This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/0EaLu_k89DNGfsZcg8vYEQaMEMU.roa File: 0EaLu_k89DNGfsZcg8vYEQaMEMU.roa (raw, json) Hash identifier: s+EVq62YWza3oLT0UyPheUnG+mA6bTN6S6sxdqwK5rg= Subject key identifier: D0:46:8B:BB:F9:3C:F4:33:46:7E:C6:5C:83:CB:D8:11:06:8C:10:C5 Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019B22E8F0E55EA424AD9DE3380045EEB995 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/0EaLu_k89DNGfsZcg8vYEQaMEMU.roa Signing time: Mon 15 Dec 2025 16:47:29 +0000 ROA not before: Mon 15 Dec 2025 16:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34984 IP address blocks: 31.169.80.0/24 maxlen: 24 31.169.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:e8:f0:e5:5e:a4:24:ad:9d:e3:38:00:45:ee:b9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Dec 15 16:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0468bbbf93cf433467ec65c83cbd811068c10c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:ff:16:c3:34:54:c2:ed:e2:7a:19:d9:cb: a4:bb:89:6c:aa:d1:03:9d:b0:bb:b7:73:79:0f:85: 94:3c:2f:b3:57:b8:ba:b2:6d:8b:66:00:0d:98:37: aa:89:38:e0:f7:62:9d:3b:ba:5b:c0:b1:8a:8f:82: f6:82:b1:53:8d:81:6c:b1:ca:2f:ae:77:ec:93:e2: 4b:d8:19:b2:02:23:7d:5f:98:e1:1d:8c:5c:b5:a0: 6f:db:df:b4:63:84:03:7a:ea:d8:4b:ed:32:45:8f: cd:a9:3d:8e:2c:34:24:6f:76:bf:65:59:06:81:77: 25:d2:5b:e4:fd:34:19:40:4d:41:21:f3:c5:c9:86: 44:83:da:35:da:cb:7f:67:13:2f:bb:3d:fe:49:84: 11:28:65:b2:a7:8c:12:91:4b:08:93:f6:76:01:b0: c8:e5:45:77:df:f1:0b:9e:59:04:0f:80:3c:ca:42: af:09:08:6c:a3:cb:a0:97:79:ac:34:98:db:c0:6c: 7f:6a:9c:d1:51:56:ff:e6:47:96:47:21:14:2f:ff: a5:95:a5:11:7e:a8:71:e5:f9:21:13:f1:98:e3:14: 2d:1a:24:5d:0a:46:6f:a9:28:ed:86:51:bd:98:27: 5a:83:15:ff:ed:42:39:02:cc:ff:15:95:8b:a3:58: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:46:8B:BB:F9:3C:F4:33:46:7E:C6:5C:83:CB:D8:11:06:8C:10:C5 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/0EaLu_k89DNGfsZcg8vYEQaMEMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.80.0/24 31.169.83.0/24 Signature Algorithm: sha256WithRSAEncryption 38:c4:09:e2:c7:bc:51:0a:92:e4:36:46:7c:12:4d:10:df:d9: 2e:cc:dd:f3:24:69:6b:e6:e5:fe:a3:60:13:be:cb:df:29:80: 6b:db:04:99:ae:4b:e7:4c:86:b1:f6:cb:22:ef:58:3d:27:dd: 1b:e4:33:e4:95:31:c4:e8:58:68:3f:5a:ac:16:10:85:ec:15: d6:b3:ae:2e:1c:9d:ac:ca:7d:b2:da:cf:86:c0:5b:4e:2b:76: 85:65:a3:b8:08:af:f1:21:d9:02:4c:06:30:16:d7:15:63:40: 5c:30:ca:4d:23:5c:08:f3:d5:65:7e:c5:13:99:15:d4:f3:2e: f8:11:4d:3b:a7:f3:ed:f2:bb:13:8b:81:bf:96:9a:b4:23:40: 74:c7:ad:3f:30:52:cf:3a:53:1d:9d:0a:6c:2c:85:70:bc:46: f7:f6:93:06:44:54:b0:ef:e6:f2:af:2c:36:0f:6c:ad:07:e3: b5:f5:fe:5f:ef:15:a9:40:72:f5:20:6d:45:9d:f9:b4:62:0e: 43:fd:ae:68:d3:2d:85:d3:cd:df:8c:99:a1:9b:9d:3b:0c:91: d6:2b:c0:2c:5f:56:66:04:10:e5:7a:dd:e0:c4:fd:0c:8d:c8: 18:06:3f:64:21:55:9d:42:36:cc:cb:d5:ef:0d:4d:8b:18:02: 82:e2:dc:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsi6PDlXqQkrZ3jOABF7rmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUxMjE1MTY0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDQ2OGJiYmY5M2NmNDMzNDY3ZWM2NWM4M2NiZDgxMTA2OGMxMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEb/FsM0VMLt4noZ2cuku4lsqtED nbC7t3N5D4WUPC+zV7i6sm2LZgANmDeqiTjg92KdO7pbwLGKj4L2grFTjYFsscov rnfsk+JL2BmyAiN9X5jhHYxctaBv29+0Y4QDeurYS+0yRY/NqT2OLDQkb3a/ZVkG gXcl0lvk/TQZQE1BIfPFyYZEg9o12st/ZxMvuz3+SYQRKGWyp4wSkUsIk/Z2AbDI 5UV33/ELnlkED4A8ykKvCQhso8ugl3msNJjbwGx/apzRUVb/5keWRyEUL/+llaUR fqhx5fkhE/GY4xQtGiRdCkZvqSjthlG9mCdagxX/7UI5Asz/FZWLo1jyOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNBGi7v5PPQzRn7GXIPL2BEGjBDFMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvMEVhTHVfazg5RE5HZnNaY2c4dllFUWFNRU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH6lQAwQA H6lTMA0GCSqGSIb3DQEBCwUAA4IBAQA4xAnix7xRCpLkNkZ8Ek0Q39kuzN3zJGlr 5uX+o2ATvsvfKYBr2wSZrkvnTIax9ssi71g9J90b5DPklTHE6FhoP1qsFhCF7BXW s64uHJ2syn2y2s+GwFtOK3aFZaO4CK/xIdkCTAYwFtcVY0BcMMpNI1wI89VlfsUT mRXU8y74EU07p/Pt8rsTi4G/lpq0I0B0x60/MFLPOlMdnQpsLIVwvEb39pMGRFSw 7+byryw2D2ytB+O19f5f7xWpQHL1IG1Fnfm0Yg5D/a5o0y2F083fjJmhm507DJHW K8AsX1ZmBBDlet3gxP0MjcgYBj9kIVWdQjbMy9XvDU2LGAKC4tzZ -----END CERTIFICATE-----Generated at Thu Dec 18 00:20:24 2025 by rpki-client