This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vrK2NqqXo6eYPldWiI6AtouRURY.roa File: vrK2NqqXo6eYPldWiI6AtouRURY.roa (raw, json) Hash identifier: XeT+/14pqVnorbJdawrG3RATm49Zh7KQurvDLBC94Sw= Subject key identifier: BE:B2:B6:36:AA:97:A3:A7:98:3E:57:56:88:8E:80:B6:8B:91:51:16 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B1C5C9F9DDAC0298CD28DBA1145ACEA45 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vrK2NqqXo6eYPldWiI6AtouRURY.roa Signing time: Sun 14 Dec 2025 10:16:30 +0000 ROA not before: Sun 14 Dec 2025 10:16:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 31.56.220.0/24 maxlen: 24 31.57.35.0/24 maxlen: 24 31.57.100.0/24 maxlen: 24 31.57.228.0/24 maxlen: 24 31.58.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:5c:9f:9d:da:c0:29:8c:d2:8d:ba:11:45:ac:ea:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 14 10:16:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=beb2b636aa97a3a7983e5756888e80b68b915116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:62:37:81:5e:80:35:43:23:d9:57:85:48: b5:b8:a5:f2:ac:e8:39:49:a6:ea:d4:22:4a:cd:a2: d6:3d:cd:9b:21:8d:90:b6:b2:6d:8e:0f:9b:e3:f1: 05:5d:fb:57:9f:06:a6:39:36:04:48:96:0a:1e:e6: 0b:46:d9:18:b5:1a:3e:4c:fa:34:45:a8:6e:34:ec: da:ff:60:53:f8:ec:98:fd:f8:5d:b9:17:02:49:d7: ac:fe:03:81:82:6a:f7:08:60:f6:d3:82:0f:66:c9: b6:bb:c3:f7:eb:ac:b8:10:53:c6:31:05:de:3c:25: 6c:e1:44:59:29:8b:79:67:f8:8f:e8:58:45:f2:03: a8:d9:32:77:c2:45:13:6f:68:ed:79:f6:a2:1b:4e: 21:c7:f7:f8:a2:0f:a9:09:87:bc:2a:d8:3c:5a:a8: 96:db:a7:63:93:e3:fb:cf:43:f6:9f:1d:8f:d9:ab: 18:22:bb:ea:2e:3d:fe:c9:2e:92:19:ed:26:26:e3: 90:7e:45:ca:5a:ce:c4:41:df:2e:5c:2e:ae:24:9d: a0:63:3b:be:19:d6:f5:a1:8a:97:71:74:06:3f:fc: 1f:03:6c:f9:a3:06:90:9a:f3:55:df:92:6d:0e:42: d8:8f:62:71:22:d2:9d:0b:ae:1c:0e:20:56:8a:aa: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B2:B6:36:AA:97:A3:A7:98:3E:57:56:88:8E:80:B6:8B:91:51:16 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vrK2NqqXo6eYPldWiI6AtouRURY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.220.0/24 31.57.35.0/24 31.57.100.0/24 31.57.228.0/24 31.58.33.0/24 Signature Algorithm: sha256WithRSAEncryption b2:48:8b:6c:48:51:cb:7f:ff:ee:fb:1a:9d:72:8d:93:8f:e7: 2d:21:16:3e:4d:50:c3:09:85:8e:8d:da:8e:76:e3:1e:c5:69: 97:ef:6a:0d:57:08:02:36:99:1c:a0:a5:61:dc:23:05:99:db: 9a:e3:35:2a:56:4a:56:a3:d4:9c:6b:aa:de:4c:d9:3e:4d:c2: 4b:27:d9:05:de:54:c9:89:c3:81:c6:bb:ba:fe:8a:8f:dc:2f: d0:ee:d9:10:38:c3:6f:ed:c6:b0:5e:e7:9d:9d:f9:15:58:58: 73:6b:34:b5:4d:2e:eb:63:86:e5:ea:a6:56:f9:ad:bc:ed:48: ba:67:26:00:2d:cc:ec:73:10:ac:11:3b:cb:01:65:ab:42:06: 0f:46:cc:85:c1:ec:dd:88:05:44:9b:3c:78:72:8c:21:e5:a6: 1f:60:9c:b7:6c:28:b3:40:d6:18:88:9c:5e:0a:68:7f:44:17: a9:e7:65:06:e1:9d:fe:1f:42:24:f4:ff:83:f9:d4:af:69:c6: 68:ef:60:35:6b:3b:c0:2f:90:0d:76:26:9f:cd:33:d3:c7:38: 35:06:22:d9:75:8f:de:c7:b2:f2:d1:bf:ba:f3:18:0a:f0:0c: ab:c0:b1:99:a5:7f:d8:82:6a:11:c1:d3:22:57:2c:c7:e9:b4: df:e6:09:62 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZscXJ+d2sApjNKNuhFFrOpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE0MTAxNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWIyYjYzNmFhOTdhM2E3OTgzZTU3NTY4ODhlODBiNjhiOTE1MTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXliN4FegDVDI9lXhUi1uKXyrOg5 Sabq1CJKzaLWPc2bIY2QtrJtjg+b4/EFXftXnwamOTYESJYKHuYLRtkYtRo+TPo0 RahuNOza/2BT+OyY/fhduRcCSdes/gOBgmr3CGD204IPZsm2u8P366y4EFPGMQXe PCVs4URZKYt5Z/iP6FhF8gOo2TJ3wkUTb2jtefaiG04hx/f4og+pCYe8Ktg8WqiW 26djk+P7z0P2nx2P2asYIrvqLj3+yS6SGe0mJuOQfkXKWs7EQd8uXC6uJJ2gYzu+ Gdb1oYqXcXQGP/wfA2z5owaQmvNV35JtDkLYj2JxItKdC64cDiBWiqpHGQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFL6ytjaql6OnmD5XVoiOgLaLkVEWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvdnJLMk5xcVhvNmVZUGxkV2lJNkF0b3VSVVJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzjcAwQA HzkjAwQAHzlkAwQAHznkAwQAHzohMA0GCSqGSIb3DQEBCwUAA4IBAQCySItsSFHL f//u+xqdco2Tj+ctIRY+TVDDCYWOjdqOduMexWmX72oNVwgCNpkcoKVh3CMFmdua 4zUqVkpWo9Sca6reTNk+TcJLJ9kF3lTJicOBxru6/oqP3C/Q7tkQOMNv7cawXued nfkVWFhzazS1TS7rY4bl6qZW+a287Ui6ZyYALczscxCsETvLAWWrQgYPRsyFwezd iAVEmzx4cowh5aYfYJy3bCizQNYYiJxeCmh/RBep52UG4Z3+H0Ik9P+D+dSvacZo 72A1azvAL5ANdiafzTPTxzg1BiLZdY/ex7Ly0b+68xgK8AyrwLGZpX/YgmoRwdMi VyzH6bTf5gli -----END CERTIFICATE-----Generated at Fri Dec 19 11:14:39 2025 by rpki-client