This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kEHCx2KPnbcZJdbzsy7zH4D1Sg4.roa File: kEHCx2KPnbcZJdbzsy7zH4D1Sg4.roa (raw, json) Hash identifier: bcFxF873MZkpZmOV08T6nkOuQgijfNrZUmktwHDfSVw= Subject key identifier: 90:41:C2:C7:62:8F:9D:B7:19:25:D6:F3:B3:2E:F3:1F:80:F5:4A:0E Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE0057CDD37C24318975D5B5FF639 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kEHCx2KPnbcZJdbzsy7zH4D1Sg4.roa Signing time: Fri 02 Jan 2026 04:18:42 +0000 ROA not before: Fri 02 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 62.72.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e0:05:7c:dd:37:c2:43:18:97:5d:5b:5f:f6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9041c2c7628f9db71925d6f3b32ef31f80f54a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:09:49:7c:fa:72:7b:fd:99:58:8d:e5:23: f3:af:97:53:c6:99:cd:f7:3e:d6:c1:38:84:36:ad: 18:24:17:40:f7:88:29:bd:4f:cf:e3:72:77:2f:ad: 3c:78:69:b4:cc:4d:9d:71:2b:6b:66:86:68:45:df: 1c:cc:35:8a:da:ec:32:af:fd:17:ee:b1:c0:c4:6b: 2f:fd:f3:d6:08:2f:6b:58:ab:98:de:cb:ab:3e:10: 45:88:fb:23:a1:c1:ef:76:b5:b6:dc:f9:32:10:0e: c9:80:f9:d1:f7:84:26:9c:9e:b3:62:08:7f:62:af: 39:98:6b:21:b8:0a:8c:2d:3d:5e:4c:b5:79:a8:38: 8f:91:de:ca:5d:68:18:3e:cb:2e:f4:46:0b:d8:07: 5e:78:04:a2:61:75:5a:aa:fd:84:c3:76:5e:dd:62: eb:50:78:11:bf:9f:9d:17:9b:e4:b7:81:c9:d3:1f: f6:09:7d:1e:03:be:71:33:14:a6:77:a4:5e:d2:a4: 83:04:a1:4a:0c:8f:c8:ea:cd:35:7c:a7:54:fd:24: 0a:3e:f7:1f:65:e2:aa:87:5a:6d:13:e0:b0:ad:29: 02:fe:e4:d2:45:ef:da:95:d4:3b:9b:ff:6f:d9:30: 68:c9:57:6d:41:db:d7:e0:97:06:eb:30:70:b1:33: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:C2:C7:62:8F:9D:B7:19:25:D6:F3:B3:2E:F3:1F:80:F5:4A:0E X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kEHCx2KPnbcZJdbzsy7zH4D1Sg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.190.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:67:d3:e8:6e:ae:9c:f0:68:8f:89:b1:30:02:e0:6e:f6:ce: a9:a9:e2:10:2e:1c:cd:5c:e4:7a:77:b2:05:15:8e:74:22:9c: 90:12:0f:32:a1:bd:11:1e:f2:13:3a:67:e4:bd:ea:b3:aa:98: 23:56:54:48:26:93:f8:dc:30:94:bf:38:14:65:c0:11:00:ef: 4c:bd:47:39:07:5b:aa:8f:85:86:3f:5b:bb:cd:db:65:d3:db: 89:86:46:39:1e:e1:15:a6:d1:cb:56:70:36:ab:c5:3c:06:cd: 14:3f:76:cb:e3:3e:8b:97:c5:a3:d2:bd:1a:22:74:bf:be:19: f4:26:2f:5e:9e:a9:72:f8:ed:b7:0a:8b:53:81:46:11:78:ae: cc:3c:02:2c:07:73:f6:79:92:89:dd:32:b7:b0:97:d6:fe:50: a7:b1:83:72:26:c7:55:0d:3f:24:a3:65:d0:c0:fe:7b:55:e5: 32:88:fe:3a:c3:71:5e:b8:10:c7:f7:d4:c1:26:0b:96:17:9b: 81:54:30:fa:bb:b9:c6:1d:2e:e3:80:9c:3f:bd:15:5a:0a:30: ea:19:26:d4:a9:6a:ac:fb:65:79:45:f9:96:8c:28:4a:48:7e: 08:e1:c9:c3:68:24:fe:e1:b3:c9:4a:70:48:9f:b5:43:cb:ab: 7c:7b:1d:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87eAFfN03wkMYl11bX/Y5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQxYzJjNzYyOGY5ZGI3MTkyNWQ2ZjNiMzJlZjMxZjgwZjU0YTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaMJSXz6cnv9mViN5SPzr5dTxpnN 9z7WwTiENq0YJBdA94gpvU/P43J3L608eGm0zE2dcStrZoZoRd8czDWK2uwyr/0X 7rHAxGsv/fPWCC9rWKuY3surPhBFiPsjocHvdrW23PkyEA7JgPnR94QmnJ6zYgh/ Yq85mGshuAqMLT1eTLV5qDiPkd7KXWgYPssu9EYL2AdeeASiYXVaqv2Ew3Ze3WLr UHgRv5+dF5vkt4HJ0x/2CX0eA75xMxSmd6Re0qSDBKFKDI/I6s01fKdU/SQKPvcf ZeKqh1ptE+CwrSkC/uTSRe/aldQ7m/9v2TBoyVdtQdvX4JcG6zBwsTOpowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBBwsdij523GSXW87Mu8x+A9UoOMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEva0VIQ3gyS1BuYmNaSmRienN5N3pINEQxU2c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki+MA0G CSqGSIb3DQEBCwUAA4IBAQAKZ9Pobq6c8GiPibEwAuBu9s6pqeIQLhzNXOR6d7IF FY50IpyQEg8yob0RHvITOmfkveqzqpgjVlRIJpP43DCUvzgUZcARAO9MvUc5B1uq j4WGP1u7zdtl09uJhkY5HuEVptHLVnA2q8U8Bs0UP3bL4z6Ll8Wj0r0aInS/vhn0 Ji9enqly+O23CotTgUYReK7MPAIsB3P2eZKJ3TK3sJfW/lCnsYNyJsdVDT8ko2XQ wP57VeUyiP46w3FeuBDH99TBJguWF5uBVDD6u7nGHS7jgJw/vRVaCjDqGSbUqWqs +2V5RfmWjChKSH4I4cnDaCT+4bPJSnBIn7VDy6t8ex2j -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:09 2026 by rpki-client