This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/odyKZAUZSEs4R_eaF2eN3s6vHz0.roa File: odyKZAUZSEs4R_eaF2eN3s6vHz0.roa (raw, json) Hash identifier: r5bIQnBl0Mi4n6DIeWF9+y7uNq1kkBIci/i/fh7yuWw= Subject key identifier: A1:DC:8A:64:05:19:48:4B:38:47:F7:9A:17:67:8D:DE:CE:AF:1F:3D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AAC65FE1F8DAC616FB02B99EF1C80A36C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/odyKZAUZSEs4R_eaF2eN3s6vHz0.roa Signing time: Sat 22 Nov 2025 16:29:16 +0000 ROA not before: Sat 22 Nov 2025 16:29:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137235 IP address blocks: 31.56.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:65:fe:1f:8d:ac:61:6f:b0:2b:99:ef:1c:80:a3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 22 16:29:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a1dc8a640519484b3847f79a17678ddeceaf1f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:82:36:41:b7:3c:c8:4a:ed:04:12:61:52: 58:84:21:a5:30:c1:d7:9e:18:a7:81:c8:72:b4:18: 4d:e1:33:f2:b6:8a:f2:cb:05:54:7c:2e:a0:a7:6d: 13:88:ad:22:ab:5b:3c:a8:aa:3d:0c:c5:3c:14:06: ad:6b:d9:c1:98:0a:47:90:7b:ff:d4:e5:28:3a:c0: 4a:15:ba:e1:60:a0:b6:59:4c:53:08:bb:0e:6e:f9: 32:b9:18:34:d4:3d:e0:5f:90:53:72:a9:d3:fb:f5: 50:e3:8b:5c:ca:03:56:00:a2:bf:ce:5d:e6:6d:a0: 2a:f9:01:1c:af:c1:11:31:a0:39:3c:f2:26:f9:ed: ed:17:af:71:c2:d8:cd:c2:ac:48:4d:b3:11:d2:a9: 3f:f5:1c:14:ef:00:c4:9a:4a:ce:27:90:e1:7c:dc: 13:5a:a8:00:f4:67:7c:a3:9b:82:76:65:9b:d5:e6: b1:aa:e8:f7:0b:75:90:51:64:12:a3:9e:ad:63:14: 23:b6:1c:1e:a1:90:7f:39:bf:4b:3e:b3:3a:76:03: da:cc:c4:db:20:8c:5f:4a:23:4b:39:05:c0:42:31: 2a:94:2e:58:b0:17:8d:28:cd:f4:34:21:b4:98:46: 2b:24:f8:d2:ae:4c:f6:93:e2:bf:7c:26:11:b7:2a: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DC:8A:64:05:19:48:4B:38:47:F7:9A:17:67:8D:DE:CE:AF:1F:3D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/odyKZAUZSEs4R_eaF2eN3s6vHz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.23.0/24 Signature Algorithm: sha256WithRSAEncryption 89:7c:15:dd:32:41:18:aa:38:71:98:79:f3:28:c5:33:b4:4f: 33:ce:ba:80:48:ae:79:15:03:e3:3a:45:a8:0a:82:7b:1a:02: f0:65:2a:1f:69:7e:7b:84:54:84:3a:26:6c:a7:03:0e:42:60: 6f:e9:5e:a3:13:34:24:3e:b3:2f:8c:4f:4a:3f:8b:29:62:a4: 48:ff:a9:1c:a7:19:f1:eb:00:4d:18:3b:8c:ca:42:0c:cf:31: 98:ca:12:f8:d5:b8:a3:a6:ed:30:43:7a:58:23:2e:7e:f8:59: a6:c8:04:7a:e3:15:2e:dd:d6:5c:c6:3b:41:df:00:ca:ab:e1: ea:c9:de:bd:4d:c5:34:f4:99:b0:bb:97:a5:ff:da:b4:38:e1: df:b6:56:ad:4b:b1:aa:5f:b1:33:d4:d6:61:0f:07:34:68:89: 0c:be:ee:55:8a:3c:0b:43:37:81:89:cf:dd:de:03:0a:07:be: cd:e5:30:ad:4a:e3:7e:6e:f4:42:57:24:78:65:85:62:1c:4e: fc:48:75:61:1c:de:8e:34:d2:7a:f1:39:c1:6c:68:a5:6c:52: 6f:5d:4a:a3:38:21:d9:e2:39:d3:38:cd:df:68:8f:88:80:4c: 28:7d:23:d3:cb:f9:1b:ab:2c:dd:5d:a5:ba:5f:e1:fd:19:6e: 68:6b:90:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqsZf4fjaxhb7Arme8cgKNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIyMTYyOTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWRjOGE2NDA1MTk0ODRiMzg0N2Y3OWExNzY3OGRkZWNlYWYxZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrOCNkG3PMhK7QQSYVJYhCGlMMHX nhingchytBhN4TPytoryywVUfC6gp20TiK0iq1s8qKo9DMU8FAata9nBmApHkHv/ 1OUoOsBKFbrhYKC2WUxTCLsObvkyuRg01D3gX5BTcqnT+/VQ44tcygNWAKK/zl3m baAq+QEcr8ERMaA5PPIm+e3tF69xwtjNwqxITbMR0qk/9RwU7wDEmkrOJ5DhfNwT WqgA9Gd8o5uCdmWb1eaxquj3C3WQUWQSo56tYxQjthweoZB/Ob9LPrM6dgPazMTb IIxfSiNLOQXAQjEqlC5YsBeNKM30NCG0mEYrJPjSrkz2k+K/fCYRtyrZcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHcimQFGUhLOEf3mhdnjd7Orx89MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb2R5S1pBVVpTRXM0Ul9lYUYyZU4zczZ2SHowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgXMA0G CSqGSIb3DQEBCwUAA4IBAQCJfBXdMkEYqjhxmHnzKMUztE8zzrqASK55FQPjOkWo CoJ7GgLwZSofaX57hFSEOiZspwMOQmBv6V6jEzQkPrMvjE9KP4spYqRI/6kcpxnx 6wBNGDuMykIMzzGYyhL41bijpu0wQ3pYIy5++FmmyAR64xUu3dZcxjtB3wDKq+Hq yd69TcU09Jmwu5el/9q0OOHftlatS7GqX7Ez1NZhDwc0aIkMvu5VijwLQzeBic/d 3gMKB77N5TCtSuN+bvRCVyR4ZYViHE78SHVhHN6ONNJ68TnBbGilbFJvXUqjOCHZ 4jnTOM3faI+IgEwofSPTy/kbqyzdXaW6X+H9GW5oa5Bh -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:14 2025 by rpki-client