This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oKVW900w5QEqEodrxwzJjKZrr8k.roa File: oKVW900w5QEqEodrxwzJjKZrr8k.roa (raw, json) Hash identifier: 5NlxZ/MM4EdgMqjcbc2l3LJQ/+g8OhQD//K+d/siOt8= Subject key identifier: A0:A5:56:F7:4D:30:E5:01:2A:12:87:6B:C7:0C:C9:8C:A6:6B:AF:C9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B3AC9F0FB787536BE628BF0375B6A7A82 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oKVW900w5QEqEodrxwzJjKZrr8k.roa Signing time: Sat 20 Dec 2025 08:04:31 +0000 ROA not before: Sat 20 Dec 2025 08:04:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 31.56.5.0/24 maxlen: 24 31.56.119.0/24 maxlen: 24 31.56.128.0/24 maxlen: 24 31.56.129.0/24 maxlen: 24 31.56.130.0/24 maxlen: 24 31.56.131.0/24 maxlen: 24 31.56.132.0/24 maxlen: 24 31.56.133.0/24 maxlen: 24 31.56.134.0/24 maxlen: 24 31.56.135.0/24 maxlen: 24 31.56.136.0/24 maxlen: 24 31.56.137.0/24 maxlen: 24 31.56.207.0/24 maxlen: 24 31.56.246.0/24 maxlen: 24 31.56.247.0/24 maxlen: 24 31.56.248.0/24 maxlen: 24 31.56.249.0/24 maxlen: 24 31.56.250.0/24 maxlen: 24 31.56.251.0/24 maxlen: 24 31.56.252.0/24 maxlen: 24 31.56.253.0/24 maxlen: 24 31.56.254.0/24 maxlen: 24 31.56.255.0/24 maxlen: 24 31.57.41.0/24 maxlen: 24 31.57.42.0/24 maxlen: 24 31.57.82.0/24 maxlen: 24 31.58.96.0/22 maxlen: 24 31.58.116.0/22 maxlen: 24 31.59.0.0/24 maxlen: 24 31.59.1.0/24 maxlen: 24 31.59.2.0/24 maxlen: 24 31.59.3.0/24 maxlen: 24 31.59.4.0/24 maxlen: 24 31.59.5.0/24 maxlen: 24 31.59.6.0/24 maxlen: 24 31.59.7.0/24 maxlen: 24 31.59.8.0/24 maxlen: 24 31.59.9.0/24 maxlen: 24 31.59.52.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.246.0/24 maxlen: 24 31.59.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c9:f0:fb:78:75:36:be:62:8b:f0:37:5b:6a:7a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 20 08:04:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0a556f74d30e5012a12876bc70cc98ca66bafc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:76:e7:7e:a9:a4:bd:41:7e:9a:dc:83:a0:aa: b2:93:15:45:dd:dd:e5:92:a0:be:bc:ee:48:7c:2f: 20:1a:f9:6d:29:2c:6b:e6:44:05:6d:b9:8f:cb:d5: f7:39:7d:d2:9b:74:02:29:5d:6a:fd:3e:9a:71:59: 29:dc:c5:b3:26:77:cb:78:e4:a3:ba:35:a4:fd:cc: 8e:ed:34:26:0b:34:a3:a5:12:14:87:f2:1e:d4:df: fb:c9:36:5a:4e:13:9e:df:5b:f6:a6:c5:d5:ca:ed: 3a:9e:f9:e3:2b:95:18:5b:3c:da:7f:27:95:0e:e5: 5e:19:67:0c:bf:25:12:50:ce:10:cf:9f:21:e3:4b: e7:87:e6:38:74:39:e7:a7:54:98:9b:01:90:2c:3a: cc:22:88:8d:2b:17:b0:ea:90:e3:14:81:62:23:3f: 47:6b:b4:be:1c:d6:ec:f3:f0:bd:b7:76:7a:5e:f8: 3e:1b:fd:56:78:07:30:7b:ec:b0:e2:d2:28:4b:03: 27:c1:ab:3a:c6:b7:9c:26:cf:f8:f3:fe:e9:4f:79: 60:65:65:e4:b8:b7:a5:41:40:24:93:ef:3a:a8:e2: 34:0a:c0:86:88:b0:aa:4b:64:25:82:05:5f:7b:fa: 87:21:8d:4f:f1:b1:f4:84:ba:4f:f8:db:cb:53:c0: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:56:F7:4D:30:E5:01:2A:12:87:6B:C7:0C:C9:8C:A6:6B:AF:C9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oKVW900w5QEqEodrxwzJjKZrr8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.5.0/24 31.56.119.0/24 31.56.128.0-31.56.137.255 31.56.207.0/24 31.56.246.0-31.56.255.255 31.57.41.0-31.57.42.255 31.57.82.0/24 31.58.96.0/22 31.58.116.0/22 31.59.0.0-31.59.9.255 31.59.52.0/22 31.59.90.0/23 31.59.246.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:dd:f1:d0:f0:9d:90:ba:79:47:64:7f:92:10:a4:8d:72:24: 1a:e2:95:26:61:41:f8:28:ec:43:84:15:27:ef:0f:2e:b3:7d: 47:80:b6:af:46:0a:dc:29:1d:dc:ba:73:9a:78:35:f2:79:91: 8b:be:62:a1:5f:77:4d:83:40:0c:b4:29:82:f8:cf:4b:4c:e5: 59:28:32:9c:a9:16:49:d4:04:db:d1:f8:a9:58:5a:be:7a:c4: 27:e1:48:54:ab:da:2c:fa:b8:77:c3:b9:01:ed:71:26:c4:67: cd:bc:34:07:ad:ac:84:ec:54:7f:3d:1f:c4:d3:69:08:d6:53: 9f:6c:f0:48:5c:1b:b2:55:ab:41:65:e5:e5:b1:07:b8:34:71: fb:ac:da:14:6b:38:8e:34:1a:40:3d:99:e3:cd:70:5c:57:f6: a0:a9:01:76:1c:01:a2:1c:e6:56:84:7f:32:c8:6e:18:35:69: 1c:43:d7:75:a7:76:69:d4:24:36:89:d2:81:6b:8c:de:01:de: dc:9a:40:eb:1c:f6:08:49:4d:0d:f7:8d:58:ab:c7:f7:65:ce: 1c:f1:92:69:cc:c7:fd:12:7e:f7:a5:17:3f:a2:a8:41:b5:7f: 38:ba:e3:20:24:c8:d8:cd:53:db:08:6b:96:4c:c8:3e:58:98: c6:d3:90:32 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZs6yfD7eHU2vmKL8DdbanqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIwMDgwNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGE1NTZmNzRkMzBlNTAxMmExMjg3NmJjNzBjYzk4Y2E2NmJhZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinbnfqmkvUF+mtyDoKqykxVF3d3l kqC+vO5IfC8gGvltKSxr5kQFbbmPy9X3OX3Sm3QCKV1q/T6acVkp3MWzJnfLeOSj ujWk/cyO7TQmCzSjpRIUh/Ie1N/7yTZaThOe31v2psXVyu06nvnjK5UYWzzafyeV DuVeGWcMvyUSUM4Qz58h40vnh+Y4dDnnp1SYmwGQLDrMIoiNKxew6pDjFIFiIz9H a7S+HNbs8/C9t3Z6Xvg+G/1WeAcwe+yw4tIoSwMnwas6xrecJs/48/7pT3lgZWXk uLelQUAkk+86qOI0CsCGiLCqS2QlggVfe/qHIY1P8bH0hLpP+NvLU8BSywIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFKClVvdNMOUBKhKHa8cMyYyma6/JMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb0tWVzkwMHc1UUVxRW9kcnh3ekpqS1pycjhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAB84BQME AB84dzAMAwQHHziAAwQBHziIAwQAHzjPMAsDBAEfOPYDAwAfODAMAwQAHzkpAwQA HzkqAwQAHzlSAwQCHzpgAwQCHzp0MAsDAwAfOwMEAR87CAMEAh87NAMEAR87WgME AR879jANBgkqhkiG9w0BAQsFAAOCAQEAXN3x0PCdkLp5R2R/khCkjXIkGuKVJmFB +CjsQ4QVJ+8PLrN9R4C2r0YK3Ckd3Lpzmng18nmRi75ioV93TYNADLQpgvjPS0zl WSgynKkWSdQE29H4qVhavnrEJ+FIVKvaLPq4d8O5Ae1xJsRnzbw0B62shOxUfz0f xNNpCNZTn2zwSFwbslWrQWXl5bEHuDRx+6zaFGs4jjQaQD2Z481wXFf2oKkBdhwB ohzmVoR/MshuGDVpHEPXdad2adQkNonSgWuM3gHe3JpA6xz2CElNDfeNWKvH92XO HPGSaczH/RJ+96UXP6KoQbV/OLrjICTI2M1T2whrlkzIPliYxtOQMg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:37 2025 by rpki-client