This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cDSQq20gFl_xw2vaBzzC1ta9JTo.roa File: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (raw, json) Hash identifier: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg= Subject key identifier: 70:34:90:AB:6D:20:16:5F:F1:C3:6B:DA:07:3C:C2:D6:D6:BD:25:3A Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160D92A9C2CE67D41C1971335BF433 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cDSQq20gFl_xw2vaBzzC1ta9JTo.roa Signing time: Fri 02 Jan 2026 14:21:50 +0000 ROA not before: Fri 02 Jan 2026 14:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 92.62.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:0d:92:a9:c2:ce:67:d4:1c:19:71:33:5b:f4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=703490ab6d20165ff1c36bda073cc2d6d6bd253a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:04:06:ae:8b:0b:b5:e2:71:09:89:d9:13: 0d:60:8d:46:36:75:bc:98:90:66:20:ca:44:ce:dc: 3d:8a:51:ff:76:f4:8f:f4:cb:5c:b7:3d:5f:01:99: 2c:e1:14:1f:01:0f:44:04:2c:db:55:09:39:03:d0: ab:c3:86:6e:c8:3f:71:41:2c:a8:18:f2:f9:88:13: c7:50:3a:57:2d:22:59:b3:4a:91:0b:2c:75:4a:ca: 03:54:5b:25:1b:04:44:15:29:88:ea:46:7a:46:f9: 1c:57:91:1a:ae:7d:bb:14:bf:15:19:72:49:5d:1c: 38:cf:50:cd:6c:bc:3a:94:80:50:97:6b:55:15:3b: c2:8e:a9:55:6a:51:db:6e:7a:fa:a4:c3:a4:81:4b: 80:b8:42:95:83:3c:38:74:9b:14:d1:6d:14:4b:26: 81:78:76:4b:af:3b:b3:e7:0f:e7:1c:3e:86:25:8e: b1:08:1e:59:54:53:53:fd:08:b1:cb:7e:ed:89:6b: 96:fd:60:8a:3e:13:2c:81:dd:41:c5:25:56:c5:93: 45:84:ad:e8:f6:b8:4b:20:b8:89:e3:df:35:1c:21: 8b:38:cf:41:d6:d1:8d:a3:fc:d0:8f:65:05:ad:41: 9b:58:0d:2f:c9:9a:3e:ad:de:01:84:00:79:d1:eb: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:34:90:AB:6D:20:16:5F:F1:C3:6B:DA:07:3C:C2:D6:D6:BD:25:3A X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/cDSQq20gFl_xw2vaBzzC1ta9JTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.245.0/24 Signature Algorithm: sha256WithRSAEncryption 06:8b:91:e1:00:0b:2a:aa:75:17:fa:cc:6e:fb:85:6b:93:90: e7:91:0d:79:39:34:33:72:4b:cb:23:df:0d:3f:f1:bd:cc:d5: b5:ce:d8:d2:38:8a:2d:de:f4:16:e9:89:59:30:f8:02:e5:c6: ca:e6:4d:3b:b1:b3:04:58:82:59:da:72:28:da:97:f5:e2:7e: 6c:92:59:59:c1:71:13:68:f7:dc:e3:99:c9:d3:01:40:1d:de: be:c7:1f:0c:c5:70:e4:6c:94:41:c4:c3:15:4e:9d:45:c5:52: 82:22:e2:0f:7d:af:e4:bc:67:36:a2:25:79:45:4f:3e:d3:4b: e9:ab:6e:6f:f2:f9:ba:41:7d:3e:31:2f:07:4d:5a:3c:82:de: 48:b6:56:f3:60:ac:02:3e:75:d3:5c:84:bd:a3:0c:8d:8f:6c: ef:68:f2:f7:66:70:9e:32:c0:f3:5d:d6:63:0f:99:d5:8f:82: cb:a8:51:4c:fa:d9:00:3c:bf:d9:24:c3:0f:7d:0a:ca:a7:77: 60:c1:b4:d0:9e:53:b0:6f:c5:ce:17:35:5b:e6:91:cb:fa:65: 51:85:38:ed:23:ee:27:80:bb:f2:17:8f:5b:ce:2d:1f:88:e3: 42:16:c8:02:b1:3b:d5:7c:df:01:87:99:b8:3e:39:53:c0:03: 1c:83:4b:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fg2SqcLOZ9QcGXEzW/QzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDM0OTBhYjZkMjAxNjVmZjFjMzZiZGEwNzNjYzJkNmQ2YmQyNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5IEBq6LC7XicQmJ2RMNYI1GNnW8 mJBmIMpEztw9ilH/dvSP9Mtctz1fAZks4RQfAQ9EBCzbVQk5A9Crw4ZuyD9xQSyo GPL5iBPHUDpXLSJZs0qRCyx1SsoDVFslGwREFSmI6kZ6RvkcV5Earn27FL8VGXJJ XRw4z1DNbLw6lIBQl2tVFTvCjqlValHbbnr6pMOkgUuAuEKVgzw4dJsU0W0USyaB eHZLrzuz5w/nHD6GJY6xCB5ZVFNT/Qixy37tiWuW/WCKPhMsgd1BxSVWxZNFhK3o 9rhLILiJ4981HCGLOM9B1tGNo/zQj2UFrUGbWA0vyZo+rd4BhAB50evMbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHA0kKttIBZf8cNr2gc8wtbWvSU6MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvY0RTUXEyMGdGbF94dzJ2YUJ6ekMxdGE5SlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD71MA0G CSqGSIb3DQEBCwUAA4IBAQAGi5HhAAsqqnUX+sxu+4Vrk5DnkQ15OTQzckvLI98N P/G9zNW1ztjSOIot3vQW6YlZMPgC5cbK5k07sbMEWIJZ2nIo2pf14n5skllZwXET aPfc45nJ0wFAHd6+xx8MxXDkbJRBxMMVTp1FxVKCIuIPfa/kvGc2oiV5RU8+00vp q25v8vm6QX0+MS8HTVo8gt5ItlbzYKwCPnXTXIS9owyNj2zvaPL3ZnCeMsDzXdZj D5nVj4LLqFFM+tkAPL/ZJMMPfQrKp3dgwbTQnlOwb8XOFzVb5pHL+mVRhTjtI+4n gLvyF49bzi0fiONCFsgCsTvVfN8Bh5m4PjlTwAMcg0sE -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:12 2026 by rpki-client