This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tbnQFEnpT33lcXN9fchGFmz3gvg.roa File: tbnQFEnpT33lcXN9fchGFmz3gvg.roa (raw, json) Hash identifier: 8iwbJjTnnJ2gVEvzaYZxIGeK2nPb8RdSEElaFrBcVUw= Subject key identifier: B5:B9:D0:14:49:E9:4F:7D:E5:71:73:7D:7D:C8:46:16:6C:F7:82:F8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A92AFADCE73E677F80B55899687AB44BE Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tbnQFEnpT33lcXN9fchGFmz3gvg.roa Signing time: Mon 17 Nov 2025 16:39:38 +0000 ROA not before: Mon 17 Nov 2025 16:39:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400810 IP address blocks: 31.56.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:af:ad:ce:73:e6:77:f8:0b:55:89:96:87:ab:44:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 17 16:39:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5b9d01449e94f7de571737d7dc846166cf782f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:df:97:7d:1d:43:de:82:e5:99:f2:9a:32: cd:98:b1:27:b9:1d:59:75:48:86:28:48:46:5b:73: 9e:e9:93:be:aa:d5:fb:16:5c:94:7d:b2:e0:bc:05: 76:7d:56:47:85:5a:23:a3:c1:a2:c5:04:2c:8b:b4: 46:f3:12:6b:4d:d6:be:64:d8:6e:e6:ec:8a:2b:07: 2d:88:6f:fb:60:d6:f4:89:6c:9f:3c:0c:52:5d:f8: f2:a3:b4:45:fd:7b:a2:64:dc:6f:b4:89:85:cd:ad: cb:26:29:86:73:51:2a:3c:95:bc:54:54:46:ea:e0: cd:ee:29:65:63:ad:ba:6a:3b:f2:79:da:fc:fb:47: c8:44:9a:f4:4c:d1:b8:e6:d9:be:e9:ec:44:75:c6: f1:d6:21:1d:0a:b1:a3:25:7d:80:68:7e:56:94:2e: 7f:9c:88:30:8a:c8:b6:fb:90:b6:d9:bd:f5:aa:31: ae:8d:01:a4:94:95:c8:2c:cc:a7:e1:f4:7f:e0:8d: 0a:fd:dd:ff:8c:9b:9d:c9:f8:db:b3:e4:9e:89:aa: 1f:cb:24:bd:5f:71:d1:c8:3f:50:8b:5a:da:78:7f: b4:9c:a9:5e:21:30:84:30:e8:42:70:aa:28:43:40: c2:cb:39:a1:8e:01:8d:89:7f:e2:10:5b:e7:d9:a6: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B9:D0:14:49:E9:4F:7D:E5:71:73:7D:7D:C8:46:16:6C:F7:82:F8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tbnQFEnpT33lcXN9fchGFmz3gvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.20.0/23 Signature Algorithm: sha256WithRSAEncryption 45:b5:66:bc:9e:7b:3e:45:33:bb:e4:17:0d:9b:2b:81:ff:fb: ae:85:f8:1f:15:ab:82:cc:24:17:b9:0b:72:6a:81:1d:29:39: 9c:ad:37:fd:7e:05:10:4b:65:bc:a7:94:96:33:13:b5:23:0b: 28:20:60:5b:ee:d4:35:8e:9a:b9:7b:4c:4e:f6:37:03:6e:5b: d5:58:f9:56:5e:53:a9:01:5e:0c:c2:af:ed:87:d4:10:4a:77: 6f:c3:97:2b:5b:7a:b8:8e:3b:a3:d4:f2:a3:96:96:9e:78:69: a7:d4:dd:08:48:8e:85:70:15:65:ba:49:d0:d1:bf:01:ea:fb: a3:a1:2c:5b:7e:df:86:58:a1:67:91:2d:c1:81:7d:32:51:57: eb:02:b7:54:d0:7a:fa:f5:05:17:51:6a:ce:0f:94:83:3c:ef: 35:b1:16:c5:5c:5c:f0:e6:67:e7:d5:d2:bb:8b:52:e6:47:d7: c1:46:f5:d2:2e:c6:33:0d:4f:39:ff:a8:1c:cd:53:69:ab:55: b0:d0:4e:67:44:cb:5d:e1:77:d4:a9:1e:36:0c:79:40:d6:15: 78:74:b3:6f:4d:b3:3e:3b:d9:46:6e:d6:9b:4a:95:14:28:fa: 41:4f:d2:41:85:b1:ec:0b:f8:c5:9f:6e:3e:bd:be:62:14:9c: 15:f5:a4:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqSr63Oc+Z3+AtViZaHq0S+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE3MTYzOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWI5ZDAxNDQ5ZTk0ZjdkZTU3MTczN2Q3ZGM4NDYxNjZjZjc4MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK7fl30dQ96C5ZnymjLNmLEnuR1Z dUiGKEhGW3Oe6ZO+qtX7FlyUfbLgvAV2fVZHhVojo8GixQQsi7RG8xJrTda+ZNhu 5uyKKwctiG/7YNb0iWyfPAxSXfjyo7RF/XuiZNxvtImFza3LJimGc1EqPJW8VFRG 6uDN7illY626ajvyedr8+0fIRJr0TNG45tm+6exEdcbx1iEdCrGjJX2AaH5WlC5/ nIgwisi2+5C22b31qjGujQGklJXILMyn4fR/4I0K/d3/jJudyfjbs+SeiaofyyS9 X3HRyD9Qi1raeH+0nKleITCEMOhCcKooQ0DCyzmhjgGNiX/iEFvn2abP7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLW50BRJ6U995XFzfX3IRhZs94L4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdGJuUUZFbnBUMzNsY1hOOWZjaEdGbXozZ3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzgUMA0G CSqGSIb3DQEBCwUAA4IBAQBFtWa8nns+RTO75BcNmyuB//uuhfgfFauCzCQXuQty aoEdKTmcrTf9fgUQS2W8p5SWMxO1IwsoIGBb7tQ1jpq5e0xO9jcDblvVWPlWXlOp AV4Mwq/th9QQSndvw5crW3q4jjuj1PKjlpaeeGmn1N0ISI6FcBVluknQ0b8B6vuj oSxbft+GWKFnkS3BgX0yUVfrArdU0Hr69QUXUWrOD5SDPO81sRbFXFzw5mfn1dK7 i1LmR9fBRvXSLsYzDU85/6gczVNpq1Ww0E5nRMtd4XfUqR42DHlA1hV4dLNvTbM+ O9lGbtabSpUUKPpBT9JBhbHsC/jFn24+vb5iFJwV9aTd -----END CERTIFICATE-----Generated at Wed Nov 19 13:30:28 2025 by rpki-client