This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/99NN1WXl1e-tpKT6ABRzj8ek8js.roa File: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (raw, json) Hash identifier: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw= Subject key identifier: F7:D3:4D:D5:65:E5:D5:EF:AD:A4:A4:FA:00:14:73:8F:C7:A4:F2:3B Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019B7BA52EC15A4AD5C61CC9FE15B1204F91 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/99NN1WXl1e-tpKT6ABRzj8ek8js.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43002 IP address blocks: 62.93.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2e:c1:5a:4a:d5:c6:1c:c9:fe:15:b1:20:4f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7d34dd565e5d5efada4a4fa0014738fc7a4f23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:a3:e7:51:79:97:05:2a:ae:2c:c3:99:97: 17:d0:e0:a1:be:92:6b:92:ec:16:b8:e1:13:17:54: d1:e0:28:4f:86:55:a2:1c:3a:2c:90:48:d4:56:38: 51:70:b6:f9:ce:88:d2:6a:a1:b0:97:98:0a:16:61: 9c:c7:09:b3:5b:22:3e:68:55:24:13:3c:5a:23:0c: 33:92:62:94:b8:d0:ef:1d:31:be:56:bd:b8:e8:8e: 50:74:87:8a:9e:58:7f:8f:41:a2:6f:b5:21:11:ba: 6d:af:37:48:86:7e:bf:46:a7:a3:03:c9:b5:96:24: ad:06:af:7c:a5:97:86:7b:f7:10:66:49:9d:78:9d: 94:6f:46:88:d2:c5:d5:65:d6:30:3b:66:23:c9:3a: d9:32:77:52:2e:7c:17:91:c5:a0:37:7c:b7:aa:b6: 0d:a3:54:9e:09:c1:a7:0c:1b:e0:c3:33:00:26:e5: bb:41:e8:98:c9:d1:d2:26:4e:cf:1a:f8:59:1c:33: 55:44:0c:f4:96:b4:44:71:d9:4b:10:fc:fc:d0:ce: 36:69:cb:9e:e7:fe:b3:d9:e9:9b:b6:a6:dd:80:a2: a6:a6:dd:8d:66:d7:e0:bf:1b:83:95:9d:9d:9f:f9: f0:de:a3:44:7c:57:09:a9:07:b0:fe:1e:27:10:a4: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D3:4D:D5:65:E5:D5:EF:AD:A4:A4:FA:00:14:73:8F:C7:A4:F2:3B X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/99NN1WXl1e-tpKT6ABRzj8ek8js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.116.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:18:0b:80:e3:83:30:4b:09:68:1d:4e:9d:d7:69:e1:14:a8: d0:a8:db:f5:97:d3:80:b9:40:1f:16:4a:3e:3d:29:88:8f:d3: 6c:60:a8:65:cb:79:6c:2c:29:66:26:04:79:d1:32:9b:e8:b7: 6d:fa:90:82:e1:20:cd:14:0c:50:7c:ef:94:cd:f6:07:5d:00: a7:53:26:77:9b:d6:b5:98:b0:44:6f:1b:28:d8:e1:c7:33:2c: 5e:57:89:d7:dd:74:97:23:7a:eb:d6:6d:41:ed:54:e5:83:ca: c2:43:eb:f5:70:d5:f2:47:02:20:62:12:a2:4c:1d:af:1e:2e: 58:74:6a:34:14:d4:68:3e:26:74:89:95:15:9b:93:97:ce:c3: b0:a7:5d:aa:f0:d4:d6:dd:79:7f:fa:13:ae:65:b4:c6:ec:a8: 76:4a:90:a7:78:2a:c1:62:be:5a:f6:a2:90:e4:1a:32:eb:1e: be:c9:71:5a:85:79:ea:de:3f:a8:a5:91:3d:ab:9c:20:31:eb: 9f:b6:b7:b9:59:67:35:9d:ca:0c:6e:fd:46:73:30:8e:69:d9: 92:9f:83:b2:a3:0a:cd:88:4a:78:e1:7b:96:1a:5a:cf:e5:d1: 68:4a:3d:00:de:d0:c0:d3:b8:91:42:25:90:46:a2:fd:85:19: 25:02:5d:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pS7BWkrVxhzJ/hWxIE+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2QzNGRkNTY1ZTVkNWVmYWRhNGE0ZmEwMDE0NzM4ZmM3YTRmMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1mj51F5lwUqrizDmZcX0OChvpJr kuwWuOETF1TR4ChPhlWiHDoskEjUVjhRcLb5zojSaqGwl5gKFmGcxwmzWyI+aFUk EzxaIwwzkmKUuNDvHTG+Vr246I5QdIeKnlh/j0Gib7UhEbptrzdIhn6/RqejA8m1 liStBq98pZeGe/cQZkmdeJ2Ub0aI0sXVZdYwO2YjyTrZMndSLnwXkcWgN3y3qrYN o1SeCcGnDBvgwzMAJuW7QeiYydHSJk7PGvhZHDNVRAz0lrREcdlLEPz80M42acue 5/6z2embtqbdgKKmpt2NZtfgvxuDlZ2dn/nw3qNEfFcJqQew/h4nEKRaxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfTTdVl5dXvraSk+gAUc4/HpPI7MB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvOTlOTjFXWGwxZS10cEtUNkFCUnpqOGVrOGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPl10MA0G CSqGSIb3DQEBCwUAA4IBAQAOGAuA44MwSwloHU6d12nhFKjQqNv1l9OAuUAfFko+ PSmIj9NsYKhly3lsLClmJgR50TKb6Ldt+pCC4SDNFAxQfO+UzfYHXQCnUyZ3m9a1 mLBEbxso2OHHMyxeV4nX3XSXI3rr1m1B7VTlg8rCQ+v1cNXyRwIgYhKiTB2vHi5Y dGo0FNRoPiZ0iZUVm5OXzsOwp12q8NTW3Xl/+hOuZbTG7Kh2SpCneCrBYr5a9qKQ 5Boy6x6+yXFahXnq3j+opZE9q5wgMeuftre5WWc1ncoMbv1GczCOadmSn4OyowrN iEp44XuWGlrP5dFoSj0A3tDA07iRQiWQRqL9hRklAl3O -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:42 2026 by rpki-client