This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/6okDW562ptIs4iN1y-WMYg-45jY.roa File: 6okDW562ptIs4iN1y-WMYg-45jY.roa (raw, json) Hash identifier: KaiRGaOivd7uFd01xG4Jps9z07e2u3NUoDlDSh+lkH4= Subject key identifier: EA:89:03:5B:9E:B6:A6:D2:2C:E2:23:75:CB:E5:8C:62:0F:B8:E6:36 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B5FEC28A47EBC5BB420B2B5A55548 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/6okDW562ptIs4iN1y-WMYg-45jY.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202279 IP address blocks: 31.133.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5f:ec:28:a4:7e:bc:5b:b4:20:b2:b5:a5:55:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea89035b9eb6a6d22ce22375cbe58c620fb8e636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cb:07:c2:f7:6b:1b:d8:9e:85:f6:db:32:15: cf:6b:6d:06:08:08:f1:1c:2b:41:21:9a:ba:39:3e: 41:c7:59:e7:4f:2d:87:73:0a:77:eb:54:e0:0d:9e: a8:26:52:1d:64:1c:aa:5a:df:d5:f6:c9:17:0b:f8: 73:3e:f8:12:92:a6:7c:6a:9a:04:8b:fa:43:f6:a1: ff:17:e8:51:80:ff:f9:9f:2a:dc:0d:80:44:99:02: cd:c4:95:0e:6f:3b:c0:f4:93:9d:f2:2e:21:36:6c: 7f:f8:26:22:e7:b8:27:e4:b2:62:d6:f5:66:cf:ec: 14:bd:f8:1d:0e:09:2c:03:bb:75:26:7b:bf:a9:40: ae:ee:9b:fa:c4:27:5f:e3:0c:14:4f:a5:4c:9b:cd: bd:3a:16:ef:07:7f:48:9f:46:e4:73:7a:1f:f0:44: e1:04:0b:35:01:b6:5d:e7:4b:9d:c1:2a:aa:a1:c8: b5:06:79:3d:c7:b3:49:f4:10:ad:57:33:26:4f:57: 4d:bb:8c:24:12:56:d7:d1:5e:54:c7:e8:bb:94:9d: b0:c1:f0:75:48:2e:f1:44:f7:ce:a5:e2:8e:9d:2b: 27:72:6c:fe:91:cb:7a:ad:2b:1b:dc:6f:30:4b:24: 82:24:cb:15:4f:3a:f2:52:be:5d:b0:55:28:90:00: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:89:03:5B:9E:B6:A6:D2:2C:E2:23:75:CB:E5:8C:62:0F:B8:E6:36 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/6okDW562ptIs4iN1y-WMYg-45jY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.48.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:a0:d4:0d:1d:b5:37:14:06:89:af:19:9e:63:69:10:9d:27: 63:31:82:4b:a6:2d:8a:51:48:ce:59:2a:a3:4b:cb:d2:fb:af: 35:d3:28:2d:6c:a6:76:b3:79:d9:8c:a1:d1:25:5f:0d:d5:6e: 80:67:54:16:ae:ca:84:78:85:62:84:6f:b1:b2:80:8f:ac:90: 2d:18:a5:0c:a9:cf:f2:1a:ea:9c:c7:be:9c:a5:fb:e8:3d:c6: 08:35:2d:e6:c2:c1:5b:dd:72:5a:5c:d3:ca:62:8b:67:6a:d7: 85:43:69:06:d6:8c:bc:7c:f1:1e:90:a4:bb:21:87:55:2f:cb: 78:47:29:bc:2b:80:75:d1:9c:3c:c5:28:de:fd:09:7d:32:77: 6b:00:ab:b8:e6:5c:44:6c:6e:8b:ee:db:69:18:76:2f:c3:11: 11:a9:75:ad:f4:71:01:61:8b:f7:92:ce:8b:40:d0:0f:be:d4: 03:cf:62:36:f8:f3:d4:55:75:3f:fe:78:57:ad:a7:0d:f3:d8: 4f:38:26:46:6f:63:57:f1:ed:c0:4e:32:69:32:11:36:5a:49: df:2b:a3:45:a3:89:99:ac:92:78:74:31:f8:35:af:96:fc:25: 76:9d:9c:d2:ca:9b:1b:75:86:be:25:21:74:9b:ad:c6:f2:b0: 6a:b6:4c:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1/sKKR+vFu0ILK1pVVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTg5MDM1YjllYjZhNmQyMmNlMjIzNzVjYmU1OGM2MjBmYjhlNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ssHwvdrG9iehfbbMhXPa20GCAjx HCtBIZq6OT5Bx1nnTy2Hcwp361TgDZ6oJlIdZByqWt/V9skXC/hzPvgSkqZ8apoE i/pD9qH/F+hRgP/5nyrcDYBEmQLNxJUObzvA9JOd8i4hNmx/+CYi57gn5LJi1vVm z+wUvfgdDgksA7t1Jnu/qUCu7pv6xCdf4wwUT6VMm829OhbvB39In0bkc3of8ETh BAs1AbZd50udwSqqoci1Bnk9x7NJ9BCtVzMmT1dNu4wkElbX0V5Ux+i7lJ2wwfB1 SC7xRPfOpeKOnSsncmz+kct6rSsb3G8wSySCJMsVTzryUr5dsFUokABuHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqJA1uetqbSLOIjdcvljGIPuOY2MB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvNm9rRFc1NjJwdElzNGlOMXktV01ZZy00NWpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4UwMA0G CSqGSIb3DQEBCwUAA4IBAQA7oNQNHbU3FAaJrxmeY2kQnSdjMYJLpi2KUUjOWSqj S8vS+6810ygtbKZ2s3nZjKHRJV8N1W6AZ1QWrsqEeIVihG+xsoCPrJAtGKUMqc/y Guqcx76cpfvoPcYINS3mwsFb3XJaXNPKYotnateFQ2kG1oy8fPEekKS7IYdVL8t4 Rym8K4B10Zw8xSje/Ql9MndrAKu45lxEbG6L7ttpGHYvwxERqXWt9HEBYYv3ks6L QNAPvtQDz2I2+PPUVXU//nhXracN89hPOCZGb2NX8e3ATjJpMhE2WknfK6NFo4mZ rJJ4dDH4Na+W/CV2nZzSypsbdYa+JSF0m63G8rBqtkw1 -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:14 2026 by rpki-client