This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/P_z7orK0Zgg44s5rDtZD3dJwDDc.roa File: P_z7orK0Zgg44s5rDtZD3dJwDDc.roa (raw, json) Hash identifier: Fy4vw6rHz/DMfKM0dkbsBBqCTuDGhhGTvCkwunz8DZ8= Subject key identifier: 3F:FC:FB:A2:B2:B4:66:08:38:E2:CE:6B:0E:D6:43:DD:D2:70:0C:37 Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Certificate serial: 019B7F1416D6AB06F1073819565FFAC89B85 Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/P_z7orK0Zgg44s5rDtZD3dJwDDc.roa Signing time: Fri 02 Jan 2026 14:19:41 +0000 ROA not before: Fri 02 Jan 2026 14:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201961 IP address blocks: 62.244.102.0/24 maxlen: 24 62.244.103.0/24 maxlen: 24 62.244.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:16:d6:ab:06:f1:07:38:19:56:5f:fa:c8:9b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Validity Not Before: Jan 2 14:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ffcfba2b2b4660838e2ce6b0ed643ddd2700c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:d7:fa:69:bf:3a:5b:5a:c0:39:0c:6e:09: d1:54:e1:a6:f0:6a:22:cf:be:ec:94:4b:a9:94:ce: ac:6e:0c:2f:e6:e1:4f:69:f6:47:60:ee:a7:01:a0: b0:76:30:af:61:14:a5:f4:fa:61:1b:3d:cb:7a:29: c5:c1:4d:cf:4d:22:c9:dd:fd:3d:a8:c9:f7:e2:81: 23:09:d9:45:46:e7:87:3a:d8:fb:2a:7b:6a:67:11: 4a:96:dd:2f:e4:d2:c6:1b:64:67:de:cf:8c:35:5a: e4:86:94:01:74:05:c0:80:3d:9d:23:ff:1d:5b:98: e1:2a:94:77:e7:f3:d7:cc:7c:11:dd:b9:4d:f0:70: 0e:e7:d2:37:d3:ff:f6:34:97:bd:e1:24:f1:7b:35: 5d:9f:ec:9c:30:a2:11:f0:e1:c5:0b:c4:da:03:a7: 69:38:8a:dc:2c:ee:86:70:a3:1c:10:54:7b:e6:d1: a2:6a:35:ad:29:ed:08:0b:6c:44:f1:16:32:e5:eb: 0e:30:c6:7f:6b:08:70:3f:9a:fd:e1:21:ea:7c:7e: 7f:d4:72:ed:9c:33:e5:18:c2:c5:ef:e6:ca:a5:77: 7c:c0:d0:5b:9e:81:48:25:2f:ec:34:e0:98:15:ec: d4:bc:36:46:a6:9f:ad:e1:be:f6:7e:27:f8:c2:8a: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:FB:A2:B2:B4:66:08:38:E2:CE:6B:0E:D6:43:DD:D2:70:0C:37 X509v3 Authority Key Identifier: keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/P_z7orK0Zgg44s5rDtZD3dJwDDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.102.0/23 62.244.106.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d6:85:c6:ac:9f:ce:ec:7a:08:d2:bf:2b:60:fe:94:b3:12: fb:6b:85:a8:2b:c6:eb:b2:fa:c9:7a:e7:31:7b:8a:68:7c:ee: 4c:98:2c:ad:fe:0b:c6:43:18:69:18:59:43:76:57:3b:58:63: a4:1b:1a:9d:9f:b9:de:4b:c4:8a:32:b0:82:39:9f:5c:25:ff: 0c:4f:e3:fa:5c:b1:84:2d:00:45:54:72:d8:23:4e:28:52:72: 43:9d:b1:a3:4b:f0:dc:9e:f7:21:b8:f2:49:51:6a:eb:c2:d2: b3:ff:49:95:f4:21:09:8d:d1:22:bd:d4:2d:6d:dd:60:20:da: e3:03:e6:c6:01:97:3a:5b:46:b9:4e:f0:51:4a:9e:d1:26:a5: 80:af:c0:52:9e:2e:88:65:92:81:6f:1c:cf:be:9a:7e:a2:df: ef:17:db:f8:2a:1f:bf:78:bd:bc:41:95:a5:e6:75:b4:7f:7c: 3e:d0:8b:86:46:7c:13:81:08:d8:42:25:23:9b:87:f3:c4:43: ab:23:f1:24:6c:4a:23:63:14:03:4f:97:95:47:90:94:7c:ca: 76:8c:a1:77:fd:2c:c3:d5:97:03:a2:26:c6:88:7b:7b:16:cf: 1a:02:46:04:85:9a:49:c3:82:4e:2a:c9:53:a4:7c:8b:cb:67: 75:ae:b1:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FBbWqwbxBzgZVl/6yJuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj YTMzZTgwHhcNMjYwMTAyMTQxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZjZmJhMmIyYjQ2NjA4MzhlMmNlNmIwZWQ2NDNkZGQyNzAwYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLTX+mm/OltawDkMbgnRVOGm8Goi z77slEuplM6sbgwv5uFPafZHYO6nAaCwdjCvYRSl9PphGz3LeinFwU3PTSLJ3f09 qMn34oEjCdlFRueHOtj7KntqZxFKlt0v5NLGG2Rn3s+MNVrkhpQBdAXAgD2dI/8d W5jhKpR35/PXzHwR3blN8HAO59I30//2NJe94STxezVdn+ycMKIR8OHFC8TaA6dp OIrcLO6GcKMcEFR75tGiajWtKe0IC2xE8RYy5esOMMZ/awhwP5r94SHqfH5/1HLt nDPlGMLF7+bKpXd8wNBbnoFIJS/sNOCYFezUvDZGpp+t4b72fif4woof+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD/8+6KytGYIOOLOaw7WQ93ScAw3MB8GA1UdIwQY MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt Njg5YmE0ZDMzYzRiLzEvUF96N29ySzBaZ2c0NHM1ckR0WkQzZEp3RERjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPvRmAwQA PvRqMA0GCSqGSIb3DQEBCwUAA4IBAQBB1oXGrJ/O7HoI0r8rYP6UsxL7a4WoK8br svrJeucxe4pofO5MmCyt/gvGQxhpGFlDdlc7WGOkGxqdn7neS8SKMrCCOZ9cJf8M T+P6XLGELQBFVHLYI04oUnJDnbGjS/DcnvchuPJJUWrrwtKz/0mV9CEJjdEivdQt bd1gINrjA+bGAZc6W0a5TvBRSp7RJqWAr8BSni6IZZKBbxzPvpp+ot/vF9v4Kh+/ eL28QZWl5nW0f3w+0IuGRnwTgQjYQiUjm4fzxEOrI/EkbEojYxQDT5eVR5CUfMp2 jKF3/SzD1ZcDoibGiHt7Fs8aAkYEhZpJw4JOKslTpHyLy2d1rrH4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:31 2026 by rpki-client