This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xmObBRqRcuaUyrLLObWf-RvRV4o.roa File: xmObBRqRcuaUyrLLObWf-RvRV4o.roa (raw, json) Hash identifier: 4JakqgM+Jxekqz6ktcMiD8CGkqJSevT4Lv/G16TPc8k= Subject key identifier: C6:63:9B:05:1A:91:72:E6:94:CA:B2:CB:39:B5:9F:F9:1B:D1:57:8A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AE538B6C71A1831D5A25384E90EB5506F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xmObBRqRcuaUyrLLObWf-RvRV4o.roa Signing time: Wed 03 Dec 2025 17:18:10 +0000 ROA not before: Wed 03 Dec 2025 17:18:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 31.56.66.0/24 maxlen: 24 31.56.220.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.100.0/24 maxlen: 24 31.57.228.0/24 maxlen: 24 31.58.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:38:b6:c7:1a:18:31:d5:a2:53:84:e9:0e:b5:50:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 3 17:18:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6639b051a9172e694cab2cb39b59ff91bd1578a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:ca:1c:55:69:d8:af:f3:6c:09:4b:c4:67: 4a:af:bd:29:9f:3d:7f:3b:e2:7d:7f:3d:e9:9c:af: 8b:ba:81:a7:a7:f9:f1:eb:4e:9e:49:8e:50:4e:43: 4d:9a:93:9b:72:3e:5b:a1:c1:47:64:1a:f7:26:ea: 49:94:27:12:6e:15:7f:16:69:2a:2f:e5:f3:6c:2c: ce:4b:c6:3d:3a:df:00:6a:7d:59:00:b3:99:fc:10: 5c:63:bb:f8:2b:58:ca:dd:93:bc:b2:74:88:cc:32: fa:0c:36:dd:7c:ec:98:e5:4a:f9:3c:ba:25:b9:3d: 7a:b2:7c:db:06:0e:b8:4e:9d:a2:35:c1:a6:13:36: 0b:05:7e:31:48:fd:fa:7a:4e:90:e6:0f:12:94:1b: e1:32:2d:c5:af:75:01:56:68:2f:c4:7b:b8:95:e1: db:df:75:22:72:07:46:ba:1f:40:42:ba:69:18:da: 06:71:23:bc:87:de:f8:0b:7c:1d:42:02:10:4a:21: 1b:0f:cb:04:51:c4:6a:87:9b:84:62:75:cb:bd:ed: c8:72:6e:e1:ca:ff:37:7e:a4:b5:c0:8e:02:6a:7d: 39:7e:9a:4b:b8:55:da:76:f4:db:4e:cb:25:1c:a6: 08:87:42:f3:8c:e7:7b:ba:d5:76:2c:32:f0:be:2b: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:9B:05:1A:91:72:E6:94:CA:B2:CB:39:B5:9F:F9:1B:D1:57:8A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xmObBRqRcuaUyrLLObWf-RvRV4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.66.0/24 31.56.220.0/24 31.57.35.0/24 31.57.100.0/24 31.57.228.0/24 31.58.33.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:33:2d:00:43:13:18:51:c4:a5:65:37:74:eb:1c:ff:05:d8: 23:21:7b:0a:77:ca:8c:94:0e:cc:7f:f3:a8:36:f9:87:63:12: 08:65:12:d5:a8:d6:a2:88:f4:13:2e:ea:2d:94:c4:24:5d:98: 6e:d6:76:0b:46:99:8f:2a:d1:12:85:f2:66:68:4c:06:67:76: d8:58:bd:0c:7f:36:1c:e9:a9:ba:28:a9:55:5b:e5:7f:be:fc: a0:05:db:15:cc:f2:d9:46:cb:03:05:58:de:a1:0f:18:c1:8e: af:0b:b8:63:6c:21:ec:fa:a1:e2:cd:4f:b5:fd:0e:da:ec:a2: 2e:74:b3:75:6b:0b:b0:f1:da:0b:b1:b8:ca:af:b1:20:ec:dd: b0:6c:9c:35:24:d9:b9:14:cc:1c:2b:06:45:96:a7:2b:38:fc: 68:84:21:aa:54:05:e3:f4:d6:a5:62:0f:88:69:6c:6d:61:86: 16:96:14:71:86:c4:c8:62:71:92:75:19:5e:14:85:5d:c9:67: 27:a8:86:e5:a2:ac:e5:fc:28:1b:5c:0e:ff:00:b3:21:54:ce: f3:18:de:b3:19:be:30:8d:1a:18:60:d0:2e:5d:21:b7:92:a0: 45:98:ae:e0:66:7a:30:6a:eb:35:c6:8f:59:5d:dd:65:e8:4b: 4f:7e:68:f2 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrlOLbHGhgx1aJThOkOtVBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjAzMTcxODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjYzOWIwNTFhOTE3MmU2OTRjYWIyY2IzOWI1OWZmOTFiZDE1NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J3KHFVp2K/zbAlLxGdKr70pnz1/ O+J9fz3pnK+LuoGnp/nx606eSY5QTkNNmpObcj5bocFHZBr3JupJlCcSbhV/Fmkq L+XzbCzOS8Y9Ot8Aan1ZALOZ/BBcY7v4K1jK3ZO8snSIzDL6DDbdfOyY5Ur5PLol uT16snzbBg64Tp2iNcGmEzYLBX4xSP36ek6Q5g8SlBvhMi3Fr3UBVmgvxHu4leHb 33UicgdGuh9AQrppGNoGcSO8h974C3wdQgIQSiEbD8sEUcRqh5uEYnXLve3Icm7h yv83fqS1wI4Can05fppLuFXadvTbTsslHKYIh0LzjOd7utV2LDLwviuTPQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMZjmwUakXLmlMqyyzm1n/kb0VeKMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEveG1PYkJScVJjdWFVeXJMTE9iV2YtUnZSVjRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzhCAwQA HzjcAwQAHzkjAwQAHzlkAwQAHznkAwQAHzohMA0GCSqGSIb3DQEBCwUAA4IBAQB/ My0AQxMYUcSlZTd06xz/BdgjIXsKd8qMlA7Mf/OoNvmHYxIIZRLVqNaiiPQTLuot lMQkXZhu1nYLRpmPKtEShfJmaEwGZ3bYWL0MfzYc6am6KKlVW+V/vvygBdsVzPLZ RssDBVjeoQ8YwY6vC7hjbCHs+qHizU+1/Q7a7KIudLN1awuw8doLsbjKr7Eg7N2w bJw1JNm5FMwcKwZFlqcrOPxohCGqVAXj9NalYg+IaWxtYYYWlhRxhsTIYnGSdRle FIVdyWcnqIbloqzl/CgbXA7/ALMhVM7zGN6zGb4wjRoYYNAuXSG3kqBFmK7gZnow aus1xo9ZXd1l6EtPfmjy -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:41 2025 by rpki-client