This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q3Ce8diLh8sPKxZnsw04to8g4LQ.roa File: Q3Ce8diLh8sPKxZnsw04to8g4LQ.roa (raw, json) Hash identifier: kt1jJ0dDyqzRuKq43+7bmcePoM08BgjJcFJxPD57aBY= Subject key identifier: 43:70:9E:F1:D8:8B:87:CB:0F:2B:16:67:B3:0D:38:B6:8F:20:E0:B4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B1E7E475062E4B64E5F2C9D6F2CB9981D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q3Ce8diLh8sPKxZnsw04to8g4LQ.roa Signing time: Sun 14 Dec 2025 20:12:30 +0000 ROA not before: Sun 14 Dec 2025 20:12:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 393336 IP address blocks: 31.56.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:7e:47:50:62:e4:b6:4e:5f:2c:9d:6f:2c:b9:98:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 14 20:12:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43709ef1d88b87cb0f2b1667b30d38b68f20e0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:13:00:08:a6:4d:39:4e:02:f5:62:d2:77: 0b:21:38:82:5d:91:dc:63:37:34:40:e3:0b:a3:14: 5a:a3:83:e3:d3:bc:9b:3b:e0:6a:b8:22:b3:1b:b4: 5f:4e:a6:b3:64:72:9b:65:71:ee:1e:8b:e5:5a:22: 96:16:2d:e5:6c:de:27:34:ae:be:ea:6e:15:3a:d4: c5:e6:4d:81:37:28:10:dc:4b:d8:4b:81:a4:c5:51: dc:3e:9c:60:94:13:86:a4:67:d3:46:80:1f:d6:4c: 0a:ce:c1:d2:fa:38:86:ea:1e:3e:d0:da:36:36:78: 72:3c:cd:8f:a6:6f:d5:b3:3b:aa:22:1c:c7:e8:4f: 2e:09:02:50:a8:86:5f:0c:4b:7e:9d:1a:8e:7f:ae: ac:01:c8:7d:74:fe:74:47:ad:81:62:64:e8:ab:85: a4:d7:cc:e2:68:32:fa:64:e7:7d:a1:e9:7c:ef:20: 43:10:80:8b:9d:9e:a5:7d:51:e7:08:42:e0:3c:14: 57:72:82:50:2a:e8:2e:67:27:e3:d5:fa:e4:66:56: 82:9b:83:af:06:9f:8a:cb:f4:67:a9:bb:8a:15:2e: e3:41:65:b9:e7:f4:75:9d:44:12:f2:11:9d:52:0c: da:85:08:e8:ab:8b:b5:94:6a:95:db:4a:dd:51:d9: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:9E:F1:D8:8B:87:CB:0F:2B:16:67:B3:0D:38:B6:8F:20:E0:B4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q3Ce8diLh8sPKxZnsw04to8g4LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.69.0/24 Signature Algorithm: sha256WithRSAEncryption 85:25:18:4a:5c:e3:dd:c6:d0:5c:7f:34:c5:90:f8:5d:6b:ea: ac:b4:98:3e:20:01:2f:46:b2:6d:da:e9:41:99:cc:5d:c1:b2: 07:e8:ad:63:1a:3c:e6:bc:bf:bd:1e:5b:3d:b2:1c:33:63:ba: d5:8a:f2:6a:97:e4:67:47:80:64:9d:cc:a6:a7:bd:50:d2:44: 52:89:34:7a:34:b5:44:e5:ae:2a:b5:83:75:a9:fe:b4:fc:a4: 7a:f4:81:2b:68:0a:eb:79:0f:48:52:a9:60:5b:a3:28:c6:b3: 57:e6:12:cf:9e:51:80:f8:c4:2d:62:11:d1:be:a3:e6:92:15: 43:2a:46:ce:45:65:b4:b6:80:49:d1:5c:79:09:93:ae:4e:64: 64:de:94:07:4c:1f:01:d7:e9:e8:fa:4b:57:1b:4c:74:64:3d: d0:cc:fe:6c:14:24:34:7e:74:73:08:6a:a9:92:f9:b6:f1:e9: 9f:e2:27:a1:21:f5:2b:02:3c:27:65:08:8d:bf:eb:18:f0:fc: 68:54:f9:75:a1:a6:1f:70:c5:37:4d:7b:37:0b:a8:0d:8f:3b: 45:a5:cf:cd:a7:61:f5:7d:a3:8d:a0:21:ba:42:db:7c:32:d3: ee:d6:9a:63:8e:95:4a:bf:56:db:c6:8d:b7:f1:95:aa:bf:59: 43:c7:f1:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsefkdQYuS2Tl8snW8suZgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE0MjAxMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzcwOWVmMWQ4OGI4N2NiMGYyYjE2NjdiMzBkMzhiNjhmMjBlMGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte0TAAimTTlOAvVi0ncLITiCXZHc Yzc0QOMLoxRao4Pj07ybO+BquCKzG7RfTqazZHKbZXHuHovlWiKWFi3lbN4nNK6+ 6m4VOtTF5k2BNygQ3EvYS4GkxVHcPpxglBOGpGfTRoAf1kwKzsHS+jiG6h4+0No2 NnhyPM2Ppm/VszuqIhzH6E8uCQJQqIZfDEt+nRqOf66sAch9dP50R62BYmToq4Wk 18ziaDL6ZOd9oel87yBDEICLnZ6lfVHnCELgPBRXcoJQKuguZyfj1frkZlaCm4Ov Bp+Ky/RnqbuKFS7jQWW55/R1nUQS8hGdUgzahQjoq4u1lGqV20rdUdlfTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFENwnvHYi4fLDysWZ7MNOLaPIOC0MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUTNDZThkaUxoOHNQS3habnN3MDR0bzhnNExRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhFMA0G CSqGSIb3DQEBCwUAA4IBAQCFJRhKXOPdxtBcfzTFkPhda+qstJg+IAEvRrJt2ulB mcxdwbIH6K1jGjzmvL+9Hls9shwzY7rVivJql+RnR4Bkncymp71Q0kRSiTR6NLVE 5a4qtYN1qf60/KR69IEraArreQ9IUqlgW6MoxrNX5hLPnlGA+MQtYhHRvqPmkhVD KkbORWW0toBJ0Vx5CZOuTmRk3pQHTB8B1+no+ktXG0x0ZD3QzP5sFCQ0fnRzCGqp kvm28emf4iehIfUrAjwnZQiNv+sY8PxoVPl1oaYfcMU3TXs3C6gNjztFpc/Np2H1 faONoCG6Qtt8MtPu1ppjjpVKv1bbxo238ZWqv1lDx/FH -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:09 2025 by rpki-client