This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/pC4mzdZRy3gj1OAWhOgd-XI61js.roa File: pC4mzdZRy3gj1OAWhOgd-XI61js.roa (raw, json) Hash identifier: iV0FuntmUK6ThmSl1jRZkgrPQGfQbNb34wH4OtyFb1g= Subject key identifier: A4:2E:26:CD:D6:51:CB:78:23:D4:E0:16:84:E8:1D:F9:72:3A:D6:3B Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B791080851F5EAF1C0B52EC17B907C5CF Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/pC4mzdZRy3gj1OAWhOgd-XI61js.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 62.138.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:80:85:1f:5e:af:1c:0b:52:ec:17:b9:07:c5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42e26cdd651cb7823d4e01684e81df9723ad63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:cc:5c:3a:4b:3e:ce:fb:54:b5:3e:5a:2c: a5:c0:27:90:cc:40:4f:1c:34:7e:9f:ea:ff:5c:91: 11:f3:03:cb:d6:fc:c2:c7:b7:59:c8:10:11:25:98: e4:f3:64:3a:f6:5e:3d:a9:d4:ae:7d:cc:31:f7:c1: 85:11:95:bd:49:da:66:b1:94:fe:9e:86:be:4d:38: 8e:24:90:11:02:71:1c:47:27:67:bb:44:d4:df:92: 3b:13:87:00:7f:8c:6c:9e:25:ea:2f:d3:d7:b1:b6: 92:11:7e:84:24:8b:cb:d8:89:46:86:f0:d3:e3:36: ee:f9:c5:65:13:c7:5d:27:fb:99:5b:27:c8:ce:e2: 9f:ef:7a:11:03:8c:56:58:14:87:0e:66:1c:34:11: 6f:b8:82:62:0f:b7:d4:97:e8:b3:e4:01:9c:05:f1: 3a:b8:f4:53:95:6b:4d:be:50:e2:82:4f:38:90:f0: bb:d9:69:95:59:02:57:fd:68:79:13:f1:a0:23:f5: 74:17:2e:f7:4a:45:01:59:81:f6:3d:1c:eb:15:69: 32:5b:3d:dc:65:cb:8b:f8:ea:5b:ab:3e:61:e4:a9: 97:5c:62:e4:72:9f:73:04:56:1c:18:44:aa:78:95: c1:c1:e6:68:04:14:a6:4e:b7:7e:2d:4d:2a:ed:64: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:26:CD:D6:51:CB:78:23:D4:E0:16:84:E8:1D:F9:72:3A:D6:3B X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/pC4mzdZRy3gj1OAWhOgd-XI61js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.138.64.0/22 Signature Algorithm: sha256WithRSAEncryption a9:49:94:e4:b3:5a:85:ef:4c:89:cf:44:d1:44:f4:d3:3c:37: 1d:f4:91:23:51:49:92:e0:e2:5f:a6:b0:4d:0b:6d:0b:c9:be: 32:78:64:4a:50:f9:06:aa:0c:9c:d8:75:e7:55:1d:56:63:51: 0f:a0:a8:96:c3:37:65:2e:68:8c:c5:be:1b:b1:18:f2:f0:0e: 38:1b:c7:29:eb:00:1e:c5:bf:fa:26:c5:12:64:7d:3b:5e:5a: dc:93:80:4a:40:d8:52:4f:cb:05:17:f5:19:6a:d8:71:92:ca: 1e:3e:c9:93:cc:3b:24:94:94:01:84:00:be:70:80:c5:04:66: 19:66:dc:01:84:0d:2c:34:99:6e:17:6f:61:2b:66:7d:af:15: 4a:22:af:e2:01:16:91:ed:80:99:7b:9a:91:93:0c:f7:c5:4a: ba:55:a8:5a:00:6b:01:28:d4:98:3e:e4:f3:11:24:8c:03:d5: 2a:33:4d:57:65:28:95:a8:4f:65:7f:f5:30:8e:3d:4c:6b:09: 0b:97:5f:b4:16:a3:05:a8:7c:49:e9:93:ab:3e:86:cb:cb:0b: df:96:a2:50:63:df:0d:6b:5e:7a:38:18:72:18:f2:0f:2a:98: 4f:65:15:92:85:b0:df:c8:5e:38:7e:62:77:35:9d:97:a8:c6: 9c:85:ca:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EICFH16vHAtS7Be5B8XPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDJlMjZjZGQ2NTFjYjc4MjNkNGUwMTY4NGU4MWRmOTcyM2FkNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO7MXDpLPs77VLU+WiylwCeQzEBP HDR+n+r/XJER8wPL1vzCx7dZyBARJZjk82Q69l49qdSufcwx98GFEZW9SdpmsZT+ noa+TTiOJJARAnEcRydnu0TU35I7E4cAf4xsniXqL9PXsbaSEX6EJIvL2IlGhvDT 4zbu+cVlE8ddJ/uZWyfIzuKf73oRA4xWWBSHDmYcNBFvuIJiD7fUl+iz5AGcBfE6 uPRTlWtNvlDigk84kPC72WmVWQJX/Wh5E/GgI/V0Fy73SkUBWYH2PRzrFWkyWz3c ZcuL+Opbqz5h5KmXXGLkcp9zBFYcGESqeJXBweZoBBSmTrd+LU0q7WSCvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQuJs3WUct4I9TgFoToHflyOtY7MB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvcEM0bXpkWlJ5M2dqMU9BV2hPZ2QtWEk2MWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPopAMA0G CSqGSIb3DQEBCwUAA4IBAQCpSZTks1qF70yJz0TRRPTTPDcd9JEjUUmS4OJfprBN C20Lyb4yeGRKUPkGqgyc2HXnVR1WY1EPoKiWwzdlLmiMxb4bsRjy8A44G8cp6wAe xb/6JsUSZH07Xlrck4BKQNhST8sFF/UZathxksoePsmTzDsklJQBhAC+cIDFBGYZ ZtwBhA0sNJluF29hK2Z9rxVKIq/iARaR7YCZe5qRkwz3xUq6VahaAGsBKNSYPuTz ESSMA9UqM01XZSiVqE9lf/Uwjj1MawkLl1+0FqMFqHxJ6ZOrPobLywvflqJQY98N a156OBhyGPIPKphPZRWShbDfyF44fmJ3NZ2XqMachcqo -----END CERTIFICATE-----Generated at Wed Jan 21 18:43:54 2026 by rpki-client