This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6C86GaMtMwa_692Y-E8K3EvQrOQ.roa File: 6C86GaMtMwa_692Y-E8K3EvQrOQ.roa (raw, json) Hash identifier: hLhVHRG6bjkzhvhh4kuG87gGILM1ujn5HQ5gaK6oCVs= Subject key identifier: E8:2F:3A:19:A3:2D:33:06:BF:EB:DD:98:F8:4F:0A:DC:4B:D0:AC:E4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B730581B234C824C33320C3F83AC533DF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6C86GaMtMwa_692Y-E8K3EvQrOQ.roa Signing time: Wed 31 Dec 2025 06:08:19 +0000 ROA not before: Wed 31 Dec 2025 06:08:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48014 IP address blocks: 31.56.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:05:81:b2:34:c8:24:c3:33:20:c3:f8:3a:c5:33:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 31 06:08:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e82f3a19a32d3306bfebdd98f84f0adc4bd0ace4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:46:5f:64:84:f2:b8:aa:35:36:d1:67:ed: 2a:35:b5:b9:26:1b:6a:6c:f1:3e:10:f9:76:7e:8d: 89:f1:f5:d3:89:c1:8d:1d:68:78:da:3d:da:78:88: 11:9b:d1:0a:b2:dc:37:ea:86:2e:95:3f:08:ef:5c: e5:58:ec:82:1b:ee:fd:65:5a:f4:f2:9d:27:72:3f: d8:87:45:21:ea:f1:16:de:04:9c:b9:f5:02:61:12: 46:f2:be:06:ba:e7:7a:ef:01:2f:80:66:7e:42:2f: dc:c3:0b:0b:d0:45:86:01:9a:b7:e4:ea:d1:15:7a: 3c:32:60:50:fc:e8:41:fa:e4:27:76:17:42:97:93: 7b:14:99:ed:de:81:ce:8f:8c:a9:1a:21:03:86:4f: 42:fe:2b:46:2f:6c:c3:69:3b:e4:f6:f9:8b:7f:87: 46:fb:62:15:b3:17:1a:8a:4e:7c:d5:00:2f:75:04: e4:c1:c4:6a:7b:58:3f:06:3d:a5:e2:47:5b:82:bb: b8:03:d8:a8:9b:5b:aa:23:e2:c4:c9:28:6b:84:d7: 5f:b0:04:0f:2f:b7:9b:a1:82:ad:61:9a:76:30:d8: 50:b7:3f:7d:1f:16:11:a8:c3:34:84:c5:bd:26:d1: a4:42:e2:54:e7:36:f6:f4:cf:a3:82:40:91:64:fe: f2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:3A:19:A3:2D:33:06:BF:EB:DD:98:F8:4F:0A:DC:4B:D0:AC:E4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6C86GaMtMwa_692Y-E8K3EvQrOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.100.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:70:1a:b2:d3:9e:a7:56:cd:12:38:13:b8:05:19:81:f8:54: 2e:2b:1f:f8:dc:85:50:d7:9e:d1:a9:63:ba:ab:9a:c7:f1:17: fa:9e:9d:6a:71:39:88:00:c5:c9:89:cc:1f:1f:94:6f:27:d4: c1:f2:68:fb:b6:de:9f:2b:ae:3c:be:ee:c9:4e:36:83:59:62: 1a:ee:4a:a1:b5:09:f4:3a:93:bc:1f:73:84:62:71:d4:74:67: 42:bc:03:ac:68:56:02:a2:92:47:d8:3c:17:64:53:48:8e:de: b0:96:75:7f:22:18:65:4a:af:87:7b:2c:cd:e1:26:26:95:77: 3f:20:8b:4a:ed:68:7b:12:a5:78:1c:64:5f:26:e3:f1:85:85: c7:70:c0:92:26:ae:10:9e:05:c8:2c:6c:23:89:73:3a:ce:19: c0:6c:02:4a:05:0b:bf:33:7d:a4:df:ca:3f:e1:28:60:c6:b2: d0:75:c0:ad:4c:c8:e4:99:09:92:ec:24:85:16:77:12:6e:fc: af:f9:02:ed:42:cb:cd:be:8f:b9:2a:a2:5d:0f:8f:75:34:ab: 1d:de:5d:78:1c:5b:87:a1:29:4e:17:17:29:a5:be:ab:fe:c7: c0:13:c6:2c:87:71:c0:e8:9a:63:26:b8:25:05:6e:2c:4a:32: 64:2d:87:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtzBYGyNMgkwzMgw/g6xTPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjMxMDYwODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODJmM2ExOWEzMmQzMzA2YmZlYmRkOThmODRmMGFkYzRiZDBhY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopdGX2SE8riqNTbRZ+0qNbW5Jhtq bPE+EPl2fo2J8fXTicGNHWh42j3aeIgRm9EKstw36oYulT8I71zlWOyCG+79ZVr0 8p0ncj/Yh0Uh6vEW3gScufUCYRJG8r4Guud67wEvgGZ+Qi/cwwsL0EWGAZq35OrR FXo8MmBQ/OhB+uQndhdCl5N7FJnt3oHOj4ypGiEDhk9C/itGL2zDaTvk9vmLf4dG +2IVsxcaik581QAvdQTkwcRqe1g/Bj2l4kdbgru4A9iom1uqI+LEyShrhNdfsAQP L7eboYKtYZp2MNhQtz99HxYRqMM0hMW9JtGkQuJU5zb29M+jgkCRZP7yIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgvOhmjLTMGv+vdmPhPCtxL0KzkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNkM4NkdhTXRNd2FfNjkyWS1FOEszRXZRck9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhkMA0G CSqGSIb3DQEBCwUAA4IBAQBrcBqy056nVs0SOBO4BRmB+FQuKx/43IVQ157RqWO6 q5rH8Rf6np1qcTmIAMXJicwfH5RvJ9TB8mj7tt6fK648vu7JTjaDWWIa7kqhtQn0 OpO8H3OEYnHUdGdCvAOsaFYCopJH2DwXZFNIjt6wlnV/IhhlSq+HeyzN4SYmlXc/ IItK7Wh7EqV4HGRfJuPxhYXHcMCSJq4QngXILGwjiXM6zhnAbAJKBQu/M32k38o/ 4ShgxrLQdcCtTMjkmQmS7CSFFncSbvyv+QLtQsvNvo+5KqJdD491NKsd3l14HFuH oSlOFxcppb6r/sfAE8Ysh3HA6JpjJrglBW4sSjJkLYcV -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:00 2026 by rpki-client