This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vQCT7yMx6WKeNFh6UEq6qht-3wA.roa File: vQCT7yMx6WKeNFh6UEq6qht-3wA.roa (raw, json) Hash identifier: +RDDDoLl1VdCoEoqUAmrb55OzAHcL++YZcBGVaF5Uhk= Subject key identifier: BD:00:93:EF:23:31:E9:62:9E:34:58:7A:50:4A:BA:AA:1B:7E:DF:00 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B35C65D280D49F08C5CEF02D4CBBFE0F1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vQCT7yMx6WKeNFh6UEq6qht-3wA.roa Signing time: Fri 19 Dec 2025 08:42:31 +0000 ROA not before: Fri 19 Dec 2025 08:42:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 31.56.83.0/24 maxlen: 24 31.57.55.0/24 maxlen: 24 31.58.41.0/24 maxlen: 24 31.58.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:c6:5d:28:0d:49:f0:8c:5c:ef:02:d4:cb:bf:e0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 19 08:42:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd0093ef2331e9629e34587a504abaaa1b7edf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:b7:2b:9f:3f:50:3f:f6:40:89:a3:ed:aa: 87:ca:b6:42:14:8c:23:af:1f:44:fe:45:b4:eb:88: 12:e3:40:d3:9a:7b:99:01:36:3a:31:96:89:b6:7e: b9:1d:6d:01:db:4c:d7:a5:c3:00:3b:60:2d:87:5c: e8:c0:85:1d:a8:8a:29:45:e9:04:fd:aa:ed:a0:76: ab:82:87:fc:1e:1f:79:01:ad:8a:33:ca:9e:09:8b: f7:2d:a4:55:e1:d8:9a:d5:ba:fa:30:38:34:8e:18: 42:d7:20:08:da:2f:a6:ed:72:4e:7f:c2:74:62:4c: b4:87:11:56:9b:af:d6:6c:30:e6:4c:2e:23:ed:c9: fb:95:27:c7:db:18:7b:a6:c5:50:3f:46:82:97:d8: dd:18:03:d7:81:f9:b9:29:de:dd:17:59:58:cf:58: 69:79:fd:eb:f5:5d:06:25:22:0a:ac:df:92:ce:e4: 93:3e:6f:08:d0:e1:29:d5:c6:77:f0:38:fa:38:bf: bd:45:f6:84:6a:f1:6a:25:a8:1e:57:82:c4:14:f4: 02:08:ec:be:67:51:9e:01:2f:ec:65:a0:a2:53:f3: c1:2f:35:f7:5d:27:24:fe:fa:7f:5e:e5:f0:85:dd: b8:5d:f9:af:fc:4c:9c:0e:91:cb:02:72:0d:02:f8: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:93:EF:23:31:E9:62:9E:34:58:7A:50:4A:BA:AA:1B:7E:DF:00 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vQCT7yMx6WKeNFh6UEq6qht-3wA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.83.0/24 31.57.55.0/24 31.58.41.0/24 31.58.231.0/24 Signature Algorithm: sha256WithRSAEncryption a4:b9:61:ad:f1:3f:be:b1:cf:e9:8b:8a:87:57:c1:52:cc:d5: dd:c5:49:8a:69:1c:39:96:c1:9f:e5:33:4d:e1:39:72:b2:cc: af:34:37:ef:77:f7:ba:5b:9c:72:b1:78:36:73:8a:31:41:14: 05:16:12:e7:db:f4:13:ed:61:c4:71:4c:6a:d7:df:50:31:b2: 39:50:3e:77:c3:5c:9f:b9:f0:ea:6f:24:57:56:a8:44:6e:05: 20:76:fe:1d:e3:f4:3c:fc:b2:09:19:58:93:d4:b8:17:28:47: 5c:84:64:1f:cc:50:44:d4:09:22:2c:9a:c0:16:15:10:f4:a4: 66:6f:4e:84:9e:a7:a6:91:3a:e6:fe:ce:dd:ec:a1:c7:cf:39: 5e:9d:49:9e:f5:1f:bd:a1:cf:2c:66:dc:88:7a:b9:e1:ab:04: bc:f2:91:72:e5:d6:9e:77:4f:1a:53:b6:f6:4a:78:df:d4:f8: e9:15:3c:67:5d:0e:e6:09:53:e2:8c:1a:49:d3:9f:03:19:7d: 16:27:49:d7:da:62:ee:25:4a:bd:aa:b9:c9:73:c1:ed:1c:49: 0d:81:e6:28:68:87:35:98:18:40:31:f4:4b:df:48:1f:44:64: 37:b5:04:5a:23:7b:ed:99:54:03:ce:f5:1c:57:fc:77:6a:6d: db:20:c2:1c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZs1xl0oDUnwjFzvAtTLv+DxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE5MDg0MjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDAwOTNlZjIzMzFlOTYyOWUzNDU4N2E1MDRhYmFhYTFiN2VkZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIy3K58/UD/2QImj7aqHyrZCFIwj rx9E/kW064gS40DTmnuZATY6MZaJtn65HW0B20zXpcMAO2Ath1zowIUdqIopRekE /artoHargof8Hh95Aa2KM8qeCYv3LaRV4dia1br6MDg0jhhC1yAI2i+m7XJOf8J0 Yky0hxFWm6/WbDDmTC4j7cn7lSfH2xh7psVQP0aCl9jdGAPXgfm5Kd7dF1lYz1hp ef3r9V0GJSIKrN+SzuSTPm8I0OEp1cZ38Dj6OL+9RfaEavFqJageV4LEFPQCCOy+ Z1GeAS/sZaCiU/PBLzX3XSck/vp/XuXwhd24Xfmv/EycDpHLAnINAvge9QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFL0Ak+8jMelinjRYelBKuqobft8AMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdlFDVDd5TXg2V0tlTkZoNlVFcTZxaHQtM3dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhTAwQA Hzk3AwQAHzopAwQAHzrnMA0GCSqGSIb3DQEBCwUAA4IBAQCkuWGt8T++sc/pi4qH V8FSzNXdxUmKaRw5lsGf5TNN4TlyssyvNDfvd/e6W5xysXg2c4oxQRQFFhLn2/QT 7WHEcUxq199QMbI5UD53w1yfufDqbyRXVqhEbgUgdv4d4/Q8/LIJGViT1LgXKEdc hGQfzFBE1AkiLJrAFhUQ9KRmb06EnqemkTrm/s7d7KHHzzlenUme9R+9oc8sZtyI ernhqwS88pFy5daed08aU7b2Snjf1PjpFTxnXQ7mCVPijBpJ058DGX0WJ0nX2mLu JUq9qrnJc8HtHEkNgeYoaIc1mBhAMfRL30gfRGQ3tQRaI3vtmVQDzvUcV/x3am3b IMIc -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:38 2025 by rpki-client