This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa File: jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa (raw, json) Hash identifier: 0xPjFQyLdMuqT+l7cmEhhj8WC9rilD8CahSrHUjkdaE= Subject key identifier: 8E:8D:12:E8:10:B2:05:0A:CE:12:0E:76:82:6F:45:80:9F:57:13:8A Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B5A7DABE259D35C64F376896E68ED Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44660 IP address blocks: 31.133.44.0/24 maxlen: 24 31.133.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5a:7d:ab:e2:59:d3:5c:64:f3:76:89:6e:68:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e8d12e810b2050ace120e76826f45809f57138a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:57:67:c0:51:19:5e:8f:b7:2b:69:02:59: 4a:d9:c8:b4:93:21:20:c5:78:5e:2a:0a:7c:40:81: c2:b8:01:0b:15:2e:5a:59:66:2b:e0:9c:6c:ef:e8: 24:aa:a6:6f:ea:d3:8f:84:6e:db:20:12:64:5e:71: 25:ec:58:64:df:46:d5:63:b3:ea:e2:25:5b:2f:d9: ae:a7:ee:5c:20:76:3b:a4:3d:cf:8a:dd:41:dc:d2: 2d:54:be:cf:55:fb:b7:42:64:f7:71:f9:42:d5:98: 12:43:5c:57:68:89:e9:f2:42:90:d4:be:2a:31:25: 5f:f0:e6:6e:71:d4:95:3a:d0:a9:d8:18:4e:5b:63: f3:b9:33:94:48:cb:37:d1:53:67:22:78:00:14:6c: 74:b2:6d:98:7a:cb:90:68:62:43:c0:a2:14:ad:1a: a9:e3:cf:9d:82:5f:08:9a:f0:fd:9c:45:08:37:b3: 9e:8c:1e:d2:77:a5:98:b5:e9:4a:75:b1:3d:60:57: f8:67:95:de:7d:6b:cb:9c:55:a4:54:5f:1a:f6:86: 54:1b:4f:ef:1e:33:c6:00:11:20:1c:43:0b:f8:ab: dc:c3:71:ae:ee:49:d8:4f:95:93:fa:6b:86:3a:b2: 2e:e6:c9:6a:f5:b8:bb:c8:aa:21:81:fd:e0:4a:c3: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:12:E8:10:B2:05:0A:CE:12:0E:76:82:6F:45:80:9F:57:13:8A X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.44.0/23 Signature Algorithm: sha256WithRSAEncryption 39:fc:54:35:c0:e2:97:ef:4b:4f:76:d8:96:66:94:fd:7d:cf: 4c:52:d4:6e:5a:6f:ef:14:d3:b3:5d:39:20:19:04:47:84:ea: 45:91:b6:48:aa:05:e5:78:52:58:75:c3:62:e0:fb:3f:dd:4c: b9:c1:18:43:fa:4f:ce:dd:3d:df:0e:61:c2:40:e5:f4:02:c0: 22:b5:48:e8:fe:3b:2a:fa:5b:92:08:db:73:63:f4:95:24:c3: 0c:02:1e:92:1c:89:98:ee:fd:09:9b:12:96:f7:12:6a:a8:5e: 57:7b:02:7f:26:7a:58:64:0e:ff:22:5c:36:0a:d0:a3:e4:d6: d7:c5:9b:a8:51:7a:27:04:e2:4b:f8:c5:70:92:48:bb:2d:9b: df:95:d5:2f:7f:f4:65:ab:8b:d7:27:47:99:44:5f:ca:ee:d2: 91:0c:9b:fd:b1:5e:fb:1b:b4:19:f4:eb:87:6a:0b:47:52:d4: ba:bd:f7:b1:83:2e:90:4f:e4:31:3e:0b:1f:91:8b:06:79:d8: 9e:87:4f:2e:f7:b6:3e:ef:7e:9b:44:c5:34:7f:06:60:85:4a: b8:f8:93:18:fd:b8:8b:4e:0c:6a:f5:75:af:2b:bf:46:99:7b: b0:cb:aa:ef:8f:73:7c:39:c2:ed:e1:40:32:2f:4f:c4:d1:64: 3a:85:b0:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1p9q+JZ01xk83aJbmjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZThkMTJlODEwYjIwNTBhY2UxMjBlNzY4MjZmNDU4MDlmNTcxMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EBXZ8BRGV6PtytpAllK2ci0kyEg xXheKgp8QIHCuAELFS5aWWYr4Jxs7+gkqqZv6tOPhG7bIBJkXnEl7Fhk30bVY7Pq 4iVbL9mup+5cIHY7pD3Pit1B3NItVL7PVfu3QmT3cflC1ZgSQ1xXaInp8kKQ1L4q MSVf8OZucdSVOtCp2BhOW2PzuTOUSMs30VNnIngAFGx0sm2YesuQaGJDwKIUrRqp 48+dgl8ImvD9nEUIN7OejB7Sd6WYtelKdbE9YFf4Z5XefWvLnFWkVF8a9oZUG0/v HjPGABEgHEML+Kvcw3Gu7knYT5WT+muGOrIu5slq9bi7yKohgf3gSsMrpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6NEugQsgUKzhIOdoJvRYCfVxOKMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvam8wUzZCQ3lCUXJPRWc1MmdtOUZnSjlYRTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4UsMA0G CSqGSIb3DQEBCwUAA4IBAQA5/FQ1wOKX70tPdtiWZpT9fc9MUtRuWm/vFNOzXTkg GQRHhOpFkbZIqgXleFJYdcNi4Ps/3Uy5wRhD+k/O3T3fDmHCQOX0AsAitUjo/jsq +luSCNtzY/SVJMMMAh6SHImY7v0JmxKW9xJqqF5XewJ/JnpYZA7/Ilw2CtCj5NbX xZuoUXonBOJL+MVwkki7LZvfldUvf/Rlq4vXJ0eZRF/K7tKRDJv9sV77G7QZ9OuH agtHUtS6vfexgy6QT+QxPgsfkYsGedieh08u97Y+736bRMU0fwZghUq4+JMY/biL Tgxq9XWvK79GmXuwy6rvj3N8OcLt4UAyL0/E0WQ6hbCx -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:14 2026 by rpki-client