This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vuz31UTYDFnF1kJjB_5bWH0t4cQ.roa File: vuz31UTYDFnF1kJjB_5bWH0t4cQ.roa (raw, json) Hash identifier: FGZ78sFdXaHGjDnLvoSIdRYQEUehPx5nJ6IPp/wAFYw= Subject key identifier: BE:EC:F7:D5:44:D8:0C:59:C5:D6:42:63:07:FE:5B:58:7D:2D:E1:C4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AAC66E7EEF2B767048F85875EBB753272 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vuz31UTYDFnF1kJjB_5bWH0t4cQ.roa Signing time: Sat 22 Nov 2025 16:30:16 +0000 ROA not before: Sat 22 Nov 2025 16:30:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.0.0/24 maxlen: 24 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.32.0/24 maxlen: 24 31.56.43.0/24 maxlen: 24 31.56.44.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.71.0/24 maxlen: 24 31.56.77.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.100.0/22 maxlen: 22 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.32.0/24 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.160.0/24 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.190.0/24 maxlen: 24 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.220.0/24 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.239.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:66:e7:ee:f2:b7:67:04:8f:85:87:5e:bb:75:32:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 22 16:30:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=beecf7d544d80c59c5d6426307fe5b587d2de1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c3:6f:aa:c6:83:35:0f:80:8a:af:00:6e:63: 2d:1a:5e:87:90:64:b7:9d:e1:6e:b5:aa:a1:df:13: ab:ab:1f:78:44:81:09:90:35:3f:a7:e4:b7:b0:1e: ec:76:74:e2:fe:62:75:d9:6e:c5:9d:2c:ab:41:4b: 5e:80:44:32:6c:a7:31:f6:82:c4:3a:b8:1a:8e:2e: fe:76:fe:58:c2:be:f1:e0:15:f7:50:08:79:a7:49: 51:29:3d:90:10:69:1e:1f:3e:31:a8:b6:74:81:ad: a7:e4:ab:12:93:ec:69:7e:53:ca:73:84:e5:5e:27: 44:98:1e:48:b9:55:56:7c:d6:97:2e:54:c7:62:8d: b1:18:81:8b:52:ba:45:81:85:a2:c6:cd:16:6a:5c: 69:ed:50:11:67:e4:16:23:a5:0e:f8:7b:bb:7f:7d: 46:93:9f:fd:6e:be:11:01:3b:6b:24:16:fd:a2:1f: dc:88:fb:ce:c3:1e:dd:6a:94:a4:57:fd:8b:ef:ba: 43:c9:26:6d:46:be:36:ba:db:ca:07:7d:97:ef:b0: 30:d5:63:45:2b:76:36:76:82:43:d4:ce:d5:26:55: 78:47:62:5c:49:65:53:8b:c8:d7:31:32:c2:61:75: ce:31:af:a3:99:81:5a:54:ff:f6:dd:1f:aa:22:b6: 9b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EC:F7:D5:44:D8:0C:59:C5:D6:42:63:07:FE:5B:58:7D:2D:E1:C4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vuz31UTYDFnF1kJjB_5bWH0t4cQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.56.4.0/23 31.56.28.0-31.56.32.255 31.56.43.0-31.56.44.255 31.56.57.0/24 31.56.71.0/24 31.56.77.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.156.0/24 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0-31.57.32.255 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.160.0/24 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.190.0/24 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.239.0/24 31.57.250.0-31.57.255.255 31.58.34.0/23 31.58.50.0-31.58.55.255 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.224.0/22 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 01:b7:fb:5b:28:b2:d0:a1:a2:63:82:e5:8d:cf:c1:99:60:d8: 83:3e:7d:53:ff:3d:c4:3d:47:c3:1d:25:42:bc:80:5a:1b:31: a5:fa:83:41:da:32:fa:87:c6:76:3f:1c:cd:73:49:9c:5f:01: 1d:e2:a3:4e:70:48:92:59:8c:37:42:67:38:2c:25:ad:22:3d: 8e:07:c2:bf:45:9e:ff:ad:08:94:e9:19:94:a0:37:e7:98:66: 9c:d7:a6:f3:ca:f2:1b:a0:b9:42:4d:23:20:17:1a:da:a4:d7: cc:f4:fc:fd:42:88:77:28:82:b0:06:4b:02:33:f5:ce:17:50: 22:82:ab:1f:60:33:90:f3:29:d9:cc:39:65:5c:a6:c7:4e:19: 27:1f:c8:35:42:23:69:a2:63:f9:42:7d:a7:cf:cb:47:9f:17: 30:6e:83:35:ce:5b:e9:28:b1:99:61:3a:6e:cc:c3:94:d4:d9: 03:72:be:c0:49:37:43:31:73:e0:9b:3c:31:70:87:09:a0:c7: 66:f8:c8:3b:44:7b:26:02:b1:ed:8f:1f:d7:45:bb:cf:a4:37: 16:6e:38:b2:4d:d1:39:96:a1:65:da:8a:ff:cc:fb:72:67:78: 00:73:8e:a4:9e:30:a8:5b:13:91:4f:ec:75:e6:68:c1:98:b0: 45:09:1c:1a -----BEGIN CERTIFICATE----- MIIGuDCCBaCgAwIBAgISAZqsZufu8rdnBI+Fh167dTJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIyMTYzMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWVjZjdkNTQ0ZDgwYzU5YzVkNjQyNjMwN2ZlNWI1ODdkMmRlMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8NvqsaDNQ+Aiq8AbmMtGl6HkGS3 neFutaqh3xOrqx94RIEJkDU/p+S3sB7sdnTi/mJ12W7FnSyrQUtegEQybKcx9oLE Orgaji7+dv5Ywr7x4BX3UAh5p0lRKT2QEGkeHz4xqLZ0ga2n5KsSk+xpflPKc4Tl XidEmB5IuVVWfNaXLlTHYo2xGIGLUrpFgYWixs0Walxp7VARZ+QWI6UO+Hu7f31G k5/9br4RATtrJBb9oh/ciPvOwx7dapSkV/2L77pDySZtRr42utvKB32X77Aw1WNF K3Y2doJD1M7VJlV4R2JcSWVTi8jXMTLCYXXOMa+jmYFaVP/23R+qIrabVQIDAQAB o4IDxDCCA8AwHQYDVR0OBBYEFL7s99VE2AxZxdZCYwf+W1h9LeHEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdnV6MzFVVFlERm5GMWtKakJfNWJXSDB0NGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB2AYIKwYBBQUHAQcBAf8EggHHMIIBwzCCAb8EAgABMIIB twMEAB84AAMEAR84BDAMAwQCHzgcAwQAHzggMAwDBAAfOCsDBAAfOCwDBAAfODkD BAAfOEcDBAAfOE0DBAIfOFADBAEfOFoDBAQfOGADBAEfOHIwDAMEAR84dgMEAh84 eAMEAB84nAMEAh84tDAMAwQCHzi8AwQCHzjAAwQCHzjIAwQDHzjQAwQBHzjcAwQB HzjgAwQCHzjkAwQCHzjsAwQCHzkMMAwDBAMfORgDBAAfOSADBAIfOSQwDAMEAh85 NAMEBh85AAMEAR85XgMEAx85eAMEAR85hAMEAx85iAMEAR85kgMEAB85oAMEAh85 qDAMAwQEHzmwAwQCHzm4AwQAHzm+AwQCHznAMAwDBAMfOcgDBAAfOcowDAMEBB85 0AMEAh854AMEAh856AMEAB857zALAwQBHzn6AwMBHzgDBAEfOiIwDAMEAR86MgME Ax86MAMEAR86QAMEAh86RAMEAh86VAMEAh86mAMEAh86rAMEAh861DAMAwQCHzrc AwQCHzrgAwQCHztMAwQCHztgAwQDHztwMAwDBAMfO4gDBAMfO5ADBAMfO6ADBAIf O+ADBAIfO+gwDQYJKoZIhvcNAQELBQADggEBAAG3+1sostChomOC5Y3PwZlg2IM+ fVP/PcQ9R8MdJUK8gFobMaX6g0HaMvqHxnY/HM1zSZxfAR3io05wSJJZjDdCZzgs Ja0iPY4Hwr9Fnv+tCJTpGZSgN+eYZpzXpvPK8huguUJNIyAXGtqk18z0/P1CiHco grAGSwIz9c4XUCKCqx9gM5DzKdnMOWVcpsdOGScfyDVCI2miY/lCfafPy0efFzBu gzXOW+kosZlhOm7Mw5TU2QNyvsBJN0Mxc+CbPDFwhwmgx2b4yDtEeyYCse2PH9dF u8+kNxZuOLJN0TmWoWXaiv/M+3JneABzjqSeMKhbE5FP7HXmaMGYsEUJHBo= -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:13 2025 by rpki-client