This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u2kzpxXCECvgT1eG8LuMJc3bg-E.roa File: u2kzpxXCECvgT1eG8LuMJc3bg-E.roa (raw, json) Hash identifier: qkvWxSuV9z705uzvuA16GjFpYFS4ddzQ+0CUkNwyoKc= Subject key identifier: BB:69:33:A7:15:C2:10:2B:E0:4F:57:86:F0:BB:8C:25:CD:DB:83:E1 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B400902CCDBA3A451274370DBB77A926A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u2kzpxXCECvgT1eG8LuMJc3bg-E.roa Signing time: Sun 21 Dec 2025 08:31:30 +0000 ROA not before: Sun 21 Dec 2025 08:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214024 IP address blocks: 31.56.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:09:02:cc:db:a3:a4:51:27:43:70:db:b7:7a:92:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb6933a715c2102be04f5786f0bb8c25cddb83e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:75:61:54:df:d8:74:71:78:69:f8:44:b3: 74:1c:7f:ef:10:b9:5a:20:62:b8:b4:bc:f3:1b:3e: f9:81:07:8e:a3:9b:3b:6b:d2:72:2f:82:d5:c5:05: 4e:08:1d:5b:ab:f1:31:a0:a0:b5:fc:6d:27:bc:4c: 29:3f:5f:6c:e0:89:63:7e:e1:22:66:07:f9:ea:2e: 7e:06:63:9b:f3:2e:2e:b1:df:4d:63:79:4c:33:44: ae:38:6f:74:63:da:a1:db:0a:40:3f:5b:35:0d:c1: a4:aa:be:e1:65:df:d3:ce:80:7d:a8:f7:71:22:f5: fd:50:93:e3:3e:fb:9b:59:14:19:6c:d1:cb:bb:e0: 4c:c6:02:07:8c:17:d3:20:a4:ce:22:72:01:a7:3a: 83:4a:d8:fa:c6:7e:3e:8f:be:31:58:bd:02:87:74: a9:f1:5a:03:3d:b6:7d:36:1d:56:ad:46:b6:f5:b6: 17:78:0f:d7:80:46:1c:90:d8:2e:b8:56:68:aa:1e: b9:44:4c:3e:32:0b:78:43:40:95:0c:89:98:64:2a: f4:9c:4b:77:74:8f:98:73:e5:48:d2:76:85:e5:a8: 2c:02:3e:06:5c:68:e8:6e:3e:ba:cc:3d:c8:7d:79: a1:4c:a3:c3:c0:3f:f9:b7:c1:87:e6:c5:e5:b2:4d: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:69:33:A7:15:C2:10:2B:E0:4F:57:86:F0:BB:8C:25:CD:DB:83:E1 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u2kzpxXCECvgT1eG8LuMJc3bg-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.84.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:59:37:10:b7:30:9e:56:5e:04:7e:92:bc:93:5a:49:11:a9: 03:70:3a:e0:c1:b7:46:7b:f5:a0:3b:c5:d4:6a:f4:5c:5b:98: 4c:0e:ac:34:25:ed:73:71:7d:ce:32:ba:62:fd:9b:bb:61:40: e1:33:28:d5:06:6b:38:ed:88:d8:ca:89:10:27:9e:9a:8f:06: e0:58:9c:91:a0:29:06:22:aa:c7:1a:f7:56:86:30:99:44:64: e5:47:6e:da:a2:01:5d:29:cc:31:d0:40:b1:cf:bc:36:41:14: 4d:dc:d1:eb:d0:13:b8:7c:f6:02:5c:1a:83:4c:da:2f:4e:a0: 02:59:50:d4:a0:70:27:94:40:dc:3d:3a:b2:df:46:30:0f:83: 7c:bf:22:bd:8b:0a:be:1b:cf:fc:64:09:3d:3c:0a:d8:d0:71: ac:ae:e8:1a:0e:38:02:68:7f:54:ca:c2:c6:57:39:eb:77:8f: 8f:7f:e5:b4:98:0f:43:b7:1a:4e:5e:60:fa:fa:14:88:61:bc: ed:33:28:32:37:8a:48:24:f5:a0:c9:43:22:5d:b6:07:b6:97: e4:0e:e7:cf:69:8f:7a:5f:24:8a:37:07:5b:b2:bc:cc:3c:6d: b1:4a:55:a8:f8:d7:c9:f7:0a:91:98:ff:6b:d9:ad:05:d7:6b: 1c:48:8e:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtACQLM26OkUSdDcNu3epJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjY5MzNhNzE1YzIxMDJiZTA0ZjU3ODZmMGJiOGMyNWNkZGI4M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMt1YVTf2HRxeGn4RLN0HH/vELla IGK4tLzzGz75gQeOo5s7a9JyL4LVxQVOCB1bq/ExoKC1/G0nvEwpP19s4IljfuEi Zgf56i5+BmOb8y4usd9NY3lMM0SuOG90Y9qh2wpAP1s1DcGkqr7hZd/TzoB9qPdx IvX9UJPjPvubWRQZbNHLu+BMxgIHjBfTIKTOInIBpzqDStj6xn4+j74xWL0Ch3Sp 8VoDPbZ9Nh1WrUa29bYXeA/XgEYckNguuFZoqh65REw+Mgt4Q0CVDImYZCr0nEt3 dI+Yc+VI0naF5agsAj4GXGjobj66zD3IfXmhTKPDwD/5t8GH5sXlsk10nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtpM6cVwhAr4E9XhvC7jCXN24PhMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdTJrenB4WENFQ3ZnVDFlRzhMdU1KYzNiZy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhUMA0G CSqGSIb3DQEBCwUAA4IBAQBOWTcQtzCeVl4EfpK8k1pJEakDcDrgwbdGe/WgO8XU avRcW5hMDqw0Je1zcX3OMrpi/Zu7YUDhMyjVBms47YjYyokQJ56ajwbgWJyRoCkG IqrHGvdWhjCZRGTlR27aogFdKcwx0ECxz7w2QRRN3NHr0BO4fPYCXBqDTNovTqAC WVDUoHAnlEDcPTqy30YwD4N8vyK9iwq+G8/8ZAk9PArY0HGsrugaDjgCaH9UysLG Vznrd4+Pf+W0mA9DtxpOXmD6+hSIYbztMygyN4pIJPWgyUMiXbYHtpfkDufPaY96 XySKNwdbsrzMPG2xSlWo+NfJ9wqRmP9r2a0F12scSI4l -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:41 2025 by rpki-client