This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SvLmjlufJjf01xmQPY4f3HtfCg8.roa File: SvLmjlufJjf01xmQPY4f3HtfCg8.roa (raw, json) Hash identifier: XEbonuFzJxZ4+EftqN0vtZCVnGeLB7zQWyz2HS4Uhts= Subject key identifier: 4A:F2:E6:8E:5B:9F:26:37:F4:D7:19:90:3D:8E:1F:DC:7B:5F:0A:0F Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB110BC3BF50A330F65B640E655D80C0B Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SvLmjlufJjf01xmQPY4f3HtfCg8.roa Signing time: Sun 23 Nov 2025 14:14:15 +0000 ROA not before: Sun 23 Nov 2025 14:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56766 IP address blocks: 31.133.38.0/23 maxlen: 24 31.133.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:10:bc:3b:f5:0a:33:0f:65:b6:40:e6:55:d8:0c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4af2e68e5b9f2637f4d719903d8e1fdc7b5f0a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:3c:0a:90:25:3e:58:d3:fc:63:6c:cb:50: 26:5b:57:e5:06:20:e3:5d:90:5d:d5:78:0d:1c:c2: 4d:42:e6:15:63:b9:68:61:3c:22:cb:f9:de:e9:e8: c4:68:99:da:12:c4:b8:af:b3:3e:40:57:5a:1a:d3: d5:34:b8:d9:f7:52:c8:84:bf:a1:77:46:c3:51:7a: 4a:25:88:08:7d:f0:60:ea:d6:76:26:c7:98:03:3d: bc:46:f7:a8:68:41:67:3f:3b:ad:5b:96:11:13:94: 58:61:f9:9d:42:29:83:88:d0:0c:c3:a2:51:22:35: 9c:5c:1d:48:8c:5d:8f:63:86:10:16:44:4a:39:6f: 80:2d:7b:52:a0:df:33:02:08:85:e1:96:b5:a9:f7: 82:b2:47:a5:b9:cd:55:f4:97:86:00:22:4b:fb:99: c1:b7:9b:fa:b8:6f:d1:5b:b0:6f:ef:50:79:57:9b: 00:12:b4:30:b9:9a:e4:a2:bb:9e:97:40:da:a9:52: 6d:7b:64:03:44:42:5e:85:7d:cc:8f:1a:65:70:05: 37:e6:d2:97:7c:78:1c:b4:8a:99:84:cc:b4:f5:3f: e8:35:d4:34:05:06:53:0b:ee:e2:9b:16:84:9c:a2: c0:d3:ba:62:0f:10:bb:9c:44:33:a7:7b:0a:af:04: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:E6:8E:5B:9F:26:37:F4:D7:19:90:3D:8E:1F:DC:7B:5F:0A:0F X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/SvLmjlufJjf01xmQPY4f3HtfCg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.38.0/23 31.133.43.0/24 Signature Algorithm: sha256WithRSAEncryption 87:81:c1:00:e5:43:bd:40:e7:59:c0:62:8c:64:6e:84:cf:9b: ab:a3:f7:c4:a5:ba:d8:72:50:22:b1:ca:b5:11:f9:97:49:1a: 41:ba:58:93:c8:15:99:5d:50:26:05:82:5b:04:ae:f0:ca:f6: 31:02:bf:c2:42:9a:8c:df:dc:35:0b:58:b8:66:f6:36:ee:2a: 54:6c:6c:db:e1:bf:f9:c0:9e:0a:b5:3a:06:ec:bc:8c:05:bb: 23:32:99:11:ce:08:f5:73:1f:23:01:b5:21:c6:b9:2a:92:bb: 94:6e:92:5d:55:aa:4c:d1:e5:a9:af:37:f2:8b:d5:cc:c8:1f: df:fc:c3:a6:74:a3:13:3b:72:3d:9a:9b:7c:8a:c1:77:5a:ad: 2d:1b:0f:61:96:d9:a1:8b:51:fa:78:73:12:0b:9c:c3:13:6f: 69:90:26:7a:16:40:a4:26:ed:f6:eb:56:2a:f5:34:40:4d:e7: 07:e3:73:44:04:e6:87:96:5e:87:cd:48:2c:13:f6:6e:f1:c0: fd:2f:32:6c:13:84:50:c5:d7:4b:ba:ca:d8:f7:74:f8:61:5b: 9e:fe:f2:21:4c:d5:6e:2a:55:61:c5:2f:e1:5f:16:8c:b3:eb: 93:61:2e:b1:d4:68:64:54:88:c6:00:27:64:16:9b:e1:05:9d: cb:cb:08:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqxELw79QozD2W2QOZV2AwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWYyZTY4ZTViOWYyNjM3ZjRkNzE5OTAzZDhlMWZkYzdiNWYwYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzo8CpAlPljT/GNsy1AmW1flBiDj XZBd1XgNHMJNQuYVY7loYTwiy/ne6ejEaJnaEsS4r7M+QFdaGtPVNLjZ91LIhL+h d0bDUXpKJYgIffBg6tZ2JseYAz28RveoaEFnPzutW5YRE5RYYfmdQimDiNAMw6JR IjWcXB1IjF2PY4YQFkRKOW+ALXtSoN8zAgiF4Za1qfeCskeluc1V9JeGACJL+5nB t5v6uG/RW7Bv71B5V5sAErQwuZrkoruel0DaqVJte2QDREJehX3MjxplcAU35tKX fHgctIqZhMy09T/oNdQ0BQZTC+7imxaEnKLA07piDxC7nEQzp3sKrwRHgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEry5o5bnyY39NcZkD2OH9x7XwoPMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvU3ZMbWpsdWZKamYwMXhtUVBZNGYzSHRmQ2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH4UmAwQA H4UrMA0GCSqGSIb3DQEBCwUAA4IBAQCHgcEA5UO9QOdZwGKMZG6Ez5uro/fEpbrY clAiscq1EfmXSRpBuliTyBWZXVAmBYJbBK7wyvYxAr/CQpqM39w1C1i4ZvY27ipU bGzb4b/5wJ4KtToG7LyMBbsjMpkRzgj1cx8jAbUhxrkqkruUbpJdVapM0eWprzfy i9XMyB/f/MOmdKMTO3I9mpt8isF3Wq0tGw9hltmhi1H6eHMSC5zDE29pkCZ6FkCk Ju3261Yq9TRATecH43NEBOaHll6HzUgsE/Zu8cD9LzJsE4RQxddLusrY93T4YVue /vIhTNVuKlVhxS/hXxaMs+uTYS6x1GhkVIjGACdkFpvhBZ3Lywgj -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:39 2025 by rpki-client