This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/6CB0Tl4YG47apBFINoAlLJh0DfQ.roa File: 6CB0Tl4YG47apBFINoAlLJh0DfQ.roa (raw, json) Hash identifier: DERAPkRBmXodZoa76/M1fe1/30yrXGK8+ImXsmAlEs8= Subject key identifier: E8:20:74:4E:5E:18:1B:8E:DA:A4:11:48:36:80:25:2C:98:74:0D:F4 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D32605F93DEDAF1216164B243EC0 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/6CB0Tl4YG47apBFINoAlLJh0DfQ.roa Signing time: Tue 02 Dec 2025 20:17:49 +0000 ROA not before: Tue 02 Dec 2025 20:17:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136897 IP address blocks: 31.24.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d3:26:05:f9:3d:ed:af:12:16:16:4b:24:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e820744e5e181b8edaa411483680252c98740df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:93:bc:8a:bf:90:b3:36:0a:1e:5e:bc:f2: 54:55:a5:6c:57:da:02:a4:90:2e:56:cf:da:c1:ea: 58:a9:06:0f:c5:e8:d5:d0:d9:fb:49:c9:86:ea:b7: df:3d:5e:55:c1:ba:d9:e8:3b:b2:7f:e5:93:14:f9: 4c:76:92:e9:23:99:2e:74:e2:0e:68:79:87:39:d5: c3:da:da:fa:94:ff:c2:62:33:ef:00:f6:bd:10:7b: cc:d8:8b:6b:28:52:3f:66:07:89:10:cb:b8:1a:1a: ed:ba:4b:8c:87:b4:7c:e3:c4:09:94:01:f4:fa:da: c8:f6:74:5a:fc:b4:95:ff:b1:76:95:1b:44:2b:cf: f1:2f:5b:4b:0a:30:e5:17:40:a8:86:62:20:99:38: ef:ec:1d:81:5c:04:a1:17:f9:b7:3f:4c:14:8f:62: 85:8e:21:20:ed:bf:4c:0c:b6:c1:de:f5:fa:2d:07: 30:32:59:d3:19:3e:0a:57:b7:83:45:93:fd:fd:96: cc:a5:21:22:7e:20:0d:6b:ba:bc:65:18:21:60:9e: ac:69:71:21:8c:b6:4b:c1:01:36:bf:52:0d:cc:f7: 23:85:dc:cb:41:31:ab:ba:a7:aa:7e:ed:93:fc:39: bb:fc:32:c6:5a:3c:1f:b9:1b:fb:76:70:13:55:9a: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:20:74:4E:5E:18:1B:8E:DA:A4:11:48:36:80:25:2C:98:74:0D:F4 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/6CB0Tl4YG47apBFINoAlLJh0DfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.86.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:33:d5:f2:d8:d9:7c:07:bb:4b:fb:93:f4:b2:6a:31:fb:52: 51:3e:c0:33:13:10:49:25:0b:8d:1a:60:43:63:eb:71:3f:81: 64:fc:de:44:19:c6:fd:f6:d5:a7:54:1a:c3:83:90:db:1a:42: a6:f0:9d:75:6c:00:b8:ee:35:e2:dd:42:12:a5:39:38:0d:61: 37:30:06:45:ea:02:87:6a:6d:2c:af:4e:6a:80:0d:a5:1e:a4: 6f:85:c7:f9:bd:2b:eb:06:ec:6e:7a:07:1e:a4:2f:19:cc:2f: 0a:ff:4f:38:d3:a0:c6:f9:b1:a9:57:a3:b3:4c:66:9f:a2:68: e3:b2:0a:45:e3:23:b1:0e:37:ff:de:b8:e5:c8:09:a7:bd:2a: b4:d4:52:7a:da:10:6d:0d:9c:ab:00:26:43:a5:bd:f8:e6:bd: 90:16:43:2a:52:07:95:cf:1f:cd:e8:bb:05:a1:82:7a:95:93: 85:c1:f7:2f:d9:74:c0:ad:c0:c9:1f:9b:56:11:35:8b:8a:f2: 07:7b:b3:32:b0:73:4f:de:8e:f9:ff:fb:7f:d5:28:44:ca:17: 69:87:6f:7d:5b:f2:78:fb:9c:ef:14:3c:05:37:33:89:ef:9b: 6c:53:99:ef:77:f9:45:4a:25:4c:14:ec:c4:76:92:3d:6a:e3: a1:82:07:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgttMmBfk97a8SFhZLJD7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODIwNzQ0ZTVlMTgxYjhlZGFhNDExNDgzNjgwMjUyYzk4NzQwZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaGTvIq/kLM2Ch5evPJUVaVsV9oC pJAuVs/awepYqQYPxejV0Nn7ScmG6rffPV5VwbrZ6Duyf+WTFPlMdpLpI5kudOIO aHmHOdXD2tr6lP/CYjPvAPa9EHvM2ItrKFI/ZgeJEMu4GhrtukuMh7R848QJlAH0 +trI9nRa/LSV/7F2lRtEK8/xL1tLCjDlF0CohmIgmTjv7B2BXAShF/m3P0wUj2KF jiEg7b9MDLbB3vX6LQcwMlnTGT4KV7eDRZP9/ZbMpSEifiANa7q8ZRghYJ6saXEh jLZLwQE2v1INzPcjhdzLQTGruqeqfu2T/Dm7/DLGWjwfuRv7dnATVZpLRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOggdE5eGBuO2qQRSDaAJSyYdA30MB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvNkNCMFRsNFlHNDdhcEJGSU5vQWxMSmgwRGZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxhWMA0G CSqGSIb3DQEBCwUAA4IBAQCOM9Xy2Nl8B7tL+5P0smox+1JRPsAzExBJJQuNGmBD Y+txP4Fk/N5EGcb99tWnVBrDg5DbGkKm8J11bAC47jXi3UISpTk4DWE3MAZF6gKH am0sr05qgA2lHqRvhcf5vSvrBuxuegcepC8ZzC8K/08406DG+bGpV6OzTGafomjj sgpF4yOxDjf/3rjlyAmnvSq01FJ62hBtDZyrACZDpb345r2QFkMqUgeVzx/N6LsF oYJ6lZOFwfcv2XTArcDJH5tWETWLivIHe7MysHNP3o75//t/1ShEyhdph299W/J4 +5zvFDwFNzOJ75tsU5nvd/lFSiVMFOzEdpI9auOhggeV -----END CERTIFICATE-----Generated at Wed Dec 3 13:11:22 2025 by rpki-client