This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u5r0n-9Fxt0Hepj6GWkdE4z4Yz0.roa File: u5r0n-9Fxt0Hepj6GWkdE4z4Yz0.roa (raw, json) Hash identifier: p44wtMXIMrt6WIMX9rlNZQrodQ0xF5Ym4uvsKwMddD0= Subject key identifier: BB:9A:F4:9F:EF:45:C6:DD:07:7A:98:FA:19:69:1D:13:8C:F8:63:3D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B400643D94689D43F8EB5E06C0F829074 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u5r0n-9Fxt0Hepj6GWkdE4z4Yz0.roa Signing time: Sun 21 Dec 2025 08:28:30 +0000 ROA not before: Sun 21 Dec 2025 08:28:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 31.56.220.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.100.0/24 maxlen: 24 31.57.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:06:43:d9:46:89:d4:3f:8e:b5:e0:6c:0f:82:90:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:28:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb9af49fef45c6dd077a98fa19691d138cf8633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fc:d7:5e:00:df:d6:77:4e:43:ae:85:96:5b: 3a:c2:2e:de:b9:5c:bc:06:2d:8a:d9:9f:55:f5:46: 86:99:3a:4f:97:11:e1:94:ab:95:b9:ff:d6:17:73: 58:93:3b:aa:e8:9d:a4:f6:c1:ad:0b:7e:64:84:cf: 5d:39:e1:55:54:7e:d5:5e:02:8d:a1:5c:95:64:62: 35:28:9c:13:ff:db:95:9e:94:fd:bd:b6:99:90:e5: 82:7d:2e:cb:f4:dc:47:0f:cd:ba:59:8f:30:f0:f4: 42:de:2c:12:55:ad:49:ca:1f:28:ba:f2:d5:43:86: 07:7b:5b:7f:1d:53:3a:b6:3d:90:0c:31:a1:2b:f4: 2e:1a:41:cc:d5:3f:44:ba:fb:60:6c:78:19:c9:3e: d4:07:45:13:b7:46:bd:40:82:5d:7e:9f:b3:4e:98: ab:7e:fa:1d:ff:20:00:79:1a:6c:80:3e:4a:c0:bd: 0f:be:d5:42:ec:9b:20:c5:2d:78:da:e0:91:5a:b5: 99:36:ef:43:33:1d:3c:e4:eb:10:54:60:3e:a7:a3: 5e:4e:40:91:65:01:a4:d5:5c:77:c0:f8:28:d6:37: 53:7f:56:5a:f0:78:df:ed:d4:10:3d:52:7b:37:d6: c7:a5:3d:19:88:ff:e3:67:a6:bc:11:22:14:a1:a1: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9A:F4:9F:EF:45:C6:DD:07:7A:98:FA:19:69:1D:13:8C:F8:63:3D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u5r0n-9Fxt0Hepj6GWkdE4z4Yz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.220.0/24 31.57.35.0/24 31.57.100.0/24 31.57.228.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b3:5f:6d:2e:3f:68:48:35:35:3a:e8:1f:cc:43:ef:e0:2f: 86:a9:37:2c:fc:20:4f:76:8f:63:0b:56:8a:50:92:98:b4:fb: 60:e7:92:0d:48:2b:e6:b5:e2:3d:da:89:d3:5b:d0:1c:71:7d: 93:7e:3f:71:72:b0:ef:50:9f:ae:d6:cc:b1:a4:03:ff:c0:f7: 00:e8:9c:61:5f:34:9a:ac:0f:59:1a:3c:7e:e6:13:1c:8d:4c: 6b:79:5d:d2:80:b7:0b:92:87:32:7a:51:a4:6c:61:dc:bc:01: 51:af:16:c6:de:d8:9e:85:be:10:52:53:1e:07:0e:d1:20:1b: e4:3c:6a:7c:92:f5:2b:61:3f:ab:9a:ef:ea:3a:04:80:30:65: d8:c4:d9:c9:3f:eb:ad:95:9b:7e:4e:c9:e6:c1:97:db:1b:f6: 4d:23:63:8c:bd:a1:83:ed:53:00:64:bd:a9:db:6a:75:57:9a: b6:a5:3b:71:83:98:e0:3d:2d:35:fd:0a:ad:ff:3b:1c:29:f8: e2:e3:73:bb:4f:39:02:e2:7b:07:d2:5f:92:b6:0f:b5:39:07: 52:e2:d0:58:3c:79:cf:8a:f6:20:9d:0d:ff:18:90:b5:13:7c: f6:f3:65:ed:af:b3:0c:0a:31:7d:46:0f:e4:28:41:61:4d:aa: 8f:82:ce:9a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtABkPZRonUP4614GwPgpB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgyODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjlhZjQ5ZmVmNDVjNmRkMDc3YTk4ZmExOTY5MWQxMzhjZjg2MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/zXXgDf1ndOQ66Flls6wi7euVy8 Bi2K2Z9V9UaGmTpPlxHhlKuVuf/WF3NYkzuq6J2k9sGtC35khM9dOeFVVH7VXgKN oVyVZGI1KJwT/9uVnpT9vbaZkOWCfS7L9NxHD826WY8w8PRC3iwSVa1Jyh8ouvLV Q4YHe1t/HVM6tj2QDDGhK/QuGkHM1T9EuvtgbHgZyT7UB0UTt0a9QIJdfp+zTpir fvod/yAAeRpsgD5KwL0PvtVC7JsgxS142uCRWrWZNu9DMx085OsQVGA+p6NeTkCR ZQGk1Vx3wPgo1jdTf1Za8Hjf7dQQPVJ7N9bHpT0ZiP/jZ6a8ESIUoaEV0QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLua9J/vRcbdB3qY+hlpHROM+GM9MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdTVyMG4tOUZ4dDBIZXBqNkdXa2RFNHo0WXowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzjcAwQA HzkjAwQAHzlkAwQAHznkMA0GCSqGSIb3DQEBCwUAA4IBAQBSs19tLj9oSDU1Ougf zEPv4C+GqTcs/CBPdo9jC1aKUJKYtPtg55INSCvmteI92onTW9AccX2Tfj9xcrDv UJ+u1syxpAP/wPcA6JxhXzSarA9ZGjx+5hMcjUxreV3SgLcLkocyelGkbGHcvAFR rxbG3tiehb4QUlMeBw7RIBvkPGp8kvUrYT+rmu/qOgSAMGXYxNnJP+utlZt+Tsnm wZfbG/ZNI2OMvaGD7VMAZL2p22p1V5q2pTtxg5jgPS01/Qqt/zscKfji43O7TzkC 4nsH0l+Stg+1OQdS4tBYPHnPivYgnQ3/GJC1E3z282Xtr7MMCjF9Rg/kKEFhTaqP gs6a -----END CERTIFICATE-----Generated at Sun Dec 21 18:51:48 2025 by rpki-client