This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ujfTSTXo5189CXiryVWzT14dTuE.roa File: ujfTSTXo5189CXiryVWzT14dTuE.roa (raw, json) Hash identifier: 29ioOSTf0lU1a4j2j1brxC6MJ1BTguzGMbtkpNFpbF8= Subject key identifier: BA:37:D3:49:35:E8:E7:5F:3D:09:78:AB:C9:55:B3:4F:5E:1D:4E:E1 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B04A649A45B03CD0CFADD1FAAC6F11152 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ujfTSTXo5189CXiryVWzT14dTuE.roa Signing time: Tue 09 Dec 2025 19:46:05 +0000 ROA not before: Tue 09 Dec 2025 19:46:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 31.56.88.0/24 maxlen: 24 31.57.30.0/24 maxlen: 24 31.57.131.0/24 maxlen: 24 31.57.150.0/24 maxlen: 24 31.57.176.0/24 maxlen: 24 31.57.194.0/24 maxlen: 24 31.58.71.0/24 maxlen: 24 31.58.146.0/24 maxlen: 24 31.58.160.0/24 maxlen: 24 31.59.14.0/24 maxlen: 24 31.59.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:a6:49:a4:5b:03:cd:0c:fa:dd:1f:aa:c6:f1:11:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 9 19:46:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba37d34935e8e75f3d0978abc955b34f5e1d4ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:8b:2d:6d:b8:22:69:20:ac:2b:ef:9d:48: ae:70:6b:88:59:e7:f1:96:a9:ae:6d:12:56:29:7a: be:d0:78:b1:47:c5:52:64:29:2c:38:ee:de:6d:24: 1d:e5:d5:ed:29:2c:ce:be:00:ff:e5:d3:ab:45:b2: 64:ae:82:3f:72:56:bd:3e:17:dd:91:5c:1d:79:73: b3:da:04:fd:45:67:1e:81:ee:8e:c2:ad:58:50:51: fb:93:ee:1e:41:dc:5e:f2:6f:bd:3e:e4:bb:a7:56: 0f:24:bf:83:80:aa:55:46:89:5d:3c:3f:c8:3c:7d: 2e:dc:10:c4:45:51:2c:ce:83:9c:eb:4c:0a:6a:47: 16:bd:5d:b0:25:16:96:77:08:17:04:23:71:b0:c0: f6:f5:43:bb:db:af:cb:1d:04:89:aa:e2:01:33:4a: 35:18:ac:b3:40:d8:8f:f4:1b:2e:42:61:c5:aa:69: e9:81:6c:b0:c9:df:dd:5f:dc:3a:17:85:75:61:d5: 99:4e:44:6c:4f:21:4a:ab:a4:5a:20:da:70:a9:5c: 89:ef:be:0c:9a:22:e5:d3:9f:0d:a2:cf:1b:11:9f: 97:a6:fc:cd:ff:7b:15:74:f5:c9:c3:46:45:6e:d9: b2:fd:6a:76:0f:25:27:9f:75:9c:6c:b6:7d:c1:24: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:D3:49:35:E8:E7:5F:3D:09:78:AB:C9:55:B3:4F:5E:1D:4E:E1 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ujfTSTXo5189CXiryVWzT14dTuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.88.0/24 31.57.30.0/24 31.57.131.0/24 31.57.150.0/24 31.57.176.0/24 31.57.194.0/24 31.58.71.0/24 31.58.146.0/24 31.58.160.0/24 31.59.14.0/24 31.59.30.0/24 Signature Algorithm: sha256WithRSAEncryption 71:8f:45:d6:5c:b3:b4:30:5a:f4:dd:27:4a:7b:c7:e3:5f:21: 09:73:93:7c:02:16:a6:45:4f:f7:ed:1e:36:8b:27:ed:4f:0b: 92:2a:8f:f5:9c:c3:bc:b7:6b:6d:6b:31:c0:73:f9:b1:cb:58: 8a:d6:bf:67:6e:be:cb:ae:78:da:dc:09:e2:c5:5f:e3:54:f8: 95:31:32:13:bd:b9:d8:b5:df:97:41:1d:01:37:0d:c5:35:c7: 99:d8:f2:11:53:d9:0d:cc:76:e0:a0:db:f8:f4:89:b8:35:03: a0:c5:5f:78:38:2c:74:d3:f9:4b:91:6c:0e:53:6f:87:ff:6e: e3:e6:bc:51:17:97:03:f2:eb:a9:15:1f:77:d7:67:a5:44:2e: 46:f3:f9:3c:33:63:b6:26:3c:99:6b:c9:00:16:79:26:f6:74: 06:e2:a4:4d:0d:07:7d:35:f2:87:11:2a:de:0d:9c:15:e7:02: ec:8e:cb:cd:d4:2c:a6:da:10:27:e9:07:e7:01:e6:21:1c:f7: 05:21:97:0f:b0:a4:fe:f5:49:0d:78:3e:88:00:fc:0f:99:f4: ed:a9:40:8b:8b:f2:d2:58:62:14:92:5f:d6:74:3e:6d:1e:bc: cd:8f:5c:53:82:2f:3d:15:d4:79:71:db:6a:a0:ee:d3:6a:a9: 23:2a:d3:46 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZsEpkmkWwPNDPrdH6rG8RFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA5MTk0NjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTM3ZDM0OTM1ZThlNzVmM2QwOTc4YWJjOTU1YjM0ZjVlMWQ0ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRmLLW24ImkgrCvvnUiucGuIWefx lqmubRJWKXq+0HixR8VSZCksOO7ebSQd5dXtKSzOvgD/5dOrRbJkroI/cla9Phfd kVwdeXOz2gT9RWcege6Owq1YUFH7k+4eQdxe8m+9PuS7p1YPJL+DgKpVRoldPD/I PH0u3BDERVEszoOc60wKakcWvV2wJRaWdwgXBCNxsMD29UO726/LHQSJquIBM0o1 GKyzQNiP9BsuQmHFqmnpgWywyd/dX9w6F4V1YdWZTkRsTyFKq6RaINpwqVyJ774M miLl058Nos8bEZ+XpvzN/3sVdPXJw0ZFbtmy/Wp2DyUnn3WcbLZ9wSS/aQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFLo300k16OdfPQl4q8lVs09eHU7hMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdWpmVFNUWG81MTg5Q1hpcnlWV3pUMTRkVHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAHzhYAwQA HzkeAwQAHzmDAwQAHzmWAwQAHzmwAwQAHznCAwQAHzpHAwQAHzqSAwQAHzqgAwQA HzsOAwQAHzseMA0GCSqGSIb3DQEBCwUAA4IBAQBxj0XWXLO0MFr03SdKe8fjXyEJ c5N8AhamRU/37R42iyftTwuSKo/1nMO8t2ttazHAc/mxy1iK1r9nbr7Lrnja3Ani xV/jVPiVMTITvbnYtd+XQR0BNw3FNceZ2PIRU9kNzHbgoNv49Im4NQOgxV94OCx0 0/lLkWwOU2+H/27j5rxRF5cD8uupFR9312elRC5G8/k8M2O2JjyZa8kAFnkm9nQG 4qRNDQd9NfKHESreDZwV5wLsjsvN1Cym2hAn6QfnAeYhHPcFIZcPsKT+9UkNeD6I APwPmfTtqUCLi/LSWGIUkl/WdD5tHrzNj1xTgi89FdR5cdtqoO7TaqkjKtNG -----END CERTIFICATE-----Generated at Wed Dec 10 08:59:58 2025 by rpki-client