This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6V6MDo70nRYMekKzEyz-vCdjq9I.roa File: 6V6MDo70nRYMekKzEyz-vCdjq9I.roa (raw, json) Hash identifier: 7TogBcHR4F0+FnL9dZEk7nW9YBhazrfFhyfYeeP+4cM= Subject key identifier: E9:5E:8C:0E:8E:F4:9D:16:0C:7A:42:B3:13:2C:FE:BC:27:63:AB:D2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B3600CE4B7B47D387E9D404EC4D0EF769 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6V6MDo70nRYMekKzEyz-vCdjq9I.roa Signing time: Fri 19 Dec 2025 09:46:21 +0000 ROA not before: Fri 19 Dec 2025 09:46:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151704 IP address blocks: 31.59.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:00:ce:4b:7b:47:d3:87:e9:d4:04:ec:4d:0e:f7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 19 09:46:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e95e8c0e8ef49d160c7a42b3132cfebc2763abd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:9b:0e:64:69:bb:b6:39:4c:7e:0c:7a:2b: 32:e5:65:34:de:26:f7:57:70:48:7d:79:46:25:f8: 4c:0e:9b:0c:d7:e9:ce:a6:d0:0a:8c:13:1a:e7:aa: aa:4f:64:8c:b3:68:77:45:4d:24:ac:4b:90:57:49: da:a6:4e:b3:20:ff:f1:65:73:f2:d6:b4:de:16:71: 77:26:14:bd:ea:ff:21:72:d5:5d:db:27:06:5b:da: d7:ea:3d:c3:a1:03:24:f9:96:42:d4:30:40:ce:d1: 31:e7:b8:89:23:90:b5:e9:51:b9:b3:99:f1:09:c1: f2:db:7f:95:b1:49:bc:d8:97:a1:cb:42:3c:ff:68: 39:ce:5c:38:91:52:1c:b6:93:c5:35:1e:51:95:f5: f4:0e:49:4c:4d:ed:a4:e3:2b:45:4f:d5:f8:7a:66: 03:05:db:8a:3d:7a:03:43:f6:c8:b1:2e:ea:9b:5e: 4c:b9:73:f7:fd:ad:c1:b7:cd:b3:9f:da:52:5f:cb: b1:ab:22:80:32:89:f7:c9:7d:f4:af:21:10:16:f5: aa:b8:ec:84:8b:66:79:45:69:f6:19:db:21:1b:00: 5f:db:4d:14:25:42:a7:85:19:a3:f2:3c:57:0f:48: 0e:34:d2:ad:3c:3b:f7:66:d8:86:6e:7c:c5:56:14: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5E:8C:0E:8E:F4:9D:16:0C:7A:42:B3:13:2C:FE:BC:27:63:AB:D2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6V6MDo70nRYMekKzEyz-vCdjq9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.168.0/24 Signature Algorithm: sha256WithRSAEncryption b0:c9:75:6d:10:26:b4:05:d7:17:d2:bf:da:30:ea:f3:6b:92: cf:fd:c8:23:80:46:8c:42:df:ed:e9:31:a4:2d:d6:7f:67:57: a3:f9:bd:e8:d3:9d:e9:6a:be:a2:b8:9f:f1:66:0c:e1:00:23: 27:cb:53:27:21:8d:3f:fe:dd:ea:fb:0b:1f:1a:ce:c9:b4:a7: 01:34:9a:15:5d:e1:5f:21:31:2b:4e:32:e2:4f:6e:eb:7d:dc: 67:23:cd:b6:b9:62:f7:1f:f0:51:a2:e5:fd:40:9c:61:98:ec: b4:d3:ee:f0:37:4f:60:8f:c9:80:49:95:e7:c1:10:ce:b8:9c: ef:30:8f:fa:71:fd:e1:e2:af:a8:8b:1c:65:39:f1:b7:cf:9e: 87:e0:a8:34:b3:9e:c5:0e:e6:1c:dc:78:d2:d0:68:98:f7:6f: c2:67:8a:ea:01:c6:f2:60:c2:44:ca:3b:e1:51:43:6d:c1:ea: bc:fe:f6:b8:c2:fe:d7:f9:57:27:8b:81:ba:c3:44:93:57:38: e6:e0:8a:eb:51:3a:79:9c:fc:9d:cd:e6:c5:c3:0e:e5:37:de: bf:5b:96:aa:2b:c9:90:17:79:0f:c2:44:dc:f3:62:12:9a:8a: ed:d5:10:db:6e:bb:e5:83:43:1b:16:f3:12:f7:95:d9:47:4b: d0:1c:de:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2AM5Le0fTh+nUBOxNDvdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE5MDk0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTVlOGMwZThlZjQ5ZDE2MGM3YTQyYjMxMzJjZmViYzI3NjNhYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFabDmRpu7Y5TH4Meisy5WU03ib3 V3BIfXlGJfhMDpsM1+nOptAKjBMa56qqT2SMs2h3RU0krEuQV0napk6zIP/xZXPy 1rTeFnF3JhS96v8hctVd2ycGW9rX6j3DoQMk+ZZC1DBAztEx57iJI5C16VG5s5nx CcHy23+VsUm82Jehy0I8/2g5zlw4kVIctpPFNR5RlfX0DklMTe2k4ytFT9X4emYD BduKPXoDQ/bIsS7qm15MuXP3/a3Bt82zn9pSX8uxqyKAMon3yX30ryEQFvWquOyE i2Z5RWn2GdshGwBf200UJUKnhRmj8jxXD0gONNKtPDv3ZtiGbnzFVhRupwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOlejA6O9J0WDHpCsxMs/rwnY6vSMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvNlY2TURvNzBuUllNZWtLekV5ei12Q2RqcTlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzuoMA0G CSqGSIb3DQEBCwUAA4IBAQCwyXVtECa0BdcX0r/aMOrza5LP/cgjgEaMQt/t6TGk LdZ/Z1ej+b3o053par6iuJ/xZgzhACMny1MnIY0//t3q+wsfGs7JtKcBNJoVXeFf ITErTjLiT27rfdxnI822uWL3H/BRouX9QJxhmOy00+7wN09gj8mASZXnwRDOuJzv MI/6cf3h4q+oixxlOfG3z56H4Kg0s57FDuYc3HjS0GiY92/CZ4rqAcbyYMJEyjvh UUNtweq8/va4wv7X+Vcni4G6w0STVzjm4IrrUTp5nPydzebFww7lN96/W5aqK8mQ F3kPwkTc82ISmort1RDbbrvlg0MbFvMS95XZR0vQHN42 -----END CERTIFICATE-----Generated at Sun Dec 21 08:13:03 2025 by rpki-client