This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/YwHwj8nGu01b4DGoJo7OQzmm9y0.roa File: YwHwj8nGu01b4DGoJo7OQzmm9y0.roa (raw, json) Hash identifier: GeDg67muROb7D4h2X9co29gZ5d0QPL0hSd4Vfj1zmeY= Subject key identifier: 63:01:F0:8F:C9:C6:BB:4D:5B:E0:31:A8:26:8E:CE:43:39:A6:F7:2D Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Certificate serial: 019B78354DB0D552FA5E5027FDFE0BFAF20C Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/YwHwj8nGu01b4DGoJo7OQzmm9y0.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61152 IP address blocks: 31.133.120.0/21 maxlen: 21 31.133.120.0/22 maxlen: 22 31.133.124.0/24 maxlen: 24 31.133.126.0/24 maxlen: 24 31.133.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4d:b0:d5:52:fa:5e:50:27:fd:fe:0b:fa:f2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6301f08fc9c6bb4d5be031a8268ece4339a6f72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:e6:fb:70:ed:7b:77:dc:00:80:83:ba:1f: 35:57:1f:1d:19:91:5e:77:c7:d8:04:79:3a:3f:1f: ac:9a:db:7b:c6:9c:91:05:7c:4b:33:17:16:53:26: a3:26:5f:90:da:f7:cb:58:84:03:a1:20:eb:50:bf: 04:32:b4:69:a7:eb:17:8a:f2:8f:49:e0:f7:84:77: e8:14:ee:80:8d:af:a8:b9:7c:67:52:30:63:57:fe: 3f:76:79:3d:79:54:e8:64:49:cb:5a:35:d4:3c:23: d2:72:e0:fb:b5:e5:0e:60:eb:ef:88:e2:0c:d2:26: ae:7e:78:3e:d1:9e:b3:1d:ef:7b:35:3a:c4:08:84: 56:4a:fa:9b:f1:a8:b4:74:12:56:3b:ec:ea:18:5a: 5d:7c:98:45:5c:47:11:4a:0b:60:9e:d3:66:88:d4: 1f:23:70:2f:61:1c:4f:4c:40:1d:ba:8b:4c:d3:29: db:36:18:b8:10:93:b2:e6:44:1a:a7:eb:f7:ff:88: f7:02:56:68:97:04:8f:ed:91:50:61:b9:90:06:8e: 82:07:6d:9c:5e:b7:d7:b5:6e:56:4a:8c:22:ad:fd: 81:0d:fa:04:2e:0a:35:fd:9c:b4:03:49:35:d0:25: 7c:9f:89:bf:dd:7c:a8:fd:54:fb:85:77:95:b1:4f: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:01:F0:8F:C9:C6:BB:4D:5B:E0:31:A8:26:8E:CE:43:39:A6:F7:2D X509v3 Authority Key Identifier: keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/YwHwj8nGu01b4DGoJo7OQzmm9y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.120.0/21 Signature Algorithm: sha256WithRSAEncryption 36:80:99:e4:d1:c8:f5:c2:fd:6e:7f:74:74:9f:29:dd:82:29: 95:58:b9:b1:31:50:16:a6:4c:34:f0:98:b3:60:e6:e2:45:dd: ee:4e:c5:8a:d5:25:07:72:c3:35:b6:69:60:51:55:d5:b4:93: 9c:4d:b5:d7:fb:29:72:f9:9d:16:80:ef:7f:2d:62:61:88:70: 5d:2a:57:48:ab:17:81:94:5a:a0:f3:9c:d0:5d:66:29:04:cc: ce:6d:fb:eb:6b:17:95:1c:6e:ce:58:8b:76:10:11:2a:4f:a2: 16:3b:3b:75:18:a2:6d:97:45:b0:76:74:e2:20:1b:45:fe:10: 68:a8:8a:39:cf:26:d6:9c:b8:8a:56:d5:4c:de:32:e7:b1:ab: a2:e8:e9:2d:9f:33:cc:c7:c3:60:47:ea:88:9a:d2:f1:7a:6a: e2:b8:2a:12:6b:e8:50:33:aa:ac:3f:6a:1b:03:eb:e3:9b:8f: 5a:7a:c1:99:89:28:1d:b7:44:43:3b:05:73:dc:0a:6e:c5:e9: 78:42:ff:e9:17:75:63:f0:1f:3b:a4:c8:b0:be:34:1a:60:89: d0:fe:e9:29:cf:7d:c2:39:8b:8e:03:8a:f1:b7:09:3f:44:10: 44:37:01:1e:6d:34:e5:c9:9a:37:65:24:22:b4:d7:e4:24:df: 43:e7:38:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NU2w1VL6XlAn/f4L+vIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzZjYzRhNzQxOGEwOTQyMWJhOTgwNWU3NjRlZWYzNDJl ZjhmMzgwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzAxZjA4ZmM5YzZiYjRkNWJlMDMxYTgyNjhlY2U0MzM5YTZmNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzivm+3Dte3fcAICDuh81Vx8dGZFe d8fYBHk6Px+smtt7xpyRBXxLMxcWUyajJl+Q2vfLWIQDoSDrUL8EMrRpp+sXivKP SeD3hHfoFO6Aja+ouXxnUjBjV/4/dnk9eVToZEnLWjXUPCPScuD7teUOYOvviOIM 0iaufng+0Z6zHe97NTrECIRWSvqb8ai0dBJWO+zqGFpdfJhFXEcRSgtgntNmiNQf I3AvYRxPTEAduotM0ynbNhi4EJOy5kQap+v3/4j3AlZolwSP7ZFQYbmQBo6CB22c XrfXtW5WSowirf2BDfoELgo1/Zy0A0k10CV8n4m/3Xyo/VT7hXeVsU/AkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMB8I/JxrtNW+AxqCaOzkM5pvctMB8GA1UdIwQY MBaAFM/GzEp0GKCUIbqYBedk7vNC7484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzIt NGFmMWZiNzQzOGU3LzEvWXdId2o4bkd1MDFiNERHb0pvN09Rem1tOXkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzItNGFmMWZiNzQzOGU3 LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4V4MA0G CSqGSIb3DQEBCwUAA4IBAQA2gJnk0cj1wv1uf3R0nyndgimVWLmxMVAWpkw08Jiz YObiRd3uTsWK1SUHcsM1tmlgUVXVtJOcTbXX+yly+Z0WgO9/LWJhiHBdKldIqxeB lFqg85zQXWYpBMzObfvraxeVHG7OWIt2EBEqT6IWOzt1GKJtl0WwdnTiIBtF/hBo qIo5zybWnLiKVtVM3jLnsaui6OktnzPMx8NgR+qImtLxemriuCoSa+hQM6qsP2ob A+vjm49aesGZiSgdt0RDOwVz3Apuxel4Qv/pF3Vj8B87pMiwvjQaYInQ/ukpz33C OYuOA4rxtwk/RBBENwEebTTlyZo3ZSQitNfkJN9D5zjX -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:13 2026 by rpki-client