This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tr403DAxaKYGB2iadtif59IqC5c.roa File: tr403DAxaKYGB2iadtif59IqC5c.roa (raw, json) Hash identifier: uCt6XeFKiZPVSMmVtVpVeeQMSd2oaW1bN3Ay/bzVU3k= Subject key identifier: B6:BE:34:DC:30:31:68:A6:06:07:68:9A:76:D8:9F:E7:D2:2A:0B:97 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A9B966E9DDADEF63F4BCEFE0AC937212F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tr403DAxaKYGB2iadtif59IqC5c.roa Signing time: Wed 19 Nov 2025 10:08:38 +0000 ROA not before: Wed 19 Nov 2025 10:08:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.6.0/24 maxlen: 24 31.56.28.0/22 maxlen: 24 31.56.32.0/24 maxlen: 24 31.56.35.0/24 maxlen: 24 31.56.43.0/24 maxlen: 24 31.56.44.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.71.0/24 maxlen: 24 31.56.77.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.100.0/22 maxlen: 22 31.56.102.0/24 maxlen: 24 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.231.0/24 maxlen: 24 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.25.0/24 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.129.0/24 maxlen: 24 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.142.0/24 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.151.0/24 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.170.0/24 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.249.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.58.33.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.213.0/24 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.108.0/24 maxlen: 24 31.59.109.0/24 maxlen: 24 31.59.110.0/24 maxlen: 24 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:96:6e:9d:da:de:f6:3f:4b:ce:fe:0a:c9:37:21:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 19 10:08:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6be34dc303168a60607689a76d89fe7d22a0b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:9d:90:15:fb:26:fd:43:6b:a0:9b:d6:8e: dd:31:f3:1a:b2:c0:ab:f2:35:c2:6e:5b:4d:64:b0: f9:f8:7c:31:1d:a9:9e:e7:8f:d4:5b:7b:90:8c:5b: f2:9f:79:24:46:95:58:b9:45:87:e9:1b:91:c6:de: 79:07:51:54:d8:bb:f2:2d:e2:d0:1a:03:5c:74:42: 69:b8:d2:86:95:8f:81:06:6b:21:c5:27:cb:f1:7e: 3d:18:f3:bd:69:4b:02:03:d0:d2:c9:3e:49:15:07: 41:f9:18:04:62:97:5c:98:26:b8:94:95:2d:9e:2e: 43:33:56:3a:e6:c3:0e:d9:38:9c:28:0d:d1:77:f5: 45:4f:41:24:10:13:7f:f2:5a:34:c4:58:cd:3f:4e: 31:9c:17:10:ad:30:5c:e1:33:1d:f8:08:d5:5f:eb: 68:01:4b:14:4c:50:94:43:e7:b3:a5:56:40:69:30: 81:5d:f1:88:ce:fb:61:56:d9:4b:5e:fa:62:d4:00: 39:60:26:ca:ec:6f:87:ec:58:34:a5:26:96:ab:0b: 67:b4:8c:3a:9b:21:64:d6:14:14:b7:3c:80:c7:4e: ea:4d:95:da:83:a9:f4:b0:a7:32:e1:dc:53:05:1c: 13:a5:08:8c:44:62:14:5a:5c:85:63:10:e4:a8:17: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:34:DC:30:31:68:A6:06:07:68:9A:76:D8:9F:E7:D2:2A:0B:97 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tr403DAxaKYGB2iadtif59IqC5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0-31.56.6.255 31.56.28.0-31.56.32.255 31.56.35.0/24 31.56.43.0-31.56.44.255 31.56.57.0/24 31.56.71.0/24 31.56.77.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.156.0/24 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0/21 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.129.0/24 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.151.0/24 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.249.0-31.57.255.255 31.58.33.0-31.58.35.255 31.58.50.0-31.58.55.255 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.76.0/22 31.59.96.0/22 31.59.108.0-31.59.110.255 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.224.0/22 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 28:ee:60:7b:89:bb:38:75:8d:28:27:78:41:a8:1a:5d:db:fb: 63:57:7b:59:ea:21:69:8f:ca:0e:d7:b6:f7:7b:5c:36:d0:f8: d5:55:96:69:b8:e5:f7:e0:db:e0:df:be:af:4c:61:a0:e1:9f: cf:93:5a:52:cc:4f:55:e3:88:35:95:11:a9:05:15:6a:b3:cd: 9b:a7:a8:fa:12:57:e8:d4:d5:cb:39:f5:32:ae:51:81:3d:c3: fd:e2:5f:1a:a7:c7:06:5d:d4:d9:36:5c:8c:1a:a4:82:36:2e: 4b:d1:d6:c8:67:63:1c:fe:14:f4:23:3b:57:bb:6b:69:9b:2e: 68:9a:ee:c9:5a:58:2e:1b:25:d7:49:5f:42:7d:e5:00:66:02: ff:fe:9e:2d:05:07:fb:2c:58:dd:3d:a5:7e:f9:e3:bd:85:e2: 2c:6b:8d:f0:f8:74:6c:04:b3:3a:b6:de:f0:30:2a:04:ee:c2: 41:a4:f7:7d:32:07:79:fc:e7:11:f8:18:6f:7e:52:06:70:27: f0:70:6b:d3:1d:1f:a9:77:62:b4:36:3e:60:e2:4a:92:e7:43: 0d:95:54:53:07:7a:04:c7:b2:e8:8b:85:6d:af:71:59:4d:cf: b8:a7:99:0c:28:2a:9b:48:1e:e1:c1:c4:29:3c:cd:93:be:f2: 65:e5:9b:1e -----BEGIN CERTIFICATE----- MIIGyDCCBbCgAwIBAgISAZqblm6d2t72P0vO/grJNyEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE5MTAwODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmJlMzRkYzMwMzE2OGE2MDYwNzY4OWE3NmQ4OWZlN2QyMmEwYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxadkBX7Jv1Da6Cb1o7dMfMassCr 8jXCbltNZLD5+HwxHame54/UW3uQjFvyn3kkRpVYuUWH6RuRxt55B1FU2LvyLeLQ GgNcdEJpuNKGlY+BBmshxSfL8X49GPO9aUsCA9DSyT5JFQdB+RgEYpdcmCa4lJUt ni5DM1Y65sMO2TicKA3Rd/VFT0EkEBN/8lo0xFjNP04xnBcQrTBc4TMd+AjVX+to AUsUTFCUQ+ezpVZAaTCBXfGIzvthVtlLXvpi1AA5YCbK7G+H7Fg0pSaWqwtntIw6 myFk1hQUtzyAx07qTZXag6n0sKcy4dxTBRwTpQiMRGIUWlyFYxDkqBdsdQIDAQAB o4ID1DCCA9AwHQYDVR0OBBYEFLa+NNwwMWimBgdomnbYn+fSKguXMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdHI0MDNEQXhhS1lHQjJpYWR0aWY1OUlxQzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB6AYIKwYBBQUHAQcBAf8EggHXMIIB0zCCAc8EAgABMIIB xzAMAwQCHzgEAwQAHzgGMAwDBAIfOBwDBAAfOCADBAAfOCMwDAMEAB84KwMEAB84 LAMEAB84OQMEAB84RwMEAB84TQMEAh84UAMEAR84WgMEBB84YAMEAR84cjAMAwQB Hzh2AwQCHzh4AwQAHzicAwQCHzi0MAwDBAIfOLwDBAIfOMADBAIfOMgDBAMfONAD BAEfONwDBAEfOOADBAIfOOQDBAIfOOwDBAIfOQwDBAMfORgDBAIfOSQwDAMEAh85 NAMEBh85AAMEAR85XgMEAx85eAMEAB85gQMEAR85hAMEAx85iAMEAR85kgMEAB85 lwMEAh85qDAMAwQEHzmwAwQCHzm4AwQCHznAMAwDBAMfOcgDBAAfOcowDAMEBB85 0AMEAh854AMEAh856DALAwQAHzn5AwMBHzgwDAMEAB86IQMEAh86IDAMAwQBHzoy AwQDHzowAwQBHzpAAwQCHzpEAwQCHzpUAwQCHzqYAwQCHzqsAwQCHzrUMAwDBAIf OtwDBAIfOuADBAIfO0wDBAIfO2AwDAMEAh87bAMEAB87bgMEAx87cDAMAwQDHzuI AwQDHzuQAwQDHzugAwQCHzvgAwQCHzvoMA0GCSqGSIb3DQEBCwUAA4IBAQAo7mB7 ibs4dY0oJ3hBqBpd2/tjV3tZ6iFpj8oO17b3e1w20PjVVZZpuOX34Nvg376vTGGg 4Z/Pk1pSzE9V44g1lRGpBRVqs82bp6j6Elfo1NXLOfUyrlGBPcP94l8ap8cGXdTZ NlyMGqSCNi5L0dbIZ2Mc/hT0IztXu2tpmy5omu7JWlguGyXXSV9CfeUAZgL//p4t BQf7LFjdPaV++eO9heIsa43w+HRsBLM6tt7wMCoE7sJBpPd9Mgd5/OcR+BhvflIG cCfwcGvTHR+pd2K0Nj5g4kqS50MNlVRTB3oEx7Loi4Vtr3FZTc+4p5kMKCqbSB7h wcQpPM2TvvJl5Zse -----END CERTIFICATE-----Generated at Wed Nov 19 13:29:15 2025 by rpki-client