This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ufDy2LXAT0rUPu4HHFkdM_Q8j-k.roa File: ufDy2LXAT0rUPu4HHFkdM_Q8j-k.roa (raw, json) Hash identifier: JIkDJfHZNZdMvfmhE6/Qj6nUtU5ahzJnwcKB9m6CkJs= Subject key identifier: B9:F0:F2:D8:B5:C0:4F:4A:D4:3E:EE:07:1C:59:1D:33:F4:3C:8F:E9 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AED6D3FBF012CEE7CA02304DF870C47CF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ufDy2LXAT0rUPu4HHFkdM_Q8j-k.roa Signing time: Fri 05 Dec 2025 07:32:31 +0000 ROA not before: Fri 05 Dec 2025 07:32:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 31.56.112.0/24 maxlen: 24 31.57.132.0/24 maxlen: 24 31.57.191.0/24 maxlen: 24 31.57.237.0/24 maxlen: 24 31.58.157.0/24 maxlen: 24 31.58.163.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 31.59.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:6d:3f:bf:01:2c:ee:7c:a0:23:04:df:87:0c:47:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 5 07:32:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9f0f2d8b5c04f4ad43eee071c591d33f43c8fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:77:6a:e1:9c:5c:a3:dd:74:4f:2b:88:d1:ec: ff:e3:08:e8:22:19:76:df:b6:38:87:bd:aa:48:15: 4d:a4:89:91:7f:3d:5f:6e:ef:17:35:b6:9b:fa:89: 6b:45:1a:a9:1c:be:df:7c:a8:c6:28:8a:db:65:1c: fc:38:58:5d:55:f9:10:35:90:09:ad:cc:67:08:19: 92:71:b9:aa:5a:1b:13:28:50:bb:c7:35:4a:38:bc: 99:1d:d8:a3:05:1f:9d:d9:de:b7:05:9c:73:f0:22: c6:00:aa:ed:aa:a1:e7:15:28:7e:02:bb:3f:b0:11: cc:39:f8:fc:af:d8:d3:5a:67:55:84:1c:cd:f5:f4: b7:6d:b7:f0:5d:45:6e:a7:27:f6:8b:fb:5f:2f:35: c9:af:80:19:6c:00:ad:39:31:79:4d:8e:ce:51:63: ec:93:2d:0b:77:2e:f5:63:6f:d1:86:a1:a2:99:64: fc:4d:9a:14:7f:b6:47:3f:19:e6:74:10:c3:aa:99: 07:af:4c:3c:24:c0:cf:e1:6f:43:17:20:bf:5c:f8: a6:fe:9a:5e:95:cc:cf:45:01:2d:b6:d0:f7:a0:54: c6:3d:94:2b:6c:70:b9:84:40:36:22:6d:f8:1f:c1: 69:0d:dc:01:04:6c:2f:f4:3c:3c:26:30:ce:72:40: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F0:F2:D8:B5:C0:4F:4A:D4:3E:EE:07:1C:59:1D:33:F4:3C:8F:E9 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ufDy2LXAT0rUPu4HHFkdM_Q8j-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.112.0/24 31.57.132.0/24 31.57.191.0/24 31.57.237.0/24 31.58.157.0/24 31.58.163.0/24 31.58.231.0/24 31.59.57.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a2:0a:41:45:cd:c8:14:3c:89:e0:c0:f2:13:e3:8a:96:83: 23:46:35:45:aa:56:4d:47:6c:22:39:e8:84:26:19:07:2c:34: 75:90:a8:e2:d7:14:aa:3e:bd:87:58:81:4c:11:63:ce:2b:45: 17:09:48:8c:be:48:c2:8c:e3:07:76:64:e4:d0:16:80:72:d8: 58:f2:b4:16:d0:00:62:ea:9c:c5:89:76:90:c2:47:89:b5:cb: 4d:3a:74:47:b4:4e:9f:9e:32:67:b0:48:5f:95:3f:12:e1:a9: 64:09:e6:88:bf:a9:c1:2a:4d:11:86:10:17:c3:54:4e:7b:db: 5e:12:23:36:56:2d:d3:7d:d0:db:6e:bc:aa:60:e1:6e:41:c1: 51:58:6e:01:63:02:21:ef:fa:28:94:ea:2c:aa:a6:e3:d0:c6: 45:4e:9f:4a:2a:b9:e2:14:0b:e1:7c:f6:9d:99:2e:c4:11:60: dc:a5:69:8c:95:36:9f:d7:26:56:77:0c:f9:7c:28:c2:6e:bb: d2:fa:fd:96:9e:b3:66:26:9c:ce:d0:10:21:79:cf:3d:6d:1e: d3:40:a3:b8:86:a7:ad:04:27:60:56:94:c6:31:54:af:13:9b: 0c:4a:ab:e2:f9:9d:fd:c2:91:4b:5a:ee:4e:17:21:6a:f6:61: c3:c3:a8:0d -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrtbT+/ASzufKAjBN+HDEfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA1MDczMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWYwZjJkOGI1YzA0ZjRhZDQzZWVlMDcxYzU5MWQzM2Y0M2M4ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHdq4Zxco910TyuI0ez/4wjoIhl2 37Y4h72qSBVNpImRfz1fbu8XNbab+olrRRqpHL7ffKjGKIrbZRz8OFhdVfkQNZAJ rcxnCBmScbmqWhsTKFC7xzVKOLyZHdijBR+d2d63BZxz8CLGAKrtqqHnFSh+Ars/ sBHMOfj8r9jTWmdVhBzN9fS3bbfwXUVupyf2i/tfLzXJr4AZbACtOTF5TY7OUWPs ky0Ldy71Y2/RhqGimWT8TZoUf7ZHPxnmdBDDqpkHr0w8JMDP4W9DFyC/XPim/ppe lczPRQEtttD3oFTGPZQrbHC5hEA2Im34H8FpDdwBBGwv9Dw8JjDOckDLOQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFLnw8ti1wE9K1D7uBxxZHTP0PI/pMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdWZEeTJMWEFUMHJVUHU0SEhGa2RNX1E4ai1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAHzhwAwQA HzmEAwQAHzm/AwQAHzntAwQAHzqdAwQAHzqjAwQAHzrnAwQAHzs5MA0GCSqGSIb3 DQEBCwUAA4IBAQAzogpBRc3IFDyJ4MDyE+OKloMjRjVFqlZNR2wiOeiEJhkHLDR1 kKji1xSqPr2HWIFMEWPOK0UXCUiMvkjCjOMHdmTk0BaActhY8rQW0ABi6pzFiXaQ wkeJtctNOnRHtE6fnjJnsEhflT8S4alkCeaIv6nBKk0RhhAXw1ROe9teEiM2Vi3T fdDbbryqYOFuQcFRWG4BYwIh7/oolOosqqbj0MZFTp9KKrniFAvhfPadmS7EEWDc pWmMlTaf1yZWdwz5fCjCbrvS+v2WnrNmJpzO0BAhec89bR7TQKO4hqetBCdgVpTG MVSvE5sMSqvi+Z39wpFLWu5OFyFq9mHDw6gN -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:45 2025 by rpki-client