This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/S6WAJx7TbU110k_g0oyFg1H_34U.roa File: S6WAJx7TbU110k_g0oyFg1H_34U.roa (raw, json) Hash identifier: toyst882a1xCVx/3FvwHIaERW16kFo9wkqRcGIDeq00= Subject key identifier: 4B:A5:80:27:1E:D3:6D:4D:75:D2:4F:E0:D2:8C:85:83:51:FF:DF:85 Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6 Certificate serial: 019B797ED4F7C18BF048E5795A9210A6E0D9 Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/S6WAJx7TbU110k_g0oyFg1H_34U.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206617 IP address blocks: 31.14.184.0/21 maxlen: 24 89.32.152.0/23 maxlen: 24 89.40.234.0/23 maxlen: 24 93.114.170.0/24 maxlen: 24 93.114.245.0/24 maxlen: 24 93.115.210.0/24 maxlen: 24 185.18.24.0/22 maxlen: 24 185.167.52.0/22 maxlen: 24 188.213.16.0/24 maxlen: 24 188.213.40.0/21 maxlen: 22 188.240.42.0/24 maxlen: 24 188.240.44.0/23 maxlen: 23 188.241.153.0/24 maxlen: 24 188.241.186.0/24 maxlen: 24 188.241.251.0/24 maxlen: 24 193.178.224.0/23 maxlen: 23 195.2.218.0/23 maxlen: 23 2a03:f140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d4:f7:c1:8b:f0:48:e5:79:5a:92:10:a6:e0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ba580271ed36d4d75d24fe0d28c858351ffdf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:c0:c4:59:2d:cd:5b:fd:a8:d0:6e:fd:71: eb:55:39:72:57:fd:82:00:ed:17:7e:ce:bf:59:c9: 11:c9:39:e5:f1:75:1e:c0:4a:bb:9f:29:ef:e7:42: a5:58:5d:50:ec:60:c2:b0:78:82:a2:78:50:9c:91: 45:db:ea:fa:15:79:43:c1:6e:83:a8:4a:9f:be:e8: 0f:8d:69:e9:f7:d3:7d:a7:f3:e7:dd:f3:e2:42:32: 74:39:5b:5c:95:92:73:4f:fb:40:66:16:19:39:6d: e7:99:1f:93:a7:16:3b:b0:db:a6:b0:84:7c:ab:86: 47:8c:9d:79:a9:b6:b4:8a:df:43:30:f3:de:6e:cc: 93:cc:64:31:ed:da:2d:0d:ff:67:e4:1c:04:cc:20: cb:f2:de:d3:6d:78:29:b9:6b:db:47:44:5b:69:ed: 89:1a:47:6c:4e:04:22:a2:80:48:fe:77:db:27:3b: 48:f4:10:cc:01:2f:b2:3f:99:55:f6:6b:76:6c:52: ed:44:53:51:1a:ce:f6:e4:4f:75:77:c7:5f:81:87: c3:c9:fb:a4:c2:3a:20:2a:3e:54:90:5a:d1:ab:79: c2:19:3d:ed:86:46:85:e7:99:d9:dd:21:20:8f:fb: b1:da:d3:5f:c2:84:83:5f:4d:d0:d8:00:45:f6:69: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A5:80:27:1E:D3:6D:4D:75:D2:4F:E0:D2:8C:85:83:51:FF:DF:85 X509v3 Authority Key Identifier: keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/S6WAJx7TbU110k_g0oyFg1H_34U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.184.0/21 89.32.152.0/23 89.40.234.0/23 93.114.170.0/24 93.114.245.0/24 93.115.210.0/24 185.18.24.0/22 185.167.52.0/22 188.213.16.0/24 188.213.40.0/21 188.240.42.0/24 188.240.44.0/23 188.241.153.0/24 188.241.186.0/24 188.241.251.0/24 193.178.224.0/23 195.2.218.0/23 IPv6: 2a03:f140::/32 Signature Algorithm: sha256WithRSAEncryption 47:aa:25:d5:a4:0f:11:d9:e5:07:6c:4b:48:fb:8e:1f:0b:c4: 96:85:dd:bf:f2:41:9f:5d:23:90:e8:5a:e0:1c:39:c3:25:9e: ad:2c:69:bd:0b:5c:3a:f7:a9:46:10:4e:6a:d0:11:f6:88:eb: 1c:75:e4:0b:b2:aa:45:7a:fd:07:37:53:d5:e9:71:22:af:52: 4d:39:e7:81:33:cf:82:e0:80:e4:a7:3f:ee:ff:9a:7c:3e:ab: ab:13:3f:ed:05:39:f9:9f:94:3d:be:15:5c:15:5f:83:00:77: 29:a0:c3:e2:95:6e:5d:53:80:d9:3d:4c:30:75:22:52:4f:cc: 4c:ad:57:f3:5b:cb:dc:49:19:14:e2:6b:f7:da:1a:1e:a9:99: 85:47:f9:fa:b7:e8:ba:dd:d1:3d:9b:78:56:1b:5e:41:c7:1d: 07:97:c4:f8:5c:1b:4c:22:ba:be:6a:a5:a3:f2:e9:cd:ec:bd: 9b:60:80:ee:94:66:f8:0e:87:01:2a:c0:45:41:07:16:e8:2a: c9:7c:a3:8c:3b:ee:1f:d1:72:dc:52:c5:62:af:70:3f:9e:f7: 6f:98:fc:2c:d1:81:eb:0c:8f:55:4a:74:ca:0e:68:6f:98:48: ab:ad:b7:01:32:8d:53:b5:92:2a:99:c8:97:65:0b:02:9b:f3: e7:cb:77:bf -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt5ftT3wYvwSOV5WpIQpuDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTM0ZGFhYTg4N2Q5OGE1MzQ4YzNhNDYwYTIxZmM4NGUx MWE0ZTYwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmE1ODAyNzFlZDM2ZDRkNzVkMjRmZTBkMjhjODU4MzUxZmZkZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOjAxFktzVv9qNBu/XHrVTlyV/2C AO0Xfs6/WckRyTnl8XUewEq7nynv50KlWF1Q7GDCsHiConhQnJFF2+r6FXlDwW6D qEqfvugPjWnp99N9p/Pn3fPiQjJ0OVtclZJzT/tAZhYZOW3nmR+TpxY7sNumsIR8 q4ZHjJ15qba0it9DMPPebsyTzGQx7dotDf9n5BwEzCDL8t7TbXgpuWvbR0Rbae2J GkdsTgQiooBI/nfbJztI9BDMAS+yP5lV9mt2bFLtRFNRGs725E91d8dfgYfDyfuk wjogKj5UkFrRq3nCGT3thkaF55nZ3SEgj/ux2tNfwoSDX03Q2ABF9mnZ3wIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFEulgCce021NddJP4NKMhYNR/9+FMB8GA1UdIwQY MBaAFAijTaqoh9mKU0jDpGCiH8hOEaTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAt YzYyY2YyMGE1ZWM5LzEvUzZXQUp4N1RiVTExMGtfZzBveUZnMUhfMzRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAtYzYyY2YyMGE1ZWM5 LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAx8OuAME AVkgmAMEAVko6gMEAF1yqgMEAF1y9QMEAF1z0gMEArkSGAMEArmnNAMEALzVEAME A7zVKAMEALzwKgMEAbzwLAMEALzxmQMEALzxugMEALzx+wMEAcGy4AMEAcMC2jAN BAIAAjAHAwUAKgPxQDANBgkqhkiG9w0BAQsFAAOCAQEAR6ol1aQPEdnlB2xLSPuO HwvEloXdv/JBn10jkOha4Bw5wyWerSxpvQtcOvepRhBOatAR9ojrHHXkC7KqRXr9 BzdT1elxIq9STTnngTPPguCA5Kc/7v+afD6rqxM/7QU5+Z+UPb4VXBVfgwB3KaDD 4pVuXVOA2T1MMHUiUk/MTK1X81vL3EkZFOJr99oaHqmZhUf5+rfout3RPZt4Vhte QccdB5fE+FwbTCK6vmqlo/Lpzey9m2CA7pRm+A6HASrARUEHFugqyXyjjDvuH9Fy 3FLFYq9wP573b5j8LNGB6wyPVUp0yg5ob5hIq623ATKNU7WSKpnIl2ULApvz58t3 vw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:26 2026 by rpki-client