This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uDdy5I1Zm0DrLnWXh2d1Ed1oNrA.roa File: uDdy5I1Zm0DrLnWXh2d1Ed1oNrA.roa (raw, json) Hash identifier: jZO4tDFrZt36Td58XKG/CK7oBY/wIoKj8s4BM9n/fIU= Subject key identifier: B8:37:72:E4:8D:59:9B:40:EB:2E:75:97:87:67:75:11:DD:68:36:B0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BEC2F232F1A00E89137F4FD06E84BC1F8 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uDdy5I1Zm0DrLnWXh2d1Ed1oNrA.roa Signing time: Fri 23 Jan 2026 18:47:50 +0000 ROA not before: Fri 23 Jan 2026 18:47:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.64.0/24 maxlen: 24 31.56.68.0/24 maxlen: 24 31.56.75.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.82.0/23 maxlen: 23 31.56.82.0/24 maxlen: 24 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.97.0/24 maxlen: 24 31.56.98.0/23 maxlen: 23 31.56.100.0/22 maxlen: 22 31.56.100.0/23 maxlen: 23 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.112.0/24 maxlen: 24 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.122.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.132.0/24 maxlen: 24 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.221.0/24 maxlen: 24 31.57.222.0/23 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.238.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.36.0/22 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.54.0/24 maxlen: 24 31.58.55.0/24 maxlen: 24 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.157.0/24 maxlen: 24 31.58.162.0/24 maxlen: 24 31.58.163.0/24 maxlen: 24 31.58.166.0/24 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.212.0/24 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.58.224.0/24 maxlen: 24 31.59.57.0/24 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.196.0/22 maxlen: 24 31.59.200.0/22 maxlen: 24 31.59.204.0/22 maxlen: 24 31.59.208.0/22 maxlen: 24 31.59.220.0/22 maxlen: 24 31.59.223.0/24 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:2f:23:2f:1a:00:e8:91:37:f4:fd:06:e8:4b:c1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 23 18:47:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83772e48d599b40eb2e759787677511dd6836b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:69:6d:16:6f:f2:b7:22:31:eb:1a:27:50: 5a:e1:10:9e:8b:40:f4:5f:0b:6e:26:2b:7d:76:02: 74:b4:49:bf:c7:49:86:b8:0a:fb:ed:59:63:a8:52: e2:46:15:bb:b7:f5:fd:60:26:af:12:cb:54:a0:93: 2e:53:cc:df:aa:33:e8:ce:0a:1f:37:eb:b4:7f:f2: 61:1a:54:f7:9a:67:ab:d8:c3:77:f6:d2:7b:bf:d9: bf:1d:fc:7c:0b:f8:9a:bd:71:2a:62:d5:77:53:3e: 42:bf:68:3b:18:95:3c:4b:91:95:09:d5:2c:10:ac: 2d:3e:d8:95:ff:e3:d1:a5:e5:48:7b:fc:3d:0a:38: 3c:c9:dc:ed:e8:52:ce:93:51:05:bc:37:2f:0c:8b: 9b:8d:d3:16:ff:15:81:05:bf:d9:cc:2d:42:fa:f6: e5:41:39:88:26:37:46:2f:ba:6b:57:e3:e0:02:22: 86:61:91:43:66:54:ee:f1:0b:9a:d4:f7:2c:09:35: e1:88:af:f9:d9:3b:ea:3a:35:92:71:5f:cc:e0:9a: d3:3e:e0:a3:7e:ae:17:b5:c2:29:c0:16:52:b8:e0: a3:99:fb:e1:f0:7c:e0:aa:af:dc:6f:0b:e0:1a:6a: d7:1e:0c:85:53:41:43:0c:70:2c:3a:4a:3b:aa:e7: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:37:72:E4:8D:59:9B:40:EB:2E:75:97:87:67:75:11:DD:68:36:B0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uDdy5I1Zm0DrLnWXh2d1Ed1oNrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.28.0/22 31.56.57.0/24 31.56.64.0/24 31.56.68.0/24 31.56.75.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0-31.56.112.255 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0/21 31.57.38.0/23 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.192.0/22 31.57.200.0/23 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.238.0/24 31.57.252.0/22 31.58.34.0-31.58.39.255 31.58.50.0-31.58.55.255 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.157.0/24 31.58.162.0/23 31.58.166.0/24 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.57.0/24 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.196.0-31.59.211.255 31.59.220.0-31.59.227.255 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 53:0a:d6:c8:5b:5c:8a:ba:f6:87:50:99:d1:2b:b3:99:5c:b4: c0:3a:40:6c:cc:b6:12:c7:5c:b1:1e:82:84:8f:c3:12:50:3b: 91:07:e1:83:18:75:fa:61:5f:81:3e:bc:b3:18:6a:6b:5f:b7: 27:89:96:9c:15:3b:e7:eb:bb:a8:58:4b:12:0d:19:52:4d:8f: 7a:80:46:51:af:6f:e7:ee:cc:56:f3:f4:fa:cb:8f:81:31:5f: 68:c3:15:bf:66:37:b6:d2:41:bd:89:13:1a:56:54:6b:b3:92: 7f:39:ba:1d:e9:e9:13:38:eb:78:57:30:ea:2c:90:84:79:a6: ed:a7:83:79:4c:09:18:ea:2f:68:27:0f:76:8d:6c:47:06:11: cd:54:ef:40:05:63:05:64:69:a1:d1:3b:51:da:25:e0:05:5a: 39:a9:11:12:11:d8:4c:b0:5f:9c:c2:36:92:3a:7b:a8:3a:b9: e3:6f:4b:fe:19:df:f4:70:fc:5c:3d:e5:20:92:de:da:3e:6b: 2c:e7:fa:46:49:e7:e5:5f:dd:35:4e:0f:70:60:7a:38:31:ce: 6a:ba:58:f3:e8:7f:21:db:d6:bd:a9:7d:ac:f8:3c:b4:08:f5: 33:ad:37:df:b6:7e:a6:8d:f5:a3:98:f2:44:c3:27:04:7c:ae: 58:3a:e2:7a -----BEGIN CERTIFICATE----- MIIGtzCCBZ+gAwIBAgISAZvsLyMvGgDokTf0/QboS8H4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIzMTg0NzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODM3NzJlNDhkNTk5YjQwZWIyZTc1OTc4NzY3NzUxMWRkNjgzNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvVpbRZv8rciMesaJ1Ba4RCei0D0 XwtuJit9dgJ0tEm/x0mGuAr77VljqFLiRhW7t/X9YCavEstUoJMuU8zfqjPozgof N+u0f/JhGlT3mmer2MN39tJ7v9m/Hfx8C/iavXEqYtV3Uz5Cv2g7GJU8S5GVCdUs EKwtPtiV/+PRpeVIe/w9Cjg8ydzt6FLOk1EFvDcvDIubjdMW/xWBBb/ZzC1C+vbl QTmIJjdGL7prV+PgAiKGYZFDZlTu8Qua1PcsCTXhiK/52TvqOjWScV/M4JrTPuCj fq4XtcIpwBZSuOCjmfvh8Hzgqq/cbwvgGmrXHgyFU0FDDHAsOko7qufzYQIDAQAB o4IDwzCCA78wHQYDVR0OBBYEFLg3cuSNWZtA6y51l4dndRHdaDawMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdURkeTVJMVptMERyTG5XWGgyZDFFZDFvTnJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB1wYIKwYBBQUHAQcBAf8EggHGMIIBwjCCAb4EAgABMIIB tgMEAR84BAMEAh84HAMEAB84OQMEAB84QAMEAB84RAMEAB84SwMEAh84UAMEAR84 WjAMAwQFHzhgAwQAHzhwAwQBHzhyMAwDBAEfOHYDBAIfOHgDBAIfOLQwDAMEAh84 vAMEAh84wAMEAh84yAMEAx840AMEAR843AMEAR844AMEAh845AMEAh847AMEAh85 DAMEAx85GAMEAR85JjAMAwQCHzk0AwQGHzkAAwQBHzleAwQDHzl4AwQBHzmEAwQD HzmIAwQBHzmSAwQCHzmoMAwDBAQfObADBAIfObgDBAIfOcADBAEfOcgwDAMEBB85 0AMEAh854AMEAh856AMEAB857gMEAh85/DAMAwQBHzoiAwQDHzogMAwDBAEfOjID BAMfOjADBAEfOkADBAIfOkQDBAIfOlQDBAIfOpgDBAAfOp0DBAEfOqIDBAAfOqYD BAIfOqwDBAIfOtQwDAMEAh863AMEAh864AMEAB87OQMEAh87TAMEAh87YAMEAx87 cDAMAwQDHzuIAwQDHzuQAwQDHzugMAwDBAIfO8QDBAIfO9AwDAMEAh873AMEAh87 4AMEAh876DANBgkqhkiG9w0BAQsFAAOCAQEAUwrWyFtcirr2h1CZ0SuzmVy0wDpA bMy2EsdcsR6ChI/DElA7kQfhgxh1+mFfgT68sxhqa1+3J4mWnBU75+u7qFhLEg0Z Uk2PeoBGUa9v5+7MVvP0+suPgTFfaMMVv2Y3ttJBvYkTGlZUa7OSfzm6HenpEzjr eFcw6iyQhHmm7aeDeUwJGOovaCcPdo1sRwYRzVTvQAVjBWRpodE7Udol4AVaOakR EhHYTLBfnMI2kjp7qDq5429L/hnf9HD8XD3lIJLe2j5rLOf6Rknn5V/dNU4PcGB6 ODHOarpY8+h/IdvWval9rPg8tAj1M60337Z+po31o5jyRMMnBHyuWDrieg== -----END CERTIFICATE-----Generated at Sat Jan 24 03:49:58 2026 by rpki-client