This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa File: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (raw, json) Hash identifier: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g= Subject key identifier: 29:BE:6B:EA:44:9D:11:56:32:90:F9:54:65:32:3D:AE:8D:92:AA:2E Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDEEE97A63DB6BF8FF2CD4F245BF15 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 62.72.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ee:e9:7a:63:db:6b:f8:ff:2c:d4:f2:45:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29be6bea449d11563290f95465323dae8d92aa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:25:64:2d:f6:34:5b:f2:30:c6:84:37:25: 76:e1:79:7c:56:a6:24:f8:29:36:26:e6:e3:3d:f1: 77:3c:49:a5:4f:84:e1:ee:72:40:2e:d8:3b:48:a6: 13:b5:9a:b1:50:b3:f3:65:a2:b5:0d:eb:c6:55:60: 38:62:4e:b8:db:c8:37:b1:37:08:39:76:85:4a:50: a7:0c:d4:6c:87:26:2e:1c:76:58:4f:79:8c:9e:4f: 64:15:b2:64:96:1e:45:44:38:f7:02:b2:8f:9c:99: 73:32:af:ac:c0:1e:b3:1b:19:c7:da:16:a8:1c:18: 98:8a:8c:a4:14:50:f7:40:72:75:46:4b:e1:5c:2a: b8:c2:b5:ec:10:03:d3:98:41:3e:67:2f:18:4c:c6: f5:02:c6:23:f8:87:6a:d9:99:d0:c3:e2:f8:21:8c: 90:fe:d0:0e:c6:27:ea:57:53:be:ea:b4:42:30:ea: ce:75:d8:18:24:2c:5c:29:85:b3:1f:0f:aa:86:18: 3e:b5:14:52:df:c6:fa:57:53:37:68:6b:33:53:00: d8:df:82:7b:d8:be:7c:98:08:59:e2:30:06:ee:62: 76:f5:5f:5f:52:e8:79:41:11:b8:01:b6:d8:99:fa: 6c:66:8c:e1:2d:83:90:18:4c:3e:36:60:a9:db:c3: c0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BE:6B:EA:44:9D:11:56:32:90:F9:54:65:32:3D:AE:8D:92:AA:2E X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.160.0/24 Signature Algorithm: sha256WithRSAEncryption c4:9f:15:75:28:a7:b2:de:57:b0:ab:1d:ec:84:6d:71:13:05: 70:e5:76:19:fe:31:48:34:a6:bd:00:32:99:e5:68:99:fe:fc: 9b:32:1c:19:74:90:2f:8d:8d:6d:3d:d0:d2:bb:c6:9b:26:b4: 52:da:3b:c1:64:98:5f:aa:d5:78:62:35:d9:3c:7a:6d:3f:e4: fb:31:3e:82:5b:d6:62:bf:7d:c1:9e:19:a2:3c:ef:d4:ae:73: a1:43:c7:7f:c7:de:7f:90:9b:5d:aa:78:25:48:d6:af:9c:e2: 6d:b0:be:07:d5:d1:ca:06:32:3b:62:c9:25:f7:af:74:6c:1d: 83:08:00:83:88:b7:b9:f1:6c:ae:7d:3f:43:a3:29:49:a1:01: 1d:83:1f:17:82:19:1a:49:c5:41:82:11:82:d9:80:bc:82:a5: 3f:21:b1:9b:ad:62:5e:9d:b7:a1:e1:64:23:b6:b5:c9:f3:b1: 04:89:da:a9:a5:d2:48:9d:a0:17:31:8e:24:59:a2:c3:1e:63: 4e:84:8a:7c:9c:a5:63:f7:54:ac:9d:1d:ab:79:ee:3b:0f:74: 86:3b:7d:db:b7:50:0a:da:42:9e:24:6f:24:ee:31:36:a3:4f: 10:e2:81:68:80:b6:c1:43:50:00:e9:0f:e4:e8:2a:e5:e8:8e: bf:82:8e:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87e7pemPba/j/LNTyRb8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWJlNmJlYTQ0OWQxMTU2MzI5MGY5NTQ2NTMyM2RhZThkOTJhYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLclZC32NFvyMMaENyV24Xl8VqYk +Ck2JubjPfF3PEmlT4Th7nJALtg7SKYTtZqxULPzZaK1DevGVWA4Yk6428g3sTcI OXaFSlCnDNRshyYuHHZYT3mMnk9kFbJklh5FRDj3ArKPnJlzMq+swB6zGxnH2hao HBiYioykFFD3QHJ1RkvhXCq4wrXsEAPTmEE+Zy8YTMb1AsYj+Idq2ZnQw+L4IYyQ /tAOxifqV1O+6rRCMOrOddgYJCxcKYWzHw+qhhg+tRRS38b6V1M3aGszUwDY34J7 2L58mAhZ4jAG7mJ29V9fUuh5QRG4AbbYmfpsZozhLYOQGEw+NmCp28PAoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCm+a+pEnRFWMpD5VGUyPa6NkqouMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvS2I1cjZrU2RFVll5a1BsVVpUSTlybzJTcWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkigMA0G CSqGSIb3DQEBCwUAA4IBAQDEnxV1KKey3lewqx3shG1xEwVw5XYZ/jFINKa9ADKZ 5WiZ/vybMhwZdJAvjY1tPdDSu8abJrRS2jvBZJhfqtV4YjXZPHptP+T7MT6CW9Zi v33BnhmiPO/UrnOhQ8d/x95/kJtdqnglSNavnOJtsL4H1dHKBjI7Yskl9690bB2D CACDiLe58WyufT9DoylJoQEdgx8XghkaScVBghGC2YC8gqU/IbGbrWJenbeh4WQj trXJ87EEidqppdJInaAXMY4kWaLDHmNOhIp8nKVj91SsnR2ree47D3SGO33bt1AK 2kKeJG8k7jE2o08Q4oFogLbBQ1AA6Q/k6Crl6I6/go6o -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:08 2026 by rpki-client