This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uJJhSen4vFBAB3j8ER-eYci9Q6c.roa File: uJJhSen4vFBAB3j8ER-eYci9Q6c.roa (raw, json) Hash identifier: E+Fo1LqMPOt1PC9FD11N20q+jNh6MMeGGpgusKeSrYY= Subject key identifier: B8:92:61:49:E9:F8:BC:50:40:07:78:FC:11:1F:9E:61:C8:BD:43:A7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B22B286F22BCF50FA1E1E5053576CA6FB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uJJhSen4vFBAB3j8ER-eYci9Q6c.roa Signing time: Mon 15 Dec 2025 15:48:03 +0000 ROA not before: Mon 15 Dec 2025 15:48:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 31.56.125.0/24 maxlen: 24 31.56.192.0/24 maxlen: 24 31.56.193.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.221.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:b2:86:f2:2b:cf:50:fa:1e:1e:50:53:57:6c:a6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 15 15:48:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8926149e9f8bc50400778fc111f9e61c8bd43a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:b7:2a:37:aa:85:dd:b4:a4:f8:a2:a1:be: 1f:ea:49:ee:b0:08:e5:2e:2c:94:ca:23:21:22:3b: 4d:9b:a1:29:17:09:d0:df:d3:6a:e4:c1:49:2e:8c: 3c:e6:c9:bb:73:41:d5:5f:84:78:ab:c0:4a:e8:cb: 6b:5e:b8:32:92:98:17:68:93:5f:c0:92:09:5e:2b: 31:c6:23:88:80:b4:ee:99:80:fa:29:ce:00:a5:2a: 20:17:8c:72:6a:8f:7a:99:f8:9f:8c:4c:24:ff:c8: f0:18:eb:38:35:25:54:9b:96:fe:ee:0d:79:3f:16: 3e:23:4e:77:05:21:4c:13:b7:98:88:93:e3:d6:26: 0e:76:65:4a:34:ef:22:65:9f:7b:4f:09:47:3b:61: 2a:88:1a:34:68:73:cc:cf:d2:8e:15:d2:0e:2a:c2: fc:56:a2:d3:a1:d5:d1:e2:dd:c7:44:11:f3:3f:ec: 46:70:c8:2f:07:f2:aa:51:23:ec:ea:40:76:8f:84: 8d:7d:49:85:8a:a2:af:46:0a:2f:39:2a:bf:da:7d: 14:2b:78:bd:3a:b9:40:53:98:70:5c:fe:1a:7d:ef: a6:25:44:c9:d5:a3:a9:74:d8:c4:4a:39:16:bb:b7: 06:36:eb:98:0e:7f:75:ac:d0:d0:72:39:19:f9:2b: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:92:61:49:E9:F8:BC:50:40:07:78:FC:11:1F:9E:61:C8:BD:43:A7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uJJhSen4vFBAB3j8ER-eYci9Q6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.125.0/24 31.56.192.0/23 31.57.191.0/24 31.57.221.0/24 31.57.237.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption 85:a5:2b:d4:83:8f:cd:7d:3b:b0:ea:21:4e:7b:e6:8c:b9:24: 32:ca:77:b2:a8:45:d0:e1:36:82:53:bb:c9:ee:60:ed:41:07: 3c:66:34:d2:e1:ed:7b:51:86:e9:c6:bc:f1:c6:de:62:25:dd: 0c:fa:72:f8:e8:9d:19:18:57:84:d7:7a:b3:f8:25:01:86:9b: 7e:b1:ef:93:37:2e:0f:8c:21:7d:7f:61:e2:27:8d:ee:1c:63: 33:bb:c6:68:2e:41:25:2e:b6:d8:6d:2e:2d:34:7c:fc:e7:36: ee:08:2f:8c:20:a2:2b:57:ab:4f:08:b1:74:ed:00:0e:32:68: 01:22:61:83:66:5e:d3:9e:d7:0f:06:a6:53:8d:88:2f:11:5f: 97:5f:43:34:28:bd:d9:19:b6:17:dc:5b:95:3b:2c:08:56:99: 01:97:72:54:95:b3:c7:77:6c:3f:ac:6a:23:00:90:91:85:6a: c1:0b:77:c2:6e:0c:b4:20:c5:93:11:c0:74:4d:05:f4:d0:0d: bf:eb:3f:b7:d1:d6:85:32:b1:c8:4f:d8:0c:f4:35:24:7b:66: 2b:3d:aa:1a:0c:a6:67:15:4d:e7:cb:a8:10:2f:25:eb:bc:d6: c1:38:35:78:5a:27:07:24:07:c4:d2:a7:e2:a9:75:e0:ab:14: 7a:0a:53:3c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsisobyK89Q+h4eUFNXbKb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE1MTU0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODkyNjE0OWU5ZjhiYzUwNDAwNzc4ZmMxMTFmOWU2MWM4YmQ0M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj23Kjeqhd20pPiiob4f6knusAjl LiyUyiMhIjtNm6EpFwnQ39Nq5MFJLow85sm7c0HVX4R4q8BK6MtrXrgykpgXaJNf wJIJXisxxiOIgLTumYD6Kc4ApSogF4xyao96mfifjEwk/8jwGOs4NSVUm5b+7g15 PxY+I053BSFME7eYiJPj1iYOdmVKNO8iZZ97TwlHO2EqiBo0aHPMz9KOFdIOKsL8 VqLTodXR4t3HRBHzP+xGcMgvB/KqUSPs6kB2j4SNfUmFiqKvRgovOSq/2n0UK3i9 OrlAU5hwXP4afe+mJUTJ1aOpdNjESjkWu7cGNuuYDn91rNDQcjkZ+SuVoQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLiSYUnp+LxQQAd4/BEfnmHIvUOnMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdUpKaFNlbjR2RkJBQjNqOEVSLWVZY2k5UTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzh9AwQB HzjAAwQAHzm/AwQAHzndAwQAHzntAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQCF pSvUg4/NfTuw6iFOe+aMuSQyyneyqEXQ4TaCU7vJ7mDtQQc8ZjTS4e17UYbpxrzx xt5iJd0M+nL46J0ZGFeE13qz+CUBhpt+se+TNy4PjCF9f2HiJ43uHGMzu8ZoLkEl LrbYbS4tNHz85zbuCC+MIKIrV6tPCLF07QAOMmgBImGDZl7TntcPBqZTjYgvEV+X X0M0KL3ZGbYX3FuVOywIVpkBl3JUlbPHd2w/rGojAJCRhWrBC3fCbgy0IMWTEcB0 TQX00A2/6z+30daFMrHIT9gM9DUke2YrPaoaDKZnFU3ny6gQLyXrvNbBODV4WicH JAfE0qfiqXXgqxR6ClM8 -----END CERTIFICATE-----Generated at Wed Dec 17 01:14:26 2025 by rpki-client