This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6EjgO2-An1V-F-Ltnxw0KrQV6rM.roa File: 6EjgO2-An1V-F-Ltnxw0KrQV6rM.roa (raw, json) Hash identifier: 3gyHFfHyhsBQFMlOGyXIp0JsHPGKp9DvYTBhrqmBpl8= Subject key identifier: E8:48:E0:3B:6F:80:9F:55:7E:17:E2:ED:9F:1C:34:2A:B4:15:EA:B3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B6A9015FC73B9923580B5C3A5892 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6EjgO2-An1V-F-Ltnxw0KrQV6rM.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213724 IP address blocks: 31.57.103.0/24 maxlen: 24 31.57.111.0/24 maxlen: 24 31.57.230.0/24 maxlen: 24 31.58.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b6:a9:01:5f:c7:3b:99:23:58:0b:5c:3a:58:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e848e03b6f809f557e17e2ed9f1c342ab415eab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:4e:ca:b1:77:57:9f:3a:73:a2:91:11:cb: 5f:91:49:d8:77:fd:db:2d:ae:f4:6a:0d:84:e2:da: c0:d2:b6:ad:2c:82:71:f3:81:ed:24:89:52:74:cb: 38:0d:d0:a6:35:9d:6e:a1:d6:41:6e:9c:4e:0a:86: 37:16:0e:0c:7b:63:2f:42:f3:f1:f3:a3:6c:4f:33: ba:2c:05:99:25:7e:2e:8d:1f:67:e7:d6:e1:56:cc: 4b:5e:27:e5:c6:98:61:bc:95:a2:1a:af:3a:6f:f1: 12:d9:d8:ca:00:ff:88:73:7d:e5:9b:78:43:47:17: c9:2b:28:b0:54:9c:df:91:21:32:89:76:d7:8c:6e: ea:5b:fa:85:4b:0f:94:0a:6c:0a:d9:19:78:64:06: c9:88:0b:07:f1:4e:b8:a3:94:3b:30:08:e3:52:07: c5:f3:fd:bb:08:a9:54:82:1e:08:d7:4b:5a:3c:f3: e0:92:36:08:53:f6:f9:ef:f0:cf:da:e7:fc:bc:01: d8:31:86:8a:5e:3b:98:54:29:e3:f9:80:df:81:02: 94:2c:3a:6d:72:bf:75:92:8f:87:00:d2:9b:20:94: c5:14:1f:2b:b5:3f:a4:7f:75:a4:5b:7a:69:20:c4: dc:8c:b1:83:f4:e7:81:f2:32:54:ca:d0:5c:02:c4: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:E0:3B:6F:80:9F:55:7E:17:E2:ED:9F:1C:34:2A:B4:15:EA:B3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6EjgO2-An1V-F-Ltnxw0KrQV6rM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.103.0/24 31.57.111.0/24 31.57.230.0/24 31.58.40.0/24 Signature Algorithm: sha256WithRSAEncryption b9:3d:da:36:e0:f8:83:c4:6e:d2:2c:50:67:a0:5a:52:29:ce: c7:af:ac:01:c4:92:d4:24:a5:cd:c4:9e:cc:1c:f5:5d:00:2d: 20:d6:31:d3:0b:17:40:f8:6b:f5:b3:f4:e8:a0:2c:ad:e7:f0: 0b:26:b9:57:ce:6f:e9:31:56:77:67:cf:52:7c:70:64:b9:d5: c3:19:e2:a1:a3:a0:1a:e7:12:ff:03:01:de:ac:db:d3:8b:3f: a2:33:62:85:57:75:82:d1:7f:61:74:1c:82:c1:d4:f1:a5:3d: db:4e:70:fc:b8:e1:b7:af:fe:43:f7:28:4d:7d:ad:7a:9b:ac: e9:b5:21:71:3d:88:99:c6:a7:3d:02:e1:e0:69:00:f1:1b:1e: 22:b2:09:2b:c4:0b:ff:e5:c6:51:a7:98:21:f8:5e:35:c7:50: 78:4d:d0:38:50:75:fe:f5:2c:fd:0c:b3:b8:4b:07:48:42:83: 02:9f:53:43:11:38:47:7a:c9:37:f7:18:94:6f:0e:d8:a9:59: 28:ef:3b:f7:1b:e1:5c:05:23:6c:c5:90:81:ff:30:24:5b:61: 1d:a3:50:8f:0c:1d:5d:b3:b2:6e:73:61:77:5f:67:96:45:62: bb:41:b2:b3:ad:d0:61:f9:d8:c9:33:26:11:ac:7e:c9:a2:c4: c8:a9:49:ad -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hLapAV/HO5kjWAtcOliSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODQ4ZTAzYjZmODA5ZjU1N2UxN2UyZWQ5ZjFjMzQyYWI0MTVlYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu5OyrF3V586c6KREctfkUnYd/3b La70ag2E4trA0ratLIJx84HtJIlSdMs4DdCmNZ1uodZBbpxOCoY3Fg4Me2MvQvPx 86NsTzO6LAWZJX4ujR9n59bhVsxLXiflxphhvJWiGq86b/ES2djKAP+Ic33lm3hD RxfJKyiwVJzfkSEyiXbXjG7qW/qFSw+UCmwK2Rl4ZAbJiAsH8U64o5Q7MAjjUgfF 8/27CKlUgh4I10taPPPgkjYIU/b57/DP2uf8vAHYMYaKXjuYVCnj+YDfgQKULDpt cr91ko+HANKbIJTFFB8rtT+kf3WkW3ppIMTcjLGD9OeB8jJUytBcAsRkNQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOhI4DtvgJ9Vfhfi7Z8cNCq0FeqzMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNkVqZ08yLUFuMVYtRi1MdG54dzBLclFWNnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzlnAwQA HzlvAwQAHznmAwQAHzooMA0GCSqGSIb3DQEBCwUAA4IBAQC5Pdo24PiDxG7SLFBn oFpSKc7Hr6wBxJLUJKXNxJ7MHPVdAC0g1jHTCxdA+Gv1s/TooCyt5/ALJrlXzm/p MVZ3Z89SfHBkudXDGeKho6Aa5xL/AwHerNvTiz+iM2KFV3WC0X9hdByCwdTxpT3b TnD8uOG3r/5D9yhNfa16m6zptSFxPYiZxqc9AuHgaQDxGx4isgkrxAv/5cZRp5gh +F41x1B4TdA4UHX+9Sz9DLO4SwdIQoMCn1NDEThHesk39xiUbw7YqVko7zv3G+Fc BSNsxZCB/zAkW2Edo1CPDB1ds7Juc2F3X2eWRWK7QbKzrdBh+djJMyYRrH7JosTI qUmt -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:54 2026 by rpki-client