This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WF_cQmL79qdzlec2d9HEHjn5mGI.roa File: WF_cQmL79qdzlec2d9HEHjn5mGI.roa (raw, json) Hash identifier: wE+BnmgBPmSBluT9a6BJQ9GD2GHhRcGBMwr+MwmcA2w= Subject key identifier: 58:5F:DC:42:62:FB:F6:A7:73:95:E7:36:77:D1:C4:1E:39:F9:98:62 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AED6D3F23D8A103C34502D85CECB74E08 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WF_cQmL79qdzlec2d9HEHjn5mGI.roa Signing time: Fri 05 Dec 2025 07:32:31 +0000 ROA not before: Fri 05 Dec 2025 07:32:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.28.0/22 maxlen: 24 31.56.44.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.71.0/24 maxlen: 24 31.56.80.0/22 maxlen: 22 31.56.82.0/23 maxlen: 23 31.56.90.0/23 maxlen: 23 31.56.96.0/22 maxlen: 22 31.56.96.0/24 maxlen: 24 31.56.97.0/24 maxlen: 24 31.56.98.0/23 maxlen: 23 31.56.100.0/22 maxlen: 22 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.141.0/24 maxlen: 24 31.56.144.0/24 maxlen: 24 31.56.156.0/24 maxlen: 24 31.56.180.0/22 maxlen: 24 31.56.180.0/23 maxlen: 23 31.56.180.0/24 maxlen: 24 31.56.188.0/22 maxlen: 24 31.56.190.0/23 maxlen: 23 31.56.192.0/22 maxlen: 22 31.56.195.0/24 maxlen: 24 31.56.200.0/22 maxlen: 24 31.56.208.0/22 maxlen: 24 31.56.212.0/22 maxlen: 24 31.56.220.0/23 maxlen: 23 31.56.224.0/23 maxlen: 23 31.56.228.0/22 maxlen: 24 31.56.230.0/23 maxlen: 23 31.56.236.0/22 maxlen: 24 31.56.236.0/23 maxlen: 23 31.57.12.0/23 maxlen: 24 31.57.14.0/23 maxlen: 24 31.57.24.0/22 maxlen: 24 31.57.28.0/22 maxlen: 24 31.57.30.0/24 maxlen: 24 31.57.31.0/24 maxlen: 24 31.57.32.0/24 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.38.0/23 maxlen: 23 31.57.52.0/22 maxlen: 24 31.57.56.0/22 maxlen: 24 31.57.60.0/22 maxlen: 24 31.57.94.0/23 maxlen: 23 31.57.120.0/22 maxlen: 24 31.57.120.0/23 maxlen: 23 31.57.124.0/22 maxlen: 24 31.57.126.0/23 maxlen: 23 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.152.0/24 maxlen: 24 31.57.160.0/24 maxlen: 24 31.57.168.0/22 maxlen: 24 31.57.176.0/21 maxlen: 21 31.57.184.0/22 maxlen: 24 31.57.186.0/23 maxlen: 23 31.57.190.0/24 maxlen: 24 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.202.0/24 maxlen: 24 31.57.205.0/24 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.216.0/24 maxlen: 24 31.57.217.0/24 maxlen: 24 31.57.220.0/24 maxlen: 24 31.57.222.0/23 maxlen: 24 31.57.224.0/22 maxlen: 22 31.57.232.0/22 maxlen: 24 31.57.239.0/24 maxlen: 24 31.57.250.0/24 maxlen: 24 31.57.251.0/24 maxlen: 24 31.57.252.0/22 maxlen: 24 31.57.253.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.36.0/22 maxlen: 24 31.58.50.0/23 maxlen: 24 31.58.52.0/22 maxlen: 22 31.58.55.0/24 maxlen: 24 31.58.59.0/24 maxlen: 24 31.58.64.0/23 maxlen: 24 31.58.68.0/22 maxlen: 24 31.58.84.0/22 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.160.0/24 maxlen: 24 31.58.172.0/22 maxlen: 24 31.58.212.0/22 maxlen: 24 31.58.212.0/24 maxlen: 24 31.58.220.0/22 maxlen: 22 31.58.224.0/22 maxlen: 24 31.58.224.0/24 maxlen: 24 31.59.76.0/22 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.112.0/22 maxlen: 22 31.59.116.0/22 maxlen: 24 31.59.116.0/24 maxlen: 24 31.59.136.0/21 maxlen: 24 31.59.144.0/21 maxlen: 24 31.59.160.0/21 maxlen: 24 31.59.224.0/22 maxlen: 22 31.59.232.0/22 maxlen: 22 31.59.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:6d:3f:23:d8:a1:03:c3:45:02:d8:5c:ec:b7:4e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 5 07:32:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=585fdc4262fbf6a77395e73677d1c41e39f99862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:35:fd:db:57:71:41:ec:c2:d3:47:ee:2d: 77:8f:96:72:26:b3:52:2f:ad:98:de:df:15:95:57: 48:b1:bd:57:a4:8d:5f:b3:66:63:6b:36:48:0d:06: f8:66:b1:c6:89:8a:74:6e:bb:de:ed:8a:cf:ec:ca: 63:6d:ac:4b:5d:b7:94:db:ab:01:ca:96:4d:7b:48: df:35:35:fc:d1:1a:9d:d5:a2:d7:4d:8f:e4:fa:e6: 16:59:be:c1:01:8a:b5:c3:65:16:bc:44:6f:4c:45: 83:1f:ec:aa:a0:c9:d5:f0:f0:c3:4f:2a:c7:26:1b: 86:1a:bf:8d:38:51:7c:e5:d7:a7:d4:ab:fd:51:3c: 82:f1:2f:9f:b9:52:85:02:09:99:10:86:79:c2:e3: ed:80:7a:71:33:68:de:1c:33:ab:88:92:4a:8c:37: 6f:e7:30:1a:7d:ae:76:e7:f3:c6:9b:1b:a3:86:b3: 0f:6d:88:04:65:4e:5e:02:f1:72:ce:9c:cb:88:1c: 82:77:63:e6:1f:0f:0e:ba:aa:5d:23:f7:32:9f:00: 9f:e7:16:c6:c6:c9:1d:ff:b4:98:b8:85:05:87:a2: b0:5d:11:ae:55:dd:40:dd:b7:82:99:ce:63:f4:88: 47:56:54:2f:64:08:a0:f5:9f:63:1f:8f:57:29:bc: 45:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5F:DC:42:62:FB:F6:A7:73:95:E7:36:77:D1:C4:1E:39:F9:98:62 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WF_cQmL79qdzlec2d9HEHjn5mGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.28.0/22 31.56.44.0/24 31.56.57.0/24 31.56.71.0/24 31.56.80.0/22 31.56.90.0/23 31.56.96.0/20 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.141.0/24 31.56.144.0/24 31.56.156.0/24 31.56.180.0/22 31.56.188.0-31.56.195.255 31.56.200.0/22 31.56.208.0/21 31.56.220.0/23 31.56.224.0/23 31.56.228.0/22 31.56.236.0/22 31.57.12.0/22 31.57.24.0-31.57.32.255 31.57.36.0/22 31.57.52.0-31.57.63.255 31.57.94.0/23 31.57.120.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.152.0/24 31.57.160.0/24 31.57.168.0/22 31.57.176.0-31.57.187.255 31.57.190.0/24 31.57.192.0/22 31.57.200.0-31.57.202.255 31.57.205.0/24 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.239.0/24 31.57.250.0-31.57.255.255 31.58.34.0-31.58.39.255 31.58.50.0-31.58.55.255 31.58.59.0/24 31.58.64.0/23 31.58.68.0/22 31.58.84.0/22 31.58.152.0/22 31.58.160.0/24 31.58.172.0/22 31.58.212.0/22 31.58.220.0-31.58.227.255 31.59.76.0/22 31.59.96.0/22 31.59.112.0/21 31.59.136.0-31.59.151.255 31.59.160.0/21 31.59.224.0/22 31.59.232.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:0a:bf:40:e9:5a:e1:f3:45:bd:d7:83:6e:83:16:f7:b7:45: dd:ac:48:1e:53:b5:c7:5b:57:37:56:34:73:05:c5:59:b2:be: 86:88:69:e3:4a:31:1d:dd:f8:83:41:f6:ff:b0:51:9d:d0:b2: 2a:44:aa:2c:7d:33:39:1b:1b:64:ea:99:79:6c:7f:5a:fe:b8: 2e:b7:4b:1d:1d:9c:43:7f:81:05:51:82:20:42:c1:2d:c0:55: ff:bd:b2:a8:1e:08:ec:dd:46:9c:44:e3:2f:11:a6:72:cf:22: 06:07:69:cd:d1:a5:d8:38:55:5e:8d:ad:65:ab:7d:c1:47:48: 4d:08:28:91:b5:ff:14:fe:dc:8a:85:3c:2e:a5:27:1e:09:e3: 4e:df:cc:66:66:59:90:37:a2:36:f5:40:ac:3c:8f:a4:21:b8: 6e:d4:d0:65:5f:ce:37:bd:ab:fb:3e:6d:c6:39:b2:a4:3d:b6: 7e:bb:bc:e7:b8:46:98:8b:79:e4:79:3e:2a:20:b5:3b:0c:9d: f2:06:ef:8b:27:77:33:22:f6:7b:22:f9:0b:c6:30:2e:2c:6d: 21:50:63:24:14:a0:1f:c5:62:8b:c2:45:d8:46:25:59:e6:28: 15:bf:c9:24:f4:55:82:34:39:e4:7a:f8:94:21:4c:5e:76:66: ea:10:bd:bf -----BEGIN CERTIFICATE----- MIIGyDCCBbCgAwIBAgISAZrtbT8j2KEDw0UC2Fzst04IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA1MDczMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODVmZGM0MjYyZmJmNmE3NzM5NWU3MzY3N2QxYzQxZTM5Zjk5ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwE1/dtXcUHswtNH7i13j5ZyJrNS L62Y3t8VlVdIsb1XpI1fs2ZjazZIDQb4ZrHGiYp0brve7YrP7MpjbaxLXbeU26sB ypZNe0jfNTX80Rqd1aLXTY/k+uYWWb7BAYq1w2UWvERvTEWDH+yqoMnV8PDDTyrH JhuGGr+NOFF85den1Kv9UTyC8S+fuVKFAgmZEIZ5wuPtgHpxM2jeHDOriJJKjDdv 5zAafa525/PGmxujhrMPbYgEZU5eAvFyzpzLiByCd2PmHw8OuqpdI/cynwCf5xbG xskd/7SYuIUFh6KwXRGuVd1A3beCmc5j9IhHVlQvZAig9Z9jH49XKbxFoQIDAQAB o4ID1DCCA9AwHQYDVR0OBBYEFFhf3EJi+/anc5XnNnfRxB45+ZhiMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvV0ZfY1FtTDc5cWR6bGVjMmQ5SEVIam41bUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB6AYIKwYBBQUHAQcBAf8EggHXMIIB0zCCAc8EAgABMIIB xwMEAR84BAMEAh84HAMEAB84LAMEAB84OQMEAB84RwMEAh84UAMEAR84WgMEBB84 YAMEAR84cjAMAwQBHzh2AwQCHzh4AwQAHziNAwQAHziQAwQAHzicAwQCHzi0MAwD BAIfOLwDBAIfOMADBAIfOMgDBAMfONADBAEfONwDBAEfOOADBAIfOOQDBAIfOOwD BAIfOQwwDAMEAx85GAMEAB85IAMEAh85JDAMAwQCHzk0AwQGHzkAAwQBHzleAwQD Hzl4AwQBHzmEAwQDHzmIAwQBHzmSAwQAHzmYAwQAHzmgAwQCHzmoMAwDBAQfObAD BAIfObgDBAAfOb4DBAIfOcAwDAMEAx85yAMEAB85ygMEAB85zTAMAwQEHznQAwQC HzngAwQCHznoAwQAHznvMAsDBAEfOfoDAwEfODAMAwQBHzoiAwQDHzogMAwDBAEf OjIDBAMfOjADBAAfOjsDBAEfOkADBAIfOkQDBAIfOlQDBAIfOpgDBAAfOqADBAIf OqwDBAIfOtQwDAMEAh863AMEAh864AMEAh87TAMEAh87YAMEAx87cDAMAwQDHzuI AwQDHzuQAwQDHzugAwQCHzvgAwQCHzvoMA0GCSqGSIb3DQEBCwUAA4IBAQBcCr9A 6Vrh80W914Nugxb3t0XdrEgeU7XHW1c3VjRzBcVZsr6GiGnjSjEd3fiDQfb/sFGd 0LIqRKosfTM5Gxtk6pl5bH9a/rgut0sdHZxDf4EFUYIgQsEtwFX/vbKoHgjs3Uac ROMvEaZyzyIGB2nN0aXYOFVeja1lq33BR0hNCCiRtf8U/tyKhTwupSceCeNO38xm ZlmQN6I29UCsPI+kIbhu1NBlX843vav7Pm3GObKkPbZ+u7znuEaYi3nkeT4qILU7 DJ3yBu+LJ3czIvZ7IvkLxjAuLG0hUGMkFKAfxWKLwkXYRiVZ5igVv8kk9FWCNDnk eviUIUxedmbqEL2/ -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:18 2025 by rpki-client