This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/tD3MiVLyx80jHHPgeigx6BWgpuQ.roa File: tD3MiVLyx80jHHPgeigx6BWgpuQ.roa (raw, json) Hash identifier: UHu7tvFq5WsP6rH5pg1qHyYUdE7g7HNJ6I8OyKr1nyw= Subject key identifier: B4:3D:CC:89:52:F2:C7:CD:23:1C:73:E0:7A:28:31:E8:15:A0:A6:E4 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB10C29207EC21FE4DDE42E26A7630AE3 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/tD3MiVLyx80jHHPgeigx6BWgpuQ.roa Signing time: Sun 23 Nov 2025 14:09:15 +0000 ROA not before: Sun 23 Nov 2025 14:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 52091 IP address blocks: 31.133.40.0/23 maxlen: 24 31.133.42.0/24 maxlen: 24 2a0d:df80::/29 maxlen: 29 2a0d:df80::/31 maxlen: 31 2a0d:df80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:0c:29:20:7e:c2:1f:e4:dd:e4:2e:26:a7:63:0a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b43dcc8952f2c7cd231c73e07a2831e815a0a6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:22:29:db:2d:5b:21:35:5c:c5:d3:76:4f: ad:94:81:81:a7:78:b9:03:d8:33:80:85:fc:b5:a0: 82:d6:ff:8c:87:5a:4f:8f:f4:f6:cb:03:a9:8b:d3: 4b:c5:9b:f4:33:89:d7:1a:3d:6b:b6:ea:5e:24:ba: 65:03:0f:b7:d6:2e:b8:67:6c:b8:cc:fa:a4:11:2b: c2:4e:79:c9:52:bc:f2:b1:b5:e0:3c:a9:9d:83:5d: 01:59:dc:71:a4:b2:b5:11:3e:57:31:e4:83:df:52: ee:01:bc:f2:c8:70:ac:4c:87:3d:40:01:80:db:ba: 03:cd:88:e6:0a:5e:35:b1:ca:2a:7d:9b:b9:64:d4: 23:f7:88:14:e6:91:8f:be:e8:c1:29:ff:56:cc:27: f5:7d:de:d0:78:4f:ce:f7:57:d0:6d:82:ce:66:9f: d7:71:b0:db:f0:e8:ec:68:be:7e:b5:f8:9e:38:0e: bc:e9:f1:7f:63:b5:77:22:31:7f:7d:41:8d:60:24: 25:1a:96:e2:af:8d:98:e2:3b:20:01:84:32:28:e3: 6e:f4:65:3e:4f:44:ce:01:e4:ea:97:38:bb:48:c7: 0e:94:6e:54:df:bd:de:9b:aa:ee:13:28:62:db:d9: 12:7a:77:26:24:93:79:87:80:c9:8e:92:d1:30:8e: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:CC:89:52:F2:C7:CD:23:1C:73:E0:7A:28:31:E8:15:A0:A6:E4 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/tD3MiVLyx80jHHPgeigx6BWgpuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.40.0-31.133.42.255 IPv6: 2a0d:df80::/29 Signature Algorithm: sha256WithRSAEncryption 14:dd:f1:a1:a9:11:b2:ce:47:86:3e:da:0e:32:76:9c:ab:9f: f7:e6:1f:0e:52:49:bb:99:a4:67:80:27:d5:d7:17:d3:ac:ef: de:df:b9:03:a3:e4:cf:dc:5a:e0:e3:29:4f:d1:1b:7c:07:b3: 7e:74:32:8b:76:fb:ec:97:e6:ad:6f:c4:ea:7b:38:e5:bf:c2: cc:6d:51:b8:e3:90:34:17:75:9e:27:9f:88:e9:9b:ec:2c:4a: 02:87:4d:db:d7:42:5f:41:41:5c:12:13:5b:00:3f:6c:27:6b: 40:2e:0f:87:60:3a:8e:22:fc:3f:28:04:07:0d:69:77:2a:dd: 6d:bf:ab:cf:07:d9:d9:63:83:74:4d:5e:07:99:fa:7f:d7:3e: 5c:c9:d3:05:d7:87:f3:59:5c:33:12:43:f0:7e:54:b0:8d:5b: 56:d0:58:ed:df:c0:e1:df:a5:3f:86:0c:aa:7d:bf:51:2c:12: e8:32:71:91:a8:4c:8d:74:0c:c3:03:0d:55:08:6c:6f:a3:54: ea:26:2d:0e:47:1d:b7:cd:34:5d:f0:d9:c6:fe:f4:be:19:cd: f1:5a:b1:a7:00:7d:28:81:2c:3a:22:a1:9c:9a:c1:19:a1:42: b1:1f:73:f8:df:33:12:6a:17:9e:f4:41:b8:c7:0f:ab:a3:26: 16:88:fd:ee -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZqxDCkgfsIf5N3kLianYwrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDNkY2M4OTUyZjJjN2NkMjMxYzczZTA3YTI4MzFlODE1YTBhNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiIiKdstWyE1XMXTdk+tlIGBp3i5 A9gzgIX8taCC1v+Mh1pPj/T2ywOpi9NLxZv0M4nXGj1rtupeJLplAw+31i64Z2y4 zPqkESvCTnnJUrzysbXgPKmdg10BWdxxpLK1ET5XMeSD31LuAbzyyHCsTIc9QAGA 27oDzYjmCl41scoqfZu5ZNQj94gU5pGPvujBKf9WzCf1fd7QeE/O91fQbYLOZp/X cbDb8OjsaL5+tfieOA686fF/Y7V3IjF/fUGNYCQlGpbir42Y4jsgAYQyKONu9GU+ T0TOAeTqlzi7SMcOlG5U373em6ruEyhi29kSencmJJN5h4DJjpLRMI7bDQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLQ9zIlS8sfNIxxz4HooMegVoKbkMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvdEQzTWlWTHl4ODBqSEhQZ2VpZ3g2QldncHVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAMfhSgD BAAfhSowDQQCAAIwBwMFAyoN34AwDQYJKoZIhvcNAQELBQADggEBABTd8aGpEbLO R4Y+2g4ydpyrn/fmHw5SSbuZpGeAJ9XXF9Os797fuQOj5M/cWuDjKU/RG3wHs350 Mot2++yX5q1vxOp7OOW/wsxtUbjjkDQXdZ4nn4jpm+wsSgKHTdvXQl9BQVwSE1sA P2wna0AuD4dgOo4i/D8oBAcNaXcq3W2/q88H2dljg3RNXgeZ+n/XPlzJ0wXXh/NZ XDMSQ/B+VLCNW1bQWO3fwOHfpT+GDKp9v1EsEugycZGoTI10DMMDDVUIbG+jVOom LQ5HHbfNNF3w2cb+9L4ZzfFasacAfSiBLDoioZyawRmhQrEfc/jfMxJqF570QbjH D6ujJhaI/e4= -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:26 2025 by rpki-client