This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OMQYULksaQVKD3UJiG6P7Wrnfes.roa File: OMQYULksaQVKD3UJiG6P7Wrnfes.roa (raw, json) Hash identifier: A2kcD7Zt5YGFeSzbJOQKKHo0bFpySbfDIEk54SivxJE= Subject key identifier: 38:C4:18:50:B9:2C:69:05:4A:0F:75:09:88:6E:8F:ED:6A:E7:7D:EB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B0F020AC1D0921748871337015DBF3E89 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OMQYULksaQVKD3UJiG6P7Wrnfes.roa Signing time: Thu 11 Dec 2025 20:02:30 +0000 ROA not before: Thu 11 Dec 2025 20:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211439 IP address blocks: 31.56.198.0/24 maxlen: 24 31.57.123.0/24 maxlen: 24 31.58.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:02:0a:c1:d0:92:17:48:87:13:37:01:5d:bf:3e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 11 20:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38c41850b92c69054a0f7509886e8fed6ae77deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:9c:56:e0:0c:81:ff:f9:76:2b:29:57:1a: 5b:4f:c1:61:b9:bc:60:16:b2:35:37:f9:64:15:25: e7:63:5d:04:8d:67:7e:78:46:40:0a:64:9a:24:ad: 1e:cb:b1:26:13:fc:7e:f9:0b:58:b2:09:08:db:e7: e4:64:42:da:23:3d:ab:d6:b8:dc:a3:23:3e:4a:86: d9:fa:2e:ba:b7:d8:6c:12:1a:f3:e2:16:82:bc:fd: 9d:9b:5d:87:d8:43:05:1e:38:82:20:06:ce:1d:a0: e0:d8:38:7e:9a:1a:2a:64:21:43:1e:0b:4f:7e:7e: 55:92:93:76:62:91:d8:ee:0c:75:ed:7d:79:da:c1: 03:02:e8:de:ce:26:50:1a:74:97:ca:a3:1f:c7:9b: 35:57:03:9a:8d:9d:fc:16:ef:a2:57:88:2b:ed:44: 15:e7:f8:59:b7:25:90:37:8e:a4:1f:51:66:1f:0a: 50:71:99:0d:eb:5f:39:89:4b:e8:d9:f9:15:b8:98: 3d:a2:c0:39:d0:7e:cc:78:94:0b:04:70:33:79:3f: ca:6c:b7:7e:c8:10:e4:ac:7c:8a:f4:fd:49:ef:b7: 87:18:56:a0:29:82:31:c2:9f:f0:49:eb:0c:08:96: 78:c5:48:2b:90:67:68:80:0e:b0:7d:98:b5:d5:f2: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C4:18:50:B9:2C:69:05:4A:0F:75:09:88:6E:8F:ED:6A:E7:7D:EB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OMQYULksaQVKD3UJiG6P7Wrnfes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.198.0/24 31.57.123.0/24 31.58.64.0/24 Signature Algorithm: sha256WithRSAEncryption af:ab:4e:f1:01:e5:b8:9c:e0:86:24:68:7c:19:3c:24:71:b6: 83:ba:a1:bf:2d:d2:be:45:fd:1f:85:f0:0f:77:75:18:ee:19: 96:6c:b0:06:d0:ce:e0:83:18:f2:47:2e:eb:f6:d2:8d:e0:99: a9:95:0e:71:9d:40:6a:96:ff:57:1a:5d:96:a9:c5:25:ae:62: 74:1e:d6:9b:a2:a5:aa:1d:7c:f5:9d:15:65:0e:46:76:fa:9d: ad:31:a2:15:4e:83:1e:d6:23:41:9e:b3:a1:c7:15:e3:4a:b9: db:c0:57:17:b7:1c:17:18:22:d5:eb:e5:b9:15:db:75:b6:fc: a1:d2:3d:7c:72:6d:b7:8e:29:e6:41:f5:2a:84:20:f4:40:09: d3:22:9f:4b:87:9d:78:f9:1e:10:f0:2e:5c:67:31:ad:60:69: 70:c5:05:94:3e:cc:9f:ed:e7:cf:e7:fa:ac:00:ec:f5:d9:d4: 84:ae:fc:47:84:dc:4f:b8:d0:c4:9b:1f:c5:a5:da:d7:36:69: fb:fc:5a:34:b0:0f:ae:fb:ef:02:f3:c4:98:66:af:f5:12:09: af:4d:7d:b8:17:bb:99:ed:34:2e:17:eb:af:60:9f:6b:21:31: be:69:07:ac:a5:d9:74:bf:aa:e5:c8:41:ae:e9:b6:a1:a3:30: cf:63:28:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsPAgrB0JIXSIcTNwFdvz6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjExMjAwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGM0MTg1MGI5MmM2OTA1NGEwZjc1MDk4ODZlOGZlZDZhZTc3ZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLScVuAMgf/5dispVxpbT8Fhubxg FrI1N/lkFSXnY10EjWd+eEZACmSaJK0ey7EmE/x++QtYsgkI2+fkZELaIz2r1rjc oyM+SobZ+i66t9hsEhrz4haCvP2dm12H2EMFHjiCIAbOHaDg2Dh+mhoqZCFDHgtP fn5VkpN2YpHY7gx17X152sEDAujeziZQGnSXyqMfx5s1VwOajZ38Fu+iV4gr7UQV 5/hZtyWQN46kH1FmHwpQcZkN6185iUvo2fkVuJg9osA50H7MeJQLBHAzeT/KbLd+ yBDkrHyK9P1J77eHGFagKYIxwp/wSesMCJZ4xUgrkGdogA6wfZi11fLW0QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDjEGFC5LGkFSg91CYhuj+1q533rMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvT01RWVVMa3NhUVZLRDNVSmlHNlA3V3JuZmVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjGAwQA Hzl7AwQAHzpAMA0GCSqGSIb3DQEBCwUAA4IBAQCvq07xAeW4nOCGJGh8GTwkcbaD uqG/LdK+Rf0fhfAPd3UY7hmWbLAG0M7ggxjyRy7r9tKN4JmplQ5xnUBqlv9XGl2W qcUlrmJ0HtaboqWqHXz1nRVlDkZ2+p2tMaIVToMe1iNBnrOhxxXjSrnbwFcXtxwX GCLV6+W5Fdt1tvyh0j18cm23jinmQfUqhCD0QAnTIp9Lh514+R4Q8C5cZzGtYGlw xQWUPsyf7efP5/qsAOz12dSErvxHhNxPuNDEmx/FpdrXNmn7/Fo0sA+u++8C88SY Zq/1EgmvTX24F7uZ7TQuF+uvYJ9rITG+aQespdl0v6rlyEGu6bahozDPYyjh -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:54 2025 by rpki-client