This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xu_bIgAIOlSW2P45G9-lzyoGe1E.roa File: xu_bIgAIOlSW2P45G9-lzyoGe1E.roa (raw, json) Hash identifier: 1DdpDuqVHCd9T/UzqSMqEiV57DlpaH59MYu+ZMAawLw= Subject key identifier: C6:EF:DB:22:00:08:3A:54:96:D8:FE:39:1B:DF:A5:CF:2A:06:7B:51 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B4B2300A3EFEF4A2703E8B71AC7C49CB6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xu_bIgAIOlSW2P45G9-lzyoGe1E.roa Signing time: Tue 23 Dec 2025 12:15:43 +0000 ROA not before: Tue 23 Dec 2025 12:15:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56971 IP address blocks: 31.56.27.0/24 maxlen: 24 31.56.28.0/24 maxlen: 24 31.56.48.0/24 maxlen: 24 31.56.113.0/24 maxlen: 24 31.56.117.0/24 maxlen: 24 31.56.146.0/24 maxlen: 24 31.56.196.0/24 maxlen: 24 31.56.197.0/24 maxlen: 24 31.56.204.0/24 maxlen: 24 31.56.205.0/24 maxlen: 24 31.56.206.0/24 maxlen: 24 31.56.222.0/24 maxlen: 24 31.56.227.0/24 maxlen: 24 31.57.24.0/24 maxlen: 24 31.57.26.0/24 maxlen: 24 31.57.27.0/24 maxlen: 24 31.57.28.0/23 maxlen: 24 31.57.28.0/24 maxlen: 24 31.57.29.0/24 maxlen: 24 31.57.46.0/24 maxlen: 24 31.57.47.0/24 maxlen: 24 31.57.61.0/24 maxlen: 24 31.57.62.0/24 maxlen: 24 31.57.63.0/24 maxlen: 24 31.57.92.0/24 maxlen: 24 31.57.93.0/24 maxlen: 24 31.57.105.0/24 maxlen: 24 31.57.106.0/24 maxlen: 24 31.57.107.0/24 maxlen: 24 31.57.108.0/24 maxlen: 24 31.57.109.0/24 maxlen: 24 31.57.118.0/24 maxlen: 24 31.57.157.0/24 maxlen: 24 31.57.158.0/24 maxlen: 24 31.58.50.0/24 maxlen: 24 31.58.87.0/24 maxlen: 24 31.58.134.0/24 maxlen: 24 31.58.171.0/24 maxlen: 24 31.58.220.0/24 maxlen: 24 31.58.226.0/24 maxlen: 24 31.59.40.0/23 maxlen: 24 31.59.40.0/24 maxlen: 24 31.59.41.0/24 maxlen: 24 31.59.102.0/23 maxlen: 24 31.59.104.0/23 maxlen: 24 31.59.106.0/24 maxlen: 24 31.59.120.0/24 maxlen: 24 31.59.121.0/24 maxlen: 24 31.59.136.0/24 maxlen: 24 31.59.138.0/24 maxlen: 24 31.59.139.0/24 maxlen: 24 31.59.168.0/24 maxlen: 24 31.59.170.0/24 maxlen: 24 31.59.174.0/24 maxlen: 24 31.59.175.0/24 maxlen: 24 94.183.178.0/24 maxlen: 24 94.183.182.0/24 maxlen: 24 94.183.183.0/24 maxlen: 24 94.183.184.0/24 maxlen: 24 94.183.185.0/24 maxlen: 24 94.183.186.0/24 maxlen: 24 94.183.187.0/24 maxlen: 24 94.183.188.0/24 maxlen: 24 94.183.189.0/24 maxlen: 24 94.183.190.0/24 maxlen: 24 94.183.191.0/24 maxlen: 24 94.183.232.0/24 maxlen: 24 94.183.233.0/24 maxlen: 24 94.183.234.0/24 maxlen: 24 94.183.235.0/24 maxlen: 24 217.60.0.0/21 maxlen: 24 217.60.0.0/24 maxlen: 24 217.60.1.0/24 maxlen: 24 217.60.2.0/24 maxlen: 24 217.60.3.0/24 maxlen: 24 217.60.4.0/24 maxlen: 24 217.60.5.0/24 maxlen: 24 217.60.6.0/24 maxlen: 24 217.60.7.0/24 maxlen: 24 217.60.36.0/24 maxlen: 24 217.60.37.0/24 maxlen: 24 217.60.38.0/24 maxlen: 24 217.60.39.0/24 maxlen: 24 217.60.60.0/22 maxlen: 24 217.60.186.0/24 maxlen: 24 217.60.248.0/24 maxlen: 24 217.60.249.0/24 maxlen: 24 217.60.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:23:00:a3:ef:ef:4a:27:03:e8:b7:1a:c7:c4:9c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 23 12:15:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6efdb2200083a5496d8fe391bdfa5cf2a067b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:2b:fd:5b:7c:d9:ec:77:af:d4:4d:08:b5: 9e:bc:e8:48:93:2f:42:d6:28:63:36:8d:09:8e:af: eb:b6:0b:6a:17:91:c2:fd:5c:79:7e:e2:c5:8c:62: 54:41:c8:ff:4b:49:f7:1b:df:56:ce:9e:1e:db:cd: c9:17:6f:4c:cd:3f:a9:f1:a7:d8:cb:ee:3d:93:8d: c7:18:57:7d:b5:23:ee:25:ec:86:29:45:74:31:90: f2:65:3b:e7:0c:49:fb:f1:72:3f:3d:e2:5a:d7:94: 88:0f:b4:54:ff:79:4b:c6:8c:ff:a3:b1:5e:d7:7f: ea:df:67:d0:b1:ea:c2:e5:5f:3b:47:69:a3:2c:74: c6:c4:45:3a:83:29:08:eb:eb:94:08:e2:11:cc:8a: bd:eb:7c:c2:26:37:fc:35:0b:e5:b0:87:33:53:04: f7:9a:6e:92:1c:c3:fd:25:c2:1a:e6:53:66:ac:49: 24:62:13:8e:97:1f:5a:49:18:7f:ed:45:45:be:01: 20:35:c2:ea:e5:49:d9:3f:68:b0:73:16:b4:b0:86: f3:fe:ba:10:3b:bb:fa:bd:8e:33:80:f4:32:1c:76: 0a:31:2c:b7:3d:9f:d4:68:89:d9:72:f8:40:2c:0e: 30:21:cb:2e:1e:de:28:c2:02:6d:ef:b7:23:72:c8: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EF:DB:22:00:08:3A:54:96:D8:FE:39:1B:DF:A5:CF:2A:06:7B:51 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xu_bIgAIOlSW2P45G9-lzyoGe1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.27.0-31.56.28.255 31.56.48.0/24 31.56.113.0/24 31.56.117.0/24 31.56.146.0/24 31.56.196.0/23 31.56.204.0-31.56.206.255 31.56.222.0/24 31.56.227.0/24 31.57.24.0/24 31.57.26.0-31.57.29.255 31.57.46.0/23 31.57.61.0-31.57.63.255 31.57.92.0/23 31.57.105.0-31.57.109.255 31.57.118.0/24 31.57.157.0-31.57.158.255 31.58.50.0/24 31.58.87.0/24 31.58.134.0/24 31.58.171.0/24 31.58.220.0/24 31.58.226.0/24 31.59.40.0/23 31.59.102.0-31.59.106.255 31.59.120.0/23 31.59.136.0/24 31.59.138.0/23 31.59.168.0/24 31.59.170.0/24 31.59.174.0/23 94.183.178.0/24 94.183.182.0-94.183.191.255 94.183.232.0/22 217.60.0.0/21 217.60.36.0/22 217.60.60.0/22 217.60.186.0/24 217.60.248.0/23 217.60.252.0/24 Signature Algorithm: sha256WithRSAEncryption 87:94:93:fe:e9:dc:06:84:c6:10:17:76:80:c2:05:0f:63:fe: 52:cd:05:72:10:40:75:f5:70:63:a7:d7:06:e7:b9:f9:ec:e5: 33:25:06:e1:aa:70:01:76:02:68:94:7c:ca:24:e7:2f:79:f3: 27:22:dc:ab:29:2f:a1:f2:d7:44:65:d5:54:02:e4:93:b3:c1: 49:2c:f1:3c:78:a9:1c:1c:a1:6c:56:67:4b:b1:6d:e9:bb:7d: 4a:27:15:d0:10:e1:39:5a:0a:99:07:64:39:42:26:e7:83:8d: e7:b7:96:19:a1:93:8c:1a:6a:a2:26:ca:81:97:75:df:c7:06: ad:8f:e7:4d:a2:11:21:c3:e8:b9:a6:f5:8d:69:6c:70:03:7b: f4:60:b7:d4:59:81:20:13:6a:67:87:69:49:dc:3e:f0:6a:6f: e8:6c:11:78:da:a5:db:b7:3e:70:8e:1f:71:f4:a1:5b:76:3e: 66:00:3e:b1:ad:65:c8:f3:a7:cd:a1:f4:32:66:5a:46:a4:96: 68:6f:b1:8d:68:10:19:27:7e:85:26:bb:f1:b0:12:65:77:33: b2:49:ed:61:03:08:f6:89:d1:2d:b4:a4:37:e2:76:65:82:94: d0:4d:35:4e:f2:a1:bd:34:db:cc:c3:da:21:fb:5e:53:70:55: d5:0d:c1:68 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgISAZtLIwCj7+9KJwPotxrHxJy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIzMTIxNTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmVmZGIyMjAwMDgzYTU0OTZkOGZlMzkxYmRmYTVjZjJhMDY3YjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Mr/Vt82ex3r9RNCLWevOhIky9C 1ihjNo0Jjq/rtgtqF5HC/Vx5fuLFjGJUQcj/S0n3G99Wzp4e283JF29MzT+p8afY y+49k43HGFd9tSPuJeyGKUV0MZDyZTvnDEn78XI/PeJa15SID7RU/3lLxoz/o7Fe 13/q32fQserC5V87R2mjLHTGxEU6gykI6+uUCOIRzIq963zCJjf8NQvlsIczUwT3 mm6SHMP9JcIa5lNmrEkkYhOOlx9aSRh/7UVFvgEgNcLq5UnZP2iwcxa0sIbz/roQ O7v6vY4zgPQyHHYKMSy3PZ/UaInZcvhALA4wIcsuHt4owgJt77cjcsj6dQIDAQAB o4IDPTCCAzkwHQYDVR0OBBYEFMbv2yIACDpUltj+ORvfpc8qBntRMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveHVfYklnQUlPbFNXMlA0NUc5LWx6eW9HZTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBUQYIKwYBBQUHAQcBAf8EggFAMIIBPDCCATgEAgABMIIB MDAMAwQAHzgbAwQAHzgcAwQAHzgwAwQAHzhxAwQAHzh1AwQAHziSAwQBHzjEMAwD BAIfOMwDBAAfOM4DBAAfON4DBAAfOOMDBAAfORgwDAMEAR85GgMEAR85HAMEAR85 LjAMAwQAHzk9AwQGHzkAAwQBHzlcMAwDBAAfOWkDBAEfOWwDBAAfOXYwDAMEAB85 nQMEAB85ngMEAB86MgMEAB86VwMEAB86hgMEAB86qwMEAB863AMEAB864gMEAR87 KDAMAwQBHztmAwQAHztqAwQBHzt4AwQAHzuIAwQBHzuKAwQAHzuoAwQAHzuqAwQB HzuuAwQAXreyMAwDBAFet7YDBAZet4ADBAJet+gDBAPZPAADBALZPCQDBALZPDwD BADZPLoDBAHZPPgDBADZPPwwDQYJKoZIhvcNAQELBQADggEBAIeUk/7p3AaExhAX doDCBQ9j/lLNBXIQQHX1cGOn1wbnufns5TMlBuGqcAF2AmiUfMok5y958yci3Ksp L6Hy10Rl1VQC5JOzwUks8Tx4qRwcoWxWZ0uxbem7fUonFdAQ4TlaCpkHZDlCJueD jee3lhmhk4waaqImyoGXdd/HBq2P502iESHD6Lmm9Y1pbHADe/Rgt9RZgSATameH aUncPvBqb+hsEXjapdu3PnCOH3H0oVt2PmYAPrGtZcjzp82h9DJmWkaklmhvsY1o EBknfoUmu/GwEmV3M7JJ7WEDCPaJ0S20pDfidmWClNBNNU7yob0028zD2iH7XlNw VdUNwWg= -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:04 2025 by rpki-client