This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/kT2l4aAekYpUQWufDkupbupuegk.roa File: kT2l4aAekYpUQWufDkupbupuegk.roa (raw, json) Hash identifier: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28= Subject key identifier: 91:3D:A5:E1:A0:1E:91:8A:54:41:6B:9F:0E:4B:A9:6E:EA:6E:7A:09 Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019B7BA415ABA32BCCBD54C96035B772DA98 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/kT2l4aAekYpUQWufDkupbupuegk.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56582 IP address blocks: 31.169.64.0/24 maxlen: 24 31.169.65.0/24 maxlen: 24 31.169.66.0/24 maxlen: 24 31.169.67.0/24 maxlen: 24 31.169.69.0/24 maxlen: 24 31.169.70.0/24 maxlen: 24 31.169.71.0/24 maxlen: 24 31.169.72.0/24 maxlen: 24 31.169.74.0/24 maxlen: 24 31.169.76.0/24 maxlen: 24 31.169.77.0/24 maxlen: 24 31.169.78.0/24 maxlen: 24 31.169.79.0/24 maxlen: 24 31.169.81.0/24 maxlen: 24 31.169.82.0/24 maxlen: 24 31.169.84.0/24 maxlen: 24 31.169.85.0/24 maxlen: 24 31.169.87.0/24 maxlen: 24 31.169.88.0/24 maxlen: 24 31.169.90.0/24 maxlen: 24 31.169.92.0/24 maxlen: 24 31.169.93.0/24 maxlen: 24 31.169.94.0/24 maxlen: 24 31.169.95.0/24 maxlen: 24 185.33.63.0/24 maxlen: 24 2a00:5740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:15:ab:a3:2b:cc:bd:54:c9:60:35:b7:72:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=913da5e1a01e918a54416b9f0e4ba96eea6e7a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2c:7b:cc:06:96:5e:90:cc:c7:88:a2:3c:ef: 02:76:35:b7:c1:62:00:71:8e:7f:7d:9c:34:87:1b: 39:57:72:3a:b7:b6:55:c3:62:42:eb:cd:ea:69:b7: 93:e9:83:4c:bc:97:3a:d4:ad:e8:02:b0:fb:4b:2f: a3:06:20:25:6b:3e:eb:38:9a:c2:ec:10:d9:a1:2f: 0e:41:63:2e:a7:75:ef:e7:59:73:bb:28:a6:88:21: f2:e0:33:7e:11:31:8c:5e:8d:3b:83:5b:3a:66:3f: e6:7d:ed:fe:b6:9e:85:67:44:bb:2a:16:a7:16:0c: d0:2b:62:82:57:a3:d1:60:02:fa:f0:ce:cb:29:68: f9:e0:89:11:d1:65:28:f4:08:1f:d7:03:ea:71:a2: c2:38:cd:31:37:d7:03:d2:fe:c6:ee:e9:54:94:28: 10:19:08:c5:f8:90:d7:77:0f:11:07:f6:59:f0:98: a5:3d:02:73:66:f7:4a:95:69:10:7a:8d:4f:dc:b9: 04:16:62:d4:8b:60:0a:b4:75:b5:79:bb:d0:d6:16: bb:46:5f:c8:e2:32:18:68:50:cd:c5:8b:f8:45:82: b8:6d:50:6b:d3:20:96:c0:54:70:96:76:8e:3e:d0: be:42:e3:2c:0b:5c:20:40:fe:ea:85:9d:99:2a:c5: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3D:A5:E1:A0:1E:91:8A:54:41:6B:9F:0E:4B:A9:6E:EA:6E:7A:09 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/kT2l4aAekYpUQWufDkupbupuegk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.64.0/22 31.169.69.0-31.169.72.255 31.169.74.0/24 31.169.76.0/22 31.169.81.0-31.169.82.255 31.169.84.0/23 31.169.87.0-31.169.88.255 31.169.90.0/24 31.169.92.0/22 185.33.63.0/24 IPv6: 2a00:5740::/29 Signature Algorithm: sha256WithRSAEncryption 05:8a:4d:ab:cf:38:a8:9e:b5:96:2d:1d:57:f2:0d:81:fb:1c: 3b:26:c9:29:35:f0:93:2e:f4:f9:7f:7b:15:b3:83:63:48:41: 42:b9:86:6b:10:0a:5b:f2:24:0a:8a:04:7c:bb:4b:56:6b:bd: c7:72:f2:4d:b7:7c:95:85:34:a3:3a:b7:e4:53:10:8b:2a:5f: 39:db:1e:31:b5:af:f9:6d:f6:24:16:b3:21:b3:b0:43:53:90: 17:da:8b:79:4a:40:88:97:85:0a:d4:78:20:b1:e1:57:c2:e0: af:b7:d7:ad:62:75:3e:2f:d6:e9:99:39:70:4f:e7:2d:ec:d5: 78:f5:49:c7:ba:3b:59:51:66:9a:96:04:44:71:b6:02:e5:f2: 03:c6:b3:1c:cb:2f:13:e1:89:b3:dd:07:a8:4b:df:1a:2f:55: 5b:8e:b0:1c:70:68:be:6f:f0:c1:fd:b1:d7:ae:74:9a:79:4c: c3:d2:4c:b8:f5:d2:ee:31:a3:be:26:a5:5b:4b:08:3b:78:81: 26:6b:01:e4:89:b1:e4:2a:4b:b8:25:d9:d7:57:da:e2:77:bc: 39:04:29:10:43:46:d6:30:d9:3f:17:12:c3:a1:24:0a:39:eb: 77:df:cd:49:f9:f3:b6:50:ca:04:a7:63:84:b5:e0:3b:6b:f9: 78:8d:8d:c9 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt7pBWroyvMvVTJYDW3ctqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTNkYTVlMWEwMWU5MThhNTQ0MTZiOWYwZTRiYTk2ZWVhNmU3YTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cx7zAaWXpDMx4iiPO8CdjW3wWIA cY5/fZw0hxs5V3I6t7ZVw2JC683qabeT6YNMvJc61K3oArD7Sy+jBiAlaz7rOJrC 7BDZoS8OQWMup3Xv51lzuyimiCHy4DN+ETGMXo07g1s6Zj/mfe3+tp6FZ0S7Khan FgzQK2KCV6PRYAL68M7LKWj54IkR0WUo9Agf1wPqcaLCOM0xN9cD0v7G7ulUlCgQ GQjF+JDXdw8RB/ZZ8JilPQJzZvdKlWkQeo1P3LkEFmLUi2AKtHW1ebvQ1ha7Rl/I 4jIYaFDNxYv4RYK4bVBr0yCWwFRwlnaOPtC+QuMsC1wgQP7qhZ2ZKsUWnwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFJE9peGgHpGKVEFrnw5LqW7qbnoJMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEva1QybDRhQWVrWXBVUVd1ZkRrdXBidXB1ZWdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCH6lAMAwD BAAfqUUDBAAfqUgDBAAfqUoDBAIfqUwwDAMEAB+pUQMEAB+pUgMEAR+pVDAMAwQA H6lXAwQAH6lYAwQAH6laAwQCH6lcAwQAuSE/MA0EAgACMAcDBQMqAFdAMA0GCSqG SIb3DQEBCwUAA4IBAQAFik2rzzionrWWLR1X8g2B+xw7JskpNfCTLvT5f3sVs4Nj SEFCuYZrEApb8iQKigR8u0tWa73HcvJNt3yVhTSjOrfkUxCLKl852x4xta/5bfYk FrMhs7BDU5AX2ot5SkCIl4UK1HggseFXwuCvt9etYnU+L9bpmTlwT+ct7NV49UnH ujtZUWaalgREcbYC5fIDxrMcyy8T4Ymz3QeoS98aL1VbjrAccGi+b/DB/bHXrnSa eUzD0ky49dLuMaO+JqVbSwg7eIEmawHkibHkKku4JdnXV9rid7w5BCkQQ0bWMNk/ FxLDoSQKOet3381J+fO2UMoEp2OEteA7a/l4jY3J -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:43 2026 by rpki-client