This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h2ugTbf6QbMGnYeeoEs4WXFRLiA.roa File: h2ugTbf6QbMGnYeeoEs4WXFRLiA.roa (raw, json) Hash identifier: qIELJVqccl8C0VK40HAw6MjrzcaIoGQ0P3ahl1+yHRc= Subject key identifier: 87:6B:A0:4D:B7:FA:41:B3:06:9D:87:9E:A0:4B:38:59:71:51:2E:20 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B46F578F60CC257A651A85A21F87EC1F9 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h2ugTbf6QbMGnYeeoEs4WXFRLiA.roa Signing time: Mon 22 Dec 2025 16:47:30 +0000 ROA not before: Mon 22 Dec 2025 16:47:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.92.0/22 maxlen: 24 31.59.102.0/23 maxlen: 24 31.59.104.0/23 maxlen: 24 31.59.106.0/24 maxlen: 24 31.59.168.0/24 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.60.0/22 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.199.0/24 maxlen: 24 217.60.200.0/21 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:f5:78:f6:0c:c2:57:a6:51:a8:5a:21:f8:7e:c1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 22 16:47:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=876ba04db7fa41b3069d879ea04b385971512e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:1c:8e:1d:8e:d4:d5:d5:17:c1:34:cc:6b: 17:cc:b7:e3:3f:1a:36:80:91:18:e3:70:d1:16:60: ca:26:60:cb:01:66:c6:c6:9d:b7:3d:05:47:19:fe: d4:0b:a2:03:5c:8e:7d:07:61:31:9c:5f:18:13:0a: b7:43:f6:33:63:9b:87:25:46:e0:c1:a2:49:6c:46: eb:87:c7:8d:04:6f:a1:1c:28:03:f8:a7:9e:f5:0e: a6:9e:e6:65:74:86:bf:4a:2f:33:f3:37:79:f9:ac: 85:a4:ac:b3:19:55:80:78:80:cf:7a:3c:f1:48:a1: 68:42:8d:ea:45:79:6d:3c:9e:63:13:32:33:a3:69: d8:be:28:5d:d6:df:6d:1e:6e:84:12:16:fc:20:4b: d9:21:de:44:f9:c6:0e:1e:92:5e:28:56:4c:81:1b: d2:c3:4a:1d:65:30:4e:38:0e:d8:28:b9:62:ac:32: a3:de:4e:c7:ec:88:ed:b3:f0:8e:6e:45:bf:c5:37: 85:fa:2c:90:7b:69:cc:35:33:58:d3:f3:58:c1:37: cf:56:cb:55:bd:83:97:33:b2:a5:1a:34:6b:27:60: 4c:97:95:5b:da:78:07:65:15:49:08:83:0b:e4:38: c2:55:6d:3f:32:5b:94:13:ee:d7:14:fe:47:65:7b: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6B:A0:4D:B7:FA:41:B3:06:9D:87:9E:A0:4B:38:59:71:51:2E:20 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h2ugTbf6QbMGnYeeoEs4WXFRLiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.96.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.59.84.0/22 31.59.92.0/22 31.59.102.0-31.59.106.255 31.59.168.0/24 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.60.0/22 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.199.0-217.60.235.255 Signature Algorithm: sha256WithRSAEncryption 8d:53:ed:d3:53:7e:fe:7a:f6:50:bb:e7:e5:2b:ed:a3:9d:5a: 0b:2e:c9:32:3e:d0:18:6d:b3:93:91:4b:79:5f:8c:8a:7b:9b: ef:4d:89:68:be:42:ed:32:2d:4e:99:21:84:55:e9:01:bb:2f: b5:7b:c2:53:62:d2:4c:32:57:31:78:2b:31:ff:ed:90:9d:54: 50:ad:75:83:e0:75:97:af:df:77:aa:28:d5:7c:c7:9c:78:2b: 1c:b1:0e:c5:19:7d:40:cf:4f:ac:08:3d:6e:64:02:4a:14:f9: 7a:86:df:8c:12:ae:27:6a:3a:ae:21:42:e3:6e:65:74:15:d7: 6b:82:8f:5d:8e:92:34:d7:ad:33:ec:d5:28:a9:16:18:18:18: 4e:5b:25:5b:cd:3b:3f:c2:d9:a5:f9:a1:d2:92:d9:64:ac:04: dd:40:aa:f3:1a:d0:6f:c9:d5:85:6a:75:76:88:82:73:92:3b: 6b:59:24:5a:2d:ac:31:b4:6c:77:9f:04:aa:d2:a3:3d:17:77: 1b:02:04:4a:09:81:4e:75:31:20:b7:25:6c:e5:24:72:bc:1d: 79:cd:83:5b:eb:36:be:ab:3e:8c:0c:6d:7b:c6:cf:9a:18:40: fd:06:66:c9:2c:9e:a0:34:27:82:e3:25:56:bb:e0:b4:20:a7: 4c:d2:07:4a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZtG9Xj2DMJXplGoWiH4fsH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIyMTY0NzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzZiYTA0ZGI3ZmE0MWIzMDY5ZDg3OWVhMDRiMzg1OTcxNTEyZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6wcjh2O1NXVF8E0zGsXzLfjPxo2 gJEY43DRFmDKJmDLAWbGxp23PQVHGf7UC6IDXI59B2ExnF8YEwq3Q/YzY5uHJUbg waJJbEbrh8eNBG+hHCgD+Kee9Q6mnuZldIa/Si8z8zd5+ayFpKyzGVWAeIDPejzx SKFoQo3qRXltPJ5jEzIzo2nYvihd1t9tHm6EEhb8IEvZId5E+cYOHpJeKFZMgRvS w0odZTBOOA7YKLlirDKj3k7H7Ijts/CObkW/xTeF+iyQe2nMNTNY0/NYwTfPVstV vYOXM7KlGjRrJ2BMl5Vb2ngHZRVJCIML5DjCVW0/MluUE+7XFP5HZXt4vQIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFIdroE23+kGzBp2HnqBLOFlxUS4gMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvaDJ1Z1RiZjZRYk1HblllZW9FczRXWEZSTGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAAf ONMDBAAfOWADBAAfOcgwDAMEAh86tAMEAh86wAMEAh87VAMEAh87XDAMAwQBHztm AwQAHztqAwQAHzuoAwQAXreXAwQAXreeAwQAXrekAwQAXremMAwDBAFet64DBABe t7ADBAFet7QDBADZPA8DBALZPDwwDAMEBdk8oAMEA9k8sAMEAtk8vDAMAwQA2TzH AwQC2TzoMA0GCSqGSIb3DQEBCwUAA4IBAQCNU+3TU37+evZQu+flK+2jnVoLLsky PtAYbbOTkUt5X4yKe5vvTYlovkLtMi1OmSGEVekBuy+1e8JTYtJMMlcxeCsx/+2Q nVRQrXWD4HWXr993qijVfMeceCscsQ7FGX1Az0+sCD1uZAJKFPl6ht+MEq4najqu IULjbmV0Fddrgo9djpI0160z7NUoqRYYGBhOWyVbzTs/wtml+aHSktlkrATdQKrz GtBvydWFanV2iIJzkjtrWSRaLawxtGx3nwSq0qM9F3cbAgRKCYFOdTEgtyVs5SRy vB15zYNb6za+qz6MDG17xs+aGED9BmbJLJ6gNCeC4yVWu+C0IKdM0gdK -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:37 2025 by rpki-client