This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6Suf7pyAri9epo-H-QY-WgTKg_A.roa File: 6Suf7pyAri9epo-H-QY-WgTKg_A.roa (raw, json) Hash identifier: mwP5dV5i2JAlJB+dhPO3y5HutpgpZn4N/x3ZkHQ9g+g= Subject key identifier: E9:2B:9F:EE:9C:80:AE:2F:5E:A6:8F:87:F9:06:3E:5A:04:CA:83:F0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AED6D400D8DC6F6C597C818060695C1F6 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6Suf7pyAri9epo-H-QY-WgTKg_A.roa Signing time: Fri 05 Dec 2025 07:32:31 +0000 ROA not before: Fri 05 Dec 2025 07:32:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 31.56.0.0/24 maxlen: 24 31.56.49.0/24 maxlen: 24 31.56.98.0/24 maxlen: 24 31.56.103.0/24 maxlen: 24 31.56.210.0/24 maxlen: 24 31.56.212.0/24 maxlen: 24 31.56.223.0/24 maxlen: 24 31.56.234.0/24 maxlen: 24 31.56.235.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.121.0/24 maxlen: 24 31.57.206.0/24 maxlen: 24 31.57.225.0/24 maxlen: 24 31.58.90.0/24 maxlen: 24 31.58.168.0/24 maxlen: 24 31.59.171.0/24 maxlen: 24 31.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:6d:40:0d:8d:c6:f6:c5:97:c8:18:06:06:95:c1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 5 07:32:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e92b9fee9c80ae2f5ea68f87f9063e5a04ca83f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:59:a2:a1:14:e4:02:69:96:78:de:41:c5: 5c:4d:0a:44:72:1b:6a:58:b4:1c:85:da:c6:4c:6d: 17:b0:5a:2b:b7:7e:cd:8d:79:e9:08:81:9a:8a:08: 8e:61:da:ea:52:f0:2e:d9:69:df:ff:45:b7:00:da: c7:a4:f1:10:4c:51:90:c5:b8:02:5c:97:36:32:86: 3f:d3:59:88:15:83:bd:e3:2b:1b:ca:4e:1e:f4:35: c9:4c:2d:c8:3a:44:24:4d:35:60:e6:fd:3b:80:aa: d6:4b:d1:42:96:0c:3b:13:1f:cd:63:76:9f:32:f7: 58:67:f0:6f:67:51:60:1d:a3:75:ef:cf:df:49:d7: e3:23:ea:a5:2a:5b:e0:8c:a3:f5:75:0d:4c:42:8a: fc:9c:7e:f8:35:06:46:bc:5a:53:50:a1:c8:b4:23: ce:94:69:34:3c:19:de:3b:38:e8:59:f5:36:81:f6: 01:36:50:a2:ca:09:19:93:4e:38:57:ba:2a:35:c5: 80:ff:cd:ad:fa:61:4f:25:45:ac:80:ad:84:2f:bd: 06:b9:01:a2:8d:23:e0:9c:35:81:a8:7e:42:aa:ba: c3:f0:d6:9a:52:a3:4b:72:a1:fa:6e:be:c5:3f:93: e9:e8:f0:0d:e4:85:70:0e:4f:19:57:4b:8c:3f:43: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:9F:EE:9C:80:AE:2F:5E:A6:8F:87:F9:06:3E:5A:04:CA:83:F0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6Suf7pyAri9epo-H-QY-WgTKg_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.0.0/24 31.56.49.0/24 31.56.98.0/24 31.56.103.0/24 31.56.210.0/24 31.56.212.0/24 31.56.223.0/24 31.56.234.0/23 31.57.35.0/24 31.57.121.0/24 31.57.206.0/24 31.57.225.0/24 31.58.90.0/24 31.58.168.0/24 31.59.171.0/24 31.59.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:d5:74:a7:be:62:68:2c:21:83:14:01:51:ff:79:08:f5:ff: 05:29:b3:4c:a9:25:5c:24:1b:29:47:d4:e9:9c:c4:10:b0:8d: 9a:0d:de:29:5e:92:a4:3d:f9:25:f0:4e:06:6c:53:b8:f2:0c: 20:25:a1:77:82:3d:53:60:98:aa:0e:1c:78:be:b3:16:2d:65: 68:0f:7a:a3:71:20:a5:97:a6:ac:ea:b1:71:36:48:5e:be:c4: 2d:21:52:00:35:c8:36:a0:15:c6:c9:da:e8:77:b8:17:9c:47: 25:5f:63:0e:eb:e9:91:29:10:94:3b:d0:a2:c8:45:6f:9c:71: c1:e1:6d:a8:ae:da:59:12:cd:34:0c:c9:10:ac:de:cd:a5:49: d1:08:2e:10:69:a3:5c:a9:52:b1:b8:71:71:b6:75:52:37:ae: f1:36:4b:78:21:32:50:db:cb:52:2d:7c:22:88:04:09:fe:51: 92:1c:95:d3:56:ff:81:d6:cf:cf:66:11:50:a4:51:ad:20:f3: 9e:d4:a1:8b:18:aa:97:c5:e5:dc:8a:56:a1:9f:84:08:38:76: ef:5c:ad:6e:f4:61:0b:5f:26:c8:44:67:62:2a:87:1a:47:f5: af:bc:81:45:22:3d:62:4c:d0:f9:c5:0b:af:23:ea:f6:ce:75: 74:68:70:8e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZrtbUANjcb2xZfIGAYGlcH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA1MDczMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTJiOWZlZTljODBhZTJmNWVhNjhmODdmOTA2M2U1YTA0Y2E4M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQpZoqEU5AJplnjeQcVcTQpEchtq WLQchdrGTG0XsFort37NjXnpCIGaigiOYdrqUvAu2Wnf/0W3ANrHpPEQTFGQxbgC XJc2MoY/01mIFYO94ysbyk4e9DXJTC3IOkQkTTVg5v07gKrWS9FClgw7Ex/NY3af MvdYZ/BvZ1FgHaN178/fSdfjI+qlKlvgjKP1dQ1MQor8nH74NQZGvFpTUKHItCPO lGk0PBneOzjoWfU2gfYBNlCiygkZk044V7oqNcWA/82t+mFPJUWsgK2EL70GuQGi jSPgnDWBqH5CqrrD8NaaUqNLcqH6br7FP5Pp6PAN5IVwDk8ZV0uMP0P1owIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFOkrn+6cgK4vXqaPh/kGPloEyoPwMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNlN1ZjdweUFyaTllcG8tSC1RWS1XZ1RLZ19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAHzgAAwQA HzgxAwQAHzhiAwQAHzhnAwQAHzjSAwQAHzjUAwQAHzjfAwQBHzjqAwQAHzkjAwQA Hzl5AwQAHznOAwQAHznhAwQAHzpaAwQAHzqoAwQAHzurAwQCHzvsMA0GCSqGSIb3 DQEBCwUAA4IBAQBc1XSnvmJoLCGDFAFR/3kI9f8FKbNMqSVcJBspR9TpnMQQsI2a Dd4pXpKkPfkl8E4GbFO48gwgJaF3gj1TYJiqDhx4vrMWLWVoD3qjcSCll6as6rFx NkhevsQtIVIANcg2oBXGydrod7gXnEclX2MO6+mRKRCUO9CiyEVvnHHB4W2ortpZ Es00DMkQrN7NpUnRCC4QaaNcqVKxuHFxtnVSN67xNkt4ITJQ28tSLXwiiAQJ/lGS HJXTVv+B1s/PZhFQpFGtIPOe1KGLGKqXxeXcilahn4QIOHbvXK1u9GELXybIRGdi KocaR/WvvIFFIj1iTND5xQuvI+r2znV0aHCO -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:05 2025 by rpki-client