This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/6ZBPRGxMRhzUL39PVDVSduo6FUc.roa File: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (raw, json) Hash identifier: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8= Subject key identifier: E9:90:4F:44:6C:4C:46:1C:D4:2F:7F:4F:54:35:52:76:EA:3A:15:47 Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Certificate serial: 019B79ED0D7C2209150083C4DA7342895720 Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/6ZBPRGxMRhzUL39PVDVSduo6FUc.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211895 IP address blocks: 31.43.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0d:7c:22:09:15:00:83:c4:da:73:42:89:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9904f446c4c461cd42f7f4f54355276ea3a1547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:f6:10:2a:23:86:49:91:ca:23:48:92:fb: 87:fd:1a:e3:71:fd:42:a7:17:33:f8:2b:25:24:42: 06:6d:cf:72:f6:73:f2:88:e7:bf:5c:19:f1:d5:c0: 6d:f0:20:65:92:19:45:04:03:8d:6b:bd:53:c8:88: 09:64:db:2b:89:3c:4c:a7:f5:be:f9:b1:70:d5:20: ef:08:b1:26:b7:3d:f1:be:ff:ff:3d:58:b8:1e:5c: 4b:e0:89:00:92:71:30:31:b4:92:5b:8f:08:e4:4a: 3b:01:13:c0:a3:3b:0e:cd:07:da:e1:49:c6:b6:e9: d8:ce:82:9c:42:cf:74:dc:29:fc:87:f1:43:7b:e2: 96:f9:c0:34:1f:58:0b:43:ae:59:39:09:da:d1:c4: c9:2d:5e:87:5c:69:79:90:d9:12:c0:df:8d:c5:cd: 28:a9:45:2c:52:c4:2b:9d:5d:17:c1:bf:f7:69:06: ae:1c:e2:5d:4f:97:16:e3:b8:eb:5f:a8:9c:b3:e6: 29:2e:bd:7d:6f:fd:8b:de:7b:70:1d:58:1c:50:96: 6c:18:b4:32:58:1a:4d:18:9c:df:83:5a:9c:99:d2: 21:67:64:6a:f4:71:4a:2d:b7:4d:76:eb:51:18:e4: 14:d5:12:c7:a6:ca:af:f5:b2:9c:9b:35:db:18:40: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:4F:44:6C:4C:46:1C:D4:2F:7F:4F:54:35:52:76:EA:3A:15:47 X509v3 Authority Key Identifier: keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/6ZBPRGxMRhzUL39PVDVSduo6FUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.163.0/24 Signature Algorithm: sha256WithRSAEncryption 95:47:df:a6:9c:74:7b:cc:a9:de:8f:85:84:5d:fd:02:43:84: 80:48:b3:79:06:6e:43:10:58:42:bd:94:c3:d7:a0:e4:0c:9c: f1:20:c0:40:ea:da:db:9d:00:71:07:bf:65:c5:62:98:f4:a4: a6:49:f8:38:fc:3c:82:91:d7:34:d6:c1:3e:b0:a0:48:6e:bb: c4:69:e9:c3:9a:db:70:30:36:e3:7e:9b:e9:2c:83:e3:e0:21: da:62:92:e2:46:80:cd:10:14:a6:c7:e6:d3:8d:79:77:6b:af: 33:51:50:39:75:22:02:58:fa:00:80:c5:8e:ac:4f:77:8c:60: 15:d0:e1:a1:ea:93:9f:58:d1:1d:c2:28:2a:43:0f:eb:21:9f: 38:65:6a:cf:c6:16:23:a0:3b:4f:db:70:7f:d4:f8:ec:d7:c2: e9:29:1d:87:67:85:ae:33:98:7f:71:af:c0:6a:10:90:35:58: 07:59:ae:72:b0:67:17:38:a9:58:e2:42:ca:c9:bc:a3:7d:cd: 59:2c:93:48:76:5a:90:1e:03:af:85:72:2c:e0:1f:40:b5:43: 71:60:e6:23:f1:f2:75:76:fb:ec:7f:73:34:fd:d9:92:ad:33: 9d:c0:87:a3:43:bc:c5:5a:1d:5e:50:09:bb:67:17:04:51:9c: de:c0:a7:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Q18IgkVAIPE2nNCiVcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2 ZGY0OGIwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTkwNGY0NDZjNGM0NjFjZDQyZjdmNGY1NDM1NTI3NmVhM2ExNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHX2ECojhkmRyiNIkvuH/Rrjcf1C pxcz+CslJEIGbc9y9nPyiOe/XBnx1cBt8CBlkhlFBAONa71TyIgJZNsriTxMp/W+ +bFw1SDvCLEmtz3xvv//PVi4HlxL4IkAknEwMbSSW48I5Eo7ARPAozsOzQfa4UnG tunYzoKcQs903Cn8h/FDe+KW+cA0H1gLQ65ZOQna0cTJLV6HXGl5kNkSwN+Nxc0o qUUsUsQrnV0Xwb/3aQauHOJdT5cW47jrX6ics+YpLr19b/2L3ntwHVgcUJZsGLQy WBpNGJzfg1qcmdIhZ2Rq9HFKLbdNdutRGOQU1RLHpsqv9bKcmzXbGEBHOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmQT0RsTEYc1C9/T1Q1UnbqOhVHMB8GA1UdIwQY MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt ZDFjNWYxYjUxZTE3LzEvNlpCUFJHeE1SaHpVTDM5UFZEVlNkdW82RlVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3 LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyujMA0G CSqGSIb3DQEBCwUAA4IBAQCVR9+mnHR7zKnej4WEXf0CQ4SASLN5Bm5DEFhCvZTD 16DkDJzxIMBA6trbnQBxB79lxWKY9KSmSfg4/DyCkdc01sE+sKBIbrvEaenDmttw MDbjfpvpLIPj4CHaYpLiRoDNEBSmx+bTjXl3a68zUVA5dSICWPoAgMWOrE93jGAV 0OGh6pOfWNEdwigqQw/rIZ84ZWrPxhYjoDtP23B/1Pjs18LpKR2HZ4WuM5h/ca/A ahCQNVgHWa5ysGcXOKlY4kLKybyjfc1ZLJNIdlqQHgOvhXIs4B9AtUNxYOYj8fJ1 dvvsf3M0/dmSrTOdwIejQ7zFWh1eUAm7ZxcEUZzewKc+ -----END CERTIFICATE-----Generated at Tue Jan 27 06:19:56 2026 by rpki-client