This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/GXpP16JP0Mjym_u_vszjldIXucM.roa File: GXpP16JP0Mjym_u_vszjldIXucM.roa (raw, json) Hash identifier: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4= Subject key identifier: 19:7A:4F:D7:A2:4F:D0:C8:F2:9B:FB:BF:BE:CC:E3:95:D2:17:B9:C3 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C996FC4F03C1ADFEB36D3F1051E79 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/GXpP16JP0Mjym_u_vszjldIXucM.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57758 IP address blocks: 62.108.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:99:6f:c4:f0:3c:1a:df:eb:36:d3:f1:05:1e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=197a4fd7a24fd0c8f29bfbbfbecce395d217b9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:46:78:0e:c8:61:2e:0a:ae:7d:39:b6:34: 48:3f:27:f1:34:60:db:ec:e4:bc:45:db:ba:88:f3: b3:51:9a:9e:28:89:38:ed:98:41:ac:42:94:e7:16: 9f:a7:9e:34:53:2d:ee:9b:13:0f:ff:75:96:66:c5: dd:c3:b6:bd:ed:a5:4b:d9:7b:02:97:d3:0c:e9:39: 52:c3:4c:de:a8:a8:06:66:63:fb:99:ec:1e:4c:7a: 98:5e:91:c4:84:08:99:d4:75:22:a1:8d:81:9b:a6: 43:69:53:bd:aa:ec:b7:5d:d3:ce:3c:2c:89:21:0a: 28:c4:bd:17:28:59:26:2c:92:44:b8:37:0d:e8:d9: cc:a8:0f:f3:87:70:91:eb:e9:93:ad:65:4a:19:24: 58:a1:27:e1:be:77:4c:5b:b1:13:94:cf:8e:cd:26: 09:26:05:66:49:38:cc:90:92:58:fa:5f:21:18:5c: b4:a4:0c:45:d7:19:ff:94:e4:6b:d1:3f:a6:e2:3a: 35:6c:27:74:21:5c:72:ab:2f:bf:03:15:9e:ab:b5: 81:23:dd:69:0f:fc:9a:7a:d9:7c:54:95:59:43:9a: ec:b1:7d:e1:6f:82:87:12:d3:90:13:2a:6b:84:8d: b3:e0:f0:4d:70:88:01:db:f4:0c:6c:b0:80:84:82: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7A:4F:D7:A2:4F:D0:C8:F2:9B:FB:BF:BE:CC:E3:95:D2:17:B9:C3 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/GXpP16JP0Mjym_u_vszjldIXucM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.34.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:76:41:78:49:e4:c8:5a:6d:f9:0f:5c:79:ff:f9:9c:01:c9: e2:84:b9:32:28:21:a9:40:49:c9:3e:ba:a3:e5:74:da:54:18: 5a:82:24:5a:9d:9c:29:ab:d9:67:2f:18:ab:73:ab:64:f2:18: e1:b1:d1:d1:9c:10:d9:02:02:41:b9:96:36:42:a5:c0:0c:a1: fd:4b:ba:d3:36:fe:bf:ee:8f:e5:05:93:d7:43:a3:7e:9f:ad: 0b:79:30:2f:db:62:3f:33:ec:8b:cf:ae:89:f2:24:3e:17:25: 84:c7:12:29:c4:26:5d:6a:e2:5a:3f:c8:6f:6e:54:bb:7f:c7: 31:74:15:49:71:c3:bf:77:61:e7:0a:fd:93:f8:17:86:65:ae: 8b:2d:ff:c6:c5:d3:c6:1e:20:81:0b:53:44:26:88:f5:71:91: 4c:d7:97:34:8b:04:c7:1f:96:f9:a6:a3:a7:d0:2b:c4:8a:4b: 95:73:20:a8:8c:e8:d0:4b:16:18:90:58:6f:41:61:cf:50:91: e3:02:78:86:87:f0:1c:77:39:ab:30:ac:32:24:24:c2:b2:66: cc:ef:24:d4:60:27:94:a8:17:bc:9f:58:ce:22:b0:36:58:56: 11:c2:30:85:37:a5:a4:31:24:14:4a:7d:c2:ed:43:56:7d:7f: cf:7a:0d:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJlvxPA8Gt/rNtPxBR55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTdhNGZkN2EyNGZkMGM4ZjI5YmZiYmZiZWNjZTM5NWQyMTdiOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs29GeA7IYS4Krn05tjRIPyfxNGDb 7OS8Rdu6iPOzUZqeKIk47ZhBrEKU5xafp540Uy3umxMP/3WWZsXdw7a97aVL2XsC l9MM6TlSw0zeqKgGZmP7meweTHqYXpHEhAiZ1HUioY2Bm6ZDaVO9quy3XdPOPCyJ IQooxL0XKFkmLJJEuDcN6NnMqA/zh3CR6+mTrWVKGSRYoSfhvndMW7ETlM+OzSYJ JgVmSTjMkJJY+l8hGFy0pAxF1xn/lORr0T+m4jo1bCd0IVxyqy+/AxWeq7WBI91p D/yaetl8VJVZQ5rssX3hb4KHEtOQEyprhI2z4PBNcIgB2/QMbLCAhILN5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBl6T9eiT9DI8pv7v77M45XSF7nDMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvR1hwUDE2SlAwTWp5bV91X3ZzempsZElYdWNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmwiMA0G CSqGSIb3DQEBCwUAA4IBAQBPdkF4SeTIWm35D1x5//mcAcnihLkyKCGpQEnJPrqj 5XTaVBhagiRanZwpq9lnLxirc6tk8hjhsdHRnBDZAgJBuZY2QqXADKH9S7rTNv6/ 7o/lBZPXQ6N+n60LeTAv22I/M+yLz66J8iQ+FyWExxIpxCZdauJaP8hvblS7f8cx dBVJccO/d2HnCv2T+BeGZa6LLf/GxdPGHiCBC1NEJoj1cZFM15c0iwTHH5b5pqOn 0CvEikuVcyCojOjQSxYYkFhvQWHPUJHjAniGh/AcdzmrMKwyJCTCsmbM7yTUYCeU qBe8n1jOIrA2WFYRwjCFN6WkMSQUSn3C7UNWfX/Peg1b -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:43 2026 by rpki-client