This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/os0qOnVkjyP6oHNw_vP8z7oSNtg.roa File: os0qOnVkjyP6oHNw_vP8z7oSNtg.roa (raw, json) Hash identifier: mLpdqlwlw7naAx0ZCg2H29C+BrAN3AAPgzOoOACq9T4= Subject key identifier: A2:CD:2A:3A:75:64:8F:23:FA:A0:73:70:FE:F3:FC:CF:BA:12:36:D8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B219E72DEF1E1F0791F19F4C4AA0CA854 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/os0qOnVkjyP6oHNw_vP8z7oSNtg.roa Signing time: Mon 15 Dec 2025 10:46:30 +0000 ROA not before: Mon 15 Dec 2025 10:46:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.57.96.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.92.0/22 maxlen: 24 31.59.102.0/23 maxlen: 24 31.59.104.0/23 maxlen: 24 31.59.106.0/24 maxlen: 24 31.59.168.0/24 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.24.0/22 maxlen: 24 217.60.60.0/22 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.199.0/24 maxlen: 24 217.60.200.0/21 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:9e:72:de:f1:e1:f0:79:1f:19:f4:c4:aa:0c:a8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 15 10:46:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2cd2a3a75648f23faa07370fef3fccfba1236d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:f7:06:21:80:19:54:80:78:1e:ce:d7:5c: 5c:1c:d7:b7:fc:95:52:5c:5d:43:55:17:43:47:89: 3c:0d:19:4c:f9:25:8a:e3:0f:d7:3c:08:29:f8:b6: 57:a8:4f:21:d7:9a:97:f5:87:39:c3:51:33:6a:29: 19:9d:19:b6:8f:03:10:f6:2d:55:25:ff:00:0d:90: 29:03:8b:7c:ba:4c:0b:e2:29:e3:8e:1b:0c:be:cc: 7b:ea:5b:c9:e2:f4:f8:90:dd:69:00:97:a0:f7:21: d0:25:f2:a8:13:79:1f:bb:b3:eb:2e:51:b6:18:d7: ff:f0:52:23:e8:29:e9:0d:ff:ee:50:66:80:e8:16: e9:60:1b:01:7a:2f:3d:20:8b:4c:3f:e6:ea:5a:d7: 8e:d1:ee:10:7c:61:0b:7f:9e:11:d9:a0:39:6c:eb: 53:4d:34:4b:83:d0:0a:f7:77:68:ae:87:71:85:6a: ae:2c:d1:90:c0:b9:6f:f9:22:0f:c2:a4:42:22:34: a0:0c:6f:72:69:7e:0d:91:55:6a:54:e3:ab:4f:cd: be:c3:45:79:93:85:5d:8f:85:31:b8:28:5e:d5:05: 8e:60:7f:17:4d:30:55:0a:af:c2:2d:9d:11:7f:9f: 00:06:09:02:c2:ed:d6:db:ea:89:80:45:a2:b2:bf: 2e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:2A:3A:75:64:8F:23:FA:A0:73:70:FE:F3:FC:CF:BA:12:36:D8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/os0qOnVkjyP6oHNw_vP8z7oSNtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.96.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.59.84.0/22 31.59.90.0-31.59.95.255 31.59.102.0-31.59.106.255 31.59.168.0/24 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.24.0/22 217.60.60.0/22 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.199.0-217.60.235.255 Signature Algorithm: sha256WithRSAEncryption ac:44:26:57:59:27:a5:0c:e5:fd:55:00:a5:6f:32:c8:1c:59: 91:71:f8:0c:bd:1f:fc:49:1c:a8:06:30:21:2c:a4:37:f0:d5: 7a:92:f4:86:d9:01:d6:23:51:90:74:62:1c:8e:db:b6:37:12: 8a:87:58:09:57:63:15:2d:8a:cc:0d:2a:99:c3:b7:d6:97:9d: d5:49:a1:e3:e4:0c:23:d0:63:40:e4:d4:0c:44:b4:f4:7d:27: 28:5f:42:83:31:92:c2:d7:2a:5f:b2:77:91:00:14:62:bb:eb: 02:12:ae:7b:2c:71:b8:f5:2e:c6:d7:fc:c3:07:4f:0b:31:28: 1f:cb:2d:6d:41:4f:57:2c:12:9c:82:ff:98:3a:66:fc:c9:24: 89:7f:f6:e3:fc:1f:45:9f:29:6c:37:d0:f1:45:d7:83:0b:92: a0:87:90:c8:2e:a9:71:07:3b:44:ad:d0:5d:27:16:18:cb:87: 46:07:78:83:77:d3:fb:fb:a6:ef:f4:a7:6a:44:dd:b1:c1:fc: 1f:e3:47:4e:f6:5b:3d:bc:8e:3f:72:a6:6f:95:ab:4f:95:af: 99:fb:b6:aa:5e:62:40:7b:7a:7c:a0:89:40:d2:da:92:d4:88: 0a:c3:6e:d7:2c:b7:2c:56:40:80:26:17:ac:db:be:93:9b:a9: 1b:82:6a:68 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZshnnLe8eHweR8Z9MSqDKhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE1MTA0NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmNkMmEzYTc1NjQ4ZjIzZmFhMDczNzBmZWYzZmNjZmJhMTIzNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cn3BiGAGVSAeB7O11xcHNe3/JVS XF1DVRdDR4k8DRlM+SWK4w/XPAgp+LZXqE8h15qX9Yc5w1EzaikZnRm2jwMQ9i1V Jf8ADZApA4t8ukwL4injjhsMvsx76lvJ4vT4kN1pAJeg9yHQJfKoE3kfu7PrLlG2 GNf/8FIj6CnpDf/uUGaA6BbpYBsBei89IItMP+bqWteO0e4QfGELf54R2aA5bOtT TTRLg9AK93dorodxhWquLNGQwLlv+SIPwqRCIjSgDG9yaX4NkVVqVOOrT82+w0V5 k4Vdj4UxuChe1QWOYH8XTTBVCq/CLZ0Rf58ABgkCwu3W2+qJgEWisr8u6QIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFKLNKjp1ZI8j+qBzcP7z/M+6EjbYMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb3MwcU9uVmtqeVA2b0hOd192UDh6N29TTnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAf OWADBAAfOcgwDAMEAh86tAMEAh86wAMEAh87VDAMAwQBHztaAwQFHztAMAwDBAEf O2YDBAAfO2oDBAAfO6gDBABet5cDBABet54DBABet6QwDAMEAV63rgMEAF63sAME AV63tAMEANk8DwMEAtk8GAMEAtk8PDAMAwQF2TygAwQD2TywAwQC2Ty8MAwDBADZ PMcDBALZPOgwDQYJKoZIhvcNAQELBQADggEBAKxEJldZJ6UM5f1VAKVvMsgcWZFx +Ay9H/xJHKgGMCEspDfw1XqS9IbZAdYjUZB0YhyO27Y3EoqHWAlXYxUtiswNKpnD t9aXndVJoePkDCPQY0Dk1AxEtPR9JyhfQoMxksLXKl+yd5EAFGK76wISrnsscbj1 LsbX/MMHTwsxKB/LLW1BT1csEpyC/5g6ZvzJJIl/9uP8H0WfKWw30PFF14MLkqCH kMguqXEHO0St0F0nFhjLh0YHeIN30/v7pu/0p2pE3bHB/B/jR072Wz28jj9ypm+V q0+Vr5n7tqpeYkB7enygiUDS2pLUiArDbtcstyxWQIAmF6zbvpObqRuCamg= -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:37 2025 by rpki-client