This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa File: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (raw, json) Hash identifier: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY= Subject key identifier: 17:BC:74:69:28:B6:FC:C2:F0:35:A0:F2:62:E2:9A:1B:27:3F:49:34 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDEF4F495D925DFD829D751E1FF8B2 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399073 IP address blocks: 62.72.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ef:4f:49:5d:92:5d:fd:82:9d:75:1e:1f:f8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17bc746928b6fcc2f035a0f262e29a1b273f4934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:2f:6a:78:9c:e8:ec:74:bb:b4:e1:8f:cb: 97:87:33:e1:63:9a:58:38:fc:44:c1:29:0a:06:b3: 81:e5:06:76:e3:07:4b:36:c8:84:37:d2:ee:b2:0e: 83:1f:8b:dc:d4:33:64:6b:61:43:af:d6:30:06:c3: f4:3d:cf:ba:a2:15:be:70:15:a2:f8:89:db:d7:26: 1b:5a:38:c7:23:17:fd:0f:64:14:bd:09:4b:98:13: 1d:74:d5:9a:27:59:b7:ee:99:a9:09:4b:4d:ce:4c: cd:f6:04:31:c8:25:c1:91:f4:3a:c5:00:55:29:2e: a1:d9:12:b2:15:be:09:c8:7c:34:a1:9e:30:47:b2: db:fa:f9:7d:b8:0b:8a:c6:24:2e:80:2a:d6:76:81: 81:05:f3:51:18:4d:5a:95:21:71:e0:7c:ac:79:4f: 10:3e:9c:40:de:00:29:bf:a1:16:c9:6a:41:b9:89: b6:22:e0:76:b7:71:59:ac:ca:4a:90:8d:ee:7d:5a: 9b:fe:96:b1:bd:f7:20:5f:61:68:30:3e:09:60:26: 12:a2:c8:e4:72:7e:00:fb:a8:b5:62:e7:25:75:0d: ec:55:ad:62:80:66:b9:11:e0:84:de:b5:2d:5b:d2: 72:cf:08:ac:f1:24:b7:6a:17:ee:76:b3:82:54:83: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BC:74:69:28:B6:FC:C2:F0:35:A0:F2:62:E2:9A:1B:27:3F:49:34 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.185.0/24 Signature Algorithm: sha256WithRSAEncryption 56:30:00:84:1d:3f:87:89:54:b0:59:87:d1:66:02:09:21:96: 9e:c4:86:5e:78:92:9c:37:79:6d:9f:ef:c5:76:d5:21:ee:22: 9e:05:37:1c:29:e7:5e:f8:20:68:30:f2:ad:20:4a:99:50:45: cd:ce:b8:0c:5c:49:2e:18:5a:72:76:c3:14:4e:5a:38:08:1c: 38:82:dc:f6:5f:b9:2e:46:97:b7:1c:7c:d4:a4:c3:7e:00:5f: b3:f9:6e:75:cf:7d:64:fe:2a:e4:34:08:3f:6a:14:c4:73:5d: 64:1d:ee:27:48:21:4b:a6:e8:88:36:a0:a8:83:f8:9b:fe:75: ce:60:d7:84:82:68:e8:45:45:89:4a:ec:99:dc:8b:d1:f3:47: 79:c6:2c:8e:8c:f3:07:49:89:e1:95:bf:a1:69:c2:2d:ac:46: f5:b4:ae:59:23:f2:f5:dc:d9:e3:63:63:2d:d2:a0:d5:50:03: 74:06:92:32:ad:73:21:a1:63:09:85:18:b5:32:5a:8f:24:2b: 04:d7:93:4d:87:ef:a7:f4:32:81:1c:95:3a:b8:0e:04:7e:43: 10:65:11:ca:62:49:c3:04:09:0f:f6:6b:eb:4c:5a:30:c5:23: 2b:9a:0e:ce:1c:c5:fb:01:0a:65:0d:d0:23:cc:d2:ab:28:d4: 86:ab:f2:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87e9PSV2SXf2CnXUeH/iyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2JjNzQ2OTI4YjZmY2MyZjAzNWEwZjI2MmUyOWExYjI3M2Y0OTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EQvanic6Ox0u7Thj8uXhzPhY5pY OPxEwSkKBrOB5QZ24wdLNsiEN9Lusg6DH4vc1DNka2FDr9YwBsP0Pc+6ohW+cBWi +Inb1yYbWjjHIxf9D2QUvQlLmBMddNWaJ1m37pmpCUtNzkzN9gQxyCXBkfQ6xQBV KS6h2RKyFb4JyHw0oZ4wR7Lb+vl9uAuKxiQugCrWdoGBBfNRGE1alSFx4HyseU8Q PpxA3gApv6EWyWpBuYm2IuB2t3FZrMpKkI3ufVqb/paxvfcgX2FoMD4JYCYSosjk cn4A+6i1YucldQ3sVa1igGa5EeCE3rUtW9Jyzwis8SS3ahfudrOCVIPpVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBe8dGkotvzC8DWg8mLimhsnP0k0MB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvRjd4MGFTaTJfTUx3TmFEeVl1S2FHeWNfU1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki5MA0G CSqGSIb3DQEBCwUAA4IBAQBWMACEHT+HiVSwWYfRZgIJIZaexIZeeJKcN3ltn+/F dtUh7iKeBTccKede+CBoMPKtIEqZUEXNzrgMXEkuGFpydsMUTlo4CBw4gtz2X7ku Rpe3HHzUpMN+AF+z+W51z31k/irkNAg/ahTEc11kHe4nSCFLpuiINqCog/ib/nXO YNeEgmjoRUWJSuyZ3IvR80d5xiyOjPMHSYnhlb+hacItrEb1tK5ZI/L13NnjY2Mt 0qDVUAN0BpIyrXMhoWMJhRi1MlqPJCsE15NNh++n9DKBHJU6uA4EfkMQZRHKYknD BAkP9mvrTFowxSMrmg7OHMX7AQplDdAjzNKrKNSGq/LG -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:28 2026 by rpki-client