This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ctJwLPo91nMY0PXI35r-kcXjv2A.roa File: ctJwLPo91nMY0PXI35r-kcXjv2A.roa (raw, json) Hash identifier: NKYXHelylNUepj7N35NthYUYm7nDVhF70ggP+5a/33w= Subject key identifier: 72:D2:70:2C:FA:3D:D6:73:18:D0:F5:C8:DF:9A:FE:91:C5:E3:BF:60 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AED6B69BB071FCC08D55EBCA93C3D495D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ctJwLPo91nMY0PXI35r-kcXjv2A.roa Signing time: Fri 05 Dec 2025 07:30:30 +0000 ROA not before: Fri 05 Dec 2025 07:30:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6698 IP address blocks: 31.56.59.0/24 maxlen: 24 31.59.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:6b:69:bb:07:1f:cc:08:d5:5e:bc:a9:3c:3d:49:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 5 07:30:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72d2702cfa3dd67318d0f5c8df9afe91c5e3bf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:80:28:4c:0e:78:64:af:d7:33:de:65:bb:d2: 68:12:4b:01:a0:f8:14:d4:f6:37:e9:93:ea:ee:f6: a1:6b:1b:3d:54:43:30:d7:95:47:7c:e1:22:36:9a: ee:91:58:ea:bd:eb:e2:84:9d:21:9f:8b:d2:34:ca: 53:fe:8c:e5:11:5d:28:e2:10:7f:10:25:65:47:f9: 09:8e:01:d9:77:f4:20:c0:cb:db:d2:17:be:dd:5c: 94:6d:5b:aa:2c:70:bc:57:ce:f5:a3:05:7a:8f:ba: bf:05:0f:2c:9e:4a:4b:ac:76:b2:ba:9c:e4:a1:76: 8f:67:c4:05:2b:78:4b:db:2f:01:38:a3:24:63:ee: d0:5f:44:4f:6c:c8:8e:47:bf:61:34:73:3f:a1:38: ed:6d:94:7c:74:1c:bf:f6:33:bb:bf:42:4d:10:3c: 12:74:34:6d:58:65:6a:bf:83:03:5e:41:57:67:c4: cf:66:bf:88:da:a0:4e:ab:fc:1b:96:37:f9:cd:18: d6:f3:79:19:01:41:02:d8:88:37:91:11:25:b2:c4: 6f:75:f9:69:37:9f:30:e3:59:3f:c3:b2:57:56:44: 0c:95:be:8f:24:0f:55:69:08:74:d4:d9:95:9a:88: 24:6e:19:f5:3d:96:c7:80:1b:b3:54:cd:de:8f:8e: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:70:2C:FA:3D:D6:73:18:D0:F5:C8:DF:9A:FE:91:C5:E3:BF:60 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ctJwLPo91nMY0PXI35r-kcXjv2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.59.0/24 31.59.128.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:a3:c1:b1:08:de:96:4f:94:fb:ca:40:91:8d:67:52:75:47: ec:f9:63:0a:43:26:e6:e6:09:e7:0d:8f:56:94:a9:30:5d:e9: 3b:93:92:9e:69:bb:a4:61:c7:cf:d3:db:a3:c9:8e:48:99:09: ce:8f:0d:e8:92:a2:ca:f3:7e:de:6c:eb:2a:fa:b8:e3:7c:48: c2:d0:fd:c8:75:3f:a6:5d:07:30:90:b2:32:a4:89:23:ea:af: c3:8b:f4:35:ea:a5:dc:9e:e1:87:74:d9:6e:b6:57:6c:ff:0c: 85:f8:07:0a:97:4a:fe:bb:4f:2d:0d:27:44:4a:db:f5:01:46: 09:61:e1:b9:79:75:98:1c:67:fe:41:d7:6e:c6:fe:f5:66:98: ec:60:67:86:e2:34:3b:e5:8d:eb:a1:eb:be:6d:1d:77:5a:39: 9d:ed:42:72:3a:4c:bf:fd:99:7e:80:ef:79:32:05:67:88:2d: 5f:73:e4:bb:57:79:74:a0:bf:96:be:f8:18:e2:53:76:dc:6e: f1:b9:00:05:24:bd:3b:c6:ef:e9:09:94:4d:44:f5:75:15:4c: 47:01:17:83:f6:86:ed:d5:5e:36:0e:57:c4:08:c7:ed:a1:16: d3:9b:93:73:36:54:fa:b2:bb:0d:b7:10:54:3a:e9:42:ae:c2: 96:a8:a6:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrta2m7Bx/MCNVevKk8PUldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA1MDczMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmQyNzAyY2ZhM2RkNjczMThkMGY1YzhkZjlhZmU5MWM1ZTNiZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64AoTA54ZK/XM95lu9JoEksBoPgU 1PY36ZPq7vahaxs9VEMw15VHfOEiNprukVjqvevihJ0hn4vSNMpT/ozlEV0o4hB/ ECVlR/kJjgHZd/QgwMvb0he+3VyUbVuqLHC8V871owV6j7q/BQ8snkpLrHayupzk oXaPZ8QFK3hL2y8BOKMkY+7QX0RPbMiOR79hNHM/oTjtbZR8dBy/9jO7v0JNEDwS dDRtWGVqv4MDXkFXZ8TPZr+I2qBOq/wbljf5zRjW83kZAUEC2Ig3kRElssRvdflp N58w41k/w7JXVkQMlb6PJA9VaQh01NmVmogkbhn1PZbHgBuzVM3ej44uRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHLScCz6PdZzGND1yN+a/pHF479gMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvY3RKd0xQbzkxbk1ZMFBYSTM1ci1rY1hqdjJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzg7AwQA HzuAMA0GCSqGSIb3DQEBCwUAA4IBAQAvo8GxCN6WT5T7ykCRjWdSdUfs+WMKQybm 5gnnDY9WlKkwXek7k5KeabukYcfP09ujyY5ImQnOjw3okqLK837ebOsq+rjjfEjC 0P3IdT+mXQcwkLIypIkj6q/Di/Q16qXcnuGHdNlutlds/wyF+AcKl0r+u08tDSdE Stv1AUYJYeG5eXWYHGf+Qdduxv71ZpjsYGeG4jQ75Y3roeu+bR13Wjmd7UJyOky/ /Zl+gO95MgVniC1fc+S7V3l0oL+WvvgY4lN23G7xuQAFJL07xu/pCZRNRPV1FUxH AReD9obt1V42DlfECMftoRbTm5NzNlT6srsNtxBUOulCrsKWqKaF -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:26 2025 by rpki-client