This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o2Dxl71breS5XOQ65_NPCN7jxsA.roa File: o2Dxl71breS5XOQ65_NPCN7jxsA.roa (raw, json) Hash identifier: Klp99iaoP1yE7Z+/LK9cnzO8cLNT2muFiU7e66uZjmk= Subject key identifier: A3:60:F1:97:BD:5B:AD:E4:B9:5C:E4:3A:E7:F3:4F:08:DE:E3:C6:C0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B1C6D1A49E4791FB0F0967E1224DEE71C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o2Dxl71breS5XOQ65_NPCN7jxsA.roa Signing time: Sun 14 Dec 2025 10:34:30 +0000 ROA not before: Sun 14 Dec 2025 10:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204104 IP address blocks: 31.56.89.0/24 maxlen: 24 31.58.237.0/24 maxlen: 24 94.183.150.0/24 maxlen: 24 94.183.162.0/24 maxlen: 24 94.183.169.0/24 maxlen: 24 217.60.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:6d:1a:49:e4:79:1f:b0:f0:96:7e:12:24:de:e7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 14 10:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a360f197bd5bade4b95ce43ae7f34f08dee3c6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:15:8f:45:61:01:64:6d:9d:a1:d6:d2:1b: 4e:b3:c6:4f:9c:be:34:cf:1f:a6:2b:6c:84:46:78: 9a:c8:4d:7e:9f:ad:15:90:54:7e:f0:cb:70:7e:3f: 76:4e:e7:ad:c1:f6:9b:49:2e:36:f9:d6:1d:39:64: 33:22:b7:b4:ad:7f:25:6e:b5:32:65:3b:9a:d5:67: 85:bd:8e:28:84:cc:cf:ff:b8:86:fa:5f:d6:c2:38: e9:60:e1:4e:7b:ae:2c:a2:25:9a:a3:12:c3:f5:d9: 3d:2c:7e:83:e6:c4:65:d0:95:08:f8:e8:48:67:2d: 72:55:44:0f:45:b0:b3:0e:11:fa:db:78:e8:0a:23: 7d:77:a4:78:d3:fc:8a:1d:3b:e9:75:ec:80:b4:46: 19:1d:14:f8:cf:8d:1c:68:5e:2a:87:7f:69:b7:9e: 0f:ff:43:07:8a:9d:3f:e0:97:80:a5:4d:33:35:74: b6:96:63:90:8d:4b:75:c4:85:1d:49:7b:88:5c:0e: 88:84:73:03:5b:e0:d7:c4:1f:28:0f:10:3e:97:72: bc:0d:35:5a:1e:bf:9d:26:ab:20:be:70:28:36:17: fb:26:1b:da:ff:dd:14:c6:57:5c:81:ca:bd:06:6b: 9a:fc:43:67:0c:df:95:5f:81:47:bd:b0:94:26:d7: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:60:F1:97:BD:5B:AD:E4:B9:5C:E4:3A:E7:F3:4F:08:DE:E3:C6:C0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o2Dxl71breS5XOQ65_NPCN7jxsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.89.0/24 31.58.237.0/24 94.183.150.0/24 94.183.162.0/24 94.183.169.0/24 217.60.238.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:52:ba:4a:88:a0:e0:7c:4c:fb:d6:9d:cd:aa:59:40:78:0e: 5a:76:20:be:6e:62:3b:e2:22:0d:68:c1:c5:4b:31:ee:a6:df: d2:6a:89:07:93:e0:50:ca:d6:10:ff:16:5d:7f:56:a7:8a:43: 61:6d:88:e8:f0:2c:a4:15:01:cb:be:60:42:22:c6:c4:b7:53: a2:e5:6d:15:4e:91:3a:21:ef:82:6a:33:75:22:3d:9b:73:94: 71:94:dc:44:d6:2e:7d:2f:9f:18:9f:5d:e5:ce:1f:30:d4:a8: ab:a0:2d:11:ff:0f:73:d2:c8:00:2e:05:84:44:f6:35:60:6c: a0:d8:6a:27:ec:10:6b:8c:05:a1:13:8e:37:70:32:ef:f6:2f: 10:11:7f:2b:bd:2f:a4:83:24:72:29:df:e9:fc:95:3f:a8:ad: fc:99:45:ca:b6:81:7f:0d:59:d9:f4:26:64:85:fc:cf:af:df: 64:ef:61:89:f9:ac:9d:5a:d8:4c:5f:ad:61:55:64:7c:df:a4: 7a:04:24:3a:53:d2:43:26:48:98:12:5f:38:93:76:5d:45:ec: b9:c2:ea:2e:bd:dd:9f:64:32:23:9b:19:b0:9e:ac:48:16:83: fe:ec:99:4d:44:a0:2f:c2:35:99:88:ac:68:32:bf:cd:5b:e8: 58:f0:b5:02 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZscbRpJ5HkfsPCWfhIk3uccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE0MTAzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzYwZjE5N2JkNWJhZGU0Yjk1Y2U0M2FlN2YzNGYwOGRlZTNjNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O8Vj0VhAWRtnaHW0htOs8ZPnL40 zx+mK2yERniayE1+n60VkFR+8Mtwfj92TuetwfabSS42+dYdOWQzIre0rX8lbrUy ZTua1WeFvY4ohMzP/7iG+l/WwjjpYOFOe64soiWaoxLD9dk9LH6D5sRl0JUI+OhI Zy1yVUQPRbCzDhH623joCiN9d6R40/yKHTvpdeyAtEYZHRT4z40caF4qh39pt54P /0MHip0/4JeApU0zNXS2lmOQjUt1xIUdSXuIXA6IhHMDW+DXxB8oDxA+l3K8DTVa Hr+dJqsgvnAoNhf7Jhva/90Uxldcgcq9Bmua/ENnDN+VX4FHvbCUJtd9rwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKNg8Ze9W63kuVzkOufzTwje48bAMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbzJEeGw3MWJyZVM1WE9RNjVfTlBDTjdqeHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzhZAwQA HzrtAwQAXreWAwQAXreiAwQAXrepAwQA2TzuMA0GCSqGSIb3DQEBCwUAA4IBAQB6 UrpKiKDgfEz71p3NqllAeA5adiC+bmI74iINaMHFSzHupt/SaokHk+BQytYQ/xZd f1anikNhbYjo8CykFQHLvmBCIsbEt1Oi5W0VTpE6Ie+CajN1Ij2bc5RxlNxE1i59 L58Yn13lzh8w1KiroC0R/w9z0sgALgWERPY1YGyg2Gon7BBrjAWhE443cDLv9i8Q EX8rvS+kgyRyKd/p/JU/qK38mUXKtoF/DVnZ9CZkhfzPr99k72GJ+aydWthMX61h VWR836R6BCQ6U9JDJkiYEl84k3ZdRey5wuouvd2fZDIjmxmwnqxIFoP+7JlNRKAv wjWZiKxoMr/NW+hY8LUC -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:47 2025 by rpki-client