This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZWbuwUW8uDkvKI3rucV8Mk1LVlQ.roa File: ZWbuwUW8uDkvKI3rucV8Mk1LVlQ.roa (raw, json) Hash identifier: WaKQAd7RjgUjAYvma7NfA2XD3ZKL2z/JHzyIH0u52vU= Subject key identifier: 65:66:EE:C1:45:BC:B8:39:2F:28:8D:EB:B9:C5:7C:32:4D:4B:56:54 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B093B78F48777324EF65CB0631E0E7B95 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZWbuwUW8uDkvKI3rucV8Mk1LVlQ.roa Signing time: Wed 10 Dec 2025 17:07:31 +0000 ROA not before: Wed 10 Dec 2025 17:07:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208972 IP address blocks: 31.58.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:3b:78:f4:87:77:32:4e:f6:5c:b0:63:1e:0e:7b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 10 17:07:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6566eec145bcb8392f288debb9c57c324d4b5654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:3d:69:ce:63:59:f0:f1:de:35:86:04:8c: 55:1b:28:22:d9:ca:c4:9a:1f:37:d1:d1:1c:d8:68: 5d:41:ab:d7:d8:22:30:77:a3:a0:83:ed:d6:0f:df: a6:f7:48:44:0c:0c:20:70:be:68:e3:fb:16:25:a2: d6:5c:75:cc:a2:3c:fa:68:06:12:0e:4a:73:22:f6: f1:7c:5a:32:a5:63:74:1b:d2:2e:9d:65:9c:c0:90: fb:bb:44:3e:18:1d:b8:f2:0c:e4:b6:b2:1d:58:e8: 63:75:d4:0a:48:98:15:96:c2:cc:9e:7a:56:4b:6d: 7c:11:0f:8f:23:eb:d0:97:bd:e9:19:b5:3c:84:98: b3:3e:45:4c:ab:1a:46:ed:8e:57:bf:99:71:c4:53: 82:53:86:4a:ad:de:84:f3:10:68:17:56:85:36:a3: b7:35:e1:71:0e:2c:de:84:b8:5a:74:36:e5:84:cc: dc:9c:52:d3:d7:37:51:ab:2d:fa:86:ef:a9:61:6a: 9c:44:08:6b:fe:62:c8:d7:ad:4b:62:ad:d5:46:8d: 91:13:0f:fe:80:32:a5:37:07:9b:6b:c5:d6:a9:61: 07:ef:d1:1e:51:87:d6:08:7b:09:6d:e5:f8:f5:0f: 26:86:85:72:ab:6c:06:74:cf:a1:87:5e:ba:df:31: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:EE:C1:45:BC:B8:39:2F:28:8D:EB:B9:C5:7C:32:4D:4B:56:54 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZWbuwUW8uDkvKI3rucV8Mk1LVlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.234.0/24 Signature Algorithm: sha256WithRSAEncryption ab:00:73:25:15:28:39:97:f4:52:b1:a1:a8:99:84:26:96:e2: 24:9b:f1:8a:ab:6e:59:c6:c8:98:aa:7e:68:33:de:80:4c:28: 1e:44:5b:84:39:c6:f9:59:5d:eb:25:eb:3a:26:2c:7c:ac:b5: cc:b3:92:90:97:af:2c:ca:c9:1a:ce:fb:79:cc:9e:ba:3a:c4: 8f:d2:81:f4:93:9a:01:12:41:aa:60:83:f0:3e:d5:1c:0e:90: fe:53:64:eb:89:f0:26:c4:cc:91:b8:2f:ca:e2:11:79:3c:dc: 58:68:86:3c:06:3c:3c:99:fb:0f:26:fe:09:bd:fb:8b:31:21: 45:53:d3:8a:2f:81:de:e1:a9:94:a2:d4:ad:da:fd:45:73:b1: 4a:ad:fd:e7:51:96:03:71:0b:dd:f9:2d:25:c0:4e:71:6f:5f: e9:34:b4:b8:5c:a2:24:fc:67:38:de:b4:d0:1b:71:8c:31:f1: df:72:1e:9a:db:21:14:0a:4a:77:a2:6b:28:d8:49:f1:c0:ab: f6:bd:7d:30:ce:29:93:f3:5e:7f:8d:54:f5:5c:f0:02:ae:ce: c9:2e:ab:78:aa:0e:c4:ad:bf:4a:19:0c:27:9d:a0:d7:ed:bb: b5:fc:b1:29:0c:77:fc:60:c1:26:8f:4a:9d:1f:c9:34:75:95: 61:ea:0c:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsJO3j0h3cyTvZcsGMeDnuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjEwMTcwNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTY2ZWVjMTQ1YmNiODM5MmYyODhkZWJiOWM1N2MzMjRkNGI1NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy89ac5jWfDx3jWGBIxVGygi2crE mh830dEc2GhdQavX2CIwd6Ogg+3WD9+m90hEDAwgcL5o4/sWJaLWXHXMojz6aAYS DkpzIvbxfFoypWN0G9IunWWcwJD7u0Q+GB248gzktrIdWOhjddQKSJgVlsLMnnpW S218EQ+PI+vQl73pGbU8hJizPkVMqxpG7Y5Xv5lxxFOCU4ZKrd6E8xBoF1aFNqO3 NeFxDizehLhadDblhMzcnFLT1zdRqy36hu+pYWqcRAhr/mLI161LYq3VRo2REw/+ gDKlNweba8XWqWEH79EeUYfWCHsJbeX49Q8mhoVyq2wGdM+hh1663zFEhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGVm7sFFvLg5LyiN67nFfDJNS1ZUMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWldidXdVVzh1RGt2S0kzcnVjVjhNazFMVmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrqMA0G CSqGSIb3DQEBCwUAA4IBAQCrAHMlFSg5l/RSsaGomYQmluIkm/GKq25ZxsiYqn5o M96ATCgeRFuEOcb5WV3rJes6Jix8rLXMs5KQl68syskazvt5zJ66OsSP0oH0k5oB EkGqYIPwPtUcDpD+U2TrifAmxMyRuC/K4hF5PNxYaIY8Bjw8mfsPJv4JvfuLMSFF U9OKL4He4amUotSt2v1Fc7FKrf3nUZYDcQvd+S0lwE5xb1/pNLS4XKIk/Gc43rTQ G3GMMfHfch6a2yEUCkp3omso2EnxwKv2vX0wzimT815/jVT1XPACrs7JLqt4qg7E rb9KGQwnnaDX7bu1/LEpDHf8YMEmj0qdH8k0dZVh6gz2 -----END CERTIFICATE-----Generated at Thu Dec 18 18:14:00 2025 by rpki-client