This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RhYB33IUYDqkzG0As3SAmvmIZpQ.roa File: RhYB33IUYDqkzG0As3SAmvmIZpQ.roa (raw, json) Hash identifier: IZNcHNy5axCy3CozjpKkkG91TTJ9u4UefDZT2UR4Wyg= Subject key identifier: 46:16:01:DF:72:14:60:3A:A4:CC:6D:00:B3:74:80:9A:F9:88:66:94 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B28A2B69924642F973B097AD0B4314328 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RhYB33IUYDqkzG0As3SAmvmIZpQ.roa Signing time: Tue 16 Dec 2025 19:28:30 +0000 ROA not before: Tue 16 Dec 2025 19:28:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205733 IP address blocks: 31.56.213.0/24 maxlen: 24 31.57.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:a2:b6:99:24:64:2f:97:3b:09:7a:d0:b4:31:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 16 19:28:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=461601df7214603aa4cc6d00b374809af9886694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:5d:94:47:3f:84:d9:64:10:9c:f9:c4:6d: b3:61:5d:7a:81:1b:15:df:99:cc:df:38:c6:9b:4f: 22:df:cc:4c:a7:33:af:3b:e9:20:4a:86:47:88:7e: 78:fa:a2:91:96:2e:4b:b5:34:86:b0:3d:7b:81:d7: aa:25:f3:07:60:21:af:e3:70:5f:a1:82:a2:24:29: 5f:55:d5:08:5a:77:85:6f:1c:94:37:ef:cb:26:80: e7:7e:12:7c:0e:0a:44:ac:2b:80:50:0c:84:8e:8e: 7e:a9:5e:2e:20:5d:e1:b8:4b:08:d5:7e:e1:4e:93: 83:b0:45:54:a9:b1:95:0d:06:82:fa:37:ff:2f:42: e3:5d:f6:d1:8d:d8:6d:5d:23:b9:14:21:c1:93:6b: 94:2d:c9:54:2b:3c:fd:f6:67:20:71:ed:2a:fb:12: 28:ff:2d:f9:33:57:9a:15:fb:9f:80:d0:00:18:b9: c2:0c:eb:d5:7d:a3:ea:47:68:ae:49:21:75:28:3c: 1e:59:ed:de:f7:05:df:13:eb:bd:5e:8b:13:57:23: 25:1e:49:4e:90:8f:e9:22:5b:af:68:18:ac:a6:e8: e7:7b:4f:b9:24:6e:20:0f:a8:82:67:50:0a:62:a2: c2:3f:6b:92:c4:e7:8d:ee:00:ff:88:a0:c6:b9:67: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:01:DF:72:14:60:3A:A4:CC:6D:00:B3:74:80:9A:F9:88:66:94 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RhYB33IUYDqkzG0As3SAmvmIZpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.213.0/24 31.57.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:79:18:fc:ca:61:bb:19:23:59:0e:9d:cb:31:c4:3e:1f:52: 1e:82:4c:43:8f:a7:ca:23:5f:28:bc:80:72:aa:25:7e:48:3b: 55:b6:c8:e6:5b:a6:28:ce:47:a3:5d:41:86:04:dd:e5:ac:24: e8:bb:77:89:1e:14:65:8d:87:83:e1:a0:c3:e5:2a:30:df:d2: ca:2d:9d:77:c6:2f:0a:48:dc:51:7e:36:37:a9:68:b0:d6:b7: de:f9:60:28:ac:5a:1a:99:2b:fe:a2:cc:69:83:75:89:fa:42: c2:29:8a:e8:9c:29:b1:51:de:5e:19:06:3d:29:2e:98:f9:fb: d5:48:96:2f:c5:fe:bc:2e:1b:e4:0f:cc:1a:33:cd:e8:f1:62: 39:3f:fb:23:8a:eb:cb:03:c7:dc:54:73:95:fc:2a:0e:a7:d9: ba:eb:d8:3f:73:f3:5e:b2:b2:c0:38:3d:68:14:a5:b4:87:ac: 5d:62:9a:8b:55:36:8b:69:65:b3:80:70:4d:25:f0:a7:ea:7d: d3:d7:78:36:96:d1:5b:1d:ac:a6:6e:56:a8:0e:04:a7:f3:51: 93:f7:90:88:82:8d:d3:9b:af:10:f0:f3:68:78:ba:ba:8c:67: 75:bc:13:14:aa:e7:d9:c6:5c:de:cf:67:3e:f9:9f:00:4e:e8: 2a:23:ea:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsooraZJGQvlzsJetC0MUMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE2MTkyODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjE2MDFkZjcyMTQ2MDNhYTRjYzZkMDBiMzc0ODA5YWY5ODg2Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G9dlEc/hNlkEJz5xG2zYV16gRsV 35nM3zjGm08i38xMpzOvO+kgSoZHiH54+qKRli5LtTSGsD17gdeqJfMHYCGv43Bf oYKiJClfVdUIWneFbxyUN+/LJoDnfhJ8DgpErCuAUAyEjo5+qV4uIF3huEsI1X7h TpODsEVUqbGVDQaC+jf/L0LjXfbRjdhtXSO5FCHBk2uULclUKzz99mcgce0q+xIo /y35M1eaFfufgNAAGLnCDOvVfaPqR2iuSSF1KDweWe3e9wXfE+u9XosTVyMlHklO kI/pIluvaBispujne0+5JG4gD6iCZ1AKYqLCP2uSxOeN7gD/iKDGuWcJlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEYWAd9yFGA6pMxtALN0gJr5iGaUMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUmhZQjMzSVVZRHFrekcwQXMzU0Ftdm1JWnBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzjVAwQA HzmGMA0GCSqGSIb3DQEBCwUAA4IBAQAceRj8ymG7GSNZDp3LMcQ+H1IegkxDj6fK I18ovIByqiV+SDtVtsjmW6YozkejXUGGBN3lrCTou3eJHhRljYeD4aDD5Sow39LK LZ13xi8KSNxRfjY3qWiw1rfe+WAorFoamSv+osxpg3WJ+kLCKYronCmxUd5eGQY9 KS6Y+fvVSJYvxf68LhvkD8waM83o8WI5P/sjiuvLA8fcVHOV/CoOp9m669g/c/Ne srLAOD1oFKW0h6xdYpqLVTaLaWWzgHBNJfCn6n3T13g2ltFbHaymblaoDgSn81GT 95CIgo3Tm68Q8PNoeLq6jGd1vBMUqufZxlzez2c++Z8ATugqI+oX -----END CERTIFICATE-----Generated at Sat Dec 20 07:57:54 2025 by rpki-client