuCZ8145uIhGVKMFN829jx73qboFgQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHNVXMHYAfbuOFFBN0t9iq/z2Ue1MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYzFWY3dkZ0I5dTQ0VVVFM1MzMktyX1BaUjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzhAAwQA HzhTAwQAHzk3AwQAHzopAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQBMBTazsMpH 6uOErPVBcXcYOy8dBaR19mOeQ+7mM4mSMCjUPCNEFTpLBx64YZrUuRP5qlF1/18N 7VU/VloaucWhNklimaKyNWhsNTgJU0I4GPyrMHfynkePu1p0b9/WpU3fCRmvbRkI e8z+8Rj9bvLLuC9YUywlcQjOXog/9CAW1eHmlY0gbYEtDTGm+X1haLbEG2/ELeBV EScjrF0CTTYhBwVhlAhzXAJw30kMKSoLnAQ2zZpj3sCmtmXzzlz9vxY9yYoAaeYS FKAv4TQk7Io3lZU1bSGd0EtJ3cDn94a94pGV529yp+BC3XXW5J9CnPv+T5lVuzMH iQh5Wd3RpJf+ -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:37 2025 by rpki-client