This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dLl1Nq9tyqdboIStQ4FtE8-Rt5I.roa File: dLl1Nq9tyqdboIStQ4FtE8-Rt5I.roa (raw, json) Hash identifier: MMtK/+BDLw6qSqintWBYVXJZRzTh30DX6ccu1gTrnR0= Subject key identifier: 74:B9:75:36:AF:6D:CA:A7:5B:A0:84:AD:43:81:6D:13:CF:91:B7:92 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AC17C5E802BB8B269FF73DD8D3381EAC3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dLl1Nq9tyqdboIStQ4FtE8-Rt5I.roa Signing time: Wed 26 Nov 2025 18:45:44 +0000 ROA not before: Wed 26 Nov 2025 18:45:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 31.56.0.0/24 maxlen: 24 31.56.49.0/24 maxlen: 24 31.56.103.0/24 maxlen: 24 31.56.210.0/24 maxlen: 24 31.56.212.0/24 maxlen: 24 31.56.223.0/24 maxlen: 24 31.56.234.0/24 maxlen: 24 31.56.235.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.121.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.57.225.0/24 maxlen: 24 31.58.90.0/24 maxlen: 24 31.58.160.0/24 maxlen: 24 31.58.168.0/24 maxlen: 24 31.58.224.0/24 maxlen: 24 31.59.171.0/24 maxlen: 24 31.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:7c:5e:80:2b:b8:b2:69:ff:73:dd:8d:33:81:ea:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 26 18:45:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=74b97536af6dcaa75ba084ad43816d13cf91b792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:e7:ad:60:8d:d2:a8:08:28:e7:05:a2:bc: 93:28:31:71:8f:2a:df:1c:e6:ab:26:8e:bc:a0:65: 99:1f:20:7e:9c:6c:b6:7e:8c:a8:ea:f2:a6:e4:13: 0a:a6:58:15:93:71:5c:96:09:8d:75:fa:f1:89:31: e5:37:1d:65:90:99:2c:70:79:5b:7b:57:8b:96:66: 8d:45:1a:37:c8:f6:bf:a0:d5:7c:11:85:89:23:72: 0b:fc:27:61:9a:ac:e4:97:6b:f7:d4:78:4d:15:c9: 13:56:df:64:95:40:01:d9:aa:4b:1c:49:b4:13:67: 3e:ed:06:56:94:9b:44:dc:b9:5e:e7:91:fb:fc:4e: 40:a9:23:38:9c:34:2a:d2:64:e8:a2:51:51:ee:8a: 6f:71:4d:31:2e:f2:e9:7d:e8:7e:22:7c:70:de:c9: d6:94:b0:fa:c1:a2:3b:4a:39:df:1e:26:d6:69:3b: 7b:ad:c9:4f:fc:56:3f:61:07:b8:d8:58:f7:1e:61: 64:7f:aa:d0:9a:c4:dc:dd:ad:df:97:69:d3:17:bf: 1e:c2:25:e0:0c:75:3a:e0:9d:89:ab:7c:20:e8:c0: c7:4d:00:3f:b9:36:3b:d4:1e:04:aa:1c:7d:2f:cc: d2:47:2c:64:53:b7:ed:9a:52:22:df:1a:9b:35:7c: 13:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B9:75:36:AF:6D:CA:A7:5B:A0:84:AD:43:81:6D:13:CF:91:B7:92 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dLl1Nq9tyqdboIStQ4FtE8-Rt5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.56.49.0/24 31.56.103.0/24 31.56.210.0/24 31.56.212.0/24 31.56.223.0/24 31.56.234.0/23 31.57.35.0/24 31.57.121.0/24 31.57.206.0/24 31.57.225.0/24 31.58.90.0/24 31.58.160.0/24 31.58.168.0/24 31.58.224.0/24 31.59.171.0/24 31.59.236.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:c1:ef:c4:ef:91:e8:b4:d4:67:92:50:56:c5:7b:b3:bb:a2: bf:59:c5:a0:84:fd:5a:56:3f:8b:58:dd:97:ce:5a:83:9a:45: 8a:f1:05:82:08:ed:54:9d:ff:eb:66:a6:48:8f:fb:2d:23:ac: 8c:b4:17:b8:61:17:56:a5:6e:20:d5:50:59:52:e1:8a:47:da: c9:77:23:24:c6:2e:7d:78:a9:25:48:da:7b:b0:68:85:41:5d: 89:34:1e:fa:84:20:c8:0f:ad:fc:c3:68:ac:2f:21:ed:9a:46: b8:a0:cd:27:0c:1c:5e:43:49:b7:16:f8:bb:e8:11:43:61:59: 90:77:40:69:48:69:20:da:0f:a9:72:76:80:4d:4c:e2:af:95: cd:db:5c:72:51:a7:5f:e9:63:0f:45:65:a3:2f:4d:0c:4f:16: 5f:77:34:f2:dd:ea:b0:e1:77:30:62:38:cb:ce:00:28:c1:08: cd:06:2b:7d:23:ca:2f:83:c4:28:c4:f1:b5:bf:3d:9f:4c:71: 0a:9b:3a:86:8a:ea:b1:45:b5:97:d4:bb:fd:74:87:69:eb:9b: ab:35:24:53:0c:6d:b8:fb:73:e3:c4:0c:ce:fc:19:8d:de:35: 9e:cf:8b:f1:de:e0:01:7d:a9:4e:b0:d7:72:c6:63:b8:0f:65: a8:f9:ef:8b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZrBfF6AK7iyaf9z3Y0zgerDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI2MTg0NTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI5NzUzNmFmNmRjYWE3NWJhMDg0YWQ0MzgxNmQxM2NmOTFiNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW/nrWCN0qgIKOcForyTKDFxjyrf HOarJo68oGWZHyB+nGy2foyo6vKm5BMKplgVk3FclgmNdfrxiTHlNx1lkJkscHlb e1eLlmaNRRo3yPa/oNV8EYWJI3IL/Cdhmqzkl2v31HhNFckTVt9klUAB2apLHEm0 E2c+7QZWlJtE3Lle55H7/E5AqSM4nDQq0mToolFR7opvcU0xLvLpfeh+Inxw3snW lLD6waI7SjnfHibWaTt7rclP/FY/YQe42Fj3HmFkf6rQmsTc3a3fl2nTF78ewiXg DHU64J2Jq3wg6MDHTQA/uTY71B4Eqhx9L8zSRyxkU7ftmlIi3xqbNXwThQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFHS5dTavbcqnW6CErUOBbRPPkbeSMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZExsMU5xOXR5cWRib0lTdFE0RnRFOC1SdDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAHzgAAwQA HzgxAwQAHzhnAwQAHzjSAwQAHzjUAwQAHzjfAwQBHzjqAwQAHzkjAwQAHzl5AwQA HznOAwQAHznhAwQAHzpaAwQAHzqgAwQAHzqoAwQAHzrgAwQAHzurAwQCHzvsMA0G CSqGSIb3DQEBCwUAA4IBAQBMwe/E75HotNRnklBWxXuzu6K/WcWghP1aVj+LWN2X zlqDmkWK8QWCCO1Unf/rZqZIj/stI6yMtBe4YRdWpW4g1VBZUuGKR9rJdyMkxi59 eKklSNp7sGiFQV2JNB76hCDID638w2isLyHtmka4oM0nDBxeQ0m3Fvi76BFDYVmQ d0BpSGkg2g+pcnaATUzir5XN21xyUadf6WMPRWWjL00MTxZfdzTy3eqw4XcwYjjL zgAowQjNBit9I8ovg8QoxPG1vz2fTHEKmzqGiuqxRbWX1Lv9dIdp65urNSRTDG24 +3PjxAzO/BmN3jWez4vx3uABfalOsNdyxmO4D2Wo+e+L -----END CERTIFICATE-----Generated at Thu Nov 27 06:43:24 2025 by rpki-client