This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1k2pWaK9E_69xyOWaW3gpXBt6Ds.roa File: 1k2pWaK9E_69xyOWaW3gpXBt6Ds.roa (raw, json) Hash identifier: OE+bMzCFB/VXUyEne+OpHi3DGLBXpsaO0FFByd47JGs= Subject key identifier: D6:4D:A9:59:A2:BD:13:FE:BD:C7:23:96:69:6D:E0:A5:70:6D:E8:3B Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6C7AC4A932D08A4638ED89B0A6F60 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1k2pWaK9E_69xyOWaW3gpXBt6Ds.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 62.100.192.0/22 maxlen: 22 62.100.200.0/22 maxlen: 24 62.100.212.0/22 maxlen: 22 62.100.220.0/22 maxlen: 22 93.188.68.0/22 maxlen: 22 157.97.145.0/24 maxlen: 24 185.92.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c7:ac:4a:93:2d:08:a4:63:8e:d8:9b:0a:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d64da959a2bd13febdc72396696de0a5706de83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:e6:ea:3d:03:d6:5e:71:1b:af:bc:bb:ad: 8f:c1:44:1b:7f:30:9c:47:6c:9c:f4:dd:23:de:cc: b4:1e:eb:30:7b:93:5d:4a:4c:42:6c:a3:2c:a8:c8: 28:50:d5:08:a2:f7:0a:97:ef:26:61:74:ce:61:90: 8d:d4:2f:c6:31:71:25:61:72:4c:3f:61:ec:c2:55: df:79:d6:e8:53:a1:21:d4:be:33:2e:71:8f:a2:a4: e8:66:1c:ec:87:72:e4:37:19:98:37:35:9b:ea:57: db:bd:90:e4:f6:52:6d:3f:64:3c:8f:bd:e1:e4:4a: d9:2b:aa:2d:7f:a0:a9:76:9b:05:10:da:28:67:4e: 72:b2:4d:ca:bd:3b:4b:32:29:0b:cd:e5:6b:a2:3f: 82:06:27:6c:fc:13:cf:87:53:b5:f2:dc:63:af:0f: 4c:df:d7:ed:48:f9:25:01:3b:ae:64:4c:dc:5b:29: b0:b1:b5:40:31:55:9f:85:a3:d3:40:27:ce:9d:71: f3:fb:87:5a:8a:97:43:e9:c5:bb:3d:fa:7b:f7:9d: de:7b:35:61:e7:23:a7:35:1f:b1:74:cd:8a:af:b5: 03:7f:af:e2:53:7d:f7:6b:1d:67:fc:c3:9c:f3:88: 95:e4:23:3f:c0:da:3b:7f:b9:f3:c7:ef:c8:4d:9a: 93:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4D:A9:59:A2:BD:13:FE:BD:C7:23:96:69:6D:E0:A5:70:6D:E8:3B X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1k2pWaK9E_69xyOWaW3gpXBt6Ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.100.192.0/22 62.100.200.0/22 62.100.212.0/22 62.100.220.0/22 93.188.68.0/22 157.97.145.0/24 185.92.27.0/24 Signature Algorithm: sha256WithRSAEncryption 83:9b:cb:bd:09:1a:90:d1:b4:60:12:7a:89:95:2d:6b:89:dc: be:ec:8d:18:6e:ba:39:3d:4e:aa:33:84:a9:99:aa:e8:05:e9: f8:05:c5:b3:bc:70:47:d8:6e:e6:59:77:82:7f:72:21:64:d7: 1f:4c:55:7a:17:8f:8e:10:38:e2:04:7d:d1:95:19:47:af:ac: 05:d6:d2:13:b0:14:30:69:cb:f5:24:a5:2c:f4:fd:9e:02:6b: d0:67:8a:ac:1f:ec:ef:fa:57:5b:71:f8:af:5a:a2:bf:b0:f3: 17:e4:eb:e6:01:f6:14:85:dc:74:8e:da:b5:e6:a9:05:ad:1a: 57:01:6b:19:8b:c7:68:53:3b:c6:e7:30:3a:e0:33:a8:5b:10: 8b:2d:42:29:47:3b:bd:8e:00:04:e5:47:da:68:d3:1e:7d:e4: 5f:ed:a3:02:f9:a0:2e:18:93:b3:ef:4a:8b:36:ae:bc:cd:10: 76:a8:7d:ad:da:2a:7f:54:5b:84:5d:97:8c:d5:b5:62:72:c7: 10:d5:99:3e:95:86:2f:79:40:95:d8:75:6f:15:ef:28:51:3e: 0e:23:0b:2f:26:31:c5:2c:db:91:b6:84:2f:b9:16:a0:91:f3: c1:1d:9f:29:ac:ff:5b:40:d9:1c:ba:10:88:72:de:4a:8e:a3: cd:3b:5d:a7 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt3xsesSpMtCKRjjtibCm9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjRkYTk1OWEyYmQxM2ZlYmRjNzIzOTY2OTZkZTBhNTcwNmRlODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh7m6j0D1l5xG6+8u62PwUQbfzCc R2yc9N0j3sy0Huswe5NdSkxCbKMsqMgoUNUIovcKl+8mYXTOYZCN1C/GMXElYXJM P2HswlXfedboU6Eh1L4zLnGPoqToZhzsh3LkNxmYNzWb6lfbvZDk9lJtP2Q8j73h 5ErZK6otf6CpdpsFENooZ05ysk3KvTtLMikLzeVroj+CBids/BPPh1O18txjrw9M 39ftSPklATuuZEzcWymwsbVAMVWfhaPTQCfOnXHz+4daipdD6cW7Pfp7953eezVh 5yOnNR+xdM2Kr7UDf6/iU333ax1n/MOc84iV5CM/wNo7f7nzx+/ITZqTgwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFNZNqVmivRP+vccjlmlt4KVwbeg7MB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvMWsycFdhSzlFXzY5eHlPV2FXM2dwWEJ0NkRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCPmTAAwQC PmTIAwQCPmTUAwQCPmTcAwQCXbxEAwQAnWGRAwQAuVwbMA0GCSqGSIb3DQEBCwUA A4IBAQCDm8u9CRqQ0bRgEnqJlS1ridy+7I0Ybro5PU6qM4SpmaroBen4BcWzvHBH 2G7mWXeCf3IhZNcfTFV6F4+OEDjiBH3RlRlHr6wF1tITsBQwacv1JKUs9P2eAmvQ Z4qsH+zv+ldbcfivWqK/sPMX5OvmAfYUhdx0jtq15qkFrRpXAWsZi8doUzvG5zA6 4DOoWxCLLUIpRzu9jgAE5UfaaNMefeRf7aMC+aAuGJOz70qLNq68zRB2qH2t2ip/ VFuEXZeM1bVicscQ1Zk+lYYveUCV2HVvFe8oUT4OIwsvJjHFLNuRtoQvuRagkfPB HZ8prP9bQNkcuhCIct5KjqPNO12n -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:16 2026 by rpki-client