This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mhl8PkMPw4r6WBAHmKU-bVABNgQ.roa File: mhl8PkMPw4r6WBAHmKU-bVABNgQ.roa (raw, json) Hash identifier: XhvJFQ7zNOI3TI0sdGfyhrMEDIWCUIjZM3bOOrK5QQg= Subject key identifier: 9A:19:7C:3E:43:0F:C3:8A:FA:58:10:07:98:A5:3E:6D:50:01:36:04 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B4006449E3418AEAACC604936210E3FEC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mhl8PkMPw4r6WBAHmKU-bVABNgQ.roa Signing time: Sun 21 Dec 2025 08:28:31 +0000 ROA not before: Sun 21 Dec 2025 08:28:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.141.0/24 maxlen: 24 31.56.193.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:06:44:9e:34:18:ae:aa:cc:60:49:36:21:0e:3f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:28:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a197c3e430fc38afa58100798a53e6d50013604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:01:e5:39:7a:0d:b0:15:0d:e0:56:c6:44: 62:33:e0:85:12:82:8d:6f:c1:af:d5:cb:ce:fb:37: 60:e7:f7:da:f2:27:c7:0a:07:12:09:8e:15:3d:86: f2:1a:66:d6:1b:1c:77:1e:23:19:ea:4d:d1:f5:71: 1c:14:0a:ed:ff:ae:9a:3a:ab:19:fd:ed:57:21:8a: 1a:5e:e9:3a:cf:32:cd:3c:c5:55:d2:e5:d4:98:43: a4:2b:2b:b6:ae:21:32:5c:7d:da:b8:c6:89:fb:27: d9:72:25:1d:ff:aa:f2:81:b5:42:62:04:ac:49:45: 47:06:3a:02:93:ca:9d:a6:71:19:ee:7a:dd:1a:85: 49:a8:8b:c2:e6:b7:c5:68:61:95:95:3f:85:6e:1a: e2:6a:b7:f5:bd:e5:9b:44:73:52:89:d0:ea:ee:31: bc:bd:da:1e:6f:bf:69:f6:7e:d3:f5:56:a6:6a:30: 38:d7:b4:0d:06:74:1d:91:04:9c:cb:d6:53:2e:e7: 9a:1d:f8:66:84:8e:9d:d8:bb:cb:82:7b:14:d9:95: 0c:fa:60:da:4b:a7:ad:a6:39:eb:a5:d0:11:e7:d4: 1d:dc:ee:e1:6d:5a:40:eb:91:fb:29:17:65:b6:ed: 9a:0f:be:a1:8c:69:64:87:bf:9c:59:05:c7:ef:8a: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:19:7C:3E:43:0F:C3:8A:FA:58:10:07:98:A5:3E:6D:50:01:36:04 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mhl8PkMPw4r6WBAHmKU-bVABNgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.141.0/24 31.56.193.0/24 31.57.191.0/24 31.57.221.0/24 31.57.237.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:08:00:4e:a1:1b:e5:31:ef:74:fc:d8:ba:d1:ad:8c:32:54: 69:89:da:8a:25:3a:53:d5:06:99:87:2c:44:78:7c:e7:0d:cd: a7:aa:de:fa:c7:3d:b5:6a:23:79:05:b0:03:89:b9:26:52:2d: 9e:fc:ca:1e:6f:c8:18:20:f8:51:c9:6b:e3:08:3d:5f:f9:1b: b5:6d:04:4c:f4:04:d7:d7:49:bd:18:e7:6a:2a:fa:08:7c:85: 48:3b:c3:3c:6a:2d:6e:b5:1f:70:24:10:24:8a:54:55:4e:0c: 80:2f:85:6b:42:c2:c5:7c:eb:b7:1a:73:78:27:d0:b6:77:ca: 52:43:7a:05:45:b3:e7:0b:7f:b4:47:9a:0d:25:4d:35:01:2c: ff:7b:35:36:3b:15:59:0d:4f:0d:d7:ca:77:bd:9d:32:70:e1: d8:36:b7:37:bc:ae:92:25:5a:8b:b0:a0:2a:a1:54:36:9c:9d: 92:ce:7b:20:e9:82:51:9d:d0:0b:68:63:a2:b3:1b:cb:45:9b: 7b:3e:5d:89:30:ed:ca:7a:54:f2:a1:13:43:48:9e:d0:05:a6: 9a:10:17:ee:f0:45:11:05:53:fa:62:83:84:4f:89:07:6d:b8: 9a:b0:00:75:10:c2:f1:99:09:e6:b0:77:e7:e4:f8:ba:4b:da: 36:78:3a:b2 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZtABkSeNBiuqsxgSTYhDj/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgyODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTE5N2MzZTQzMGZjMzhhZmE1ODEwMDc5OGE1M2U2ZDUwMDEzNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne8B5Tl6DbAVDeBWxkRiM+CFEoKN b8Gv1cvO+zdg5/fa8ifHCgcSCY4VPYbyGmbWGxx3HiMZ6k3R9XEcFArt/66aOqsZ /e1XIYoaXuk6zzLNPMVV0uXUmEOkKyu2riEyXH3auMaJ+yfZciUd/6rygbVCYgSs SUVHBjoCk8qdpnEZ7nrdGoVJqIvC5rfFaGGVlT+Fbhriarf1veWbRHNSidDq7jG8 vdoeb79p9n7T9VamajA417QNBnQdkQScy9ZTLueaHfhmhI6d2LvLgnsU2ZUM+mDa S6etpjnrpdAR59Qd3O7hbVpA65H7KRdltu2aD76hjGlkh7+cWQXH74rEOwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJoZfD5DD8OK+lgQB5ilPm1QATYEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbWhsOFBrTVB3NHI2V0JBSG1LVS1iVkFCTmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHzh9AwQA HziNAwQAHzjBAwQAHzm/AwQAHzndAwQAHzntAwQAHzrnMA0GCSqGSIb3DQEBCwUA A4IBAQB/CABOoRvlMe90/Ni60a2MMlRpidqKJTpT1QaZhyxEeHznDc2nqt76xz21 aiN5BbADibkmUi2e/Moeb8gYIPhRyWvjCD1f+Ru1bQRM9ATX10m9GOdqKvoIfIVI O8M8ai1utR9wJBAkilRVTgyAL4VrQsLFfOu3GnN4J9C2d8pSQ3oFRbPnC3+0R5oN JU01ASz/ezU2OxVZDU8N18p3vZ0ycOHYNrc3vK6SJVqLsKAqoVQ2nJ2Sznsg6YJR ndALaGOisxvLRZt7Pl2JMO3KelTyoRNDSJ7QBaaaEBfu8EURBVP6YoOET4kHbbia sAB1EMLxmQnmsHfn5Pi6S9o2eDqy -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:40 2025 by rpki-client