This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h1Rp780uYOP34Vcb49o-dOFnO-E.roa File: h1Rp780uYOP34Vcb49o-dOFnO-E.roa (raw, json) Hash identifier: GBTB2Vrv4CBPLEcJZv5kKSLzmpouXABhedULAP3Fn7Q= Subject key identifier: 87:54:69:EF:CD:2E:60:E3:F7:E1:57:1B:E3:DA:3E:74:E1:67:3B:E1 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846AB1DD6F9AEB90570C60546BFAD3 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h1Rp780uYOP34Vcb49o-dOFnO-E.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 31.56.16.0/22 maxlen: 24 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.16.0/21 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.135.0/24 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.176.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.200.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.216.0/22 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.240.0/22 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.245.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 31.58.252.0/22 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.64.0/22 maxlen: 24 31.59.80.0/22 maxlen: 24 31.59.124.0/22 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 31.59.176.0/21 maxlen: 24 31.59.188.0/22 maxlen: 24 31.59.192.0/22 maxlen: 24 31.59.216.0/22 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.8.0/22 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.187.0/24 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6a:b1:dd:6f:9a:eb:90:57:0c:60:54:6b:fa:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=875469efcd2e60e3f7e1571be3da3e74e1673be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:2b:65:65:64:94:f0:81:ba:b5:a2:20:84: 8c:be:15:cc:71:15:37:16:74:1a:87:e6:80:b7:78: 1e:62:06:27:62:5e:f9:76:26:8a:fc:64:3b:f8:2d: 89:2b:7c:b9:b2:33:79:3c:eb:6d:dc:a5:15:06:5c: 53:2c:04:b5:0b:7e:97:4a:2b:55:8d:12:71:5f:0d: 4b:3c:7b:0d:61:10:2e:a5:62:f8:28:3d:bf:9a:97: ab:b8:45:22:ca:2a:fd:f0:c9:b0:80:ba:d7:95:05: 82:45:70:53:db:6e:96:50:aa:9d:67:0d:85:79:0a: a5:df:51:6e:32:06:2b:15:4b:99:82:9a:8e:5f:91: 27:c1:13:70:57:a2:0f:72:f0:2d:c6:f8:8a:03:8e: 91:d6:b7:8d:3a:0c:88:74:87:11:13:1d:31:14:c9: af:70:ad:ae:13:5e:6d:11:f5:af:14:45:b9:1e:54: 17:d3:ce:da:36:ad:8f:c0:b4:1e:f2:24:98:8c:86: 9f:b1:75:9d:c7:aa:09:66:4e:18:06:a0:4b:3d:ab: 4a:f3:b5:76:93:c1:cf:77:c6:fc:97:7f:e4:24:cb: c9:dc:9d:67:e0:16:ba:ad:57:af:6c:a7:b8:d9:8f: d1:38:6b:c9:8f:bd:87:8b:67:5d:c9:16:dc:ba:f7: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:54:69:EF:CD:2E:60:E3:F7:E1:57:1B:E3:DA:3E:74:E1:67:3B:E1 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h1Rp780uYOP34Vcb49o-dOFnO-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.16.0/22 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.16.0/21 31.57.36.0/23 31.57.135.0/24 31.57.168.0/23 31.57.184.0/23 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.176.0/22 31.58.196.0-31.58.209.255 31.58.216.0/22 31.58.232.0/23 31.58.240.0-31.58.245.255 31.58.249.0-31.58.255.255 31.59.36.0/22 31.59.44.0/22 31.59.64.0/22 31.59.80.0/22 31.59.124.0/22 31.59.140.0/22 31.59.148.0-31.59.165.255 31.59.176.0/21 31.59.188.0-31.59.195.255 31.59.216.0/22 94.183.152.0/22 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.8.0/22 217.60.16.0/21 217.60.28.0-217.60.35.255 217.60.40.0-217.60.59.255 217.60.187.0/24 217.60.196.0/23 217.60.244.0/23 Signature Algorithm: sha256WithRSAEncryption af:23:ff:88:46:71:6d:75:3a:d2:84:33:3a:96:c4:db:72:85: a1:0f:91:c2:08:2b:8c:7a:52:fc:4b:d2:e9:b2:49:71:eb:b9: 3d:46:29:5f:2b:0b:16:cd:3d:e6:f5:c7:6a:49:a5:d6:6c:72: bd:e3:75:3d:46:b3:33:5d:7e:b2:b2:64:75:a5:18:a2:c3:77: 43:9f:90:a1:e8:71:5a:9d:d9:c2:d0:a5:81:4c:ad:7e:b8:54: b9:a6:cd:db:82:d0:10:79:bb:8f:a9:3e:c1:45:c1:ed:26:c1: ac:a2:e4:9f:db:60:49:40:40:45:bd:8d:cf:33:c2:fd:5a:88: e2:26:25:45:d1:07:4c:22:83:72:94:97:25:44:5b:f5:af:d4: 2d:b9:87:6f:e4:39:d4:4a:34:33:05:55:64:42:f4:d0:8e:c2: f3:47:22:8f:59:5e:84:3c:af:44:36:b4:52:7d:3b:0a:b7:27: 4d:09:eb:e0:1b:5e:7f:1b:e9:84:e4:96:18:ca:ee:a4:92:d9: b0:65:37:31:bc:db:f5:da:17:78:d6:7b:f4:e6:b9:85:43:13: 2e:86:8c:5f:ea:d4:e5:05:45:73:5e:39:4c:f5:b2:e6:b8:0d: 29:24:94:0d:ee:d0:c9:7e:e8:7f:3e:4b:34:ee:3f:e8:79:21: 5f:17:0e:0b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgISAZt/hGqx3W+a65BXDGBUa/rTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzU0NjllZmNkMmU2MGUzZjdlMTU3MWJlM2RhM2U3NGUxNjczYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhkrZWVklPCBurWiIISMvhXMcRU3 FnQah+aAt3geYgYnYl75diaK/GQ7+C2JK3y5sjN5POtt3KUVBlxTLAS1C36XSitV jRJxXw1LPHsNYRAupWL4KD2/mperuEUiyir98MmwgLrXlQWCRXBT226WUKqdZw2F eQql31FuMgYrFUuZgpqOX5EnwRNwV6IPcvAtxviKA46R1reNOgyIdIcREx0xFMmv cK2uE15tEfWvFEW5HlQX087aNq2PwLQe8iSYjIafsXWdx6oJZk4YBqBLPatK87V2 k8HPd8b8l3/kJMvJ3J1n4Ba6rVevbKe42Y/ROGvJj72Hi2ddyRbcuvervQIDAQAB o4IDUTCCA00wHQYDVR0OBBYEFIdUae/NLmDj9+FXG+PaPnThZzvhMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaDFScDc4MHVZT1AzNFZjYjQ5by1kT0ZuTy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgABMIIB RAMEAh84EAMEAh84sDAMAwQBHzi2AwQBHzi8AwQBHzjQAwQBHzjkAwQDHzkQAwQB HzkkAwQAHzmHAwQBHzmoAwQBHzm4AwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQC HzpcAwQCHzqwMAwDBAIfOsQDBAEfOtADBAIfOtgDBAEfOugwDAMEBB868AMEAR86 9DALAwQAHzr5AwMAHzoDBAIfOyQDBAIfOywDBAIfO0ADBAIfO1ADBAIfO3wDBAIf O4wwDAMEAh87lAMEAR87pAMEAx87sDAMAwQCHzu8AwQCHzvAAwQCHzvYAwQCXreY MAwDBAZet8ADBANet+AwCwMEAl637AMDA16wAwQC2TwIAwQD2TwQMAwDBALZPBwD BALZPCAwDAMEA9k8KAMEAtk8OAMEANk8uwMEAdk8xAMEAdk89DANBgkqhkiG9w0B AQsFAAOCAQEAryP/iEZxbXU60oQzOpbE23KFoQ+RwggrjHpS/EvS6bJJceu5PUYp XysLFs095vXHakml1mxyveN1PUazM11+srJkdaUYosN3Q5+QoehxWp3ZwtClgUyt frhUuabN24LQEHm7j6k+wUXB7SbBrKLkn9tgSUBARb2NzzPC/VqI4iYlRdEHTCKD cpSXJURb9a/ULbmHb+Q51Eo0MwVVZEL00I7C80cij1lehDyvRDa0Un07CrcnTQnr 4BtefxvphOSWGMrupJLZsGU3Mbzb9doXeNZ79Oa5hUMTLoaMX+rU5QVFc145TPWy 5rgNKSSUDe7QyX7ofz5LNO4/6HkhXxcOCw== -----END CERTIFICATE-----Generated at Mon Jan 5 14:39:16 2026 by rpki-client