This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ry7ldP6r4fzd4HeMyyZTNHERUt4.roa File: ry7ldP6r4fzd4HeMyyZTNHERUt4.roa (raw, json) Hash identifier: 6FsklJXEPM1Z2qWzepL6JI+4gpNTDEmvUtM8GSuOKg4= Subject key identifier: AF:2E:E5:74:FE:AB:E1:FC:DD:E0:77:8C:CB:26:53:34:71:11:52:DE Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844FF7C33920EB5F93EEC9BF56FB9C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ry7ldP6r4fzd4HeMyyZTNHERUt4.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 31.56.5.0/24 maxlen: 24 31.56.119.0/24 maxlen: 24 31.56.128.0/24 maxlen: 24 31.56.129.0/24 maxlen: 24 31.56.130.0/24 maxlen: 24 31.56.131.0/24 maxlen: 24 31.56.132.0/24 maxlen: 24 31.56.133.0/24 maxlen: 24 31.56.134.0/24 maxlen: 24 31.56.135.0/24 maxlen: 24 31.56.136.0/24 maxlen: 24 31.56.137.0/24 maxlen: 24 31.56.207.0/24 maxlen: 24 31.56.246.0/24 maxlen: 24 31.56.247.0/24 maxlen: 24 31.56.248.0/24 maxlen: 24 31.56.249.0/24 maxlen: 24 31.56.250.0/24 maxlen: 24 31.56.251.0/24 maxlen: 24 31.56.252.0/24 maxlen: 24 31.56.253.0/24 maxlen: 24 31.56.254.0/24 maxlen: 24 31.56.255.0/24 maxlen: 24 31.57.41.0/24 maxlen: 24 31.57.42.0/24 maxlen: 24 31.57.82.0/24 maxlen: 24 31.58.96.0/22 maxlen: 24 31.58.116.0/22 maxlen: 24 31.59.0.0/24 maxlen: 24 31.59.1.0/24 maxlen: 24 31.59.2.0/24 maxlen: 24 31.59.3.0/24 maxlen: 24 31.59.4.0/24 maxlen: 24 31.59.5.0/24 maxlen: 24 31.59.6.0/24 maxlen: 24 31.59.7.0/24 maxlen: 24 31.59.8.0/24 maxlen: 24 31.59.9.0/24 maxlen: 24 31.59.52.0/22 maxlen: 24 31.59.246.0/24 maxlen: 24 31.59.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4f:f7:c3:39:20:eb:5f:93:ee:c9:bf:56:fb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af2ee574feabe1fcdde0778ccb265334711152de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:69:5b:de:a4:43:c5:65:a0:90:f1:ae:2d: d9:68:74:47:9f:d6:54:ca:7e:94:7b:d6:0d:3e:9a: 2c:6b:f1:26:e1:86:c4:a0:af:9f:11:08:b1:fc:59: 36:80:fd:a4:ff:a8:01:ce:ed:93:1d:bd:71:81:e7: 46:b8:f0:59:de:8d:da:c2:9f:89:b3:76:73:18:ca: f2:0c:b5:ae:0a:42:cd:19:ab:d1:3a:bb:f2:17:be: 1e:aa:be:69:19:73:d2:f4:9d:72:a9:ea:36:58:7c: f8:34:65:33:70:77:f5:bf:ad:17:0f:37:72:4e:e7: 3e:8b:42:c8:c5:c6:6e:cf:34:ab:5b:be:9d:f3:ad: ac:1a:db:d3:ab:7c:cc:dd:3b:cd:f4:be:38:0b:31: cf:f3:b4:81:5d:3c:a6:51:cf:74:60:b3:6b:88:5c: bb:df:a5:90:5e:09:39:e5:92:31:1e:f6:59:0a:e2: 1a:fc:8c:1c:d2:a8:e0:e1:2c:88:99:ca:be:2d:c3: 72:b9:30:99:e4:d8:94:08:69:e4:f8:de:5d:66:60: 65:a9:4b:47:2b:9e:9a:db:ee:66:df:c7:b4:ff:57: 71:69:28:cf:1b:3b:87:b1:ad:3f:d8:7f:79:2f:03: 27:ff:70:91:27:d8:b5:63:f5:06:6b:ab:02:7f:f9: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:E5:74:FE:AB:E1:FC:DD:E0:77:8C:CB:26:53:34:71:11:52:DE X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ry7ldP6r4fzd4HeMyyZTNHERUt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.5.0/24 31.56.119.0/24 31.56.128.0-31.56.137.255 31.56.207.0/24 31.56.246.0-31.56.255.255 31.57.41.0-31.57.42.255 31.57.82.0/24 31.58.96.0/22 31.58.116.0/22 31.59.0.0-31.59.9.255 31.59.52.0/22 31.59.246.0/23 Signature Algorithm: sha256WithRSAEncryption 01:29:ac:c2:64:6e:5a:fd:b1:ec:95:ca:5b:1a:56:32:46:5d: 90:34:ac:38:d0:3c:75:55:f8:6c:31:03:1f:3f:7d:6b:6a:b7: 4a:c3:8b:6b:1f:ca:97:26:46:94:bb:09:f8:c5:14:07:e8:7e: c8:53:72:be:c8:a1:2b:ae:2f:13:b9:76:d6:8d:34:c5:7e:79: c0:ba:ed:a5:91:fd:8c:4c:93:22:b8:fa:38:08:76:93:19:1b: ad:9e:4f:2a:c6:b7:04:af:2b:12:46:17:12:ff:23:15:d4:86: 63:ad:af:4f:7d:19:e6:33:e9:04:08:0e:4f:ef:ae:6e:72:6e: 4c:fc:ff:66:1d:62:94:e1:c7:05:85:f0:c4:38:3c:ff:22:4d: ea:79:f2:46:a9:c7:c6:bf:85:02:09:ab:d1:74:88:5d:93:94: 38:58:1d:83:a3:af:c5:87:42:cc:a5:03:fc:5c:94:96:9f:36: c6:0c:88:83:fc:cc:a3:42:14:ee:ba:9a:7a:77:5d:24:75:87: 3e:2f:6e:8a:97:78:39:5b:81:90:f3:d2:25:f4:de:b9:e2:c3: 19:cc:9d:39:a1:f5:81:d8:99:a4:64:7c:bf:be:7b:90:80:14: 82:05:a3:f3:68:64:43:c2:ec:6e:59:67:ff:1b:f8:8e:f3:4b: 79:27:c5:ba -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt/hE/3wzkg61+T7sm/VvucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjJlZTU3NGZlYWJlMWZjZGRlMDc3OGNjYjI2NTMzNDcxMTE1MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtNpW96kQ8VloJDxri3ZaHRHn9ZU yn6Ue9YNPposa/Em4YbEoK+fEQix/Fk2gP2k/6gBzu2THb1xgedGuPBZ3o3awp+J s3ZzGMryDLWuCkLNGavROrvyF74eqr5pGXPS9J1yqeo2WHz4NGUzcHf1v60XDzdy Tuc+i0LIxcZuzzSrW76d862sGtvTq3zM3TvN9L44CzHP87SBXTymUc90YLNriFy7 36WQXgk55ZIxHvZZCuIa/Iwc0qjg4SyImcq+LcNyuTCZ5NiUCGnk+N5dZmBlqUtH K56a2+5m38e0/1dxaSjPGzuHsa0/2H95LwMn/3CRJ9i1Y/UGa6sCf/n06QIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFK8u5XT+q+H83eB3jMsmUzRxEVLeMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcnk3bGRQNnI0ZnpkNEhlTXl5WlROSEVSVXQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAHzgFAwQA Hzh3MAwDBAcfOIADBAEfOIgDBAAfOM8wCwMEAR849gMDAB84MAwDBAAfOSkDBAAf OSoDBAAfOVIDBAIfOmADBAIfOnQwCwMDAB87AwQBHzsIAwQCHzs0AwQBHzv2MA0G CSqGSIb3DQEBCwUAA4IBAQABKazCZG5a/bHslcpbGlYyRl2QNKw40Dx1VfhsMQMf P31rardKw4trH8qXJkaUuwn4xRQH6H7IU3K+yKErri8TuXbWjTTFfnnAuu2lkf2M TJMiuPo4CHaTGRutnk8qxrcErysSRhcS/yMV1IZjra9PfRnmM+kECA5P765ucm5M /P9mHWKU4ccFhfDEODz/Ik3qefJGqcfGv4UCCavRdIhdk5Q4WB2Do6/Fh0LMpQP8 XJSWnzbGDIiD/MyjQhTuupp6d10kdYc+L26Kl3g5W4GQ89Il9N654sMZzJ05ofWB 2JmkZHy/vnuQgBSCBaPzaGRDwuxuWWf/G/iO80t5J8W6 -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:04 2026 by rpki-client