This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/sLC5YO5xONWk4v-wyFAtQfaIubc.roa File: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (raw, json) Hash identifier: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k= Subject key identifier: B0:B0:B9:60:EE:71:38:D5:A4:E2:FF:B0:C8:50:2D:41:F6:88:B9:B7 Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273 Certificate serial: 019B7A5AF9DFCD68F50F4DC054F55B5463DB Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/sLC5YO5xONWk4v-wyFAtQfaIubc.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 62.108.88.0/22 maxlen: 24 62.108.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f9:df:cd:68:f5:0f:4d:c0:54:f5:5b:54:63:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0b0b960ee7138d5a4e2ffb0c8502d41f688b9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:4f:dc:7f:a6:a5:f6:db:5c:c6:ca:e3:c6: 71:24:c3:31:44:4a:03:5b:8a:a3:0e:2a:47:1d:42: 31:0f:b1:27:89:d0:39:d9:1f:6f:68:c9:4d:48:91: d5:9b:50:e4:a6:9d:f2:46:f5:3b:c8:f7:ab:b0:c6: 9f:b0:40:72:31:ec:70:14:0b:10:32:bf:23:a5:16: 25:ea:f2:19:64:62:1d:2f:61:99:fc:9c:6d:76:d7: d0:ef:06:d2:f8:08:70:1e:a5:a0:61:5a:ba:0e:b1: 2c:68:4e:03:4b:d6:7f:3a:4f:48:92:5d:61:59:6d: 1e:ec:15:6f:fd:0f:4e:f8:5c:53:29:ad:9e:73:10: 3e:47:d9:cb:8a:8e:35:4a:52:e9:11:2c:ea:6c:29: 95:32:57:1d:30:df:17:65:a7:df:b5:36:b3:a4:54: 60:19:ec:62:64:4f:89:b6:21:00:80:48:ce:43:43: 32:0c:4a:1b:37:59:59:56:25:3a:6a:1b:3f:73:81: 7d:8b:48:3e:b9:1e:da:04:d3:6e:a1:79:ef:d6:d6: 64:ec:b0:50:9b:1d:87:d7:10:c9:23:51:45:a2:cd: ee:de:f2:7a:f8:b9:ad:a7:43:50:4b:95:68:8e:19: 15:26:03:8f:cb:74:89:04:cf:28:b4:49:67:28:ba: fb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B0:B9:60:EE:71:38:D5:A4:E2:FF:B0:C8:50:2D:41:F6:88:B9:B7 X509v3 Authority Key Identifier: keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/sLC5YO5xONWk4v-wyFAtQfaIubc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.88.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:e5:be:fb:87:6e:e3:8f:58:88:dc:de:b7:a0:6d:38:b3:b7: c7:02:97:4f:c9:b3:30:6b:5d:54:d0:85:cc:16:74:86:a2:db: d1:83:2e:de:98:1e:64:d7:ee:c9:b9:a8:ab:55:51:d3:5d:09: 28:d2:59:77:15:08:df:85:a9:57:10:7b:45:46:7a:fe:dd:00: f0:99:35:a1:18:8e:a9:d8:a0:07:03:96:16:94:67:e1:66:bd: 8f:a9:32:18:8a:f1:99:06:a5:7e:d6:16:96:c8:6b:c5:62:e2: f7:e7:47:57:48:25:51:5f:10:51:31:af:ec:a3:08:7a:c2:d0: f8:86:cb:c1:4b:ea:72:2c:82:42:ae:23:52:59:1e:a0:eb:5d: 6d:25:df:e7:ce:cc:62:3b:b1:e3:6b:55:4e:8c:dc:30:e7:ed: cb:db:18:79:b4:02:a4:fa:72:6c:55:ec:94:20:3a:bd:ff:8e: 1b:59:b6:04:07:2a:bf:df:87:a2:4f:ea:14:e7:73:96:2c:ab: 60:6c:e7:74:ad:f7:7c:a7:1d:71:62:ab:ea:2d:b1:f9:73:13: 9e:7a:63:e6:6a:05:6c:05:e0:3e:71:fd:ef:98:c0:cb:21:38: dc:dd:8b:b4:30:41:88:e3:5a:4f:bd:f7:1a:41:31:e8:f2:92: 54:d4:65:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvnfzWj1D03AVPVbVGPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0 NWQyNzMwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGIwYjk2MGVlNzEzOGQ1YTRlMmZmYjBjODUwMmQ0MWY2ODhiOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32hP3H+mpfbbXMbK48ZxJMMxREoD W4qjDipHHUIxD7EnidA52R9vaMlNSJHVm1Dkpp3yRvU7yPersMafsEByMexwFAsQ Mr8jpRYl6vIZZGIdL2GZ/JxtdtfQ7wbS+AhwHqWgYVq6DrEsaE4DS9Z/Ok9Ikl1h WW0e7BVv/Q9O+FxTKa2ecxA+R9nLio41SlLpESzqbCmVMlcdMN8XZafftTazpFRg GexiZE+JtiEAgEjOQ0MyDEobN1lZViU6ahs/c4F9i0g+uR7aBNNuoXnv1tZk7LBQ mx2H1xDJI1FFos3u3vJ6+Lmtp0NQS5VojhkVJgOPy3SJBM8otElnKLr7KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLCwuWDucTjVpOL/sMhQLUH2iLm3MB8GA1UdIwQY MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt MTM0ZDk1M2NhMDkzLzEvc0xDNVlPNXhPTldrNHYtd3lGQXRRZmFJdWJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPmxYMA0G CSqGSIb3DQEBCwUAA4IBAQAK5b77h27jj1iI3N63oG04s7fHApdPybMwa11U0IXM FnSGotvRgy7emB5k1+7JuairVVHTXQko0ll3FQjfhalXEHtFRnr+3QDwmTWhGI6p 2KAHA5YWlGfhZr2PqTIYivGZBqV+1haWyGvFYuL350dXSCVRXxBRMa/sowh6wtD4 hsvBS+pyLIJCriNSWR6g611tJd/nzsxiO7Hja1VOjNww5+3L2xh5tAKk+nJsVeyU IDq9/44bWbYEByq/34eiT+oU53OWLKtgbOd0rfd8px1xYqvqLbH5cxOeemPmagVs BeA+cf3vmMDLITjc3Yu0MEGI41pPvfcaQTHo8pJU1GU+ -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:52 2026 by rpki-client