This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fVHuPwNMrjDxCzXqQjHwGpFqYzg.roa File: fVHuPwNMrjDxCzXqQjHwGpFqYzg.roa (raw, json) Hash identifier: +yb8wGSaH76ihRmu0S5T8+7MnqSER75g0vMMIcXYth0= Subject key identifier: 7D:51:EE:3F:03:4C:AE:30:F1:0B:35:EA:42:31:F0:1A:91:6A:63:38 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AB14983D1FFBF42659904BF2E560D728D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fVHuPwNMrjDxCzXqQjHwGpFqYzg.roa Signing time: Sun 23 Nov 2025 15:16:16 +0000 ROA not before: Sun 23 Nov 2025 15:16:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 31.56.82.0/23 maxlen: 23 31.56.100.0/23 maxlen: 23 31.56.100.0/24 maxlen: 24 31.59.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 09:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:49:83:d1:ff:bf:42:65:99:04:bf:2e:56:0d:72:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 23 15:16:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d51ee3f034cae30f10b35ea4231f01a916a6338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:98:44:04:42:f0:3b:5d:5f:8e:ce:6f:5c: 11:ad:53:44:4d:18:73:b4:83:38:df:c3:e5:30:75: fa:3d:2a:4f:95:36:15:51:db:84:61:70:1c:88:86: 86:57:45:f1:86:e3:07:af:38:2d:77:7e:fa:05:d8: b0:90:1a:53:f9:0a:7f:e1:f0:55:bb:e3:25:d0:d8: 7a:21:05:8c:24:ba:75:7b:dd:f3:0d:3c:7d:aa:70: 74:ba:b8:93:c7:9a:ad:8e:1a:35:2b:e1:87:0f:d5: 8f:1e:95:fa:0b:b2:fc:36:de:95:9b:64:ef:25:eb: 69:f9:cf:ba:2d:62:7d:be:be:37:01:01:ad:17:12: 7f:7f:f1:ba:42:ed:73:05:dd:49:20:99:bf:28:e4: 3c:ea:20:ad:7b:96:9f:35:2d:64:a5:e6:2c:79:b1: de:ae:08:49:20:f2:f7:ca:f0:3e:a2:8a:cb:02:b1: 0f:3e:3d:3b:8a:a8:c9:99:7a:9f:19:c9:d0:61:a3: 2b:9d:5e:07:a2:06:7c:26:e3:95:1f:5c:39:4a:eb: b0:c9:a4:04:c4:1e:10:6b:b5:96:43:eb:9c:69:89: 40:f7:54:49:2a:8b:e5:e8:0d:d8:a5:25:86:f0:12: 90:61:bd:a1:c9:f3:6a:8d:13:ff:69:c7:60:84:92: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:51:EE:3F:03:4C:AE:30:F1:0B:35:EA:42:31:F0:1A:91:6A:63:38 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fVHuPwNMrjDxCzXqQjHwGpFqYzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.82.0/23 31.56.100.0/23 31.59.173.0/24 Signature Algorithm: sha256WithRSAEncryption 59:7e:90:81:4f:f1:11:e7:84:cd:e5:90:3e:a7:10:42:e7:cb: 58:ab:59:46:07:05:aa:bc:23:e8:1c:7b:08:62:80:f9:21:4c: 94:27:5b:40:c0:1c:a2:fd:fe:41:d6:56:c9:d8:22:55:8c:54: e4:84:2f:b7:3a:ee:99:91:42:9b:bd:a2:1a:ca:e8:5b:a6:e5: 88:ec:64:c2:c9:fe:80:6e:96:6d:6a:b2:94:27:92:33:17:f7: 03:97:b9:ad:86:7d:43:19:f3:3e:ad:b1:c2:41:7a:d6:09:68: 65:14:c7:80:ab:9e:02:45:64:2f:5d:fc:e5:6c:3c:85:aa:11: 3d:ef:86:9d:7e:ca:14:69:10:58:10:ee:c3:73:af:08:73:76: 21:ab:d6:05:e4:28:ef:b1:b1:ae:02:f6:e9:6a:a4:a5:71:cd: 77:9b:9f:53:62:da:b5:4a:dc:15:b9:34:a4:cb:86:e0:e6:0e: 4c:35:97:e1:dd:62:09:e3:98:86:8b:33:26:c5:44:3d:37:22: d2:5e:b3:e4:6c:d1:52:02:b8:48:48:5d:a0:4a:c5:5d:8c:6e: cc:ba:75:bf:3c:69:db:85:46:3f:97:48:b1:be:b7:12:3a:a8: 1f:60:ca:f3:00:89:1c:bc:23:e8:7a:1c:81:4d:3d:ff:41:83: 8f:20:7a:3f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqxSYPR/79CZZkEvy5WDXKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIzMTUxNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDUxZWUzZjAzNGNhZTMwZjEwYjM1ZWE0MjMxZjAxYTkxNmE2MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJeYRARC8DtdX47Ob1wRrVNETRhz tIM438PlMHX6PSpPlTYVUduEYXAciIaGV0XxhuMHrzgtd376BdiwkBpT+Qp/4fBV u+Ml0Nh6IQWMJLp1e93zDTx9qnB0uriTx5qtjho1K+GHD9WPHpX6C7L8Nt6Vm2Tv Jetp+c+6LWJ9vr43AQGtFxJ/f/G6Qu1zBd1JIJm/KOQ86iCte5afNS1kpeYsebHe rghJIPL3yvA+oorLArEPPj07iqjJmXqfGcnQYaMrnV4HogZ8JuOVH1w5SuuwyaQE xB4Qa7WWQ+ucaYlA91RJKovl6A3YpSWG8BKQYb2hyfNqjRP/acdghJLAqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH1R7j8DTK4w8Qs16kIx8BqRamM4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZlZIdVB3Tk1yakR4Q3pYcVFqSHdHcEZxWXpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHzhSAwQB HzhkAwQAHzutMA0GCSqGSIb3DQEBCwUAA4IBAQBZfpCBT/ER54TN5ZA+pxBC58tY q1lGBwWqvCPoHHsIYoD5IUyUJ1tAwByi/f5B1lbJ2CJVjFTkhC+3Ou6ZkUKbvaIa yuhbpuWI7GTCyf6AbpZtarKUJ5IzF/cDl7mthn1DGfM+rbHCQXrWCWhlFMeAq54C RWQvXfzlbDyFqhE974adfsoUaRBYEO7Dc68Ic3Yhq9YF5CjvsbGuAvbpaqSlcc13 m59TYtq1StwVuTSky4bg5g5MNZfh3WIJ45iGizMmxUQ9NyLSXrPkbNFSArhISF2g SsVdjG7MunW/PGnbhUY/l0ixvrcSOqgfYMrzAIkcvCPoehyBTT3/QYOPIHo/ -----END CERTIFICATE-----Generated at Sun Nov 23 17:34:19 2025 by rpki-client