This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6xlAdOUIuoKS_Wg198D6zeZrMT8.roa File: 6xlAdOUIuoKS_Wg198D6zeZrMT8.roa (raw, json) Hash identifier: UHX/G36wiVHHPP7YieOV7qzCjnC4504YouxL1kg5ROY= Subject key identifier: EB:19:40:74:E5:08:BA:82:92:FD:68:35:F7:C0:FA:CD:E6:6B:31:3F Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F849E99E208A1352B774C279C7F5F29 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6xlAdOUIuoKS_Wg198D6zeZrMT8.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207994 IP address blocks: 31.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9e:99:e2:08:a1:35:2b:77:4c:27:9c:7f:5f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb194074e508ba8292fd6835f7c0facde66b313f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:d3:78:6f:b1:53:19:a9:7d:f5:2b:09:88: d3:f1:34:a3:44:34:f5:85:eb:8e:9a:4d:97:7c:cf: a2:c9:2b:8d:43:5e:09:f2:2e:af:3a:55:d0:14:37: 89:f7:1b:2c:97:d8:eb:07:0b:23:c5:e2:54:a0:fb: e8:13:e3:8e:30:7f:96:10:64:a7:85:21:d6:a5:f6: e3:4d:d5:34:50:a4:60:9e:2e:77:ca:23:57:e9:39: 78:28:3d:01:d3:d8:a6:97:02:1c:a0:25:90:81:09: 4e:0f:67:ae:10:ee:f2:4e:eb:e7:c0:c5:7e:5f:3d: 0c:88:b7:8d:87:ac:9e:47:88:2d:37:44:d0:5e:b4: 7b:12:20:64:b8:65:11:f1:c7:5f:6e:14:e5:72:53: 9b:cf:59:9e:f5:82:b0:e0:05:af:90:4f:3f:de:dc: a6:ae:74:e5:86:18:4f:17:dd:c7:ac:7a:8c:26:95: 80:c0:27:c8:28:0e:1d:d4:83:e1:b7:7f:bb:af:e3: a7:d1:fd:3b:8a:dc:cc:f2:af:21:b1:55:b0:cf:fe: 7b:3d:57:37:1d:be:a0:e3:ba:cb:f8:97:6a:69:6a: 75:06:68:5a:c1:6f:85:95:88:1f:8c:00:1b:29:82: a7:c6:1a:5a:8e:52:93:f8:83:e3:0a:4c:16:33:e1: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:19:40:74:E5:08:BA:82:92:FD:68:35:F7:C0:FA:CD:E6:6B:31:3F X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6xlAdOUIuoKS_Wg198D6zeZrMT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.34.0/24 Signature Algorithm: sha256WithRSAEncryption 27:4b:7e:e7:09:4e:26:9b:4f:fc:4b:14:e0:5e:08:8b:40:6a: b4:d7:90:ea:ee:c1:1c:d6:6d:3a:c8:e2:0f:60:94:6f:8a:dd: 5c:9f:ed:ef:99:84:d6:81:2b:39:11:03:ab:9c:5d:35:0f:f5: f5:b0:47:fd:61:13:08:b4:68:21:43:24:04:a1:a6:b6:2a:af: 59:23:f8:0e:e5:4d:d5:4f:ab:9e:af:3e:2d:cc:5a:0c:65:5c: 55:47:f1:08:29:54:4b:e6:26:a7:cb:70:e8:f3:a6:1e:05:bd: 5b:b6:a7:4d:c0:92:46:c9:01:91:ce:18:19:17:7a:34:22:f6: c8:a1:5b:86:63:29:ed:d8:48:da:0b:0f:0c:c0:73:d0:c1:6e: 30:b6:8e:1e:89:54:08:93:48:d6:33:80:da:ef:c5:c2:76:b2: 01:1b:0d:f2:e1:31:a7:81:fb:05:4d:39:91:1f:40:84:83:27: 1a:99:b0:58:d2:21:1b:2f:8c:01:3a:2f:3d:11:94:6f:a7:69: 1d:e2:0d:07:83:95:31:36:7b:4e:37:61:89:2a:23:e2:48:1b: 54:c4:f2:43:99:c1:f9:72:65:a0:6b:f4:67:78:48:22:9e:09: 0a:4c:18:fe:86:84:29:98:7c:6c:2b:ff:e8:07:7b:29:8d:ac: 4d:47:4d:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJ6Z4gihNSt3TCecf18pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjE5NDA3NGU1MDhiYTgyOTJmZDY4MzVmN2MwZmFjZGU2NmIzMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIXTeG+xUxmpffUrCYjT8TSjRDT1 heuOmk2XfM+iySuNQ14J8i6vOlXQFDeJ9xssl9jrBwsjxeJUoPvoE+OOMH+WEGSn hSHWpfbjTdU0UKRgni53yiNX6Tl4KD0B09imlwIcoCWQgQlOD2euEO7yTuvnwMV+ Xz0MiLeNh6yeR4gtN0TQXrR7EiBkuGUR8cdfbhTlclObz1me9YKw4AWvkE8/3tym rnTlhhhPF93HrHqMJpWAwCfIKA4d1IPht3+7r+On0f07itzM8q8hsVWwz/57PVc3 Hb6g47rL+JdqaWp1BmhawW+FlYgfjAAbKYKnxhpajlKT+IPjCkwWM+GirQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsZQHTlCLqCkv1oNffA+s3mazE/MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNnhsQWRPVUl1b0tTX1dnMTk4RDZ6ZVpyTVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkiMA0G CSqGSIb3DQEBCwUAA4IBAQAnS37nCU4mm0/8SxTgXgiLQGq015Dq7sEc1m06yOIP YJRvit1cn+3vmYTWgSs5EQOrnF01D/X1sEf9YRMItGghQyQEoaa2Kq9ZI/gO5U3V T6uerz4tzFoMZVxVR/EIKVRL5iany3Do86YeBb1btqdNwJJGyQGRzhgZF3o0IvbI oVuGYynt2EjaCw8MwHPQwW4wto4eiVQIk0jWM4Da78XCdrIBGw3y4TGngfsFTTmR H0CEgycambBY0iEbL4wBOi89EZRvp2kd4g0Hg5UxNntON2GJKiPiSBtUxPJDmcH5 cmWga/RneEgingkKTBj+hoQpmHxsK//oB3spjaxNR02+ -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:52 2026 by rpki-client