This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xDod0DshipVPzGcGgEEEPxmhknI.roa File: xDod0DshipVPzGcGgEEEPxmhknI.roa (raw, json) Hash identifier: Xtp2G11iGnHddJ+xv4LmIdKkzDHfCeo5/53p2ynQxQk= Subject key identifier: C4:3A:1D:D0:3B:21:8A:95:4F:CC:67:06:80:41:04:3F:19:A1:92:72 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BA3A3BDB819D3809006F4306783741E5D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xDod0DshipVPzGcGgEEEPxmhknI.roa Signing time: Fri 09 Jan 2026 16:42:55 +0000 ROA not before: Fri 09 Jan 2026 16:42:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:a3:bd:b8:19:d3:80:90:06:f4:30:67:83:74:1e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 9 16:42:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c43a1dd03b218a954fcc67068041043f19a19272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:25:74:13:8f:d7:35:08:9f:9b:fb:e9:15: 57:02:e5:26:0a:e8:d7:03:f9:19:fd:9a:8a:40:5e: 5b:24:91:f5:c8:b3:5b:80:4d:ce:e6:32:b3:e8:94: 78:af:92:b9:a3:b0:f3:97:e8:62:43:a4:19:80:28: 24:99:05:6e:27:66:47:40:cf:69:27:f3:ed:b3:c4: 75:2b:9e:32:99:ef:0d:5e:60:e8:83:0e:00:79:10: ae:8d:80:64:98:b3:c6:3e:2a:8f:a2:66:d4:33:06: 3b:f0:08:a4:fd:ff:e4:8c:25:bd:56:6c:48:39:b0: 7a:da:48:83:8a:c1:2e:0d:fb:d5:43:0f:3b:47:c5: ec:b6:fe:7b:4c:6b:92:b5:f9:dd:3e:61:77:ee:de: 8a:9d:16:b9:25:e1:ec:cc:9e:34:ae:73:a1:91:1c: 11:c0:81:7e:1b:81:86:46:8c:36:e9:c0:f7:dd:62: 1c:ea:6e:ba:d1:1b:20:3c:8b:c7:f0:c2:fc:9c:f1: 6e:da:3f:26:b5:0e:31:55:74:6f:7c:10:e4:89:ee: 22:af:ff:8e:80:6a:25:ae:36:17:ce:be:9b:fc:bd: 4a:65:c3:18:60:75:e4:7c:5a:27:46:0a:06:95:fc: 72:90:cc:cb:44:1d:c7:74:c1:6e:05:79:ac:fc:81: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3A:1D:D0:3B:21:8A:95:4F:CC:67:06:80:41:04:3F:19:A1:92:72 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xDod0DshipVPzGcGgEEEPxmhknI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.58.239.0/24 31.59.84.0/22 31.59.90.0/23 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.208.0-217.60.235.255 217.60.237.0/24 Signature Algorithm: sha256WithRSAEncryption b4:5e:92:5e:d7:55:de:9e:8a:35:6d:05:1a:89:f9:fb:cf:e1: 53:43:57:8c:7f:ae:25:37:02:a8:09:4f:bc:3b:b3:52:3e:02: 56:f5:89:69:2f:d3:17:19:8b:47:76:72:4a:98:a0:58:bf:92: 9b:4e:2f:3c:2b:e3:70:c0:fc:fc:52:cd:9a:dc:34:a0:cc:84: 23:8f:52:b7:44:52:e5:03:dc:d3:35:6b:c5:92:db:b2:83:40: 9b:45:83:e2:69:73:65:a3:f9:42:f5:fe:fa:94:3c:d7:20:af: 70:2d:76:71:56:3e:e2:52:5a:7b:31:f7:0f:ce:4f:8a:14:65: a9:94:dd:bb:00:aa:43:bf:af:4c:f6:bd:a3:59:12:df:52:ae: 61:81:41:1f:b5:78:ad:5a:68:b6:74:f7:a0:24:ea:d3:45:0b: c1:87:21:eb:52:f1:12:b3:9c:f9:c9:2f:5e:7e:04:9c:5d:8f: de:b6:13:40:73:c8:79:12:4e:a2:a7:99:d0:b3:a9:17:f1:de: 92:83:db:e9:e1:14:11:04:50:7d:22:34:56:54:40:b4:a3:23: 3b:e9:ae:bf:01:5f:d4:07:77:fb:2b:21:5f:45:6d:4c:fd:c3: f0:77:81:09:4c:04:5f:96:a2:ea:5c:e0:09:1c:23:44:8a:b7: aa:6a:58:2e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgISAZujo724GdOAkAb0MGeDdB5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTA5MTY0MjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDNhMWRkMDNiMjE4YTk1NGZjYzY3MDY4MDQxMDQzZjE5YTE5MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4IldBOP1zUIn5v76RVXAuUmCujX A/kZ/ZqKQF5bJJH1yLNbgE3O5jKz6JR4r5K5o7Dzl+hiQ6QZgCgkmQVuJ2ZHQM9p J/Pts8R1K54yme8NXmDogw4AeRCujYBkmLPGPiqPombUMwY78Aik/f/kjCW9VmxI ObB62kiDisEuDfvVQw87R8Xstv57TGuStfndPmF37t6KnRa5JeHszJ40rnOhkRwR wIF+G4GGRow26cD33WIc6m660RsgPIvH8ML8nPFu2j8mtQ4xVXRvfBDkie4ir/+O gGolrjYXzr6b/L1KZcMYYHXkfFonRgoGlfxykMzLRB3HdMFuBXms/IEsiwIDAQAB o4ICjjCCAoowHQYDVR0OBBYEFMQ6HdA7IYqVT8xnBoBBBD8ZoZJyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveERvZDBEc2hpcFZQekdjR2dFRUVQeG1oa25JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAAf ONMDBAAfOcgwDAMEAh86tAMEAh86wAMEAB867wMEAh87VAMEAR87WgMEAF63lwME AF63ngMEAF63pAMEAF63pjAMAwQBXreuAwQAXrewAwQBXre0AwQA2TwPMAwDBAXZ PKADBAPZPLADBALZPLwwDAMEBNk80AMEAtk86AMEANk87TANBgkqhkiG9w0BAQsF AAOCAQEAtF6SXtdV3p6KNW0FGon5+8/hU0NXjH+uJTcCqAlPvDuzUj4CVvWJaS/T FxmLR3ZySpigWL+Sm04vPCvjcMD8/FLNmtw0oMyEI49St0RS5QPc0zVrxZLbsoNA m0WD4mlzZaP5QvX++pQ81yCvcC12cVY+4lJaezH3D85PihRlqZTduwCqQ7+vTPa9 o1kS31KuYYFBH7V4rVpotnT3oCTq00ULwYch61LxErOc+ckvXn4EnF2P3rYTQHPI eRJOoqeZ0LOpF/HekoPb6eEUEQRQfSI0VlRAtKMjO+muvwFf1Ad3+yshX0VtTP3D 8HeBCUwEX5ai6lzgCRwjRIq3qmpYLg== -----END CERTIFICATE-----Generated at Sat Jan 10 09:45:17 2026 by rpki-client