This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dpfQ2JcGFpriTdtvwRNcH2txK9Y.roa File: dpfQ2JcGFpriTdtvwRNcH2txK9Y.roa (raw, json) Hash identifier: m5SitSf3xitHgPlqyTFaehfyjIeAz+rsFjRkL/ybfwc= Subject key identifier: 76:97:D0:D8:97:06:16:9A:E2:4D:DB:6F:C1:13:5C:1F:6B:71:2B:D6 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B3811362F89B2872FD470187C6709BC51 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dpfQ2JcGFpriTdtvwRNcH2txK9Y.roa Signing time: Fri 19 Dec 2025 19:23:30 +0000 ROA not before: Fri 19 Dec 2025 19:23:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42831 IP address blocks: 31.56.67.0/24 maxlen: 24 31.56.73.0/24 maxlen: 24 31.56.85.0/24 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.239.0/24 maxlen: 24 31.57.113.0/24 maxlen: 24 31.57.153.0/24 maxlen: 24 31.57.186.0/24 maxlen: 24 31.57.236.0/24 maxlen: 24 31.58.43.0/24 maxlen: 24 31.58.128.0/24 maxlen: 24 31.58.164.0/24 maxlen: 24 31.59.88.0/24 maxlen: 24 31.59.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:11:36:2f:89:b2:87:2f:d4:70:18:7c:67:09:bc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 19 19:23:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7697d0d89706169ae24ddb6fc1135c1f6b712bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d9:ed:b1:c2:1f:63:fa:1a:17:b0:57:21:c5: 1c:d3:6f:92:f0:1f:6a:20:15:7f:d6:e0:5b:b0:97: 90:b1:26:41:cf:e6:21:05:21:98:b0:9c:2c:52:44: df:32:2d:cb:97:03:fe:ed:43:67:71:f7:38:53:68: a0:ac:c5:ab:45:76:ba:e0:af:25:78:39:19:b5:ec: ac:a8:4e:50:e0:75:a9:fc:f6:93:9c:6a:c0:f9:10: 38:9b:08:33:f6:a8:58:24:e2:e7:4f:e0:2d:ed:23: b3:02:65:68:9a:8f:b6:ed:42:80:43:e0:bf:a8:d5: 1b:14:bc:ae:c9:9a:6c:f7:81:58:5d:6b:61:b9:a4: 33:20:2b:31:02:2f:9d:48:3c:ee:b9:e7:c3:47:d3: a6:84:97:cc:f8:0f:bb:1a:3c:aa:77:01:07:ad:97: b2:06:49:34:59:17:a6:a5:08:c6:aa:ba:d0:ca:89: 9f:5d:c0:60:df:e2:c7:35:1c:48:b7:d7:2d:56:d2: cd:50:58:55:50:b7:59:e8:82:66:ad:66:8a:84:71: 62:38:66:df:0b:f6:c0:86:c6:94:17:db:1a:bf:a5: 9d:71:66:94:4a:e3:a2:21:7b:43:03:fa:ed:be:17: 6c:f5:84:9f:6b:de:9e:03:3c:0b:57:e4:ce:e6:99: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:97:D0:D8:97:06:16:9A:E2:4D:DB:6F:C1:13:5C:1F:6B:71:2B:D6 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dpfQ2JcGFpriTdtvwRNcH2txK9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.67.0/24 31.56.73.0/24 31.56.85.0/24 31.56.156.0/24 31.56.239.0/24 31.57.113.0/24 31.57.153.0/24 31.57.186.0/24 31.57.236.0/24 31.58.43.0/24 31.58.128.0/24 31.58.164.0/24 31.59.88.0/24 31.59.123.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:8b:25:6f:1f:e2:2a:d2:02:27:d4:7a:82:52:b3:df:fa:a1: 27:d6:1d:e6:f2:30:3f:59:3a:be:d3:69:1d:06:b1:c7:d5:f5: 0a:ad:8f:dc:16:d9:e3:cd:8a:55:d4:08:bc:4f:9a:a5:cc:d8: fc:fc:ec:c5:44:c5:86:fa:bf:7b:24:2e:82:7d:cf:b6:7e:23: 86:05:a9:01:7e:a7:c9:a1:cd:c5:d3:90:83:6e:63:4f:a2:8a: 44:04:9e:a0:c8:23:0e:67:5b:fc:6c:f1:c6:c1:a9:9e:6c:46: d1:7b:44:9f:c6:53:03:72:09:35:fc:7b:bf:cb:19:92:d6:f1: 9b:0d:3a:07:0d:73:1c:a6:35:37:55:8a:2b:f9:06:18:a9:5a: d6:7d:ef:29:a3:b5:63:37:c0:06:87:10:bc:3c:0b:41:46:5d: bd:af:31:0e:e8:f1:f6:1a:2c:3d:f6:16:f7:b3:bf:a4:81:72: d4:c7:34:52:f2:0d:cb:aa:9e:b9:01:81:85:83:c6:8c:e9:a7: 8b:a7:f1:4b:87:60:5d:59:5f:4f:76:ed:40:c3:2d:0d:8d:e7: 7b:a5:a1:ca:c6:6e:d4:a3:93:91:eb:86:1b:1a:ef:91:04:ee: ee:3e:0f:6f:81:97:09:3c:19:11:ed:cf:9e:97:03:f8:36:5f: d0:5c:29:0a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZs4ETYvibKHL9RwGHxnCbxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE5MTkyMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njk3ZDBkODk3MDYxNjlhZTI0ZGRiNmZjMTEzNWMxZjZiNzEyYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+tntscIfY/oaF7BXIcUc02+S8B9q IBV/1uBbsJeQsSZBz+YhBSGYsJwsUkTfMi3LlwP+7UNncfc4U2igrMWrRXa64K8l eDkZteysqE5Q4HWp/PaTnGrA+RA4mwgz9qhYJOLnT+At7SOzAmVomo+27UKAQ+C/ qNUbFLyuyZps94FYXWthuaQzICsxAi+dSDzuuefDR9OmhJfM+A+7GjyqdwEHrZey Bkk0WRempQjGqrrQyomfXcBg3+LHNRxIt9ctVtLNUFhVULdZ6IJmrWaKhHFiOGbf C/bAhsaUF9sav6WdcWaUSuOiIXtDA/rtvhds9YSfa96eAzwLV+TO5plNZwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFHaX0NiXBhaa4k3bb8ETXB9rcSvWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZHBmUTJKY0dGcHJpVGR0dndSTmNIMnR4SzlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAHzhDAwQA HzhJAwQAHzhVAwQAHzicAwQAHzjvAwQAHzlxAwQAHzmZAwQAHzm6AwQAHznsAwQA HzorAwQAHzqAAwQAHzqkAwQAHztYAwQAHzt7MA0GCSqGSIb3DQEBCwUAA4IBAQBv iyVvH+Iq0gIn1HqCUrPf+qEn1h3m8jA/WTq+02kdBrHH1fUKrY/cFtnjzYpV1Ai8 T5qlzNj8/OzFRMWG+r97JC6Cfc+2fiOGBakBfqfJoc3F05CDbmNPoopEBJ6gyCMO Z1v8bPHGwamebEbRe0SfxlMDcgk1/Hu/yxmS1vGbDToHDXMcpjU3VYor+QYYqVrW fe8po7VjN8AGhxC8PAtBRl29rzEO6PH2Giw99hb3s7+kgXLUxzRS8g3Lqp65AYGF g8aM6aeLp/FLh2BdWV9Pdu1Awy0Njed7paHKxm7Uo5OR64YbGu+RBO7uPg9vgZcJ PBkR7c+elwP4Nl/QXCkK -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:37 2025 by rpki-client