This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n3lfdjmQb-D468bctsfmYPOdS00.roa File: n3lfdjmQb-D468bctsfmYPOdS00.roa (raw, json) Hash identifier: PfxTJFup/0QkVRitbXZzY1dLgiS8k9x2JhDfkO1oMD4= Subject key identifier: 9F:79:5F:76:39:90:6F:E0:F8:EB:C6:DC:B6:C7:E6:60:F3:9D:4B:4D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019ADAD95DAD6F5697D28F085965DDA0AD22 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n3lfdjmQb-D468bctsfmYPOdS00.roa Signing time: Mon 01 Dec 2025 16:57:49 +0000 ROA not before: Mon 01 Dec 2025 16:57:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213385 IP address blocks: 31.59.186.0/24 maxlen: 24 31.59.212.0/24 maxlen: 24 217.60.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:d9:5d:ad:6f:56:97:d2:8f:08:59:65:dd:a0:ad:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 1 16:57:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f795f7639906fe0f8ebc6dcb6c7e660f39d4b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ec:5f:c0:4c:7f:39:f0:5c:da:6f:92:59:25: 2b:eb:ee:a2:0a:4e:02:8e:0f:cd:d5:c5:66:8a:34: 92:f2:61:ff:b5:2b:47:8d:6f:29:a2:58:8f:04:e5: f1:2e:45:a5:a9:4f:e8:f1:c8:c7:6c:ee:3f:6d:50: 69:15:7f:b5:9f:81:e4:cc:59:8c:83:bd:bc:f1:3d: f8:e0:21:40:89:d5:fa:80:82:f4:5b:a8:22:90:9d: de:b3:a8:c6:b2:a8:68:be:f6:a0:74:4d:05:2c:89: a0:32:4e:27:f0:b0:93:4b:fb:1e:8e:57:57:3e:14: 61:0d:51:4b:0d:3a:de:a5:00:b5:2a:dd:21:f1:6f: 51:0b:1b:86:c4:4e:eb:2f:93:52:cb:55:a2:26:00: 66:06:b3:7b:51:0d:92:7e:b5:dd:eb:a9:58:f4:e4: 98:ec:87:99:c2:cf:9f:2a:f4:4a:b8:86:8f:75:0e: a2:37:44:8f:ab:98:b7:45:f8:be:17:a2:ab:7f:0d: 96:75:28:68:c8:27:4d:62:29:4b:e1:15:af:7d:fc: bc:d5:23:0e:b2:2c:3d:eb:6f:e0:a9:dc:8f:f0:1f: 18:3b:bf:b4:0a:07:c6:96:f5:c9:18:c3:45:23:f3: 6d:a0:3a:b1:d8:aa:4f:2d:06:82:a0:43:5c:4f:a6: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:79:5F:76:39:90:6F:E0:F8:EB:C6:DC:B6:C7:E6:60:F3:9D:4B:4D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n3lfdjmQb-D468bctsfmYPOdS00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.186.0/24 31.59.212.0/24 217.60.253.0/24 Signature Algorithm: sha256WithRSAEncryption 98:fd:db:c2:66:c8:7d:53:63:d8:2f:bd:fb:0c:b6:dd:46:4a: a5:83:82:22:c0:5f:19:9e:d2:73:87:eb:9b:c6:3c:4c:c8:8a: 58:19:50:0e:c3:00:e1:c8:f3:f7:84:6d:a4:eb:bd:d6:7d:ad: dc:44:a8:d1:ad:b2:f7:cb:d3:03:6f:6e:48:08:2a:48:92:5d: e9:e2:d6:c2:ef:39:6b:3b:f3:f0:c1:15:5a:84:48:c5:cc:f3: a9:55:82:0f:28:8c:5a:24:2d:2c:41:bb:97:4c:48:f8:15:ff: 52:f7:5a:87:c1:2f:66:74:6f:ba:61:77:cb:45:30:e9:ca:a0: b2:f8:66:61:17:1c:9c:e5:07:fd:f0:56:60:f9:e3:ec:f5:fa: e0:54:f0:08:8b:37:33:cd:bd:b7:4e:88:9b:52:7c:92:fe:24: b0:d2:b3:c0:51:21:6a:6f:13:40:f3:07:40:09:cb:18:cf:65: 2c:4c:67:a9:68:2c:1e:7b:7c:62:a6:6b:43:bc:fe:d3:0c:bc: 6f:81:e5:bc:4d:be:87:a4:5e:b7:95:ff:3d:fd:2a:08:ad:0e: 1d:85:01:f9:19:44:54:03:2d:87:40:ed:5a:21:52:90:83:6e: 85:67:10:7d:fd:61:a5:4a:bc:86:60:41:d2:61:2a:e4:83:b1: 7a:b5:7e:7c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZra2V2tb1aX0o8IWWXdoK0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjAxMTY1NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjc5NWY3NjM5OTA2ZmUwZjhlYmM2ZGNiNmM3ZTY2MGYzOWQ0YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uxfwEx/OfBc2m+SWSUr6+6iCk4C jg/N1cVmijSS8mH/tStHjW8poliPBOXxLkWlqU/o8cjHbO4/bVBpFX+1n4HkzFmM g7288T344CFAidX6gIL0W6gikJ3es6jGsqhovvagdE0FLImgMk4n8LCTS/sejldX PhRhDVFLDTrepQC1Kt0h8W9RCxuGxE7rL5NSy1WiJgBmBrN7UQ2SfrXd66lY9OSY 7IeZws+fKvRKuIaPdQ6iN0SPq5i3Rfi+F6Krfw2WdShoyCdNYilL4RWvffy81SMO siw962/gqdyP8B8YO7+0CgfGlvXJGMNFI/NtoDqx2KpPLQaCoENcT6aDiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ95X3Y5kG/g+OvG3LbH5mDznUtNMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbjNsZmRqbVFiLUQ0NjhiY3RzZm1ZUE9kUzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzu6AwQA HzvUAwQA2Tz9MA0GCSqGSIb3DQEBCwUAA4IBAQCY/dvCZsh9U2PYL737DLbdRkql g4IiwF8ZntJzh+ubxjxMyIpYGVAOwwDhyPP3hG2k673Wfa3cRKjRrbL3y9MDb25I CCpIkl3p4tbC7zlrO/PwwRVahEjFzPOpVYIPKIxaJC0sQbuXTEj4Ff9S91qHwS9m dG+6YXfLRTDpyqCy+GZhFxyc5Qf98FZg+ePs9frgVPAIizczzb23ToibUnyS/iSw 0rPAUSFqbxNA8wdACcsYz2UsTGepaCwee3xipmtDvP7TDLxvgeW8Tb6HpF63lf89 /SoIrQ4dhQH5GURUAy2HQO1aIVKQg26FZxB9/WGlSryGYEHSYSrkg7F6tX58 -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:17 2025 by rpki-client