This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eCBlDRhgvIZuKuDPvY-mdoH8fkA.roa File: eCBlDRhgvIZuKuDPvY-mdoH8fkA.roa (raw, json) Hash identifier: C8YuTS+Z54KPPtxrtO8gIxzqmCTxNvlYKWQGx0CGOaI= Subject key identifier: 78:20:65:0D:18:60:BC:86:6E:2A:E0:CF:BD:8F:A6:76:81:FC:7E:40 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B696D520ECA79E2C2133F0AD8875E6D42 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eCBlDRhgvIZuKuDPvY-mdoH8fkA.roa Signing time: Mon 29 Dec 2025 09:25:30 +0000 ROA not before: Mon 29 Dec 2025 09:25:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 31.56.68.0/24 maxlen: 24 31.57.132.0/24 maxlen: 24 31.58.41.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:6d:52:0e:ca:79:e2:c2:13:3f:0a:d8:87:5e:6d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 29 09:25:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7820650d1860bc866e2ae0cfbd8fa67681fc7e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b3:b7:82:63:c3:fa:21:75:6c:52:f4:7f:05: 51:6c:a3:d2:89:2b:4d:5d:4f:df:47:85:32:2d:82: fd:86:c6:bd:ae:4c:8d:c4:e5:eb:9c:03:92:e1:db: fa:a6:c8:d1:61:87:52:1b:b3:ad:db:99:a2:68:bd: 2d:b8:fc:2b:d4:ac:d3:3c:c8:6b:6f:b8:85:18:57: cd:eb:42:d8:f7:5e:d3:f2:cc:43:2b:24:17:f0:bb: c1:3a:0b:a8:52:fc:86:da:16:d0:d2:46:fa:9b:8c: 88:a5:4d:6a:f2:04:a2:a5:d0:ab:19:bc:67:f1:40: ab:09:76:62:9d:7e:d2:a3:10:4b:01:1f:ae:4e:cb: 5b:0c:d3:0b:c6:12:8c:99:0b:11:f6:ce:29:79:3b: 9a:21:20:b5:96:91:6c:7f:8b:3d:41:de:04:ed:2a: fc:d8:d6:71:fa:e8:13:95:7c:26:95:8f:9f:2d:0f: 83:b6:3d:2e:31:70:bf:2c:5f:bd:e7:68:21:68:ec: 72:3e:77:0a:4d:bf:69:2b:d5:53:5b:b3:06:ff:25: 60:4a:27:ad:9b:93:58:a1:4b:f9:22:d5:55:d1:8d: 3d:4f:fb:7f:e2:2f:5e:f0:e2:72:32:23:9b:3b:ac: 98:7b:1c:74:aa:61:6a:55:41:99:f9:cf:2a:ea:a2: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:20:65:0D:18:60:BC:86:6E:2A:E0:CF:BD:8F:A6:76:81:FC:7E:40 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eCBlDRhgvIZuKuDPvY-mdoH8fkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.68.0/24 31.57.132.0/24 31.58.41.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 57:25:b3:cd:72:c1:d3:af:96:18:73:ba:09:b1:08:fb:b9:a6: 84:d5:1c:08:a0:12:7d:c3:ff:a1:7b:cb:22:79:f4:88:cc:15: a6:89:70:1b:d7:aa:04:b0:27:21:d4:1a:2e:e4:ad:34:6e:18: 97:4e:2c:24:8f:c0:29:b8:58:41:1c:c7:7f:2d:2e:d0:cc:53: ad:6f:94:15:85:43:f3:be:1f:de:bf:b9:3c:65:c8:80:db:84: 2e:87:df:46:b2:5b:3a:4a:78:9a:b7:a4:6f:43:1c:1d:37:f6: c8:98:06:d2:22:07:12:90:4f:b0:ac:47:41:56:f3:ed:c7:37: 5d:f5:11:f5:81:c4:b1:a4:d1:07:6a:05:57:46:b9:d2:4f:e3: 8b:d0:34:bc:bf:e6:38:85:a8:b2:33:b4:e3:1f:dc:ce:61:b6: 53:20:8a:fc:a1:1b:7d:bf:90:73:45:72:e4:91:ac:88:a4:70: 24:ed:e9:d6:94:74:18:ff:e6:5b:bb:c5:26:8d:34:17:64:33: 9a:39:18:b8:9e:b6:a8:a2:ef:6d:a1:84:48:44:ae:9f:ad:5e: 33:fd:fb:ec:76:36:6d:c3:f3:7e:95:b5:24:3c:f4:fc:d8:fb: 92:3e:56:5d:da:f5:c0:2b:37:cf:59:94:60:86:57:1f:0b:dc: 03:24:45:5f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtpbVIOynniwhM/CtiHXm1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjI5MDkyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODIwNjUwZDE4NjBiYzg2NmUyYWUwY2ZiZDhmYTY3NjgxZmM3ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87O3gmPD+iF1bFL0fwVRbKPSiStN XU/fR4UyLYL9hsa9rkyNxOXrnAOS4dv6psjRYYdSG7Ot25miaL0tuPwr1KzTPMhr b7iFGFfN60LY917T8sxDKyQX8LvBOguoUvyG2hbQ0kb6m4yIpU1q8gSipdCrGbxn 8UCrCXZinX7SoxBLAR+uTstbDNMLxhKMmQsR9s4peTuaISC1lpFsf4s9Qd4E7Sr8 2NZx+ugTlXwmlY+fLQ+Dtj0uMXC/LF+952ghaOxyPncKTb9pK9VTW7MG/yVgSiet m5NYoUv5ItVV0Y09T/t/4i9e8OJyMiObO6yYexx0qmFqVUGZ+c8q6qINcwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHggZQ0YYLyGbirgz72PpnaB/H5AMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZUNCbERSaGd2SVp1S3VEUHZZLW1kb0g4ZmtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhEAwQA HzmEAwQAHzopAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQBXJbPNcsHTr5YYc7oJ sQj7uaaE1RwIoBJ9w/+he8siefSIzBWmiXAb16oEsCch1Bou5K00bhiXTiwkj8Ap uFhBHMd/LS7QzFOtb5QVhUPzvh/ev7k8ZciA24Quh99Gsls6Sniat6RvQxwdN/bI mAbSIgcSkE+wrEdBVvPtxzdd9RH1gcSxpNEHagVXRrnST+OL0DS8v+Y4haiyM7Tj H9zOYbZTIIr8oRt9v5BzRXLkkayIpHAk7enWlHQY/+Zbu8UmjTQXZDOaORi4nrao ou9toYRIRK6frV4z/fvsdjZtw/N+lbUkPPT82PuSPlZd2vXAKzfPWZRghlcfC9wD JEVf -----END CERTIFICATE-----Generated at Tue Dec 30 23:53:59 2025 by rpki-client