This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m5Mepa8bKjFHnLp2Y_U2B5kUrDQ.roa File: m5Mepa8bKjFHnLp2Y_U2B5kUrDQ.roa (raw, json) Hash identifier: 9+BLidRh+mqS8MpAitvDB0XcdZSLtYneCjR3MDk+4ZQ= Subject key identifier: 9B:93:1E:A5:AF:1B:2A:31:47:9C:BA:76:63:F5:36:07:99:14:AC:34 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BA3B17945B26DB2A49CC4CC36CC112239 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m5Mepa8bKjFHnLp2Y_U2B5kUrDQ.roa Signing time: Fri 09 Jan 2026 16:57:55 +0000 ROA not before: Fri 09 Jan 2026 16:57:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 31.56.6.0/24 maxlen: 24 31.56.34.0/24 maxlen: 24 31.56.35.0/24 maxlen: 24 31.56.59.0/24 maxlen: 24 31.56.190.0/24 maxlen: 24 31.56.192.0/24 maxlen: 24 31.56.195.0/24 maxlen: 24 31.56.218.0/24 maxlen: 24 31.56.231.0/24 maxlen: 24 31.56.239.0/24 maxlen: 24 31.57.11.0/24 maxlen: 24 31.57.25.0/24 maxlen: 24 31.57.53.0/24 maxlen: 24 31.57.59.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.120.0/24 maxlen: 24 31.57.129.0/24 maxlen: 24 31.57.142.0/24 maxlen: 24 31.57.143.0/24 maxlen: 24 31.57.146.0/24 maxlen: 24 31.57.151.0/24 maxlen: 24 31.57.170.0/24 maxlen: 24 31.57.171.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.249.0/24 maxlen: 24 31.57.253.0/24 maxlen: 24 31.58.57.0/24 maxlen: 24 31.58.213.0/24 maxlen: 24 31.59.108.0/24 maxlen: 24 31.59.109.0/24 maxlen: 24 31.59.110.0/24 maxlen: 24 31.59.197.0/24 maxlen: 24 31.59.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:b1:79:45:b2:6d:b2:a4:9c:c4:cc:36:cc:11:22:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 9 16:57:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b931ea5af1b2a31479cba7663f536079914ac34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:00:1e:86:cb:74:dc:15:27:51:32:a7:2d: db:59:7a:0e:76:c0:cf:90:0f:c6:a3:4f:71:30:39: b8:b0:3c:25:55:87:55:03:af:72:10:7e:34:30:30: 86:77:72:fa:84:5b:1b:e7:e8:73:f3:b0:ad:87:c6: 85:8a:9d:c1:8a:62:b2:fd:c3:cd:97:72:d4:d3:35: 48:1e:5a:16:88:27:93:9b:d9:67:ce:01:4d:ed:09: 10:a0:0f:f6:26:1e:87:cd:30:30:d1:6f:7e:bf:a1: 21:d6:a2:5a:67:7a:ff:88:3c:cc:54:be:e0:36:b3: 86:7d:1c:97:b7:0d:1c:90:3c:64:e7:3a:02:7e:b2: 37:e0:d2:82:89:1d:77:9b:44:73:b9:07:6c:21:c2: 92:a2:1e:cb:d3:da:1e:3b:53:16:be:31:29:c1:f3: 98:3b:2c:8b:7b:d6:d8:b5:07:16:98:91:82:b0:40: b4:29:ce:fc:41:a4:4e:1a:d4:5c:5b:00:e7:34:75: 5f:77:0c:6e:aa:fc:b7:9f:19:34:85:fa:a1:f2:98: fe:f3:71:a5:76:c9:a2:22:f9:ce:50:a1:bf:a4:89: b0:4b:fc:c7:fb:54:cd:66:9a:b9:8d:f7:8b:94:e7: a7:01:21:57:2c:2a:93:18:44:d9:cb:2c:0d:88:bd: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:93:1E:A5:AF:1B:2A:31:47:9C:BA:76:63:F5:36:07:99:14:AC:34 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m5Mepa8bKjFHnLp2Y_U2B5kUrDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.6.0/24 31.56.34.0/23 31.56.59.0/24 31.56.190.0/24 31.56.192.0/24 31.56.195.0/24 31.56.218.0/24 31.56.231.0/24 31.56.239.0/24 31.57.11.0/24 31.57.25.0/24 31.57.53.0/24 31.57.59.0/24 31.57.96.0/24 31.57.120.0/24 31.57.129.0/24 31.57.142.0/23 31.57.146.0/24 31.57.151.0/24 31.57.170.0/23 31.57.202.0/24 31.57.249.0/24 31.57.253.0/24 31.58.57.0/24 31.58.213.0/24 31.59.108.0-31.59.110.255 31.59.197.0/24 31.59.211.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:2b:10:87:3d:89:8c:ba:dc:8f:50:d5:d2:da:a8:e6:16:3b: 33:60:0b:8f:35:a2:0e:e7:62:20:06:ea:eb:3b:0e:36:78:81: e2:33:5c:2b:51:4f:e9:cb:12:07:09:94:27:f4:07:d6:5c:bd: 1d:cc:eb:80:60:19:0b:2f:77:13:01:64:1a:33:2e:0b:3d:26: 77:6d:90:76:be:a6:96:4a:c1:86:4e:8b:47:2a:1f:ca:9e:70: 12:e4:31:ca:26:c7:87:76:fa:9b:3b:c5:19:36:a5:c8:c7:06: 67:d3:ee:14:8f:d5:8b:fa:ad:3f:56:c5:d6:8c:ec:d9:01:c9: 62:a9:94:0d:c5:7b:a7:e1:36:f9:98:8d:75:fb:49:1d:46:26: e6:68:43:f8:ed:0c:a3:a6:cd:21:e8:b5:66:ad:f5:ff:24:fa: 0a:8a:9d:2d:73:54:49:52:71:23:b6:31:1c:56:4f:20:cd:a3: 10:de:ac:ba:22:19:f8:30:42:89:2d:b0:8e:51:5e:39:aa:de: 5a:d3:48:24:ec:41:42:d2:fa:86:7d:1d:b9:52:c6:e8:27:eb: ac:30:12:af:d5:8d:57:db:7b:01:16:6b:72:37:f5:15:20:24: 03:46:b8:b7:02:70:f8:9c:74:07:58:0d:3d:bd:b8:3d:1e:e9: 0c:26:e4:12 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZujsXlFsm2ypJzEzDbMESI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA5MTY1NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjkzMWVhNWFmMWIyYTMxNDc5Y2JhNzY2M2Y1MzYwNzk5MTRhYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT4AHobLdNwVJ1Eypy3bWXoOdsDP kA/Go09xMDm4sDwlVYdVA69yEH40MDCGd3L6hFsb5+hz87Cth8aFip3BimKy/cPN l3LU0zVIHloWiCeTm9lnzgFN7QkQoA/2Jh6HzTAw0W9+v6Eh1qJaZ3r/iDzMVL7g NrOGfRyXtw0ckDxk5zoCfrI34NKCiR13m0RzuQdsIcKSoh7L09oeO1MWvjEpwfOY OyyLe9bYtQcWmJGCsEC0Kc78QaROGtRcWwDnNHVfdwxuqvy3nxk0hfqh8pj+83Gl dsmiIvnOUKG/pImwS/zH+1TNZpq5jfeLlOenASFXLCqTGETZyywNiL34hQIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFJuTHqWvGyoxR5y6dmP1NgeZFKw0MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbTVNZXBhOGJLakZIbkxwMllfVTJCNWtVckRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAAf OAYDBAEfOCIDBAAfODsDBAAfOL4DBAAfOMADBAAfOMMDBAAfONoDBAAfOOcDBAAf OO8DBAAfOQsDBAAfORkDBAAfOTUDBAAfOTsDBAAfOWADBAAfOXgDBAAfOYEDBAEf OY4DBAAfOZIDBAAfOZcDBAEfOaoDBAAfOcoDBAAfOfkDBAAfOf0DBAAfOjkDBAAf OtUwDAMEAh87bAMEAB87bgMEAB87xQMEAB870zANBgkqhkiG9w0BAQsFAAOCAQEA iysQhz2JjLrcj1DV0tqo5hY7M2ALjzWiDudiIAbq6zsONniB4jNcK1FP6csSBwmU J/QH1ly9HczrgGAZCy93EwFkGjMuCz0md22Qdr6mlkrBhk6LRyofyp5wEuQxyibH h3b6mzvFGTalyMcGZ9PuFI/Vi/qtP1bF1ozs2QHJYqmUDcV7p+E2+ZiNdftJHUYm 5mhD+O0Mo6bNIei1Zq31/yT6CoqdLXNUSVJxI7YxHFZPIM2jEN6suiIZ+DBCiS2w jlFeOareWtNIJOxBQtL6hn0duVLG6CfrrDASr9WNV9t7ARZrcjf1FSAkA0a4twJw +Jx0B1gNPb24PR7pDCbkEg== -----END CERTIFICATE-----Generated at Sat Jan 10 09:45:27 2026 by rpki-client