This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/6ckN970H7cpuN5SlW3wkVE1-uM4.roa File: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (raw, json) Hash identifier: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI= Subject key identifier: E9:C9:0D:F7:BD:07:ED:CA:6E:37:94:A5:5B:7C:24:54:4D:7E:B8:CE Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e Certificate serial: 019B7F155625BAD099DEFF0CEB92930EAE12 Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/6ckN970H7cpuN5SlW3wkVE1-uM4.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51048 IP address blocks: 31.25.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:56:25:ba:d0:99:de:ff:0c:eb:92:93:0e:ae:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9c90df7bd07edca6e3794a55b7c24544d7eb8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:a3:d0:80:9d:a5:f5:4b:c4:a4:40:05:cc: 83:bf:7e:9c:d5:ef:32:dc:f5:ba:d5:fb:6c:e0:57: 24:d7:8c:f1:78:39:de:b6:d2:2e:56:c7:7d:e2:e1: db:69:98:dd:3e:bc:de:d9:51:46:03:5e:b5:0f:16: dd:90:23:2c:26:e8:d5:28:35:ff:12:46:d4:03:51: 10:db:a3:ab:68:a7:91:cc:f1:28:d2:b7:42:76:80: 95:fc:74:e1:e8:11:5d:7a:09:5e:d5:2a:65:1c:69: 47:bc:73:21:60:3e:4f:f1:50:1e:d2:7b:0b:68:01: 9f:49:a5:5f:84:84:1d:c1:92:0d:f5:4d:eb:c3:6f: ff:da:aa:fb:2f:8f:9d:a8:11:03:1f:ef:24:65:a8: d2:e2:6f:9d:93:f8:ee:9e:9f:3a:2f:7c:02:0c:11: 79:25:14:a8:78:a7:e0:83:56:0f:9e:3e:b4:61:12: 2f:db:1f:03:5d:8c:c8:f9:62:e9:ec:0f:68:03:bd: a6:ed:82:f6:eb:20:43:de:92:7b:31:af:83:b8:49: e0:85:ae:36:88:23:86:68:1a:0a:ef:72:21:7b:ce: 02:ed:22:77:b5:b5:a6:c5:83:4f:c8:09:b9:3f:5d: cb:78:f8:a4:8d:08:c6:af:c7:4b:4c:d5:52:33:e0: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C9:0D:F7:BD:07:ED:CA:6E:37:94:A5:5B:7C:24:54:4D:7E:B8:CE X509v3 Authority Key Identifier: keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/6ckN970H7cpuN5SlW3wkVE1-uM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.58.0/24 Signature Algorithm: sha256WithRSAEncryption 65:38:e8:0a:96:a1:f9:50:ae:f0:0c:7e:51:83:35:80:bc:45: 97:95:30:ca:95:ed:97:58:9b:94:2d:ca:84:c9:0f:a0:1d:2c: 0d:8e:c4:ac:05:58:e3:47:eb:cc:e6:bc:59:88:25:e8:44:aa: 7f:f7:ba:e5:7e:df:98:3e:b5:bb:f9:60:48:fd:b9:97:92:02: 30:8c:22:f0:6c:6b:55:d7:85:5a:3d:d8:56:a8:7b:ad:99:23: c5:ab:22:81:c1:0b:e0:72:1b:99:f7:6b:25:65:52:c5:3d:0c: c3:07:19:75:6e:5c:4a:67:59:bc:58:86:e4:8a:c4:7d:2c:8e: 1d:54:58:42:ad:15:69:34:9c:8b:63:ae:b7:c8:83:5d:0f:72: 2d:9d:84:4a:6d:13:47:72:58:41:e8:1d:00:15:68:0e:2d:08: 7a:7c:40:29:58:7d:6c:38:4d:fa:4b:4e:4e:8a:5f:07:10:8e: 58:eb:15:2d:99:bf:87:b3:64:a4:b5:8f:df:8a:44:c3:3d:b8: db:5f:82:64:4a:cc:4f:ee:0c:8b:87:d9:cd:47:a5:0f:4a:96: a0:c7:b1:ca:13:df:0f:82:5e:51:27:80:98:59:67:e4:eb:ac: c4:c5:32:bb:9f:8d:7f:e8:58:89:5a:60:2f:eb:a2:08:8c:ba: a7:ef:c0:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVYlutCZ3v8M65KTDq4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi Y2VkNWUwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWM5MGRmN2JkMDdlZGNhNmUzNzk0YTU1YjdjMjQ1NDRkN2ViOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy46j0ICdpfVLxKRABcyDv36c1e8y 3PW61fts4Fck14zxeDnettIuVsd94uHbaZjdPrze2VFGA161DxbdkCMsJujVKDX/ EkbUA1EQ26OraKeRzPEo0rdCdoCV/HTh6BFdegle1SplHGlHvHMhYD5P8VAe0nsL aAGfSaVfhIQdwZIN9U3rw2//2qr7L4+dqBEDH+8kZajS4m+dk/junp86L3wCDBF5 JRSoeKfgg1YPnj60YRIv2x8DXYzI+WLp7A9oA72m7YL26yBD3pJ7Ma+DuEngha42 iCOGaBoK73Ihe84C7SJ3tbWmxYNPyAm5P13LePikjQjGr8dLTNVSM+CyHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOnJDfe9B+3KbjeUpVt8JFRNfrjOMB8GA1UdIwQY MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt ZDYwNmQ5OTI1YWI3LzEvNmNrTjk3MEg3Y3B1TjVTbFczd2tWRTEtdU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3 LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxk6MA0G CSqGSIb3DQEBCwUAA4IBAQBlOOgKlqH5UK7wDH5RgzWAvEWXlTDKle2XWJuULcqE yQ+gHSwNjsSsBVjjR+vM5rxZiCXoRKp/97rlft+YPrW7+WBI/bmXkgIwjCLwbGtV 14VaPdhWqHutmSPFqyKBwQvgchuZ92slZVLFPQzDBxl1blxKZ1m8WIbkisR9LI4d VFhCrRVpNJyLY663yINdD3ItnYRKbRNHclhB6B0AFWgOLQh6fEApWH1sOE36S05O il8HEI5Y6xUtmb+Hs2SktY/fikTDPbjbX4JkSsxP7gyLh9nNR6UPSpagx7HKE98P gl5RJ4CYWWfk66zExTK7n41/6FiJWmAv66IIjLqn78CG -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:24 2026 by rpki-client