This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/1-aPdr6dU1tqNeAkf52shE7slUeA.roa File: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (raw, json) Hash identifier: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34= Subject key identifier: F9:A3:DD:AF:A7:54:D6:DA:8D:78:09:1F:E7:6B:21:13:BB:25:51:E0 Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Certificate serial: 019B79ECA92E5F2D50E49EB6A7FE7C626C65 Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/1-aPdr6dU1tqNeAkf52shE7slUeA.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 62.108.64.0/22 maxlen: 24 62.108.68.0/22 maxlen: 24 62.108.72.0/22 maxlen: 24 62.108.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a9:2e:5f:2d:50:e4:9e:b6:a7:fe:7c:62:6c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a3ddafa754d6da8d78091fe76b2113bb2551e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:fb:80:ca:01:c5:74:26:bc:10:78:92:8b: 9f:bb:e0:f5:00:61:43:7d:68:da:7b:76:d4:4e:b3: 01:6b:71:52:4c:59:a6:fd:20:18:71:03:2a:b8:42: 69:b8:17:27:f9:1e:2a:97:ad:1c:52:4f:71:39:36: 92:af:8d:7a:8b:26:3c:7b:f3:f1:94:73:1d:86:c1: d5:b6:b9:b4:97:0d:94:7d:43:d8:18:09:52:f2:62: e9:6f:02:d4:6d:5a:4d:c8:2f:47:ac:81:46:62:08: 42:8c:da:29:c2:d3:0d:41:f0:9a:83:0c:3e:9d:a0: 06:fe:cd:3d:c8:13:47:7e:8c:f0:42:c4:fb:7a:5f: d0:3e:78:43:40:a0:dc:86:5d:f8:7d:e3:0c:84:6a: fb:f1:bc:aa:d1:ab:dc:57:54:b6:8e:61:c3:cd:45: 1b:93:06:0f:2e:97:e2:2e:e7:24:2c:7c:08:91:00: f0:01:2d:c7:90:13:53:1d:fc:1a:9e:d7:72:ed:5a: bb:0c:02:53:9e:0d:87:07:2d:2b:de:69:73:38:a1: 84:ab:96:da:c4:ce:63:95:61:8f:ca:04:6c:17:50: 2c:61:83:02:32:31:b6:55:a9:2c:c3:02:69:ea:46: b7:d1:91:d5:b9:c3:52:95:0d:2f:9e:ba:1a:e6:6c: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A3:DD:AF:A7:54:D6:DA:8D:78:09:1F:E7:6B:21:13:BB:25:51:E0 X509v3 Authority Key Identifier: keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/1-aPdr6dU1tqNeAkf52shE7slUeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.64.0/20 Signature Algorithm: sha256WithRSAEncryption a4:71:3c:c1:93:fd:77:5f:d3:97:e4:79:41:c2:f7:37:42:3e: 98:8f:e4:26:0f:b7:c5:e1:8d:0d:57:3b:b1:de:48:8b:ff:2c: dc:28:0e:97:81:f5:06:2d:60:8d:21:d3:2e:47:9d:bb:ca:5f: 58:ec:23:f3:1c:39:fa:e5:89:e2:75:f7:d2:cf:e8:10:6d:03: 02:9a:cd:6b:97:1a:76:68:2b:98:b8:69:4b:6f:36:cd:cb:fb: e4:72:f9:ac:99:79:63:44:8e:ec:34:64:41:a9:fa:5f:e3:49: 8d:8f:53:df:a3:28:68:d8:a3:c7:33:df:1e:10:26:ed:2c:07: 35:51:5f:82:15:05:1e:1b:71:22:fc:fd:d6:f5:bb:e3:80:16: 1a:61:a1:e2:12:a8:90:1c:a7:71:a5:e4:1e:87:9b:22:a9:b9: a5:5a:0f:5e:21:4c:39:e7:b8:99:62:f1:53:1f:c4:8c:84:2a: ab:20:95:56:9d:c2:b1:83:0b:be:ad:c6:8d:16:9f:76:f7:2e: 8d:86:a1:47:fd:02:61:d1:f0:32:7b:2a:61:d6:b1:44:4d:ab: a2:5c:76:e4:70:aa:61:17:ca:80:e8:7b:89:57:8e:d5:68:42: bd:75:e3:89:5a:b4:e5:b4:e3:b1:88:50:b1:60:07:db:87:91: aa:e3:b4:ab -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57KkuXy1Q5J62p/58YmxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4 Mjc2YjcwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWEzZGRhZmE3NTRkNmRhOGQ3ODA5MWZlNzZiMjExM2JiMjU1MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYv7gMoBxXQmvBB4koufu+D1AGFD fWjae3bUTrMBa3FSTFmm/SAYcQMquEJpuBcn+R4ql60cUk9xOTaSr416iyY8e/Px lHMdhsHVtrm0lw2UfUPYGAlS8mLpbwLUbVpNyC9HrIFGYghCjNopwtMNQfCagww+ naAG/s09yBNHfozwQsT7el/QPnhDQKDchl34feMMhGr78byq0avcV1S2jmHDzUUb kwYPLpfiLuckLHwIkQDwAS3HkBNTHfwantdy7Vq7DAJTng2HBy0r3mlzOKGEq5ba xM5jlWGPygRsF1AsYYMCMjG2VakswwJp6ka30ZHVucNSlQ0vnroa5mz+7wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmj3a+nVNbajXgJH+drIRO7JVHgMB8GA1UdIwQY MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt NDhkYzg4YjU2MDIwLzEvMS1hUGRyNmRVMXRxTmVBa2Y1MnNoRTdzbFVlQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjEvMzcxMDlkLTEzMzctNGIyZC1iYzFiLTQ4ZGM4OGI1NjAy MC8xL0NOZWRJTmRxbmRzSFc1VDU4QUJTcXlHQ2RyYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD5sQDAN BgkqhkiG9w0BAQsFAAOCAQEApHE8wZP9d1/Tl+R5QcL3N0I+mI/kJg+3xeGNDVc7 sd5Ii/8s3CgOl4H1Bi1gjSHTLkedu8pfWOwj8xw5+uWJ4nX30s/oEG0DAprNa5ca dmgrmLhpS282zcv75HL5rJl5Y0SO7DRkQan6X+NJjY9T36MoaNijxzPfHhAm7SwH NVFfghUFHhtxIvz91vW744AWGmGh4hKokByncaXkHoebIqm5pVoPXiFMOee4mWLx Ux/EjIQqqyCVVp3CsYMLvq3GjRafdvcujYahR/0CYdHwMnsqYdaxRE2rolx25HCq YRfKgOh7iVeO1WhCvXXjiVq05bTjsYhQsWAH24eRquO0qw== -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:02 2026 by rpki-client