This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/S87lpzwpwcvhDVlbS4kDtqKKrpA.roa File: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (raw, json) Hash identifier: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU= Subject key identifier: 4B:CE:E5:A7:3C:29:C1:CB:E1:0D:59:5B:4B:89:03:B6:A2:8A:AE:90 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019B7BA530C66B40D9F7AFB93772BB3C663B Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/S87lpzwpwcvhDVlbS4kDtqKKrpA.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49163 IP address blocks: 62.93.96.0/21 maxlen: 24 85.13.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:30:c6:6b:40:d9:f7:af:b9:37:72:bb:3c:66:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bcee5a73c29c1cbe10d595b4b8903b6a28aae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:5e:91:85:7c:53:fb:ab:e3:0c:5c:3a:e2: 1c:1e:58:e1:3b:de:2b:d1:fe:62:34:14:d1:1e:7f: f4:2e:d4:5e:a2:fc:b7:90:04:78:5d:3d:d0:44:e6: 0c:35:36:32:cd:91:1a:33:53:d5:29:91:89:3c:a6: d8:4b:85:09:1c:c3:6e:a8:bb:b9:5d:d0:19:ef:e3: 03:e8:ea:e0:2a:54:b5:2c:9a:5b:48:64:c5:3e:37: 5b:48:77:c5:f2:88:4a:16:ff:c5:76:75:6b:2d:6c: c1:3f:55:02:11:73:8a:37:af:96:8f:89:26:7a:12: ff:5b:be:d9:f6:16:96:3a:24:72:7b:8a:fb:6d:17: 40:67:88:51:e8:a8:30:4b:22:0d:ef:86:51:ee:18: 85:16:44:92:6d:a3:3d:33:45:a9:6e:9e:66:8f:e3: a7:54:73:60:83:b0:5a:75:5c:51:97:c4:ea:82:16: d7:cf:a6:21:a1:3a:d0:e2:73:f7:1b:52:0b:3c:7d: e3:5a:b0:d6:49:09:85:21:c1:0e:74:6c:37:c3:c9: e4:c8:be:f1:ee:12:9a:48:73:8c:8c:42:5c:b0:51: 9e:8f:a4:8e:30:df:93:fe:e8:c5:ac:e6:a3:38:2e: 3b:07:15:bb:06:e2:0e:2f:f4:fe:6e:39:95:14:e4: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CE:E5:A7:3C:29:C1:CB:E1:0D:59:5B:4B:89:03:B6:A2:8A:AE:90 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/S87lpzwpwcvhDVlbS4kDtqKKrpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.96.0/21 85.13.24.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:f8:28:ed:5a:1f:4f:9c:a4:d8:26:d8:9e:11:24:95:ca:a8: 23:f0:a2:b2:a1:ae:ce:35:73:e6:8f:c6:62:c3:48:91:b4:2a: 78:bf:dc:67:3f:08:8d:62:9f:7f:13:4c:74:90:bf:a5:d8:07: ac:34:93:34:ce:f8:15:a7:e2:91:b1:3e:60:5c:b5:57:f3:36: e2:91:81:ce:14:a8:ff:e9:30:7c:b0:ae:fd:a7:e7:87:d7:f6: 8a:6e:e3:37:e3:16:31:15:b7:00:28:18:23:8c:64:39:2d:50: a3:4d:b3:f9:0e:b9:12:1f:75:72:1c:de:1f:a3:5c:0d:fb:33: 16:bc:0a:ca:06:8e:42:80:33:62:41:29:65:3e:95:e6:25:5f: da:a5:03:b2:d0:8b:88:09:20:fa:26:43:48:0a:ca:dd:22:01: bb:38:0b:8b:24:e5:fc:4b:11:7a:0a:1b:3e:50:13:cc:bc:3f: 4a:a2:fc:5f:f1:5f:94:1f:3d:54:c3:90:8b:7b:b4:7f:13:4a: d1:a8:fd:b5:51:d1:45:8b:28:bc:97:a5:4a:71:dc:d9:01:de: 5c:27:c9:72:21:15:70:87:92:3a:0b:93:e9:09:52:ce:c2:93: d6:f6:07:95:52:f2:3d:20:65:a8:b7:7c:20:47:8f:bd:61:ac: 07:0e:1d:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pTDGa0DZ96+5N3K7PGY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmNlZTVhNzNjMjljMWNiZTEwZDU5NWI0Yjg5MDNiNmEyOGFhZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcRekYV8U/ur4wxcOuIcHljhO94r 0f5iNBTRHn/0LtReovy3kAR4XT3QROYMNTYyzZEaM1PVKZGJPKbYS4UJHMNuqLu5 XdAZ7+MD6OrgKlS1LJpbSGTFPjdbSHfF8ohKFv/FdnVrLWzBP1UCEXOKN6+Wj4km ehL/W77Z9haWOiRye4r7bRdAZ4hR6KgwSyIN74ZR7hiFFkSSbaM9M0Wpbp5mj+On VHNgg7BadVxRl8TqghbXz6YhoTrQ4nP3G1ILPH3jWrDWSQmFIcEOdGw3w8nkyL7x 7hKaSHOMjEJcsFGej6SOMN+T/ujFrOajOC47BxW7BuIOL/T+bjmVFOTEpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEvO5ac8KcHL4Q1ZW0uJA7aiiq6QMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvUzg3bHB6d3B3Y3ZoRFZsYlM0a0R0cUtLcnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPl1gAwQB VQ0YMA0GCSqGSIb3DQEBCwUAA4IBAQAc+CjtWh9PnKTYJtieESSVyqgj8KKyoa7O NXPmj8Ziw0iRtCp4v9xnPwiNYp9/E0x0kL+l2AesNJM0zvgVp+KRsT5gXLVX8zbi kYHOFKj/6TB8sK79p+eH1/aKbuM34xYxFbcAKBgjjGQ5LVCjTbP5DrkSH3VyHN4f o1wN+zMWvArKBo5CgDNiQSllPpXmJV/apQOy0IuICSD6JkNICsrdIgG7OAuLJOX8 SxF6Chs+UBPMvD9Kovxf8V+UHz1Uw5CLe7R/E0rRqP21UdFFiyi8l6VKcdzZAd5c J8lyIRVwh5I6C5PpCVLOwpPW9geVUvI9IGWot3wgR4+9YawHDh1d -----END CERTIFICATE-----Generated at Mon Feb 9 21:19:44 2026 by rpki-client