This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y8rB0lhZ12BKUTzqejH4qxAvMac.roa File: y8rB0lhZ12BKUTzqejH4qxAvMac.roa (raw, json) Hash identifier: CMbEqPNypuFBbH7udesVJabG4vc0KfQXgO7uBLxQXn4= Subject key identifier: CB:CA:C1:D2:58:59:D7:60:4A:51:3C:EA:7A:31:F8:AB:10:2F:31:A7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BDFFCE620CD1C643914FCE5C7CEE6ACD0 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y8rB0lhZ12BKUTzqejH4qxAvMac.roa Signing time: Wed 21 Jan 2026 09:57:31 +0000 ROA not before: Wed 21 Jan 2026 09:57:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 31.56.16.0/22 maxlen: 24 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.16.0/21 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.135.0/24 maxlen: 24 31.57.184.0/23 maxlen: 24 31.58.176.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.200.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.216.0/22 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.240.0/22 maxlen: 24 31.58.244.0/24 maxlen: 24 31.58.245.0/24 maxlen: 24 31.58.249.0/24 maxlen: 24 31.58.250.0/24 maxlen: 24 31.58.251.0/24 maxlen: 24 31.58.252.0/22 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.64.0/22 maxlen: 24 31.59.80.0/22 maxlen: 24 31.59.124.0/22 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.176.0/21 maxlen: 24 31.59.188.0/22 maxlen: 24 31.59.192.0/22 maxlen: 24 31.59.216.0/22 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.8.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:fc:e6:20:cd:1c:64:39:14:fc:e5:c7:ce:e6:ac:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 21 09:57:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbcac1d25859d7604a513cea7a31f8ab102f31a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:1a:e0:58:54:b9:c6:fa:87:b1:2e:67:d4: 53:d4:45:45:8e:f6:1e:b6:38:09:f8:c6:0c:7d:b1: 85:48:19:b9:f7:d9:4c:3d:9d:ef:8e:e9:6d:ce:c9: eb:07:9e:57:4a:c5:bf:10:ab:77:0b:31:09:e5:d7: 37:fe:7b:96:83:43:5e:03:ae:79:50:f4:a2:79:6d: 6d:09:60:d1:09:ed:7b:47:c6:94:fe:74:11:40:26: ff:fc:e7:e2:36:5f:cf:89:b4:51:db:0f:f7:71:55: 76:35:2a:b9:e6:06:58:19:77:8b:0e:34:1d:ff:39: e4:e0:5b:3a:34:4f:9d:e4:75:5f:b3:c4:18:34:70: 0a:5a:b3:83:c9:f4:07:d4:64:65:b7:06:b4:4f:05: 8f:ec:46:9d:e2:70:ba:9d:72:33:82:53:3e:71:32: 73:fa:7c:13:fb:12:d5:8f:93:8b:45:69:ed:d3:36: 19:76:b1:71:47:1f:c7:03:99:73:0b:d5:33:f5:e2: 42:16:46:30:03:b5:ac:9b:76:71:94:7e:8a:87:8e: 2a:87:f8:c2:e1:2b:da:6d:94:b9:fb:b8:56:6f:02: e8:ea:ea:01:7c:22:29:a4:0d:2e:32:16:d9:fa:7e: e0:2f:44:94:98:76:1d:90:ae:bf:33:36:b6:7e:2d: cc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CA:C1:D2:58:59:D7:60:4A:51:3C:EA:7A:31:F8:AB:10:2F:31:A7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y8rB0lhZ12BKUTzqejH4qxAvMac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.16.0/22 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.16.0/21 31.57.36.0/23 31.57.135.0/24 31.57.184.0/23 31.58.176.0/22 31.58.196.0-31.58.209.255 31.58.216.0/22 31.58.232.0/23 31.58.240.0-31.58.245.255 31.58.249.0-31.58.255.255 31.59.36.0/22 31.59.44.0/22 31.59.64.0/22 31.59.80.0/22 31.59.124.0/22 31.59.140.0/22 31.59.176.0/21 31.59.188.0-31.59.195.255 31.59.216.0/22 94.183.152.0/22 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.8.0/22 217.60.32.0/22 217.60.44.0-217.60.59.255 217.60.187.0/24 Signature Algorithm: sha256WithRSAEncryption b8:2b:b8:f5:7a:4f:3b:0b:f8:81:a7:74:8d:a8:ef:40:ec:e8: 64:df:0c:83:70:bd:c1:8f:a6:e4:4d:53:cc:9a:a2:bc:b0:3e: 64:f9:2b:6a:de:98:48:6d:fd:a3:2b:1b:eb:6a:ae:86:f0:5b: df:02:7f:94:2b:c7:45:d9:f2:73:d9:90:b4:b2:27:59:5f:2f: c3:20:7a:d0:b2:a9:e4:9a:cb:90:b8:d2:ce:42:a7:10:fc:bf: 9f:1a:88:9e:4c:a1:58:dc:16:b5:c1:6f:8c:41:84:fb:dc:5b: 99:11:ee:0e:c2:b7:19:4d:55:3b:bd:0c:6d:18:fb:36:55:d7: 32:09:08:19:76:17:7a:e0:e0:2d:58:5e:c6:25:27:8a:bb:e6: 24:5b:d5:bf:ad:41:0d:0b:5b:bc:b2:05:ca:6b:f0:1e:88:37: 07:b8:6d:a5:4a:13:bd:12:ab:64:55:1e:43:30:48:22:51:bf: 1b:ba:2c:19:8c:53:33:6c:44:38:a4:f8:eb:8f:d6:fa:55:fc: fc:95:f0:72:7f:29:d2:52:71:77:2d:38:3f:83:4b:37:4d:bf: 38:0c:de:48:d8:20:2d:ea:f0:a4:51:f6:4e:8c:ff:32:01:21: db:fc:68:29:f0:79:e7:7c:18:62:5f:78:eb:f4:00:57:23:7f: 2e:29:2f:f5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZvf/OYgzRxkORT85cfO5qzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIxMDk1NzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmNhYzFkMjU4NTlkNzYwNGE1MTNjZWE3YTMxZjhhYjEwMmYzMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ka4FhUucb6h7EuZ9RT1EVFjvYe tjgJ+MYMfbGFSBm599lMPZ3vjultzsnrB55XSsW/EKt3CzEJ5dc3/nuWg0NeA655 UPSieW1tCWDRCe17R8aU/nQRQCb//OfiNl/PibRR2w/3cVV2NSq55gZYGXeLDjQd /znk4Fs6NE+d5HVfs8QYNHAKWrODyfQH1GRltwa0TwWP7Ead4nC6nXIzglM+cTJz +nwT+xLVj5OLRWnt0zYZdrFxRx/HA5lzC9Uz9eJCFkYwA7Wsm3ZxlH6Kh44qh/jC 4SvabZS5+7hWbwLo6uoBfCIppA0uMhbZ+n7gL0SUmHYdkK6/Mza2fi3M5wIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFMvKwdJYWddgSlE86nox+KsQLzGnMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveThyQjBsaFoxMkJLVVR6cWVqSDRxeEF2TWFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCB/wQCAAEwgfgD BAIfOBADBAIfOLAwDAMEAR84tgMEAR84vAMEAR840AMEAR845AMEAx85EAMEAR85 JAMEAB85hwMEAR85uAMEAh86sDAMAwQCHzrEAwQBHzrQAwQCHzrYAwQBHzroMAwD BAQfOvADBAEfOvQwCwMEAB86+QMDAB86AwQCHzskAwQCHzssAwQCHztAAwQCHztQ AwQCHzt8AwQCHzuMAwQDHzuwMAwDBAIfO7wDBAIfO8ADBAIfO9gDBAJet5gwDAME Bl63wAMEA1634DALAwQCXrfsAwMDXrADBALZPAgDBALZPCAwDAMEAtk8LAMEAtk8 OAMEANk8uzANBgkqhkiG9w0BAQsFAAOCAQEAuCu49XpPOwv4gad0jajvQOzoZN8M g3C9wY+m5E1TzJqivLA+ZPkrat6YSG39oysb62quhvBb3wJ/lCvHRdnyc9mQtLIn WV8vwyB60LKp5JrLkLjSzkKnEPy/nxqInkyhWNwWtcFvjEGE+9xbmRHuDsK3GU1V O70MbRj7NlXXMgkIGXYXeuDgLVhexiUnirvmJFvVv61BDQtbvLIFymvwHog3B7ht pUoTvRKrZFUeQzBIIlG/G7osGYxTM2xEOKT464/W+lX8/JXwcn8p0lJxdy04P4NL N02/OAzeSNggLerwpFH2Toz/MgEh2/xoKfB553wYYl946/QAVyN/Likv9Q== -----END CERTIFICATE-----Generated at Thu Jan 22 00:46:30 2026 by rpki-client