This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MQrqOrLE6c4-LFZh9cH_CZS4PBg.roa File: MQrqOrLE6c4-LFZh9cH_CZS4PBg.roa (raw, json) Hash identifier: p/Xdm3Ax6c576C6QTlyI9K5cCfZO9K/97hcV+fGo20o= Subject key identifier: 31:0A:EA:3A:B2:C4:E9:CE:3E:2C:56:61:F5:C1:FF:09:94:B8:3C:18 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B401055603F7EE480EB58EFFB8B72CBE9 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MQrqOrLE6c4-LFZh9cH_CZS4PBg.roa Signing time: Sun 21 Dec 2025 08:39:30 +0000 ROA not before: Sun 21 Dec 2025 08:39:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.96.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.92.0/22 maxlen: 24 31.59.102.0/23 maxlen: 24 31.59.104.0/23 maxlen: 24 31.59.106.0/24 maxlen: 24 31.59.168.0/24 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.24.0/22 maxlen: 24 217.60.60.0/22 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.199.0/24 maxlen: 24 217.60.200.0/21 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:10:55:60:3f:7e:e4:80:eb:58:ef:fb:8b:72:cb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:39:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=310aea3ab2c4e9ce3e2c5661f5c1ff0994b83c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:cd:4f:58:cc:e0:2f:f8:33:0b:ad:12:8d: 48:7c:46:bd:49:4f:0f:0d:8f:c2:14:17:f4:cd:8d: 97:2d:39:05:60:b0:1d:15:c9:c1:46:7d:4e:9a:81: 07:df:ad:4d:ea:50:77:1d:0f:83:7a:08:58:10:05: 2e:a9:08:fe:24:fd:f5:bc:20:36:95:ff:b3:37:4a: 32:5e:4f:34:51:00:15:a1:f3:fe:8a:a8:e6:91:98: ba:4b:a4:9e:58:4a:a4:62:e2:07:34:a1:98:67:3c: 88:9a:b5:59:ce:67:fb:d7:26:4d:9f:61:6e:d9:f2: 73:86:cb:d7:fc:ed:6f:b9:04:bc:cf:74:66:56:d4: 61:47:b8:63:0d:ca:19:e8:c3:9d:3b:90:b1:5d:c2: 80:e9:a0:c1:22:f9:13:ac:00:1d:21:f3:ea:a7:46: 97:de:28:79:15:6e:37:ae:b0:de:14:97:c1:7f:a4: 9a:b3:48:73:52:50:86:2a:f0:41:a0:ca:8c:15:ba: 39:1f:a4:99:3d:28:37:2b:ab:9b:f4:76:e0:93:e7: bc:48:7d:93:a3:f7:55:58:70:da:39:0d:c5:8b:60: 85:a5:4c:6d:4c:20:6a:73:48:d7:1c:42:a9:7c:ff: 21:2f:a5:08:a3:83:c4:d9:49:07:84:a2:eb:16:74: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:EA:3A:B2:C4:E9:CE:3E:2C:56:61:F5:C1:FF:09:94:B8:3C:18 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MQrqOrLE6c4-LFZh9cH_CZS4PBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.96.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.59.84.0/22 31.59.92.0/22 31.59.102.0-31.59.106.255 31.59.168.0/24 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.24.0/22 217.60.60.0/22 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.199.0-217.60.235.255 Signature Algorithm: sha256WithRSAEncryption 1b:18:1e:12:cb:50:38:b1:07:7b:be:86:60:0a:af:64:6a:f3: 53:4a:54:03:32:df:87:15:d6:58:5f:5c:d8:70:ad:36:2b:44: 53:84:e4:b2:4f:54:92:77:50:c8:12:b0:6c:18:a8:9b:21:3c: 71:e9:e0:f5:9b:99:b5:5b:18:d4:13:d9:52:ec:86:9f:3d:e5: 36:5b:3c:33:f3:f6:c8:f6:d8:91:63:6f:ef:9a:7d:f5:39:7f: d3:7d:2b:5c:e9:44:2a:97:ac:fc:35:13:e2:26:61:07:ff:fe: 62:45:8d:5b:d0:5d:ee:db:9d:f7:4a:21:85:e7:7d:87:3c:57: 22:11:e0:ee:9a:8e:a2:b7:1f:24:a3:00:a9:a4:e3:f6:5c:5e: a7:10:67:c2:11:b3:64:c4:93:64:6b:39:8c:f6:62:ba:5c:7f: 39:04:20:48:aa:1e:aa:3f:a5:33:af:da:45:84:e9:f2:42:59: 61:56:27:22:fb:e3:d7:67:c4:5d:2d:75:31:94:59:17:47:87: 0b:fd:db:c4:e7:95:4e:a0:72:17:31:ce:1a:58:ce:38:77:7b: de:7c:4a:37:ec:92:0f:66:72:95:a3:1b:d0:23:ac:a5:0d:f5: 4e:f9:01:ab:dc:b1:a0:be:c5:51:0c:f6:d8:f0:c0:8d:37:e7: 0a:44:a9:cf -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZtAEFVgP37kgOtY7/uLcsvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTBhZWEzYWIyYzRlOWNlM2UyYzU2NjFmNWMxZmYwOTk0YjgzYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAnNT1jM4C/4MwutEo1IfEa9SU8P DY/CFBf0zY2XLTkFYLAdFcnBRn1OmoEH361N6lB3HQ+DeghYEAUuqQj+JP31vCA2 lf+zN0oyXk80UQAVofP+iqjmkZi6S6SeWEqkYuIHNKGYZzyImrVZzmf71yZNn2Fu 2fJzhsvX/O1vuQS8z3RmVtRhR7hjDcoZ6MOdO5CxXcKA6aDBIvkTrAAdIfPqp0aX 3ih5FW43rrDeFJfBf6Sas0hzUlCGKvBBoMqMFbo5H6SZPSg3K6ub9Hbgk+e8SH2T o/dVWHDaOQ3Fi2CFpUxtTCBqc0jXHEKpfP8hL6UIo4PE2UkHhKLrFnTsrwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFDEK6jqyxOnOPixWYfXB/wmUuDwYMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTVFycU9yTEU2YzQtTEZaaDljSF9DWlM0UEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAAf ONMDBAAfOWADBAAfOcgwDAMEAh86tAMEAh86wAMEAh87VAMEAh87XDAMAwQBHztm AwQAHztqAwQAHzuoAwQAXreXAwQAXreeAwQAXrekMAwDBAFet64DBABet7ADBAFe t7QDBADZPA8DBALZPBgDBALZPDwwDAMEBdk8oAMEA9k8sAMEAtk8vDAMAwQA2TzH AwQC2TzoMA0GCSqGSIb3DQEBCwUAA4IBAQAbGB4Sy1A4sQd7voZgCq9kavNTSlQD Mt+HFdZYX1zYcK02K0RThOSyT1SSd1DIErBsGKibITxx6eD1m5m1WxjUE9lS7Iaf PeU2Wzwz8/bI9tiRY2/vmn31OX/TfStc6UQql6z8NRPiJmEH//5iRY1b0F3u2533 SiGF532HPFciEeDumo6itx8kowCppOP2XF6nEGfCEbNkxJNkazmM9mK6XH85BCBI qh6qP6Uzr9pFhOnyQllhVici++PXZ8RdLXUxlFkXR4cL/dvE55VOoHIXMc4aWM44 d3vefEo37JIPZnKVoxvQI6ylDfVO+QGr3LGgvsVRDPbY8MCNN+cKRKnP -----END CERTIFICATE-----Generated at Mon Dec 22 12:45:36 2025 by rpki-client