This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/txsMdpLCZ_Jbz8P06XioKi4P_Y8.roa File: txsMdpLCZ_Jbz8P06XioKi4P_Y8.roa (raw, json) Hash identifier: zeP7qtXJZ6zKAUhXX0cRAHDStV7v4tISoiQdabFRpQE= Subject key identifier: B7:1B:0C:76:92:C2:67:F2:5B:CF:C3:F4:E9:78:A8:2A:2E:0F:FD:8F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AFEE4AD2AE2B000C87F027E25EEA768E4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/txsMdpLCZ_Jbz8P06XioKi4P_Y8.roa Signing time: Mon 08 Dec 2025 16:56:30 +0000 ROA not before: Mon 08 Dec 2025 16:56:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.92.0/22 maxlen: 24 31.59.102.0/23 maxlen: 24 31.59.104.0/23 maxlen: 24 31.59.106.0/24 maxlen: 24 31.59.168.0/24 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:e4:ad:2a:e2:b0:00:c8:7f:02:7e:25:ee:a7:68:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 8 16:56:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b71b0c7692c267f25bcfc3f4e978a82a2e0ffd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:0c:22:b6:cb:ee:bf:31:af:00:b8:18:7d: 1d:c3:65:2e:ed:b5:90:4c:60:3a:c2:23:36:42:6c: 4e:37:34:3c:0e:71:da:b5:ef:21:5e:79:1c:77:50: ee:9a:46:a3:42:1f:5b:fb:43:a6:5b:e3:a5:52:70: 68:65:e2:fd:60:dc:d4:13:0b:3b:c6:76:b4:be:34: bb:c1:61:09:91:cf:60:5c:89:0e:f5:5f:25:82:19: 9e:79:8e:55:ca:51:0d:8e:ee:7c:6c:fa:eb:87:84: 83:dc:92:41:c2:87:0b:91:51:3a:dd:8a:9b:c5:e8: b0:ee:b5:5f:9c:88:3d:3b:6a:89:92:4e:df:30:e9: 3c:f9:57:a9:b5:a1:df:7f:ce:e0:8d:19:09:1f:5c: a9:a7:61:e2:1d:91:cd:b6:3c:1d:58:ad:f8:ac:2f: 77:04:24:bb:76:48:6d:87:26:f6:52:bd:a8:56:11: 44:b1:56:37:d2:8e:32:ee:bb:4a:eb:dc:2a:bb:ff: 66:40:ea:1a:74:3e:f7:47:82:84:ae:7d:3c:9d:7b: 9e:56:e1:95:40:25:25:1a:10:24:84:5e:3b:60:09: e8:cc:b9:e1:aa:6c:6f:1e:a7:8a:95:87:82:2e:4f: 95:c1:95:80:d0:3e:e5:91:70:96:ba:09:58:25:7d: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1B:0C:76:92:C2:67:F2:5B:CF:C3:F4:E9:78:A8:2A:2E:0F:FD:8F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/txsMdpLCZ_Jbz8P06XioKi4P_Y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.96.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.59.84.0/22 31.59.90.0-31.59.95.255 31.59.102.0-31.59.106.255 31.59.168.0/24 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.188.0/22 Signature Algorithm: sha256WithRSAEncryption 57:0c:83:38:3d:51:c9:f4:e6:03:63:3f:10:cb:6c:5c:29:77: 2c:50:19:db:1c:88:fa:75:f4:c5:47:69:ee:8a:c5:6f:2e:04: 1f:bc:3f:92:85:4e:b8:b4:b4:09:19:55:51:6b:fe:81:8d:91: ed:0e:f2:ff:8e:63:b0:ea:c0:9e:bf:3e:66:86:ed:ad:21:a6: 04:5d:52:85:93:a3:4a:7e:a5:c9:0d:62:13:ce:28:7b:50:24: 36:93:fc:54:d2:96:59:3e:52:80:9e:87:8d:e3:90:1c:0c:10: f1:ed:e4:63:2c:ed:90:61:95:58:c4:0f:b7:d4:97:de:e1:c2: a2:37:d8:d8:71:ec:de:6f:72:f9:68:26:e4:fd:ff:35:16:a5: 27:ff:b8:50:ac:af:bb:e6:15:83:d3:fb:f7:ca:26:c6:c3:55: d8:e5:02:a9:96:57:d1:31:22:f5:77:28:3c:ec:fc:eb:4d:90: 92:7d:49:62:a9:c9:0f:76:ce:a4:9a:4a:02:1f:0d:ce:cc:fb: f9:a3:9a:3a:fc:14:f6:54:09:18:62:aa:e4:f9:d9:c1:98:b0: dc:26:fe:fc:7f:8a:2b:70:d5:5f:1a:b5:ca:c6:46:69:b1:66: 1f:98:3e:e9:24:fa:d9:9c:38:c6:0a:70:8e:1e:16:90:77:68: cb:ff:67:79 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZr+5K0q4rAAyH8CfiXup2jkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA4MTY1NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzFiMGM3NjkyYzI2N2YyNWJjZmMzZjRlOTc4YTgyYTJlMGZmZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL0MIrbL7r8xrwC4GH0dw2Uu7bWQ TGA6wiM2QmxONzQ8DnHate8hXnkcd1DumkajQh9b+0OmW+OlUnBoZeL9YNzUEws7 xna0vjS7wWEJkc9gXIkO9V8lghmeeY5VylENju58bPrrh4SD3JJBwocLkVE63Yqb xeiw7rVfnIg9O2qJkk7fMOk8+VeptaHff87gjRkJH1ypp2HiHZHNtjwdWK34rC93 BCS7dkhthyb2Ur2oVhFEsVY30o4y7rtK69wqu/9mQOoadD73R4KErn08nXueVuGV QCUlGhAkhF47YAnozLnhqmxvHqeKlYeCLk+VwZWA0D7lkXCWuglYJX1N/wIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFLcbDHaSwmfyW8/D9Ol4qCouD/2PMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdHhzTWRwTENaX0piejhQMDZYaW9LaTRQX1k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAB84 0wMEAB85YAMEAB85yDAMAwQCHzq0AwQCHzrAAwQCHztUMAwDBAEfO1oDBAUfO0Aw DAMEAR87ZgMEAB87agMEAB87qAMEAF63lwMEAF63ngMEAF63pDAMAwQBXreuAwQA XrewAwQBXre0AwQA2TwPAwQC2Ty8MA0GCSqGSIb3DQEBCwUAA4IBAQBXDIM4PVHJ 9OYDYz8Qy2xcKXcsUBnbHIj6dfTFR2nuisVvLgQfvD+ShU64tLQJGVVRa/6BjZHt DvL/jmOw6sCevz5mhu2tIaYEXVKFk6NKfqXJDWITzih7UCQ2k/xU0pZZPlKAnoeN 45AcDBDx7eRjLO2QYZVYxA+31Jfe4cKiN9jYcezeb3L5aCbk/f81FqUn/7hQrK+7 5hWD0/v3yibGw1XY5QKpllfRMSL1dyg87PzrTZCSfUliqckPds6kmkoCHw3OzPv5 o5o6/BT2VAkYYqrk+dnBmLDcJv78f4orcNVfGrXKxkZpsWYfmD7pJPrZnDjGCnCO HhaQd2jL/2d5 -----END CERTIFICATE-----Generated at Wed Dec 10 09:00:16 2025 by rpki-client