This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fwWoPFwu-RuoWD3KaMgSTO67dRM.roa File: fwWoPFwu-RuoWD3KaMgSTO67dRM.roa (raw, json) Hash identifier: z2qVY8pyDH9+kZl8X4t4XQaDkgTh0XD9dSr4fqecePs= Subject key identifier: 7F:05:A8:3C:5C:2E:F9:1B:A8:58:3D:CA:68:C8:12:4C:EE:BB:75:13 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BA3A3BE44545D5052BDF57ADEB28BEF81 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fwWoPFwu-RuoWD3KaMgSTO67dRM.roa Signing time: Fri 09 Jan 2026 16:42:55 +0000 ROA not before: Fri 09 Jan 2026 16:42:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 31.56.5.0/24 maxlen: 24 31.56.119.0/24 maxlen: 24 31.56.128.0/24 maxlen: 24 31.56.129.0/24 maxlen: 24 31.56.130.0/24 maxlen: 24 31.56.131.0/24 maxlen: 24 31.56.132.0/24 maxlen: 24 31.56.133.0/24 maxlen: 24 31.56.134.0/24 maxlen: 24 31.56.135.0/24 maxlen: 24 31.56.136.0/24 maxlen: 24 31.56.137.0/24 maxlen: 24 31.56.207.0/24 maxlen: 24 31.56.246.0/24 maxlen: 24 31.56.247.0/24 maxlen: 24 31.56.248.0/24 maxlen: 24 31.56.249.0/24 maxlen: 24 31.56.250.0/24 maxlen: 24 31.56.251.0/24 maxlen: 24 31.56.252.0/24 maxlen: 24 31.56.253.0/24 maxlen: 24 31.56.254.0/24 maxlen: 24 31.56.255.0/24 maxlen: 24 31.57.41.0/24 maxlen: 24 31.57.42.0/24 maxlen: 24 31.57.82.0/24 maxlen: 24 31.58.96.0/22 maxlen: 24 31.58.116.0/22 maxlen: 24 31.59.0.0/24 maxlen: 24 31.59.1.0/24 maxlen: 24 31.59.2.0/24 maxlen: 24 31.59.3.0/24 maxlen: 24 31.59.4.0/24 maxlen: 24 31.59.5.0/24 maxlen: 24 31.59.6.0/24 maxlen: 24 31.59.7.0/24 maxlen: 24 31.59.8.0/24 maxlen: 24 31.59.9.0/24 maxlen: 24 31.59.52.0/22 maxlen: 24 31.59.92.0/22 maxlen: 24 31.59.246.0/24 maxlen: 24 31.59.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:a3:be:44:54:5d:50:52:bd:f5:7a:de:b2:8b:ef:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 9 16:42:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f05a83c5c2ef91ba8583dca68c8124ceebb7513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:59:e6:74:1c:bc:c3:2f:d6:ae:83:a9:6b: 32:c3:cd:2c:19:49:ac:ba:14:59:2f:e9:c7:ec:85: cc:df:2a:0b:02:6c:ee:b8:1a:85:e3:d1:c8:46:cf: 25:a2:f0:eb:40:09:6a:8f:5e:b1:4b:be:e0:61:66: eb:9c:32:d2:28:f8:89:3c:c0:8b:17:39:d2:b6:be: 20:33:60:76:74:92:17:41:c5:fa:24:9f:20:93:a8: f1:e5:43:f0:7e:d6:3b:2d:85:ea:0f:e4:25:8a:7b: 79:85:3c:3c:55:ba:4a:c1:5d:6f:4b:bd:5e:a7:53: db:92:b3:ae:c4:85:7c:86:f1:6d:31:9c:d3:f1:d1: 7b:a7:d2:f9:98:32:4e:a1:55:47:3b:ed:e6:7f:f1: 1f:de:fb:25:88:a7:42:8d:22:c0:7e:cc:a7:13:c4: bc:e2:33:6a:c5:a1:96:2a:0d:71:95:b8:41:52:35: 5d:1c:64:62:ce:cd:55:ce:4c:80:5f:8c:fc:92:42: 8d:42:2b:55:31:7f:49:90:bd:fc:38:71:3c:ba:0a: 5c:8b:5b:fd:de:83:f9:18:8b:90:ca:ee:e1:ef:c6: ff:59:02:1b:11:50:d7:e8:d8:57:f3:44:a1:66:ba: 68:e3:9d:41:3e:41:e4:62:1f:46:72:19:39:ad:e0: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:A8:3C:5C:2E:F9:1B:A8:58:3D:CA:68:C8:12:4C:EE:BB:75:13 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fwWoPFwu-RuoWD3KaMgSTO67dRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.5.0/24 31.56.119.0/24 31.56.128.0-31.56.137.255 31.56.207.0/24 31.56.246.0-31.56.255.255 31.57.41.0-31.57.42.255 31.57.82.0/24 31.58.96.0/22 31.58.116.0/22 31.59.0.0-31.59.9.255 31.59.52.0/22 31.59.92.0/22 31.59.246.0/23 Signature Algorithm: sha256WithRSAEncryption 48:08:5a:dc:bf:f7:6d:13:74:c8:62:88:48:91:46:3c:48:36: 83:fa:a3:eb:32:dd:55:df:7d:d5:52:74:83:0f:7e:66:d2:b8: 67:bd:4c:c0:f2:56:e8:33:f3:3c:a3:3e:d8:52:04:ca:cd:29: 26:18:e0:d3:f2:0c:b0:b4:97:8d:8a:b1:4a:43:9d:52:57:f1: f6:4f:a4:1b:de:42:19:47:f8:15:6d:6d:69:b5:52:3d:69:a0: b9:8b:ef:12:4b:e3:a9:f5:6a:c4:ea:ea:24:ad:88:fd:40:91: 0f:95:fb:6e:e5:6d:04:bf:42:de:9c:21:b7:bc:e2:03:92:64: 44:88:7b:db:eb:1b:f6:25:30:6e:58:c4:f4:42:b0:4a:7a:a2: 22:3e:10:32:ad:ba:11:df:34:40:b9:b1:dc:ce:19:1b:6a:7b: d2:9e:bf:c3:6f:72:ac:84:8d:c9:59:ed:bc:9e:4b:35:52:de: 16:7e:c9:ad:96:1b:ed:31:90:93:48:ed:69:9d:64:28:a2:b4: b9:74:e9:0a:e5:03:e8:1b:b3:27:e7:0c:a2:0c:9d:f7:71:6b: e5:20:3a:5a:ea:25:54:8c:62:c4:24:5a:5c:e9:82:d0:f4:7c: 69:78:0c:69:af:6b:92:18:76:6f:f4:7d:ac:4e:21:27:6a:64: d3:99:6b:5d -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZujo75EVF1QUr31et6yi++BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA5MTY0MjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjA1YTgzYzVjMmVmOTFiYTg1ODNkY2E2OGM4MTI0Y2VlYmI3NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswJZ5nQcvMMv1q6DqWsyw80sGUms uhRZL+nH7IXM3yoLAmzuuBqF49HIRs8lovDrQAlqj16xS77gYWbrnDLSKPiJPMCL FznStr4gM2B2dJIXQcX6JJ8gk6jx5UPwftY7LYXqD+Qlint5hTw8VbpKwV1vS71e p1PbkrOuxIV8hvFtMZzT8dF7p9L5mDJOoVVHO+3mf/Ef3vsliKdCjSLAfsynE8S8 4jNqxaGWKg1xlbhBUjVdHGRizs1VzkyAX4z8kkKNQitVMX9JkL38OHE8ugpci1v9 3oP5GIuQyu7h78b/WQIbEVDX6NhX80ShZrpo451BPkHkYh9Gchk5reBbAwIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFH8FqDxcLvkbqFg9ymjIEkzuu3UTMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZndXb1BGd3UtUnVvV0QzS2FNZ1NUTzY3ZFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAB84BQME AB84dzAMAwQHHziAAwQBHziIAwQAHzjPMAsDBAEfOPYDAwAfODAMAwQAHzkpAwQA HzkqAwQAHzlSAwQCHzpgAwQCHzp0MAsDAwAfOwMEAR87CAMEAh87NAMEAh87XAME AR879jANBgkqhkiG9w0BAQsFAAOCAQEASAha3L/3bRN0yGKISJFGPEg2g/qj6zLd Vd991VJ0gw9+ZtK4Z71MwPJW6DPzPKM+2FIEys0pJhjg0/IMsLSXjYqxSkOdUlfx 9k+kG95CGUf4FW1tabVSPWmguYvvEkvjqfVqxOrqJK2I/UCRD5X7buVtBL9C3pwh t7ziA5JkRIh72+sb9iUwbljE9EKwSnqiIj4QMq26Ed80QLmx3M4ZG2p70p6/w29y rISNyVntvJ5LNVLeFn7JrZYb7TGQk0jtaZ1kKKK0uXTpCuUD6BuzJ+cMogyd93Fr 5SA6WuolVIxixCRaXOmC0PR8aXgMaa9rkhh2b/R9rE4hJ2pk05lrXQ== -----END CERTIFICATE-----Generated at Sat Jan 10 09:44:23 2026 by rpki-client