This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/SyWHbYOnHu_cvDaajuYM-To7M1w.roa File: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (raw, json) Hash identifier: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM= Subject key identifier: 4B:25:87:6D:83:A7:1E:EF:DC:BC:36:9A:8E:E6:0C:F9:3A:3B:33:5C Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C9BFF976736464E2550FDA4B56F4C Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/SyWHbYOnHu_cvDaajuYM-To7M1w.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 62.108.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9b:ff:97:67:36:46:4e:25:50:fd:a4:b5:6f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b25876d83a71eefdcbc369a8ee60cf93a3b335c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:10:cd:68:ea:3b:4c:6d:84:70:2e:12:16: ff:7e:9e:e9:89:d2:9e:97:83:7a:a8:b1:9f:33:5e: 37:a5:78:c2:ac:e5:12:98:18:af:c6:01:91:9d:56: a3:a9:6c:4a:06:f2:c8:12:18:18:b7:ae:6c:59:47: bc:21:8b:69:ee:ac:39:8e:b9:1d:a7:8c:49:4d:f2: 68:2d:aa:89:de:3c:59:16:43:6e:4d:06:2c:ed:92: 49:98:87:3e:1f:50:f4:a5:7d:9b:98:2f:d6:fb:51: a3:38:2c:e7:dd:25:78:f7:eb:26:0f:35:64:b2:86: 2a:5a:a8:47:5d:fb:eb:c4:76:b0:d1:62:c4:45:5b: 00:1c:f7:6b:24:17:71:c8:56:ec:d9:3a:8a:c4:ef: 32:f8:65:17:f1:9c:42:84:51:f8:0a:03:18:80:b4: ca:d1:4f:40:98:c4:0a:00:c2:17:6d:71:01:88:fd: d7:e7:3d:96:c0:31:ec:e6:16:7d:ee:22:3e:36:cb: 75:d5:19:73:4d:3e:03:35:31:b6:f7:3a:55:8d:bc: 1a:9d:16:29:ec:a9:f5:d7:c7:6e:ef:d4:02:c3:8b: 7b:9f:26:89:26:b2:04:52:16:e7:44:c8:15:48:82: cc:8f:9d:a9:18:06:16:74:63:3c:b0:10:1d:92:7b: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:25:87:6D:83:A7:1E:EF:DC:BC:36:9A:8E:E6:0C:F9:3A:3B:33:5C X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/SyWHbYOnHu_cvDaajuYM-To7M1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.34.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:0b:bc:ca:f2:67:8f:81:85:88:4e:7a:36:56:2d:2d:2b:63: 89:13:04:fd:68:e1:7e:5b:8e:44:22:26:b8:55:44:7e:f6:4a: ff:50:28:3e:e5:97:3d:70:69:9c:4a:fb:c9:4e:a4:7b:0d:5b: 57:13:86:ed:bd:f6:45:27:8a:a3:85:c6:d3:c1:52:1f:e9:8c: 5c:b2:6a:26:7c:97:e3:56:38:39:9b:80:69:ae:1d:6a:67:83: 8d:07:f5:d7:67:68:bc:7e:2d:12:75:85:2b:8d:be:9b:27:94: 92:c8:2b:32:35:dd:5a:bf:6f:e4:9d:80:38:e5:88:55:b7:a6: 04:ab:4a:08:ca:99:9a:c8:03:63:1d:80:86:cf:42:ee:20:f9: 88:84:19:e7:d3:7d:f1:90:1e:8b:85:cf:8a:8d:5d:ac:2a:80: 02:91:85:76:dd:6c:42:ac:21:8f:6c:9c:74:6c:1e:13:bd:09: cd:ad:08:fe:c3:57:75:62:bd:44:06:3c:ae:88:3b:4c:b6:0d: 4a:fc:49:24:cb:1d:49:69:52:be:9d:73:83:55:23:d5:73:cc: be:c7:28:a9:2a:36:55:fd:07:06:60:6b:4b:d3:68:e3:32:0d: e0:a4:ee:e1:7f:03:7f:60:b2:bd:31:9a:f1:ff:eb:42:ee:a0: 59:fe:c4:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJv/l2c2Rk4lUP2ktW9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjI1ODc2ZDgzYTcxZWVmZGNiYzM2OWE4ZWU2MGNmOTNhM2IzMzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcQQzWjqO0xthHAuEhb/fp7pidKe l4N6qLGfM143pXjCrOUSmBivxgGRnVajqWxKBvLIEhgYt65sWUe8IYtp7qw5jrkd p4xJTfJoLaqJ3jxZFkNuTQYs7ZJJmIc+H1D0pX2bmC/W+1GjOCzn3SV49+smDzVk soYqWqhHXfvrxHaw0WLERVsAHPdrJBdxyFbs2TqKxO8y+GUX8ZxChFH4CgMYgLTK 0U9AmMQKAMIXbXEBiP3X5z2WwDHs5hZ97iI+Nst11RlzTT4DNTG29zpVjbwanRYp 7Kn118du79QCw4t7nyaJJrIEUhbnRMgVSILMj52pGAYWdGM8sBAdknv4OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEslh22Dpx7v3Lw2mo7mDPk6OzNcMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvU3lXSGJZT25IdV9jdkRhYWp1WU0tVG83TTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmwiMA0G CSqGSIb3DQEBCwUAA4IBAQBeC7zK8mePgYWITno2Vi0tK2OJEwT9aOF+W45EIia4 VUR+9kr/UCg+5Zc9cGmcSvvJTqR7DVtXE4btvfZFJ4qjhcbTwVIf6YxcsmomfJfj Vjg5m4Bprh1qZ4ONB/XXZ2i8fi0SdYUrjb6bJ5SSyCsyNd1av2/knYA45YhVt6YE q0oIypmayANjHYCGz0LuIPmIhBnn033xkB6Lhc+KjV2sKoACkYV23WxCrCGPbJx0 bB4TvQnNrQj+w1d1Yr1EBjyuiDtMtg1K/Ekkyx1JaVK+nXODVSPVc8y+xyipKjZV /QcGYGtL02jjMg3gpO7hfwN/YLK9MZrx/+tC7qBZ/sQM -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:48 2026 by rpki-client