This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sVaR9Ys8-OXbO8HOT4BTA1kZGTg.roa File: sVaR9Ys8-OXbO8HOT4BTA1kZGTg.roa (raw, json) Hash identifier: PN6KZnV1zlf4nYFWqhD5YW4hntN4sAdp4CDgYuG7qEA= Subject key identifier: B1:56:91:F5:8B:3C:F8:E5:DB:3B:C1:CE:4F:80:53:03:59:19:19:38 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B4005586DDAFF6251B6173000AF2D4D5B Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sVaR9Ys8-OXbO8HOT4BTA1kZGTg.roa Signing time: Sun 21 Dec 2025 08:27:30 +0000 ROA not before: Sun 21 Dec 2025 08:27:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 31.57.226.0/24 maxlen: 24 31.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:05:58:6d:da:ff:62:51:b6:17:30:00:af:2d:4d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:27:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b15691f58b3cf8e5db3bc1ce4f80530359191938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:2f:f6:7c:69:52:48:04:22:eb:88:f5:a7: fe:6d:ba:74:53:25:0a:e9:1b:6d:92:f6:01:21:90: 9d:a0:c9:5b:ad:5a:15:c0:23:51:4d:38:13:58:ac: db:d1:02:84:9f:59:8d:72:ca:d3:1c:ad:27:bb:52: 5d:2d:f5:49:f2:43:b6:c0:39:d3:4d:de:1c:96:62: bf:10:66:60:80:67:f7:bc:74:aa:9d:15:56:81:05: f6:1b:4c:0b:9b:92:2d:ab:a3:2a:35:5c:7a:3c:e0: 8d:c9:81:76:ca:ed:49:a1:57:44:b0:7f:3a:cf:04: da:54:62:d7:d0:4f:b0:f5:71:b9:b6:45:47:93:65: 72:16:89:20:a0:e0:c5:9f:df:ee:10:d0:2b:7f:e2: 59:a1:4e:39:f9:63:66:d8:54:28:54:35:d2:e9:a0: bd:e3:2d:0a:f2:65:02:7c:e6:58:4a:e2:82:ac:f6: 79:7f:ca:69:79:1d:5a:b0:30:dd:e8:fb:3e:bf:16: f5:5a:f3:54:9d:04:54:52:06:7d:92:c2:8a:0c:b3: 1a:cc:a3:05:b3:51:f9:cd:10:b9:8f:70:46:0f:05: 4c:aa:97:15:07:4a:41:08:41:6d:65:ce:05:6b:a8: 5b:e2:06:2b:c9:f1:38:4b:86:0e:6c:2f:11:bf:29: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:56:91:F5:8B:3C:F8:E5:DB:3B:C1:CE:4F:80:53:03:59:19:19:38 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sVaR9Ys8-OXbO8HOT4BTA1kZGTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.226.0/24 31.59.99.0/24 Signature Algorithm: sha256WithRSAEncryption 08:2c:75:ec:49:03:4c:13:22:cd:81:5d:a1:83:ab:e2:0c:60: 30:c4:62:56:c0:15:40:21:1e:a2:6a:5c:7a:a9:07:a5:f7:23: 96:f3:48:9f:fe:f1:c5:7e:be:c4:23:c0:76:56:2c:16:29:d9: 83:b2:b2:3c:3f:a3:bb:ea:84:27:fe:04:60:a9:7c:2a:23:f7: 6e:33:f1:00:f8:a6:8f:92:9f:e3:74:37:b0:26:e3:9d:b6:24: 07:9b:ef:d7:0f:75:09:18:9e:1b:a3:0c:28:76:6d:fb:93:3d: 58:e3:c3:83:43:d2:3e:db:5a:74:55:f8:23:2a:25:04:f6:18: 8b:b2:c7:dd:82:78:ee:1e:e7:f6:0f:9e:c6:77:51:6c:19:37: 15:36:64:af:2e:9b:72:a5:85:8b:f2:b0:26:56:da:a5:2d:e8: 10:bd:57:b2:1f:fe:a0:41:aa:89:ae:03:51:db:91:e2:c2:e4: bb:c0:f0:8f:d0:cf:76:2b:93:7b:d1:c2:ed:28:d7:fc:ba:5d: f1:17:5f:d2:4e:3b:e7:01:1f:f8:4a:3d:21:80:dc:f6:08:c7: ca:f3:54:90:e0:1c:da:fb:e7:d3:68:86:b3:4e:02:6f:54:f6: 7d:b5:b6:36:59:fd:32:b2:59:38:60:da:3b:6d:15:2f:1d:e2: 43:4d:c8:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtABVht2v9iUbYXMACvLU1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgyNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTU2OTFmNThiM2NmOGU1ZGIzYmMxY2U0ZjgwNTMwMzU5MTkxOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3wv9nxpUkgEIuuI9af+bbp0UyUK 6RttkvYBIZCdoMlbrVoVwCNRTTgTWKzb0QKEn1mNcsrTHK0nu1JdLfVJ8kO2wDnT Td4clmK/EGZggGf3vHSqnRVWgQX2G0wLm5Itq6MqNVx6POCNyYF2yu1JoVdEsH86 zwTaVGLX0E+w9XG5tkVHk2VyFokgoODFn9/uENArf+JZoU45+WNm2FQoVDXS6aC9 4y0K8mUCfOZYSuKCrPZ5f8ppeR1asDDd6Ps+vxb1WvNUnQRUUgZ9ksKKDLMazKMF s1H5zRC5j3BGDwVMqpcVB0pBCEFtZc4Fa6hb4gYryfE4S4YObC8RvymzmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLFWkfWLPPjl2zvBzk+AUwNZGRk4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvc1ZhUjlZczgtT1hiTzhIT1Q0QlRBMWtaR1RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzniAwQA HztjMA0GCSqGSIb3DQEBCwUAA4IBAQAILHXsSQNMEyLNgV2hg6viDGAwxGJWwBVA IR6ialx6qQel9yOW80if/vHFfr7EI8B2ViwWKdmDsrI8P6O76oQn/gRgqXwqI/du M/EA+KaPkp/jdDewJuOdtiQHm+/XD3UJGJ4bowwodm37kz1Y48ODQ9I+21p0Vfgj KiUE9hiLssfdgnjuHuf2D57Gd1FsGTcVNmSvLptypYWL8rAmVtqlLegQvVeyH/6g QaqJrgNR25HiwuS7wPCP0M92K5N70cLtKNf8ul3xF1/STjvnAR/4Sj0hgNz2CMfK 81SQ4Bza++fTaIazTgJvVPZ9tbY2Wf0yslk4YNo7bRUvHeJDTchJ -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:39 2025 by rpki-client