This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vTKohdF56IFQgah9DuO0JGwcH9U.roa File: vTKohdF56IFQgah9DuO0JGwcH9U.roa (raw, json) Hash identifier: bsUg8Uy5yocfoi+JUcF+13tkU1rzb4BDrWJjTlHrS6I= Subject key identifier: BD:32:A8:85:D1:79:E8:81:50:81:A8:7D:0E:E3:B4:24:6C:1C:1F:D5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019B7BA5314B4408AEBEEBE713C6BF93CCD2 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vTKohdF56IFQgah9DuO0JGwcH9U.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50920 IP address blocks: 62.93.84.0/24 maxlen: 24 62.93.87.0/24 maxlen: 24 82.192.6.0/24 maxlen: 24 85.13.58.0/24 maxlen: 24 176.61.160.0/21 maxlen: 24 217.16.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:31:4b:44:08:ae:be:eb:e7:13:c6:bf:93:cc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd32a885d179e8815081a87d0ee3b4246c1c1fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:d3:c1:b5:4b:58:23:13:f7:94:b0:7c:af: f3:aa:5d:21:8b:1b:dc:1d:8a:16:02:ae:7f:99:d0: 70:11:e8:6b:f8:aa:d7:0b:5e:18:28:a8:b1:e6:d7: ce:27:6f:3b:3b:84:2b:7a:f4:29:57:bc:50:0c:24: 09:eb:64:39:ed:a8:84:dc:bb:cc:1e:b6:d9:64:75: 01:cb:98:52:67:76:87:ae:12:43:22:2f:c9:c9:3d: c5:ef:46:9b:8f:ab:c9:e8:49:5a:e1:e9:9a:b1:7f: 75:ba:33:28:66:87:11:ea:54:fd:90:07:a6:35:94: 4a:78:d5:69:50:56:02:7f:23:d1:6c:12:48:4c:29: 3d:86:34:ca:36:a2:b5:28:85:f6:4b:f6:c7:34:6e: e4:76:41:4b:a4:f4:0f:7b:0c:88:00:e0:8c:59:d6: 8b:db:59:4e:54:e9:37:98:11:91:e5:a4:18:11:55: ad:37:85:ae:b0:37:2b:9b:53:1b:78:f8:71:7c:91: fd:2d:db:56:ff:db:a1:54:f7:86:89:a7:ff:6e:ad: 2b:93:9a:e3:c7:2c:91:73:b0:94:b7:dd:9c:f2:8f: 77:99:f6:56:3b:2e:ed:80:06:bd:31:5b:8f:81:99: a3:c0:b8:eb:9a:64:7f:84:04:a3:8c:df:8e:86:2b: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:32:A8:85:D1:79:E8:81:50:81:A8:7D:0E:E3:B4:24:6C:1C:1F:D5 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vTKohdF56IFQgah9DuO0JGwcH9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.84.0/24 62.93.87.0/24 82.192.6.0/24 85.13.58.0/24 176.61.160.0/21 217.16.119.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:a0:85:f7:75:be:c3:19:1f:71:f5:fa:c4:59:23:b2:6e:53: 61:ae:ac:d5:83:25:e3:7c:9e:d9:ab:ad:fa:f6:5b:7e:91:33: 48:8e:ac:53:30:03:f4:75:88:af:1e:2a:e7:58:c3:e5:fc:35: 71:3d:a3:47:7c:5e:4a:d2:d4:35:d4:7d:db:32:55:1d:87:e3: 32:99:4f:7c:22:95:01:bf:68:37:67:79:b8:88:b5:a8:69:21: ca:bd:0f:de:92:7c:2c:c7:d9:7f:1f:b4:d4:e8:e1:91:a3:1b: f2:bc:f1:7e:af:cf:44:62:0d:ab:1d:b8:e5:ec:cb:cc:e3:d4: e8:71:ec:b8:ac:c2:40:ab:33:1b:16:a2:68:e8:85:cb:d9:d4: 0e:82:70:25:de:1e:38:ea:6c:a8:33:58:cd:ba:a8:75:bb:5c: 0f:58:0e:36:f7:3a:e5:92:1c:2a:69:74:05:a1:af:56:8e:38: e1:f3:fd:30:d0:4f:dc:8c:3b:7b:44:80:86:f3:80:d7:1f:96: 04:0b:55:2c:dc:2f:9d:ba:c3:0d:11:36:01:4d:32:88:0e:ff: 1d:75:17:21:37:28:bd:0c:e8:88:65:e5:df:23:7d:7f:d4:03: 68:a3:7d:e0:33:2d:88:73:b8:b7:db:7d:47:8d:c8:45:58:25: 62:0e:2f:42 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pTFLRAiuvuvnE8a/k8zSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDMyYTg4NWQxNzllODgxNTA4MWE4N2QwZWUzYjQyNDZjMWMxZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ivTwbVLWCMT95SwfK/zql0hixvc HYoWAq5/mdBwEehr+KrXC14YKKix5tfOJ287O4QrevQpV7xQDCQJ62Q57aiE3LvM HrbZZHUBy5hSZ3aHrhJDIi/JyT3F70abj6vJ6Ela4emasX91ujMoZocR6lT9kAem NZRKeNVpUFYCfyPRbBJITCk9hjTKNqK1KIX2S/bHNG7kdkFLpPQPewyIAOCMWdaL 21lOVOk3mBGR5aQYEVWtN4WusDcrm1MbePhxfJH9LdtW/9uhVPeGiaf/bq0rk5rj xyyRc7CUt92c8o93mfZWOy7tgAa9MVuPgZmjwLjrmmR/hASjjN+OhitBPwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFL0yqIXReeiBUIGofQ7jtCRsHB/VMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvdlRLb2hkRjU2SUZRZ2FoOUR1TzBKR3djSDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAPl1UAwQA Pl1XAwQAUsAGAwQAVQ06AwQDsD2gAwQA2RB3MA0GCSqGSIb3DQEBCwUAA4IBAQAv oIX3db7DGR9x9frEWSOyblNhrqzVgyXjfJ7Zq6369lt+kTNIjqxTMAP0dYivHirn WMPl/DVxPaNHfF5K0tQ11H3bMlUdh+MymU98IpUBv2g3Z3m4iLWoaSHKvQ/eknws x9l/H7TU6OGRoxvyvPF+r89EYg2rHbjl7MvM49Tocey4rMJAqzMbFqJo6IXL2dQO gnAl3h446myoM1jNuqh1u1wPWA429zrlkhwqaXQFoa9Wjjjh8/0w0E/cjDt7RICG 84DXH5YEC1Us3C+dusMNETYBTTKIDv8ddRchNyi9DOiIZeXfI31/1ANoo33gMy2I c7i3231HjchFWCViDi9C -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:22 2026 by rpki-client