This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/kNgf3cgYhHD6RKubUEMvHEUFCrE.roa File: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (raw, json) Hash identifier: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto= Subject key identifier: 90:D8:1F:DD:C8:18:84:70:FA:44:AB:9B:50:43:2F:1C:45:05:0A:B1 Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Certificate serial: 019B7DCB1081324E669E3331C38E240D7A86 Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/kNgf3cgYhHD6RKubUEMvHEUFCrE.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211856 IP address blocks: 62.192.164.0/22 maxlen: 24 2a09:18c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:10:81:32:4e:66:9e:33:31:c3:8e:24:0d:7a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90d81fddc8188470fa44ab9b50432f1c45050ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d3:4c:69:23:b6:70:a4:6a:38:69:c3:f1:ac: d2:0b:4b:ed:46:23:53:f4:3d:54:bb:c0:9d:56:e8: 82:92:1d:ce:90:b3:90:34:db:87:d2:f6:d3:72:8f: b1:c5:bd:ca:46:59:ee:13:56:f7:1c:9a:01:cc:f4: e2:4b:eb:fc:44:ef:16:05:28:ad:0c:70:b2:50:6a: 9d:ed:d9:df:76:a1:c3:54:f5:ab:53:eb:da:80:68: 42:0e:bf:6d:ec:66:f6:00:1f:76:d1:db:5a:6b:64: 78:7f:22:a7:9f:3b:fb:9f:4a:88:89:a0:7d:32:4e: 49:62:46:f4:51:f9:a2:ca:eb:7f:ad:b0:bd:46:79: c7:91:5a:da:c7:4c:04:ba:88:87:ea:fc:b2:ba:a2: 51:0c:67:6a:52:3c:74:37:70:d7:fe:f3:e0:72:29: 36:49:2e:01:7b:32:42:fe:1a:c5:16:35:1e:51:4c: 8e:f5:e8:6b:93:fe:82:19:bc:62:41:75:50:1d:47: bb:86:53:b8:5f:7d:b9:36:05:58:2d:7b:f0:48:31: c7:44:04:19:94:72:66:14:df:54:48:83:e9:8f:f5: 66:4a:ba:63:cc:9f:6e:dc:d6:ed:46:40:5a:6a:8a: f1:48:0e:01:4d:6d:5c:2c:28:e4:6c:01:01:b5:42: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:1F:DD:C8:18:84:70:FA:44:AB:9B:50:43:2F:1C:45:05:0A:B1 X509v3 Authority Key Identifier: keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/kNgf3cgYhHD6RKubUEMvHEUFCrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.164.0/22 IPv6: 2a09:18c0::/29 Signature Algorithm: sha256WithRSAEncryption 93:fb:9b:af:ac:d3:b6:44:49:8d:a5:88:ab:d5:60:88:6e:f7: 9c:16:75:70:fd:a3:62:67:47:47:c9:d2:70:a9:b7:de:5f:a4: c8:2b:18:ab:cb:8b:39:13:27:95:08:f7:80:3c:fa:1d:35:83: 35:22:59:8e:ef:b3:62:e2:bd:06:f7:50:cc:2d:6a:64:3c:f9: e4:4b:88:c5:2b:2f:9a:7e:23:7b:b7:83:3f:13:ea:2f:98:87: 45:45:d0:44:46:3a:f7:43:28:f4:9a:ec:05:59:c3:38:db:1b: 7e:28:20:d3:a5:ab:53:a6:ec:2a:8b:fc:de:32:05:de:2f:5d: bb:36:ad:d3:72:3f:58:80:93:3d:92:80:cf:c5:98:4d:0d:40: 6c:b0:bb:e7:17:99:4c:10:84:e7:ea:52:c6:4e:d5:8f:1f:04: 06:71:2b:c2:ac:ea:90:83:bb:f3:9d:1f:cb:d5:a6:8d:6c:f3: 4b:6b:80:03:e1:a8:2d:f5:bd:e0:10:a9:ca:34:fc:b8:7f:aa: 8c:54:a0:4f:1a:71:6c:92:c5:0c:1c:b3:1d:c2:46:d0:e4:27: 7f:0f:38:46:4b:5c:bb:cf:fd:1d:f1:56:e0:d4:bf:d8:1e:2f: 79:f5:3b:14:ae:8d:5e:d3:02:92:a2:4e:1a:c3:aa:e8:8a:af: 40:fb:cb:1f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yxCBMk5mnjMxw44kDXqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTZkZGRhNDBkNzgyNTU5ZWU2NWU1MGY5MDhlMTY4OWE2 NWE4MDAwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGQ4MWZkZGM4MTg4NDcwZmE0NGFiOWI1MDQzMmYxYzQ1MDUwYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89NMaSO2cKRqOGnD8azSC0vtRiNT 9D1Uu8CdVuiCkh3OkLOQNNuH0vbTco+xxb3KRlnuE1b3HJoBzPTiS+v8RO8WBSit DHCyUGqd7dnfdqHDVPWrU+vagGhCDr9t7Gb2AB920dtaa2R4fyKnnzv7n0qIiaB9 Mk5JYkb0Ufmiyut/rbC9RnnHkVrax0wEuoiH6vyyuqJRDGdqUjx0N3DX/vPgcik2 SS4BezJC/hrFFjUeUUyO9ehrk/6CGbxiQXVQHUe7hlO4X325NgVYLXvwSDHHRAQZ lHJmFN9USIPpj/VmSrpjzJ9u3NbtRkBaaorxSA4BTW1cLCjkbAEBtULJ5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJDYH93IGIRw+kSrm1BDLxxFBQqxMB8GA1UdIwQY MBaAFNLm3dpA14JVnuZeUPkI4WiaZagAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAt Y2NmOWI4OWUyMmUyLzEva05nZjNjZ1loSEQ2Ukt1YlVFTXZIRVVGQ3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAtY2NmOWI4OWUyMmUy LzEvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCPsCkMA0E AgACMAcDBQMqCRjAMA0GCSqGSIb3DQEBCwUAA4IBAQCT+5uvrNO2REmNpYir1WCI bvecFnVw/aNiZ0dHydJwqbfeX6TIKxiry4s5EyeVCPeAPPodNYM1IlmO77Ni4r0G 91DMLWpkPPnkS4jFKy+afiN7t4M/E+ovmIdFRdBERjr3Qyj0muwFWcM42xt+KCDT patTpuwqi/zeMgXeL127Nq3Tcj9YgJM9koDPxZhNDUBssLvnF5lMEITn6lLGTtWP HwQGcSvCrOqQg7vznR/L1aaNbPNLa4AD4agt9b3gEKnKNPy4f6qMVKBPGnFsksUM HLMdwkbQ5Cd/DzhGS1y7z/0d8Vbg1L/YHi959TsUro1e0wKSok4aw6roiq9A+8sf -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:50 2026 by rpki-client