This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cC-sydhBWpVVmiyv148K4Jz8eus.roa File: cC-sydhBWpVVmiyv148K4Jz8eus.roa (raw, json) Hash identifier: VxViITPR+X5Bx/DeUZfkLZR/bN820Ll/Ejc8JJdDDNU= Subject key identifier: 70:2F:AC:C9:D8:41:5A:95:55:9A:2C:AF:D7:8F:0A:E0:9C:FC:7A:EB Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDDB230D2CB956AFBE25D3074B3991 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cC-sydhBWpVVmiyv148K4Jz8eus.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 62.72.168.0/24 maxlen: 24 62.72.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:db:23:0d:2c:b9:56:af:be:25:d3:07:4b:39:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=702facc9d8415a95559a2cafd78f0ae09cfc7aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:4f:22:9d:b0:1d:30:78:8e:5e:69:bf:d3:42: 6d:43:0f:74:94:ef:94:64:70:f6:69:8a:57:c7:e0: ac:bd:7a:6d:49:48:a1:58:20:14:80:21:59:d4:0c: d7:ba:f0:11:87:62:5f:a1:dd:87:a8:b0:e6:f7:e8: db:3f:17:13:81:3a:25:43:e5:85:b0:ec:92:0d:fe: a3:7a:8b:85:90:60:61:b0:c9:70:83:5d:b3:5f:93: 5f:58:38:c8:e4:b3:29:75:71:14:2e:2b:a7:05:07: 1d:aa:d4:37:90:c0:85:59:d9:e1:2d:83:78:b9:fa: 49:4b:17:97:08:02:ec:d2:e4:f2:75:8e:d2:52:4b: 64:38:1c:f3:0b:ea:2b:b7:0d:a8:9c:63:0b:bf:41: 60:2d:0f:a6:07:3c:d5:63:0f:1a:c8:34:c5:00:be: 92:c9:4b:31:83:32:80:0f:0b:77:7c:b7:0c:cd:d5: d8:a4:b5:13:10:80:c1:95:4d:30:65:74:6f:8d:a1: 98:ea:ad:25:09:73:ae:13:fa:6e:8f:02:2c:5d:9c: ea:e9:ab:98:0f:4f:96:f6:a3:3b:c2:a4:9a:f9:c5: 9b:c8:ae:1e:94:e3:2a:8d:06:ac:2a:72:0a:ae:d5: d8:c1:83:42:3d:92:1d:c2:68:bb:88:20:54:7a:c1: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2F:AC:C9:D8:41:5A:95:55:9A:2C:AF:D7:8F:0A:E0:9C:FC:7A:EB X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cC-sydhBWpVVmiyv148K4Jz8eus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.168.0/24 62.72.174.0/24 Signature Algorithm: sha256WithRSAEncryption 00:ba:6c:0e:95:b7:56:84:54:6a:31:57:20:b8:63:ee:a8:76: 46:55:c5:0e:30:36:08:a5:9b:9e:1d:55:20:80:b4:7b:57:27: 08:eb:a8:b5:e5:2a:ca:db:ca:b8:32:a9:44:b2:59:ad:bc:5a: fc:16:77:54:9c:2c:78:90:89:d7:28:81:8a:5b:99:ab:88:af: 67:a4:12:60:72:8b:75:e6:79:e9:ff:70:ba:0e:ff:1e:94:9d: 05:6c:5a:ff:99:ef:53:c3:5d:a7:ba:e9:33:73:53:d3:1e:66: 95:e6:c6:0c:8b:a6:b6:b8:c5:9f:23:ea:2c:f6:6e:c7:9e:d0: ac:4e:b1:8c:0c:d2:b2:4a:d4:3c:ac:6a:c6:1f:1c:ac:35:df: 84:7e:58:b2:49:38:93:73:ef:f2:50:c3:08:66:59:f7:bb:c5: e9:f2:af:c4:95:cb:ee:ce:07:ba:a0:5d:86:9f:7a:74:3f:14: c0:75:cc:74:d0:4e:08:50:f9:40:ec:68:ee:28:d1:47:93:c5: b1:e9:4c:eb:96:a6:e7:e4:34:c0:60:f9:d0:cc:75:ec:ec:f7: 89:5b:cc:f1:fa:4c:d1:21:20:38:a0:d4:06:3a:89:86:6c:9e: 11:4d:17:2c:eb:68:a1:2a:46:f6:1a:d6:e9:91:76:14:ac:93: 01:ff:89:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87dsjDSy5Vq++JdMHSzmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDJmYWNjOWQ4NDE1YTk1NTU5YTJjYWZkNzhmMGFlMDljZmM3YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/08inbAdMHiOXmm/00JtQw90lO+U ZHD2aYpXx+CsvXptSUihWCAUgCFZ1AzXuvARh2Jfod2HqLDm9+jbPxcTgTolQ+WF sOySDf6jeouFkGBhsMlwg12zX5NfWDjI5LMpdXEULiunBQcdqtQ3kMCFWdnhLYN4 ufpJSxeXCALs0uTydY7SUktkOBzzC+ortw2onGMLv0FgLQ+mBzzVYw8ayDTFAL6S yUsxgzKADwt3fLcMzdXYpLUTEIDBlU0wZXRvjaGY6q0lCXOuE/pujwIsXZzq6auY D0+W9qM7wqSa+cWbyK4elOMqjQasKnIKrtXYwYNCPZIdwmi7iCBUesESswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHAvrMnYQVqVVZosr9ePCuCc/HrrMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvY0Mtc3lkaEJXcFZWbWl5djE0OEs0Sno4ZXVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkioAwQA PkiuMA0GCSqGSIb3DQEBCwUAA4IBAQAAumwOlbdWhFRqMVcguGPuqHZGVcUOMDYI pZueHVUggLR7VycI66i15SrK28q4MqlEslmtvFr8FndUnCx4kInXKIGKW5mriK9n pBJgcot15nnp/3C6Dv8elJ0FbFr/me9Tw12nuukzc1PTHmaV5sYMi6a2uMWfI+os 9m7HntCsTrGMDNKyStQ8rGrGHxysNd+EfliySTiTc+/yUMMIZln3u8Xp8q/Elcvu zge6oF2Gn3p0PxTAdcx00E4IUPlA7GjuKNFHk8Wx6Uzrlqbn5DTAYPnQzHXs7PeJ W8zx+kzRISA4oNQGOomGbJ4RTRcs62ihKkb2GtbpkXYUrJMB/4lw -----END CERTIFICATE-----Generated at Fri Jan 2 17:52:40 2026 by rpki-client