This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/Ka34B6rBgIn3gd6cXePqD35HsVc.roa File: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (raw, json) Hash identifier: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo= Subject key identifier: 29:AD:F8:07:AA:C1:80:89:F7:81:DE:9C:5D:E3:EA:0F:7E:47:B1:57 Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2 Certificate serial: 019B7DC9F1A608BD21BFBAE79E2F8E821894 Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/Ka34B6rBgIn3gd6cXePqD35HsVc.roa Signing time: Fri 02 Jan 2026 08:19:05 +0000 ROA not before: Fri 02 Jan 2026 08:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25761 IP address blocks: 170.62.253.0/24 maxlen: 24 2001:67c:fec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f1:a6:08:bd:21:bf:ba:e7:9e:2f:8e:82:18:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29adf807aac18089f781de9c5de3ea0f7e47b157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:22:f3:9b:f0:30:24:4f:75:ea:8e:0c:c6: ce:90:bc:a4:ca:61:62:86:5d:b9:ea:43:14:b8:68: 56:d5:9f:6e:c9:85:09:37:eb:81:44:fc:43:02:f3: 7b:f7:02:69:17:2d:c8:13:95:ac:2b:7e:43:1e:a7: 94:a5:89:34:4f:25:38:6f:51:79:08:48:e4:fe:63: 59:ff:67:b3:5a:f3:eb:93:05:c1:2e:3a:bb:43:c6: 3c:f0:1e:8e:f9:e2:a9:14:68:c2:b4:65:39:4a:70: 21:1c:e2:55:e5:2a:62:1a:f4:6f:ad:59:bf:38:ea: 8a:d5:4e:5e:ff:bb:bf:da:92:ee:26:bd:d6:2d:5a: 7c:4f:5f:48:35:49:a9:2e:ba:e6:e4:fc:2a:42:38: a3:0a:3a:f2:02:f1:38:ac:8d:49:c5:94:90:5a:fc: 3f:01:95:72:92:a5:76:48:b3:a5:12:00:d0:f8:2f: da:65:03:2e:b2:fc:d8:1d:7b:22:ae:6d:10:04:09: fc:ae:fd:ca:db:83:82:9d:66:b3:7c:c7:a7:61:95: d9:6e:50:83:18:be:7a:18:20:e4:df:7b:36:74:4c: 93:8c:95:fb:14:81:e8:55:30:5b:b4:44:b5:5a:a4: e9:da:2d:22:4c:3c:3f:54:10:59:5c:2f:27:b1:d7: f9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:F8:07:AA:C1:80:89:F7:81:DE:9C:5D:E3:EA:0F:7E:47:B1:57 X509v3 Authority Key Identifier: keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/Ka34B6rBgIn3gd6cXePqD35HsVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.62.253.0/24 IPv6: 2001:67c:fec::/48 Signature Algorithm: sha256WithRSAEncryption 03:32:44:79:d4:6f:d3:2f:93:0e:6a:8c:e0:51:77:6f:86:98: 06:c6:86:c9:41:cd:03:b1:1f:f9:92:36:f8:07:94:c5:e8:b8: dd:18:17:32:a6:d8:5a:fb:4f:73:46:fc:13:a3:63:09:44:9e: 98:91:21:5a:06:04:69:d5:9b:a9:65:f9:14:ea:42:45:d9:9c: e8:43:07:e2:f4:b4:e5:df:a0:0c:63:fc:30:7f:06:21:92:e2: 8a:dd:05:67:a4:68:6f:24:18:7e:bb:05:7a:01:69:1c:33:3c: 52:78:0b:1e:f1:4d:60:90:26:bf:4a:63:ae:1f:ab:9f:8c:d6: e1:fd:e7:d2:08:1b:51:cf:79:41:33:14:59:1c:4c:c2:0f:68: ee:4f:c7:da:48:9e:9b:25:5f:0b:ee:82:e9:5e:27:83:49:11: ea:2d:ad:14:ac:ee:df:58:2f:b5:25:ee:4f:85:df:61:3f:e5: 08:41:1c:5d:e2:34:75:04:b7:c9:31:f4:93:13:0e:09:70:ec: 2b:50:21:0f:94:d0:96:bf:fc:97:33:7e:50:3d:f7:1c:94:ed: 4e:e8:18:40:41:5c:cb:91:71:63:4f:e4:c8:a2:fc:be:9c:6c: 79:f3:41:13:68:cd:45:cd:7a:c4:60:be:22:c9:84:33:00:87: 21:56:e3:48 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yfGmCL0hv7rnni+OghiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4 MWU4YzIwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWFkZjgwN2FhYzE4MDg5Zjc4MWRlOWM1ZGUzZWEwZjdlNDdiMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Ei85vwMCRPdeqODMbOkLykymFi hl256kMUuGhW1Z9uyYUJN+uBRPxDAvN79wJpFy3IE5WsK35DHqeUpYk0TyU4b1F5 CEjk/mNZ/2ezWvPrkwXBLjq7Q8Y88B6O+eKpFGjCtGU5SnAhHOJV5SpiGvRvrVm/ OOqK1U5e/7u/2pLuJr3WLVp8T19INUmpLrrm5PwqQjijCjryAvE4rI1JxZSQWvw/ AZVykqV2SLOlEgDQ+C/aZQMusvzYHXsirm0QBAn8rv3K24OCnWazfMenYZXZblCD GL56GCDk33s2dEyTjJX7FIHoVTBbtES1WqTp2i0iTDw/VBBZXC8nsdf5UwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCmt+AeqwYCJ94HenF3j6g9+R7FXMB8GA1UdIwQY MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt ZmVhNzRlODEwNTFhLzEvS2EzNEI2ckJnSW4zZ2Q2Y1hlUHFEMzVIc1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAqj79MA8E AgACMAkDBwAgAQZ8D+wwDQYJKoZIhvcNAQELBQADggEBAAMyRHnUb9Mvkw5qjOBR d2+GmAbGhslBzQOxH/mSNvgHlMXouN0YFzKm2Fr7T3NG/BOjYwlEnpiRIVoGBGnV m6ll+RTqQkXZnOhDB+L0tOXfoAxj/DB/BiGS4ordBWekaG8kGH67BXoBaRwzPFJ4 Cx7xTWCQJr9KY64fq5+M1uH959IIG1HPeUEzFFkcTMIPaO5Px9pInpslXwvugule J4NJEeotrRSs7t9YL7Ul7k+F32E/5QhBHF3iNHUEt8kx9JMTDglw7CtQIQ+U0Ja/ /JczflA99xyU7U7oGEBBXMuRcWNP5Mii/L6cbHnzQRNozUXNesRgviLJhDMAhyFW 40g= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:24 2026 by rpki-client