This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa File: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (raw, json) Hash identifier: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo= Subject key identifier: 9D:08:AA:5E:48:04:BC:6C:B4:51:BE:5B:CB:08:88:C5:F8:8A:F8:1F Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDDCCF3757902DF5FEA13714B3E24D Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 62.72.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:dc:cf:37:57:90:2d:f5:fe:a1:37:14:b3:e2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d08aa5e4804bc6cb451be5bcb0888c5f88af81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:4a:99:a1:32:39:23:df:1a:df:96:9e:cd: 71:bb:c4:f4:17:40:2e:09:3f:dd:f1:b8:75:6e:db: ef:05:13:b4:aa:d9:52:94:97:5b:02:bb:07:55:93: 63:15:92:dd:41:89:e5:58:c9:e7:11:e2:f4:8f:a8: 64:4c:72:13:8b:26:99:e1:b2:f6:27:95:3a:e7:22: 5b:37:1f:3d:e1:36:bc:cb:3a:b3:8a:32:9a:e9:16: 00:46:ce:f0:cf:da:da:83:51:89:f5:74:00:f2:e3: de:45:c6:05:42:d7:ae:ab:d0:96:8c:29:7f:75:02: 3b:c3:0b:f2:9a:08:a8:1b:e2:35:6b:83:dc:6f:14: 83:15:a7:79:09:75:92:35:6c:ca:b7:46:26:6c:1e: 89:fe:5f:e5:ce:11:3a:12:6c:95:6c:e2:30:3c:7d: 49:9d:c4:23:09:18:42:3e:ca:aa:78:a9:08:35:56: 27:30:62:05:3f:f5:cc:ed:19:56:92:7c:e6:df:a5: b2:6a:9b:60:1d:11:07:60:53:9d:fc:8d:83:aa:ab: 9a:e7:1b:d4:72:45:c5:ae:7d:b3:9f:87:82:e3:33: 0a:d7:51:c8:d7:61:c8:1a:e7:a9:b9:58:36:be:41: 24:91:61:7c:3c:df:12:a8:8c:5c:9c:8d:14:82:b2: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:AA:5E:48:04:BC:6C:B4:51:BE:5B:CB:08:88:C5:F8:8A:F8:1F X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.167.0/24 Signature Algorithm: sha256WithRSAEncryption 31:2c:bd:ba:84:32:69:1e:fc:4e:95:4b:f1:e0:be:64:0e:4f: 0f:24:1a:34:3e:ff:4a:66:6f:2b:9b:4b:28:ab:ce:4b:90:ae: a7:8e:cd:a3:14:29:a7:95:35:a6:09:57:50:e8:e2:71:3d:76: 3b:8a:8a:9a:8c:ad:3d:c8:1e:e1:8c:c4:be:89:c0:04:ba:07: 0d:53:53:cd:a5:ba:eb:f5:a1:70:b7:c5:ab:bc:db:72:d7:e3: f2:08:9d:57:f8:bc:f0:7b:55:e2:18:69:f9:5c:35:3d:d5:fc: ce:9a:58:4b:f7:66:70:6b:e3:ac:fa:24:fe:a8:0d:e7:65:3a: c9:50:60:ba:33:fb:a6:d5:99:f4:e6:7b:86:c5:9a:f3:9f:84: 32:95:5e:64:4b:5a:1c:18:95:2c:e1:c1:3c:b5:9d:2c:27:f6: 08:38:da:08:74:af:c1:ed:87:ed:7b:19:b1:cc:0d:32:ac:34: c4:2b:a1:b9:82:52:35:a8:c8:db:2b:47:de:12:22:50:5e:91: 46:34:1a:0f:73:3b:51:14:e4:ed:de:dd:8c:71:fd:44:93:12: f0:ba:c2:18:30:63:45:fb:e5:fe:7b:31:ba:e8:32:d4:83:97: 36:d8:3f:39:f4:3c:fe:98:13:8b:1d:41:72:09:f6:87:10:2b: ae:83:ea:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dzPN1eQLfX+oTcUs+JNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDA4YWE1ZTQ4MDRiYzZjYjQ1MWJlNWJjYjA4ODhjNWY4OGFmODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuORKmaEyOSPfGt+Wns1xu8T0F0Au CT/d8bh1btvvBRO0qtlSlJdbArsHVZNjFZLdQYnlWMnnEeL0j6hkTHITiyaZ4bL2 J5U65yJbNx894Ta8yzqzijKa6RYARs7wz9rag1GJ9XQA8uPeRcYFQteuq9CWjCl/ dQI7wwvymgioG+I1a4PcbxSDFad5CXWSNWzKt0YmbB6J/l/lzhE6EmyVbOIwPH1J ncQjCRhCPsqqeKkINVYnMGIFP/XM7RlWknzm36WyaptgHREHYFOd/I2Dqqua5xvU ckXFrn2zn4eC4zMK11HI12HIGuepuVg2vkEkkWF8PN8SqIxcnI0UgrIIfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0Iql5IBLxstFG+W8sIiMX4ivgfMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvblFpcVhrZ0V2R3kwVWI1Ynl3aUl4ZmlLLUI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkinMA0G CSqGSIb3DQEBCwUAA4IBAQAxLL26hDJpHvxOlUvx4L5kDk8PJBo0Pv9KZm8rm0so q85LkK6njs2jFCmnlTWmCVdQ6OJxPXY7ioqajK09yB7hjMS+icAEugcNU1PNpbrr 9aFwt8WrvNty1+PyCJ1X+Lzwe1XiGGn5XDU91fzOmlhL92Zwa+Os+iT+qA3nZTrJ UGC6M/um1Zn05nuGxZrzn4QylV5kS1ocGJUs4cE8tZ0sJ/YIONoIdK/B7Yftexmx zA0yrDTEK6G5glI1qMjbK0feEiJQXpFGNBoPcztRFOTt3t2Mcf1EkxLwusIYMGNF ++X+ezG66DLUg5c22D859Dz+mBOLHUFyCfaHECuug+pv -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:18 2026 by rpki-client