This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gKUtoiCQeQzs5hSMqEnIEPLo7Ao.roa File: gKUtoiCQeQzs5hSMqEnIEPLo7Ao.roa (raw, json) Hash identifier: ctC6hRYBlFhoDSWcYHTzsGaKQOE3SK3pD5sGVGhuiDE= Subject key identifier: 80:A5:2D:A2:20:90:79:0C:EC:E6:14:8C:A8:49:C8:10:F2:E8:EC:0A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BCD4304408E4FB69F13307DCBC029E3E4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gKUtoiCQeQzs5hSMqEnIEPLo7Ao.roa Signing time: Sat 17 Jan 2026 18:41:19 +0000 ROA not before: Sat 17 Jan 2026 18:41:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 31.56.6.0/24 maxlen: 24 31.56.34.0/24 maxlen: 24 31.56.35.0/24 maxlen: 24 31.56.59.0/24 maxlen: 24 31.56.69.0/24 maxlen: 24 31.56.190.0/24 maxlen: 24 31.56.192.0/24 maxlen: 24 31.56.195.0/24 maxlen: 24 31.56.218.0/24 maxlen: 24 31.56.231.0/24 maxlen: 24 31.56.239.0/24 maxlen: 24 31.57.11.0/24 maxlen: 24 31.57.25.0/24 maxlen: 24 31.57.31.0/24 maxlen: 24 31.57.53.0/24 maxlen: 24 31.57.54.0/24 maxlen: 24 31.57.55.0/24 maxlen: 24 31.57.59.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.120.0/24 maxlen: 24 31.57.129.0/24 maxlen: 24 31.57.138.0/24 maxlen: 24 31.57.142.0/24 maxlen: 24 31.57.143.0/24 maxlen: 24 31.57.146.0/24 maxlen: 24 31.57.151.0/24 maxlen: 24 31.57.152.0/24 maxlen: 24 31.57.155.0/24 maxlen: 24 31.57.160.0/24 maxlen: 24 31.57.170.0/24 maxlen: 24 31.57.171.0/24 maxlen: 24 31.57.196.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.249.0/24 maxlen: 24 31.57.253.0/24 maxlen: 24 31.58.57.0/24 maxlen: 24 31.58.213.0/24 maxlen: 24 31.59.108.0/24 maxlen: 24 31.59.109.0/24 maxlen: 24 31.59.110.0/24 maxlen: 24 31.59.197.0/24 maxlen: 24 31.59.206.0/24 maxlen: 24 31.59.207.0/24 maxlen: 24 31.59.209.0/24 maxlen: 24 31.59.210.0/24 maxlen: 24 31.59.211.0/24 maxlen: 24 31.59.220.0/24 maxlen: 24 31.59.221.0/24 maxlen: 24 31.59.222.0/24 maxlen: 24 31.59.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:43:04:40:8e:4f:b6:9f:13:30:7d:cb:c0:29:e3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 17 18:41:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80a52da22090790cece6148ca849c810f2e8ec0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:e6:41:84:57:ab:7f:dc:4e:bb:e7:65:89: 21:ee:d0:fb:36:44:65:1b:c5:dd:0a:2f:17:b7:59: 39:75:98:db:40:6e:b6:38:60:ee:ba:6b:e7:95:7f: cc:6f:e4:da:9e:4a:f9:39:b1:d4:a8:44:ca:bf:87: 58:1d:65:05:53:3f:9a:e6:11:3f:dc:8d:99:d5:2f: cd:ae:ed:9b:f2:a8:24:64:e9:b9:55:15:31:b2:bc: 33:92:98:80:4a:28:fe:33:2c:9a:b1:4a:4f:05:ae: 5d:3a:dd:ca:8a:5d:b8:40:f9:54:bb:83:d1:59:0b: c0:c3:81:b1:a7:e7:f0:d4:de:25:64:ce:f2:00:0a: 06:ba:88:d7:07:a2:ea:86:39:5e:ef:0d:3a:ff:1b: 4c:3a:99:d8:1b:aa:28:4a:59:0a:2f:b5:10:14:12: ac:f7:12:08:96:a8:8b:0a:d8:3d:ce:63:43:15:22: 6e:ac:54:66:6f:d9:85:ea:d0:d8:a6:26:44:9a:6b: 79:e1:8c:0a:15:85:72:f5:79:aa:92:35:74:8c:c1: b2:dd:7c:55:04:52:57:64:94:94:24:ce:ed:95:5b: 0a:af:59:db:c4:ae:61:43:0b:de:1b:e6:3e:cb:08: 8c:0c:63:a2:91:2d:25:8c:02:c5:4d:bc:58:82:a7: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A5:2D:A2:20:90:79:0C:EC:E6:14:8C:A8:49:C8:10:F2:E8:EC:0A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gKUtoiCQeQzs5hSMqEnIEPLo7Ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.6.0/24 31.56.34.0/23 31.56.59.0/24 31.56.69.0/24 31.56.190.0/24 31.56.192.0/24 31.56.195.0/24 31.56.218.0/24 31.56.231.0/24 31.56.239.0/24 31.57.11.0/24 31.57.25.0/24 31.57.31.0/24 31.57.53.0-31.57.55.255 31.57.59.0/24 31.57.96.0/24 31.57.120.0/24 31.57.129.0/24 31.57.138.0/24 31.57.142.0/23 31.57.146.0/24 31.57.151.0-31.57.152.255 31.57.155.0/24 31.57.160.0/24 31.57.170.0/23 31.57.196.0/24 31.57.202.0/24 31.57.249.0/24 31.57.253.0/24 31.58.57.0/24 31.58.213.0/24 31.59.108.0-31.59.110.255 31.59.197.0/24 31.59.206.0/23 31.59.209.0-31.59.211.255 31.59.220.0-31.59.222.255 31.59.232.0/24 Signature Algorithm: sha256WithRSAEncryption 29:c4:03:97:8b:08:49:24:21:0f:2a:45:29:2a:5e:62:1e:fb: 78:38:d5:f4:43:e6:fb:a2:ef:f0:c5:5b:e7:4a:5d:e9:b1:bb: 81:28:d5:a1:49:8b:ed:73:05:a2:9c:15:a2:91:59:66:d0:ab: 4f:7a:2b:f5:0b:b5:eb:21:fd:f5:38:72:ac:d1:80:fe:6f:29: 0e:4a:8e:72:18:5c:ca:46:30:c7:67:97:13:cd:89:2b:01:00: 3a:1b:db:9c:95:de:7d:c2:69:80:9e:26:1c:fe:db:b1:2f:6a: 1e:44:0a:57:19:da:67:27:08:c1:ad:1f:1f:96:6f:9f:51:fb: 6f:7a:5d:b6:3a:5e:20:de:be:9e:9b:ac:e1:5f:6a:7c:05:2f: 46:90:0e:54:8a:dd:28:c7:cd:2c:46:c0:de:28:3b:58:98:16: c1:bd:f6:c2:94:65:df:2d:c0:80:cf:17:ef:8a:2c:8c:d1:ad: d8:e8:7b:96:53:12:c4:33:f3:e8:fe:4c:30:f6:57:32:bb:1f: a4:76:70:cf:9d:ee:77:19:a1:a0:1d:9a:42:8b:d9:e0:c1:a8: 86:fd:8d:3e:49:2d:58:a4:9c:06:c6:58:66:70:cd:3f:d2:90: 49:3e:d2:11:cb:9a:97:a9:c1:e4:f7:07:a4:a1:7e:ab:25:7e: 00:36:ab:5c -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISAZvNQwRAjk+2nxMwfcvAKePkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE3MTg0MTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGE1MmRhMjIwOTA3OTBjZWNlNjE0OGNhODQ5YzgxMGYyZThlYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYvmQYRXq3/cTrvnZYkh7tD7NkRl G8XdCi8Xt1k5dZjbQG62OGDuumvnlX/Mb+Tankr5ObHUqETKv4dYHWUFUz+a5hE/ 3I2Z1S/Nru2b8qgkZOm5VRUxsrwzkpiASij+MyyasUpPBa5dOt3Kil24QPlUu4PR WQvAw4Gxp+fw1N4lZM7yAAoGuojXB6Lqhjle7w06/xtMOpnYG6ooSlkKL7UQFBKs 9xIIlqiLCtg9zmNDFSJurFRmb9mF6tDYpiZEmmt54YwKFYVy9XmqkjV0jMGy3XxV BFJXZJSUJM7tlVsKr1nbxK5hQwveG+Y+ywiMDGOikS0ljALFTbxYgqdcAwIDAQAB o4IDEzCCAw8wHQYDVR0OBBYEFIClLaIgkHkM7OYUjKhJyBDy6OwKMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZ0tVdG9pQ1FlUXpzNWhTTXFFbklFUExvN0FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcBAf8EggEWMIIBEjCCAQ4EAgABMIIB BgMEAB84BgMEAR84IgMEAB84OwMEAB84RQMEAB84vgMEAB84wAMEAB84wwMEAB84 2gMEAB845wMEAB847wMEAB85CwMEAB85GQMEAB85HzAMAwQAHzk1AwQDHzkwAwQA Hzk7AwQAHzlgAwQAHzl4AwQAHzmBAwQAHzmKAwQBHzmOAwQAHzmSMAwDBAAfOZcD BAAfOZgDBAAfOZsDBAAfOaADBAEfOaoDBAAfOcQDBAAfOcoDBAAfOfkDBAAfOf0D BAAfOjkDBAAfOtUwDAMEAh87bAMEAB87bgMEAB87xQMEAR87zjAMAwQAHzvRAwQC HzvQMAwDBAIfO9wDBAAfO94DBAAfO+gwDQYJKoZIhvcNAQELBQADggEBACnEA5eL CEkkIQ8qRSkqXmIe+3g41fRD5vui7/DFW+dKXemxu4Eo1aFJi+1zBaKcFaKRWWbQ q096K/ULtesh/fU4cqzRgP5vKQ5KjnIYXMpGMMdnlxPNiSsBADob25yV3n3CaYCe Jhz+27Evah5EClcZ2mcnCMGtHx+Wb59R+296XbY6XiDevp6brOFfanwFL0aQDlSK 3SjHzSxGwN4oO1iYFsG99sKUZd8twIDPF++KLIzRrdjoe5ZTEsQz8+j+TDD2VzK7 H6R2cM+d7ncZoaAdmkKL2eDBqIb9jT5JLViknAbGWGZwzT/SkEk+0hHLmpepweT3 B6ShfqslfgA2q1w= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:07 2026 by rpki-client