This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/_MvPyasUtjD1bfM_e2e6VHcdY6E.roa File: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (raw, json) Hash identifier: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8= Subject key identifier: FC:CB:CF:C9:AB:14:B6:30:F5:6D:F3:3F:7B:67:BA:54:77:1D:63:A1 Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Certificate serial: 019B7834A77048AE3BA7C2FC0DD03BAA27A9 Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/_MvPyasUtjD1bfM_e2e6VHcdY6E.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15525 IP address blocks: 62.28.0.0/16 maxlen: 24 62.48.128.0/17 maxlen: 24 83.240.128.0/17 maxlen: 24 185.17.228.0/22 maxlen: 24 192.88.123.0/24 maxlen: 24 192.91.177.0/24 maxlen: 24 192.133.15.0/24 maxlen: 24 212.55.160.0/20 maxlen: 24 212.55.176.0/21 maxlen: 24 2a02:818::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a7:70:48:ae:3b:a7:c2:fc:0d:d0:3b:aa:27:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fccbcfc9ab14b630f56df33f7b67ba54771d63a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:ec:ef:da:8b:31:3d:bb:b5:dc:76:70:b0: 56:10:6a:91:58:1e:f1:32:22:81:5f:5d:82:26:84: cf:47:73:8d:00:4e:12:cf:1e:07:69:8c:1d:91:f5: 42:e1:d9:63:7c:a9:b8:2b:17:5c:ac:8d:9b:ff:b7: 85:bc:76:e2:22:7c:32:ab:84:76:67:e8:14:54:c3: 54:98:4e:ac:7a:63:59:73:3b:8f:28:ac:a0:14:fb: 32:0b:2c:79:f9:22:fc:0b:47:32:82:5e:cb:f0:12: dc:1c:a8:e8:d2:42:0b:3b:16:ec:9f:56:63:04:2e: 24:0a:07:a2:b6:64:e3:db:a0:3c:0a:f1:ad:8a:7b: e4:d9:da:98:55:03:08:79:23:f6:85:5b:3f:27:6b: 44:3d:07:f2:c5:e5:fa:13:23:c8:f1:f9:c9:9e:4d: e1:46:1b:2e:ad:88:67:81:bf:b9:e3:3b:14:e2:aa: e5:4e:50:96:e8:18:5f:70:5c:1f:f6:48:e6:b8:59: 78:be:30:dd:40:d0:29:12:8a:41:88:06:f6:90:79: 62:b2:59:44:c0:ec:07:01:70:de:66:60:e3:27:51: 55:6a:29:8f:04:3b:6a:3a:b5:cc:e6:2d:f3:52:95: 8a:52:f3:23:d0:33:70:0d:59:c7:80:30:00:ca:db: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CB:CF:C9:AB:14:B6:30:F5:6D:F3:3F:7B:67:BA:54:77:1D:63:A1 X509v3 Authority Key Identifier: keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/_MvPyasUtjD1bfM_e2e6VHcdY6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.28.0.0/16 62.48.128.0/17 83.240.128.0/17 185.17.228.0/22 192.88.123.0/24 192.91.177.0/24 192.133.15.0/24 212.55.160.0-212.55.183.255 IPv6: 2a02:818::/32 Signature Algorithm: sha256WithRSAEncryption 01:8f:6c:47:3e:f0:03:e8:b2:a6:fb:12:7a:05:4f:35:5c:db: dd:5c:61:43:75:0a:79:db:bc:a1:34:95:03:8c:d9:d3:e4:49: 8d:2d:ce:6c:28:a0:15:68:f5:f4:c8:4b:70:4d:1d:fd:48:32: d8:27:32:88:b1:03:43:60:b2:38:39:97:57:b1:3d:52:f1:36: c6:ac:6b:71:9a:98:3d:cb:b3:1f:32:ab:33:51:cf:7e:1d:90: a6:ac:83:dc:94:2c:1f:e4:a2:85:ae:5c:ba:fb:c7:09:9d:d0: 66:4c:23:48:3a:ab:f2:cc:92:21:8f:b4:67:ad:f7:77:df:b0: 6e:5d:9e:bc:50:5c:da:1c:58:e3:f5:ee:ff:c2:65:55:85:cc: 24:d1:dc:36:f8:bd:89:cb:f8:cb:42:ff:f7:e8:38:a3:3d:f2: 8f:9e:f9:65:9f:7e:a5:7b:68:bb:bd:d2:80:22:d2:77:b4:78: cd:c4:d1:df:34:87:e9:1c:31:29:8b:70:f8:9b:54:1f:16:ed: a7:7f:4e:9d:bf:96:19:22:ac:9f:58:80:9a:99:af:ba:74:ec: 16:8e:52:87:63:e4:09:10:fa:7b:99:c6:05:86:0c:2a:db:d9: a8:c6:f9:e7:37:f6:c9:3c:36:7d:0b:bd:21:17:d4:46:08:6f: 21:74:76:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt4NKdwSK47p8L8DdA7qiepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZmQ4YTBlNmU2ZGQ1NmE2ZWY4Mjg5ZTRiMTg0ZjBjYTAw YzMzZGQwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2NiY2ZjOWFiMTRiNjMwZjU2ZGYzM2Y3YjY3YmE1NDc3MWQ2M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPHs79qLMT27tdx2cLBWEGqRWB7x MiKBX12CJoTPR3ONAE4Szx4HaYwdkfVC4dljfKm4KxdcrI2b/7eFvHbiInwyq4R2 Z+gUVMNUmE6semNZczuPKKygFPsyCyx5+SL8C0cygl7L8BLcHKjo0kILOxbsn1Zj BC4kCgeitmTj26A8CvGtinvk2dqYVQMIeSP2hVs/J2tEPQfyxeX6EyPI8fnJnk3h RhsurYhngb+54zsU4qrlTlCW6BhfcFwf9kjmuFl4vjDdQNApEopBiAb2kHlisllE wOwHAXDeZmDjJ1FVaimPBDtqOrXM5i3zUpWKUvMj0DNwDVnHgDAAytvKTwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPzLz8mrFLYw9W3zP3tnulR3HWOhMB8GA1UdIwQY MBaAFJ79ig5ubdVqbvgonksYTwygDDPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQt NTljMjMwNTQ0NDJkLzEvX012UHlhc1V0akQxYmZNX2UyZTZWSGNkWTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQtNTljMjMwNTQ0NDJk LzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA9BAIAATA3AwMAPhwDBAc+ MIADBAdT8IADBAK5EeQDBADAWHsDBADAW7EDBADAhQ8wDAMEBdQ3oAMEA9Q3sDAN BAIAAjAHAwUAKgIIGDANBgkqhkiG9w0BAQsFAAOCAQEAAY9sRz7wA+iypvsSegVP NVzb3VxhQ3UKedu8oTSVA4zZ0+RJjS3ObCigFWj19MhLcE0d/Ugy2CcyiLEDQ2Cy ODmXV7E9UvE2xqxrcZqYPcuzHzKrM1HPfh2QpqyD3JQsH+Siha5cuvvHCZ3QZkwj SDqr8sySIY+0Z633d9+wbl2evFBc2hxY4/Xu/8JlVYXMJNHcNvi9icv4y0L/9+g4 oz3yj575ZZ9+pXtou73SgCLSd7R4zcTR3zSH6RwxKYtw+JtUHxbtp39Onb+WGSKs n1iAmpmvunTsFo5Sh2PkCRD6e5nGBYYMKtvZqMb55zf2yTw2fQu9IRfURghvIXR2 4g== -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:48 2026 by rpki-client