This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/1-cSechBeG_43VlV3W2mEZPKzYGE.roa File: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (raw, json) Hash identifier: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20= Subject key identifier: F9:C4:9E:72:10:5E:1B:FE:37:56:55:77:5B:69:84:64:F2:B3:60:61 Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca Certificate serial: 019B7BA4054B87D220D4FF3E9C14A2D675DF Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/1-cSechBeG_43VlV3W2mEZPKzYGE.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25466 IP address blocks: 62.101.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:05:4b:87:d2:20:d4:ff:3e:9c:14:a2:d6:75:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c49e72105e1bfe375655775b698464f2b36061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:b6:a3:92:e7:7f:2c:7e:25:9d:81:d7:7b: 0c:8b:59:4c:87:6e:29:12:f1:62:1b:8f:37:34:a3: 64:40:4a:a3:c3:aa:d2:fd:fa:bd:cb:d9:87:a7:28: 73:3e:34:bd:b2:94:b1:0e:a4:c4:d8:45:97:d2:c5: b3:4d:74:7c:07:d4:66:6f:0e:ff:0d:c3:77:1d:fa: 02:4d:27:e1:85:91:5a:3c:1a:77:f0:02:f7:ef:1f: ba:d6:27:82:e2:b1:db:d8:fb:bf:d4:8b:82:d7:d5: 74:40:36:b8:40:8d:7a:69:0e:69:11:d6:aa:5b:47: e4:b1:ba:1b:a0:8f:2d:82:0f:ab:d8:5a:17:41:bc: 43:2a:4e:a1:8d:c7:b7:db:33:95:9c:75:c5:62:13: a4:49:1d:60:df:29:7d:29:c2:c4:fd:51:92:f7:b4: c1:97:99:d7:e8:f0:cd:a9:8a:c6:72:92:87:da:d6: ff:e1:ac:a6:e0:59:ac:10:d2:1c:50:79:49:db:62: 76:87:c8:06:f9:5f:c9:bd:e1:50:4e:d2:4d:a1:7d: dc:21:38:2c:6b:b4:ed:6b:91:97:2f:e3:6f:ad:b2: 47:6e:94:ea:30:70:90:0b:b1:73:fa:9d:5a:30:63: 6f:10:8b:75:f5:a5:ab:a3:e5:fe:94:ad:57:ee:bd: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C4:9E:72:10:5E:1B:FE:37:56:55:77:5B:69:84:64:F2:B3:60:61 X509v3 Authority Key Identifier: keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/1-cSechBeG_43VlV3W2mEZPKzYGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.101.52.0/22 Signature Algorithm: sha256WithRSAEncryption 01:74:74:fe:18:32:dd:81:a6:82:22:fb:da:b4:98:36:a6:d6: ae:be:de:b4:2a:00:8d:8a:f7:b7:77:54:16:46:07:45:54:9a: a0:8c:a2:3b:6f:ea:8a:2b:a1:b6:8b:4a:e3:a3:90:e1:cc:ec: 53:2f:2c:e5:a4:b4:e9:1f:10:81:4b:9e:69:e2:87:0a:bc:c3: 44:b7:58:22:e4:2b:1d:39:40:bc:6f:9f:df:f0:a3:da:e3:43: cd:b7:c4:f3:39:71:49:c2:18:0a:cd:2f:f5:1b:9c:a7:bf:65: 73:e9:57:58:cb:32:1e:da:ef:ba:26:e0:62:82:28:7c:92:bc: 46:4f:51:c7:fb:09:44:d5:83:f9:98:82:1c:ab:08:f7:b4:56: 21:7d:40:fd:14:60:56:b0:ac:a0:90:f2:0d:df:5b:a0:6d:4a: 98:70:fb:97:df:c5:39:cf:3d:be:7a:f4:a0:74:cb:de:4a:41: b8:22:40:8a:d0:b8:7b:bd:fc:77:2f:56:f7:16:40:af:b9:4d: b0:5d:da:22:41:1b:d9:c7:c5:71:be:76:c2:94:21:ea:5f:0c: bc:f2:f1:bd:26:95:30:0f:0b:23:13:24:7e:2a:dc:17:9d:87: 39:0d:45:d1:72:54:0a:84:5b:50:f0:59:a3:43:4e:85:f9:e0: 87:8d:1e:c3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pAVLh9Ig1P8+nBSi1nXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw MmI2Y2EwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWM0OWU3MjEwNWUxYmZlMzc1NjU1Nzc1YjY5ODQ2NGYyYjM2MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr262o5Lnfyx+JZ2B13sMi1lMh24p EvFiG483NKNkQEqjw6rS/fq9y9mHpyhzPjS9spSxDqTE2EWX0sWzTXR8B9Rmbw7/ DcN3HfoCTSfhhZFaPBp38AL37x+61ieC4rHb2Pu/1IuC19V0QDa4QI16aQ5pEdaq W0fksboboI8tgg+r2FoXQbxDKk6hjce32zOVnHXFYhOkSR1g3yl9KcLE/VGS97TB l5nX6PDNqYrGcpKH2tb/4aym4FmsENIcUHlJ22J2h8gG+V/JveFQTtJNoX3cITgs a7Tta5GXL+NvrbJHbpTqMHCQC7Fz+p1aMGNvEIt19aWro+X+lK1X7r3h2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnEnnIQXhv+N1ZVd1tphGTys2BhMB8GA1UdIwQY MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt NWQ4Mzg2NjhiZWJlLzEvMS1jU2VjaEJlR180M1ZsVjNXMm1FWlBLellHRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGIvNzU4NDY3LTY4MTgtNGU4NC04N2JhLTVkODM4NjY4YmVi ZS8xL3Z5Z0ZtUzVsTWRQYU1lNGE5cnpWd0cwQ3Rzby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAj5lNDAN BgkqhkiG9w0BAQsFAAOCAQEAAXR0/hgy3YGmgiL72rSYNqbWrr7etCoAjYr3t3dU FkYHRVSaoIyiO2/qiiuhtotK46OQ4czsUy8s5aS06R8QgUueaeKHCrzDRLdYIuQr HTlAvG+f3/Cj2uNDzbfE8zlxScIYCs0v9Rucp79lc+lXWMsyHtrvuibgYoIofJK8 Rk9Rx/sJRNWD+ZiCHKsI97RWIX1A/RRgVrCsoJDyDd9boG1KmHD7l9/FOc89vnr0 oHTL3kpBuCJAitC4e738dy9W9xZAr7lNsF3aIkEb2cfFcb52wpQh6l8MvPLxvSaV MA8LIxMkfircF52HOQ1F0XJUCoRbUPBZo0NOhfngh40eww== -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:24 2026 by rpki-client