This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s4o6cyyEhNNQkcY0HccgjOugFlI.roa File: s4o6cyyEhNNQkcY0HccgjOugFlI.roa (raw, json) Hash identifier: wPdVQ4m6s/hnkjqcZirIanbWTAzbs7ZoCCNX6a+bnUs= Subject key identifier: B3:8A:3A:73:2C:84:84:D3:50:91:C6:34:1D:C7:20:8C:EB:A0:16:52 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B22B2F056F30C4548A0A096BB050720D7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s4o6cyyEhNNQkcY0HccgjOugFlI.roa Signing time: Mon 15 Dec 2025 15:48:30 +0000 ROA not before: Mon 15 Dec 2025 15:48:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 31.56.52.0/22 maxlen: 22 31.56.83.0/24 maxlen: 24 31.56.112.0/24 maxlen: 24 31.56.219.0/24 maxlen: 24 31.57.161.0/24 maxlen: 24 31.57.199.0/24 maxlen: 24 31.59.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:b2:f0:56:f3:0c:45:48:a0:a0:96:bb:05:07:20:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 15 15:48:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b38a3a732c8484d35091c6341dc7208ceba01652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a5:b2:ab:e9:6e:db:7e:f5:61:ea:ce:43:e7: b0:3e:ad:6c:cb:0c:f2:ab:61:97:6b:af:77:94:a6: ac:26:1f:e2:48:47:f5:3b:0f:bb:3f:ae:ef:cb:02: 56:1c:54:fb:b9:56:04:a8:30:5d:41:1c:84:16:a4: 62:ee:5d:37:b6:94:e3:73:c1:f9:a6:fa:04:3b:52: ce:ac:ac:8a:10:81:c5:ab:c1:d0:8c:e8:1e:22:1f: 32:21:fa:20:ce:86:aa:30:f5:82:6c:ca:01:59:d2: 09:d1:16:19:85:87:ea:6a:ca:b6:5f:7f:7b:aa:c7: 6b:e2:10:50:c4:5c:48:68:5a:60:33:ad:a2:82:97: dc:ea:b8:d9:d4:2b:2e:dc:0b:70:47:a5:be:1f:98: c2:9c:98:3e:90:ba:3c:92:fb:3e:42:e7:a0:8b:a8: 42:27:2e:cf:02:df:2b:33:90:50:ad:3e:f8:84:31: 76:22:df:98:f0:7d:df:4f:53:c3:b0:7b:52:ae:22: 50:eb:e7:1b:7e:c5:3a:92:c7:ad:9c:b3:2f:47:a5: 23:84:8f:7f:b4:b1:c2:f4:70:a1:88:4b:85:cb:1a: c8:86:61:b1:b8:5a:db:91:05:60:bc:be:cf:c3:56: 42:bf:5e:c3:21:1f:e6:0c:13:44:c6:67:c2:d4:e9: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8A:3A:73:2C:84:84:D3:50:91:C6:34:1D:C7:20:8C:EB:A0:16:52 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/s4o6cyyEhNNQkcY0HccgjOugFlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.52.0/22 31.56.83.0/24 31.56.112.0/24 31.56.219.0/24 31.57.161.0/24 31.57.199.0/24 31.59.68.0/24 Signature Algorithm: sha256WithRSAEncryption a4:28:a3:b6:6a:42:77:d8:11:04:5f:59:d7:12:52:84:79:2d: fe:5d:e7:ac:2f:1e:b1:7c:8d:a0:30:0e:c4:01:fb:1b:94:60: 80:8a:42:e6:7e:7c:71:77:16:1d:71:6e:cb:a8:f8:e7:94:11: e9:b6:dd:4f:2e:6e:00:6c:d4:75:fa:46:c4:0c:58:27:f9:83: e5:a7:e6:fc:d6:53:1e:e2:e9:17:33:fa:56:d5:f1:d8:13:c9: fc:3d:c4:34:fe:84:c3:da:3c:4c:75:c4:b3:64:3e:89:ff:a6: 97:4f:fe:2e:b5:ea:7c:c8:0e:41:c5:10:8c:cf:95:fa:1f:86: c6:ba:b4:80:60:44:0b:5c:7d:ba:80:e0:fa:a7:33:79:cc:b7: 89:f1:4f:ea:11:84:65:ee:9b:eb:4d:d3:7b:13:12:71:33:2f: 9d:dc:78:5d:b5:5d:86:de:cb:23:34:df:65:81:93:19:68:53: 5b:7b:51:a2:3d:23:86:97:a9:14:88:03:38:8c:ed:c2:d2:e1: e9:97:55:39:96:21:f2:07:30:40:41:7b:65:38:fd:93:d0:ea: 34:d3:3f:1f:2b:ca:c0:c1:f8:3f:60:6f:2b:76:ea:d9:a0:e6: 00:cc:95:78:67:45:09:c2:57:97:9b:76:4a:b2:9c:0b:9f:99: c5:18:08:d6 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsisvBW8wxFSKCglrsFByDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE1MTU0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhhM2E3MzJjODQ4NGQzNTA5MWM2MzQxZGM3MjA4Y2ViYTAxNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqWyq+lu2371YerOQ+ewPq1sywzy q2GXa693lKasJh/iSEf1Ow+7P67vywJWHFT7uVYEqDBdQRyEFqRi7l03tpTjc8H5 pvoEO1LOrKyKEIHFq8HQjOgeIh8yIfogzoaqMPWCbMoBWdIJ0RYZhYfqasq2X397 qsdr4hBQxFxIaFpgM62igpfc6rjZ1Csu3AtwR6W+H5jCnJg+kLo8kvs+Quegi6hC Jy7PAt8rM5BQrT74hDF2It+Y8H3fT1PDsHtSriJQ6+cbfsU6ksetnLMvR6UjhI9/ tLHC9HChiEuFyxrIhmGxuFrbkQVgvL7Pw1ZCv17DIR/mDBNExmfC1OlBAwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFLOKOnMshITTUJHGNB3HIIzroBZSMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvczRvNmN5eUVoTk5Ra2NZMEhjY2dqT3VnRmxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCHzg0AwQA HzhTAwQAHzhwAwQAHzjbAwQAHzmhAwQAHznHAwQAHztEMA0GCSqGSIb3DQEBCwUA A4IBAQCkKKO2akJ32BEEX1nXElKEeS3+XeesLx6xfI2gMA7EAfsblGCAikLmfnxx dxYdcW7LqPjnlBHptt1PLm4AbNR1+kbEDFgn+YPlp+b81lMe4ukXM/pW1fHYE8n8 PcQ0/oTD2jxMdcSzZD6J/6aXT/4utep8yA5BxRCMz5X6H4bGurSAYEQLXH26gOD6 pzN5zLeJ8U/qEYRl7pvrTdN7ExJxMy+d3HhdtV2G3ssjNN9lgZMZaFNbe1GiPSOG l6kUiAM4jO3C0uHpl1U5liHyBzBAQXtlOP2T0Oo00z8fK8rAwfg/YG8rdurZoOYA zJV4Z0UJwleXm3ZKspwLn5nFGAjW -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:15 2025 by rpki-client