This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/b24MgnJElk0t0CZYGUPCS0WiBxQ.roa File: b24MgnJElk0t0CZYGUPCS0WiBxQ.roa (raw, json) Hash identifier: cWHhW2paDx5FRXzehDQT7p6siSal6c3Aqs94Jvc3VHg= Subject key identifier: 6F:6E:0C:82:72:44:96:4D:2D:D0:26:58:19:43:C2:4B:45:A2:07:14 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B5BFCB6D871A00683181BA6B2BA3F Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/b24MgnJElk0t0CZYGUPCS0WiBxQ.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52091 IP address blocks: 31.133.40.0/23 maxlen: 24 31.133.42.0/24 maxlen: 24 2a0d:df80::/29 maxlen: 29 2a0d:df80::/31 maxlen: 31 2a0d:df80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5b:fc:b6:d8:71:a0:06:83:18:1b:a6:b2:ba:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f6e0c827244964d2dd026581943c24b45a20714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:1a:78:31:b3:fc:ce:9f:dc:0a:8b:86:66: c5:27:09:34:62:11:29:02:96:83:10:2c:35:1c:5a: be:d6:51:2a:7a:29:08:7c:12:c1:16:4a:23:d8:1f: 09:da:e4:d9:ad:95:04:fe:fd:e5:e2:5b:5b:27:a4: 0d:17:bc:9d:af:1e:44:c2:20:3a:3f:ca:8a:f3:52: 10:f2:e5:25:6e:1f:33:5d:00:df:36:00:5d:23:45: 1a:db:3d:cc:26:63:a6:32:c8:30:46:e7:8c:3a:e4: 1a:e6:e7:ed:52:fa:68:7b:34:ec:9a:7d:45:b1:b1: 10:d7:c2:2e:04:55:e7:56:cf:25:f3:10:f4:80:1e: 9c:b8:86:45:1a:59:1c:7f:02:cc:7d:5d:0c:94:62: d4:e3:79:5b:76:dc:1a:d3:ce:c4:85:8f:7b:75:b2: 4f:ef:89:6e:d1:bf:01:2b:36:ba:2d:e7:53:35:12: 55:de:b0:fd:3b:d4:f4:a2:87:2a:b4:f9:13:72:7b: 5d:fa:5b:99:a1:18:7d:6a:9a:35:b5:ea:c7:b3:11: 71:74:f4:2e:84:03:19:4a:27:e7:7e:4f:38:bb:03: 34:65:c9:54:87:42:f9:48:de:53:f5:3d:d1:a8:1f: d3:e1:5a:2b:09:e5:84:1d:e7:89:ae:5d:fa:f8:32: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:0C:82:72:44:96:4D:2D:D0:26:58:19:43:C2:4B:45:A2:07:14 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/b24MgnJElk0t0CZYGUPCS0WiBxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.40.0-31.133.42.255 IPv6: 2a0d:df80::/29 Signature Algorithm: sha256WithRSAEncryption 12:f1:7e:e8:56:53:07:92:05:d0:66:a8:43:84:a8:07:fa:1e: f6:86:3d:a8:5b:d9:8c:35:5f:0d:51:fb:78:98:9c:63:5d:59: fd:b7:9c:36:0e:bf:76:26:c7:27:3e:84:50:28:70:87:9c:50: 9b:4b:9a:8f:90:4d:66:7a:27:0e:0a:92:27:58:8d:51:6c:f4: 78:f1:50:b3:38:5f:4d:9d:b1:22:07:c1:df:de:0c:5e:9e:c8: f0:16:d6:0f:6d:87:55:d3:f0:83:e9:ec:7a:b4:e2:31:93:eb: d3:22:27:68:ab:ce:f0:a3:7d:ee:6d:88:2c:a6:50:1c:35:7e: 9a:e4:33:d7:f2:65:bf:ab:a2:c9:27:42:f1:cf:91:a7:6e:0f: ae:97:53:21:95:a2:3d:07:e1:13:79:16:ee:d6:c8:a5:27:69: 7b:a4:e8:b5:d2:26:d9:1f:f8:79:f1:5c:2f:d5:4f:7d:58:9b: d0:ef:9c:54:7e:71:2b:49:1b:23:36:d1:c6:15:44:ab:48:e7: 53:bb:e1:bd:ef:c8:87:64:52:9c:20:72:3c:d8:a1:2b:8a:01: 4e:31:7d:16:48:a9:7f:44:c0:f9:62:76:d6:9d:6c:d7:1b:6a: da:e3:2a:df:92:fd:6c:d2:56:97:d4:73:ca:1e:9d:03:b4:05: b9:f1:fd:0f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6W1v8tthxoAaDGBumsro/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjZlMGM4MjcyNDQ5NjRkMmRkMDI2NTgxOTQzYzI0YjQ1YTIwNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz4aeDGz/M6f3AqLhmbFJwk0YhEp ApaDECw1HFq+1lEqeikIfBLBFkoj2B8J2uTZrZUE/v3l4ltbJ6QNF7ydrx5EwiA6 P8qK81IQ8uUlbh8zXQDfNgBdI0Ua2z3MJmOmMsgwRueMOuQa5uftUvpoezTsmn1F sbEQ18IuBFXnVs8l8xD0gB6cuIZFGlkcfwLMfV0MlGLU43lbdtwa087EhY97dbJP 74lu0b8BKza6LedTNRJV3rD9O9T0oocqtPkTcntd+luZoRh9apo1terHsxFxdPQu hAMZSifnfk84uwM0ZclUh0L5SN5T9T3RqB/T4VorCeWEHeeJrl36+DLjywIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFG9uDIJyRJZNLdAmWBlDwktFogcUMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvYjI0TWduSkVsazB0MENaWUdVUENTMFdpQnhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAMfhSgD BAAfhSowDQQCAAIwBwMFAyoN34AwDQYJKoZIhvcNAQELBQADggEBABLxfuhWUweS BdBmqEOEqAf6HvaGPahb2Yw1Xw1R+3iYnGNdWf23nDYOv3Ymxyc+hFAocIecUJtL mo+QTWZ6Jw4KkidYjVFs9HjxULM4X02dsSIHwd/eDF6eyPAW1g9th1XT8IPp7Hq0 4jGT69MiJ2irzvCjfe5tiCymUBw1fprkM9fyZb+rosknQvHPkaduD66XUyGVoj0H 4RN5Fu7WyKUnaXuk6LXSJtkf+HnxXC/VT31Ym9DvnFR+cStJGyM20cYVRKtI51O7 4b3vyIdkUpwgcjzYoSuKAU4xfRZIqX9EwPlidtadbNcbatrjKt+S/WzSVpfUc8oe nQO0Bbnx/Q8= -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:21 2026 by rpki-client