This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa File: V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa (raw, json) Hash identifier: 8XPaW6i45AJEe25djtC6P54qz+Rb4g3K7vpBnD6+9v4= Subject key identifier: 57:AE:87:25:81:6B:89:9E:48:B0:B7:F3:42:71:04:88:15:78:41:DF Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa Certificate serial: 019B7A5B07E25E668DD229B5BE707BEE2F78 Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 62.164.160.0/21 maxlen: 21 116.199.224.0/21 maxlen: 21 116.199.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:07:e2:5e:66:8d:d2:29:b5:be:70:7b:ee:2f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57ae8725816b899e48b0b7f342710488157841df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:57:13:84:37:76:ec:43:22:24:5a:3d:4d: ae:93:61:0a:88:f1:6b:56:de:6b:28:1f:0f:bb:55: 20:85:34:a4:b6:39:22:bb:5c:75:8a:77:96:e8:9c: 10:a5:d0:2d:df:f4:4d:04:d9:91:63:f1:ec:03:cf: 31:48:ad:e8:22:72:7b:a7:9b:be:ad:04:3a:bd:22: f8:bd:04:cf:6c:b4:92:ce:a3:37:01:bd:5c:7b:be: 72:a7:08:78:34:6f:12:71:b7:16:15:3f:3a:10:e3: 0d:47:6e:47:67:ad:32:dc:54:b4:fb:48:69:2f:b0: cb:73:49:bd:ff:87:3f:1d:3c:80:43:06:ae:31:b4: eb:25:7b:1a:20:4e:b0:0a:b5:5e:7c:b0:f4:de:5b: 2a:21:86:43:46:98:ed:6a:5c:22:4b:99:54:f1:7d: f2:cc:05:8e:48:c8:4c:b7:fe:74:24:50:43:82:e0: 21:59:f6:ad:5d:4c:84:47:9c:81:83:4c:5a:3d:1e: 79:cf:24:22:53:69:e0:fd:c5:2b:90:f3:c3:c8:79: 1a:b3:e6:12:c6:b8:68:37:07:1a:8b:ba:f1:1e:f2: 61:48:c6:5d:d2:cd:19:79:fa:db:da:fe:5c:a9:cb: 49:2b:2e:26:eb:04:64:ef:f5:2f:b2:a8:a9:e9:b4: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AE:87:25:81:6B:89:9E:48:B0:B7:F3:42:71:04:88:15:78:41:DF X509v3 Authority Key Identifier: keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.160.0/21 116.199.224.0/21 116.199.234.0/24 Signature Algorithm: sha256WithRSAEncryption 06:63:b3:43:b3:d8:19:c3:87:ab:e7:e8:f1:17:4f:40:19:c3: 4c:fe:bc:26:9a:f6:47:c7:4d:45:57:40:23:17:5c:ed:c1:91: ac:46:b5:85:2b:f3:93:ed:f5:b9:2c:c3:34:f8:b0:1c:e5:c5: 1e:d0:1e:98:cf:b7:b6:c5:33:6b:f6:9a:5f:d6:1a:ce:d4:89: 5b:74:4f:13:37:7d:30:9b:75:03:80:d0:1c:48:ef:5a:9e:44: 0c:bc:e5:42:2b:eb:f6:c7:4b:b1:cb:3f:11:44:12:cb:6b:7d: dd:fd:d9:9c:b5:fa:c8:a7:74:53:a7:80:ec:ba:55:18:78:b9: 4e:de:8b:1f:2f:05:9f:db:10:ab:42:e5:ba:cd:59:1f:97:cc: f6:11:2d:2f:e4:3b:26:28:4d:63:67:84:ed:d1:7e:44:af:53: 8d:4c:b0:44:8e:c4:62:c3:2a:c1:53:a4:cb:a7:1d:2f:6d:4d: c5:57:c0:36:5e:16:d9:ec:21:0a:e9:7f:d0:21:58:1b:95:f6: 37:28:ac:91:ad:0a:19:bf:06:bc:4b:fa:00:f7:5f:dc:f1:38: 1d:56:a4:b5:0c:89:3d:55:84:8d:4c:71:16:ec:3e:cd:4b:e6: 99:d7:bc:f3:27:4d:3b:e5:68:44:22:93:7b:28:ec:d5:76:f1: 93:17:9f:b1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WwfiXmaN0im1vnB77i94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZmI1NDQxZDhlZjhlNDFhYTI4ZGQ1MWNkZGU5MjU5NDNh ZWY3ZmEwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2FlODcyNTgxNmI4OTllNDhiMGI3ZjM0MjcxMDQ4ODE1Nzg0MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRBXE4Q3duxDIiRaPU2uk2EKiPFr Vt5rKB8Pu1UghTSktjkiu1x1ineW6JwQpdAt3/RNBNmRY/HsA88xSK3oInJ7p5u+ rQQ6vSL4vQTPbLSSzqM3Ab1ce75ypwh4NG8ScbcWFT86EOMNR25HZ60y3FS0+0hp L7DLc0m9/4c/HTyAQwauMbTrJXsaIE6wCrVefLD03lsqIYZDRpjtalwiS5lU8X3y zAWOSMhMt/50JFBDguAhWfatXUyER5yBg0xaPR55zyQiU2ng/cUrkPPDyHkas+YS xrhoNwcai7rxHvJhSMZd0s0Zefrb2v5cqctJKy4m6wRk7/Uvsqip6bSWhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFeuhyWBa4meSLC380JxBIgVeEHfMB8GA1UdIwQY MBaAFHr7VEHY745BqijdUc3ekllDrvf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTIt ZDg5NzNhY2FmNDFkLzEvVjY2SEpZRnJpWjVJc0xmelFuRUVpQlY0UWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTItZDg5NzNhY2FmNDFk LzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDPqSgAwQD dMfgAwQAdMfqMA0GCSqGSIb3DQEBCwUAA4IBAQAGY7NDs9gZw4er5+jxF09AGcNM /rwmmvZHx01FV0AjF1ztwZGsRrWFK/OT7fW5LMM0+LAc5cUe0B6Yz7e2xTNr9ppf 1hrO1IlbdE8TN30wm3UDgNAcSO9ankQMvOVCK+v2x0uxyz8RRBLLa33d/dmctfrI p3RTp4DsulUYeLlO3osfLwWf2xCrQuW6zVkfl8z2ES0v5DsmKE1jZ4Tt0X5Er1ON TLBEjsRiwyrBU6TLpx0vbU3FV8A2XhbZ7CEK6X/QIVgblfY3KKyRrQoZvwa8S/oA 91/c8TgdVqS1DIk9VYSNTHEW7D7NS+aZ17zzJ0075WhEIpN7KOzVdvGTF5+x -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:29 2026 by rpki-client