This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/6w_-NsXCxN2AkytB9MIpqZqIhZs.roa File: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (raw, json) Hash identifier: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4= Subject key identifier: EB:0F:FE:36:C5:C2:C4:DD:80:93:2B:41:F4:C2:29:A9:9A:88:85:9B Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Certificate serial: 019B79ECA8AB7613B74A9C8DC6DABFF1A894 Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/6w_-NsXCxN2AkytB9MIpqZqIhZs.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8831 IP address blocks: 62.108.64.0/21 maxlen: 21 62.108.64.0/22 maxlen: 24 62.108.68.0/22 maxlen: 24 62.108.72.0/22 maxlen: 24 62.108.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a8:ab:76:13:b7:4a:9c:8d:c6:da:bf:f1:a8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb0ffe36c5c2c4dd80932b41f4c229a99a88859b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:08:a7:30:5c:6b:05:4c:db:c8:6b:d7:8f: c1:51:30:94:fb:7a:24:05:ca:5b:85:73:ee:32:39: 16:1c:43:4a:ab:fc:5c:1b:e5:36:03:8e:99:0c:d9: 8a:9c:bb:9f:83:09:00:c6:98:d4:57:20:67:76:12: d5:47:c2:40:62:f5:60:1a:ed:98:1c:4d:90:14:ef: c4:39:82:27:6e:0e:68:a5:78:1f:89:8b:b9:aa:15: 38:73:5c:dc:76:41:26:8d:3a:1d:eb:99:1a:56:8f: 35:b7:75:4a:e7:93:65:2d:4a:86:68:ff:ba:a0:80: 23:90:2b:00:14:27:29:69:21:07:13:29:90:da:04: 30:a9:3a:f9:7a:b6:76:9b:27:12:77:2a:9b:96:c5: ed:66:aa:52:ce:69:57:a3:83:f4:66:5c:0f:5b:8e: 7d:ea:d4:ee:85:1d:53:4f:97:1b:49:be:fb:96:02: 9c:6e:07:bf:95:13:c3:54:d2:d4:53:e4:40:64:63: 20:2f:21:e3:05:cb:9a:e7:f4:4b:c4:ce:c0:5a:89: 5c:52:ec:b1:df:c9:05:79:84:dd:f6:f2:7b:a8:66: 31:67:02:b2:dd:00:3e:15:fb:e1:7a:a5:18:5d:a9: de:0b:20:ed:28:f1:d1:2b:6f:b5:45:b7:de:db:06: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:FE:36:C5:C2:C4:DD:80:93:2B:41:F4:C2:29:A9:9A:88:85:9B X509v3 Authority Key Identifier: keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/6w_-NsXCxN2AkytB9MIpqZqIhZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.64.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:30:c0:56:b9:80:85:65:ed:38:8e:f3:0b:c2:0b:1f:18:87: fb:76:7a:cf:55:89:bd:37:3f:ff:3f:d8:7a:88:9b:b0:b2:f5: d8:45:91:49:61:6d:be:05:b6:f3:e7:77:77:8d:62:72:a8:7e: 70:7d:f8:bf:00:e4:49:67:b8:e7:43:6d:44:89:f6:7b:ff:49: c9:32:c9:85:64:99:78:60:0e:cc:f3:ae:0f:75:81:ca:86:09: 22:14:e8:dd:97:91:54:c9:c0:c6:74:38:64:b4:3d:52:e1:7c: 03:79:7d:25:53:bc:ba:92:47:b0:12:ff:97:70:ea:4d:60:64: 71:e5:62:99:f6:33:5a:b1:31:60:e3:f1:1f:ae:9a:ba:0a:42: a2:f2:36:80:3a:46:8e:19:75:f9:9e:09:49:64:a6:94:52:23: 01:50:77:5a:d8:9f:54:80:c7:4f:7b:c1:3a:5a:69:9a:32:ec: a4:16:eb:9f:a3:33:23:bf:f9:8e:7a:62:89:45:ce:43:6f:b5: 99:37:4d:06:4d:03:da:6b:79:d7:e0:42:8d:b9:af:3c:b0:68: 68:71:89:d0:81:83:ef:4f:8b:1b:8f:68:2d:3b:f3:27:55:7f: 4c:33:aa:e1:f0:e2:51:60:64:4c:4d:d9:a7:15:3d:8e:62:61: 45:26:1e:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KirdhO3SpyNxtq/8aiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4 Mjc2YjcwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjBmZmUzNmM1YzJjNGRkODA5MzJiNDFmNGMyMjlhOTlhODg4NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuQIpzBcawVM28hr14/BUTCU+3ok BcpbhXPuMjkWHENKq/xcG+U2A46ZDNmKnLufgwkAxpjUVyBndhLVR8JAYvVgGu2Y HE2QFO/EOYInbg5opXgfiYu5qhU4c1zcdkEmjTod65kaVo81t3VK55NlLUqGaP+6 oIAjkCsAFCcpaSEHEymQ2gQwqTr5erZ2mycSdyqblsXtZqpSzmlXo4P0ZlwPW459 6tTuhR1TT5cbSb77lgKcbge/lRPDVNLUU+RAZGMgLyHjBcua5/RLxM7AWolcUuyx 38kFeYTd9vJ7qGYxZwKy3QA+FfvheqUYXaneCyDtKPHRK2+1Rbfe2wb7vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsP/jbFwsTdgJMrQfTCKamaiIWbMB8GA1UdIwQY MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt NDhkYzg4YjU2MDIwLzEvNndfLU5zWEN4TjJBa3l0QjlNSXBxWnFJaFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPmxAMA0G CSqGSIb3DQEBCwUAA4IBAQALMMBWuYCFZe04jvMLwgsfGIf7dnrPVYm9Nz//P9h6 iJuwsvXYRZFJYW2+Bbbz53d3jWJyqH5wffi/AORJZ7jnQ21EifZ7/0nJMsmFZJl4 YA7M864PdYHKhgkiFOjdl5FUycDGdDhktD1S4XwDeX0lU7y6kkewEv+XcOpNYGRx 5WKZ9jNasTFg4/Efrpq6CkKi8jaAOkaOGXX5nglJZKaUUiMBUHda2J9UgMdPe8E6 WmmaMuykFuufozMjv/mOemKJRc5Db7WZN00GTQPaa3nX4EKNua88sGhocYnQgYPv T4sbj2gtO/MnVX9MM6rh8OJRYGRMTdmnFT2OYmFFJh5c -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:08 2026 by rpki-client