This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jUKvzAuajP-NwCHIqnSa4K9WV0I.roa File: jUKvzAuajP-NwCHIqnSa4K9WV0I.roa (raw, json) Hash identifier: GllpezRk1/h1MbjiI43BVJdJf7cLjKuOb5UDz4coGes= Subject key identifier: 8D:42:AF:CC:0B:9A:8C:FF:8D:C0:21:C8:AA:74:9A:E0:AF:56:57:42 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019ACA1F9F6831B3069C5248E9BB2D92B4C5 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jUKvzAuajP-NwCHIqnSa4K9WV0I.roa Signing time: Fri 28 Nov 2025 11:01:01 +0000 ROA not before: Fri 28 Nov 2025 11:01:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25369 IP address blocks: 31.58.44.0/22 maxlen: 24 31.58.60.0/22 maxlen: 24 31.59.196.0/22 maxlen: 24 31.59.200.0/22 maxlen: 24 31.59.204.0/22 maxlen: 24 31.59.208.0/22 maxlen: 24 31.59.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:1f:9f:68:31:b3:06:9c:52:48:e9:bb:2d:92:b4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 28 11:01:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d42afcc0b9a8cff8dc021c8aa749ae0af565742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:60:a5:78:bd:53:e0:ce:37:5d:58:77:c0: 82:45:91:e2:75:de:1e:27:03:b4:b3:42:85:ec:fa: 38:f4:06:a3:c5:6e:f1:ca:a4:f3:10:2a:7e:fd:35: 8c:50:67:85:8b:cc:f0:06:57:5a:17:71:93:0c:ae: dc:40:85:be:c9:35:95:28:f0:02:fa:3b:17:2e:b0: f9:4d:d8:ab:51:47:e5:a1:76:5c:92:6d:e6:e5:70: 0f:55:cf:04:b3:7f:13:54:0d:b2:0b:4d:5d:14:98: b0:5b:09:c4:00:2d:c5:5c:48:2c:d7:de:f1:ad:a8: 68:4d:7d:46:41:d3:3e:2c:e9:6c:33:8a:f8:db:e8: 32:02:ce:73:8d:e6:60:73:7f:26:28:a4:c1:74:50: 19:90:0e:96:ba:d5:4a:34:7b:9d:e6:a4:8f:7c:0b: ed:62:aa:70:f5:27:1b:af:20:ee:44:19:6b:26:7f: ce:4e:7d:3b:9f:79:5a:65:b1:9d:96:68:21:29:e4: 8a:0e:16:b5:0a:68:03:bf:17:89:60:2f:d0:4e:b0: 3a:4b:9a:5a:d0:81:18:e9:bf:f8:8b:a7:af:6d:95: 42:32:8e:2b:e2:db:06:63:a5:d4:49:1e:5d:d0:e3: ad:73:de:dc:8a:c6:a7:05:b6:bf:07:a9:92:73:27: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:42:AF:CC:0B:9A:8C:FF:8D:C0:21:C8:AA:74:9A:E0:AF:56:57:42 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jUKvzAuajP-NwCHIqnSa4K9WV0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.44.0/22 31.58.60.0/22 31.59.196.0-31.59.211.255 31.59.220.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:64:dd:30:d7:35:c7:b4:1c:de:c2:fd:de:54:2c:5c:cf:bd: 32:27:f2:bc:9d:8b:e7:73:66:e3:c0:bb:98:ef:98:11:3c:74: 20:b7:bb:d4:2c:f0:53:21:db:9b:0f:8b:de:e7:09:9e:22:4c: 79:b4:9a:a1:f5:7c:32:cc:ab:fa:5a:94:11:94:ef:12:6c:97: 37:0e:9d:31:f6:21:ca:d1:20:f9:a7:ab:3f:3f:8d:7c:94:b7: 65:b4:5c:40:b2:12:de:ae:cc:83:a1:48:ca:e0:80:2d:49:b4: a7:60:3a:1d:88:a2:8d:c3:81:ef:c8:c3:88:78:7c:2d:2d:b2: 56:6b:4a:96:e0:a4:99:13:a5:5c:a5:5f:6b:89:c8:6e:61:2b: 78:ad:c0:2b:c1:5b:01:a1:1e:c1:db:44:11:47:f4:e5:25:14: 3d:24:ab:48:95:23:15:70:25:85:78:83:de:b1:be:ae:72:1d: fe:20:e2:05:a5:eb:63:2b:f9:06:2c:a9:5d:01:49:02:13:be: d5:76:2e:c9:1e:69:d3:e6:6b:c1:2f:a6:43:4d:cb:d6:a9:f2: 79:a0:92:31:ad:6f:14:67:11:6f:35:66:49:ba:6f:8a:f4:14: 31:17:06:01:ba:2b:98:c2:c9:18:6e:da:2b:0e:df:b1:0e:3b: 5a:ea:ea:c6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZrKH59oMbMGnFJI6bstkrTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTI4MTEwMTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDQyYWZjYzBiOWE4Y2ZmOGRjMDIxYzhhYTc0OWFlMGFmNTY1NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuedgpXi9U+DON11Yd8CCRZHidd4e JwO0s0KF7Po49AajxW7xyqTzECp+/TWMUGeFi8zwBldaF3GTDK7cQIW+yTWVKPAC +jsXLrD5TdirUUfloXZckm3m5XAPVc8Es38TVA2yC01dFJiwWwnEAC3FXEgs197x rahoTX1GQdM+LOlsM4r42+gyAs5zjeZgc38mKKTBdFAZkA6WutVKNHud5qSPfAvt Yqpw9ScbryDuRBlrJn/OTn07n3laZbGdlmghKeSKDha1CmgDvxeJYC/QTrA6S5pa 0IEY6b/4i6evbZVCMo4r4tsGY6XUSR5d0OOtc97cisanBba/B6mScyerNQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFI1Cr8wLmoz/jcAhyKp0muCvVldCMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvalVLdnpBdWFqUC1Od0NISXFuU2E0SzlXVjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCHzosAwQC Hzo8MAwDBAIfO8QDBAIfO9ADBAIfO9wwDQYJKoZIhvcNAQELBQADggEBAB1k3TDX Nce0HN7C/d5ULFzPvTIn8rydi+dzZuPAu5jvmBE8dCC3u9Qs8FMh25sPi97nCZ4i THm0mqH1fDLMq/palBGU7xJslzcOnTH2IcrRIPmnqz8/jXyUt2W0XECyEt6uzIOh SMrggC1JtKdgOh2Ioo3Dge/Iw4h4fC0tslZrSpbgpJkTpVylX2uJyG5hK3itwCvB WwGhHsHbRBFH9OUlFD0kq0iVIxVwJYV4g96xvq5yHf4g4gWl62Mr+QYsqV0BSQIT vtV2LskeadPma8EvpkNNy9ap8nmgkjGtbxRnEW81Zkm6b4r0FDEXBgG6K5jCyRhu 2isO37EOO1rq6sY= -----END CERTIFICATE-----Generated at Fri Dec 5 15:01:23 2025 by rpki-client