This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mSc3uRdJKRWoyWaxIVr9goAEpY8.roa File: mSc3uRdJKRWoyWaxIVr9goAEpY8.roa (raw, json) Hash identifier: m0ecqqtIwof0ygUeYGq9gMFggmtzrSLaMgS1ooDzOVw= Subject key identifier: 99:27:37:B9:17:49:29:15:A8:C9:66:B1:21:5A:FD:82:80:04:A5:8F Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37A6C5DA0B001CBED41A143DD0E41F Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mSc3uRdJKRWoyWaxIVr9goAEpY8.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 170.62.112.0/22 maxlen: 24 170.62.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a6:c5:da:0b:00:1c:be:d4:1a:14:3d:d0:e4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=992737b917492915a8c966b1215afd828004a58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:35:34:6f:f7:b7:5c:6f:28:dd:fc:3e:f0: be:21:30:05:e5:30:df:d9:be:cc:80:74:3b:9b:84: ec:5c:ac:8e:f7:b1:51:05:98:f7:12:70:94:00:e2: 68:56:5d:b4:97:b6:10:d9:4d:bf:c7:6c:bd:40:f3: c2:02:e7:66:b5:dc:c0:51:64:2c:36:9f:7b:41:3b: 73:b5:b7:1f:df:e0:60:d3:75:2d:3d:c8:3d:ca:91: ed:41:3c:f9:35:0a:2b:2e:48:42:79:cb:0a:87:41: 44:31:be:36:c0:db:89:db:ea:43:13:e4:c6:f1:c5: b5:e0:3b:b9:06:c9:9c:50:b5:af:fc:15:ed:36:0d: 28:a6:4c:fe:b2:28:92:98:21:ec:30:65:4d:c3:60: ab:e7:4c:48:04:c9:0f:5f:0e:41:2f:f3:af:63:13: b8:2e:e8:a7:3b:e0:52:eb:4c:eb:d0:7e:d7:40:be: b0:e0:75:f9:e7:0f:e1:f3:d4:fb:2f:75:b0:a4:96: 0f:8e:69:b7:f0:69:af:ef:fc:39:4e:36:d7:96:3e: 8c:38:08:8d:93:b7:56:77:43:15:e6:86:a3:1e:dc: 52:c0:86:6e:dc:e3:5b:c2:ee:af:e1:8e:55:d7:a2: 83:bb:f7:b3:9d:d8:e8:88:42:c9:c4:ff:7c:5b:56: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:27:37:B9:17:49:29:15:A8:C9:66:B1:21:5A:FD:82:80:04:A5:8F X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mSc3uRdJKRWoyWaxIVr9goAEpY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.62.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:41:1f:ae:82:6d:0c:e4:3e:ee:8c:47:75:bb:34:91:b3:fc: 38:96:04:3b:84:bd:7e:8e:92:b7:87:6d:b4:af:b9:25:0a:67: d8:ce:1c:92:22:9d:34:ca:d2:1c:e6:b2:db:db:ab:e2:ff:ae: f3:4c:cf:8f:73:6f:2f:78:f6:0e:8a:13:4f:dc:6b:84:03:1a: 80:93:2b:a7:b4:b3:a6:0f:5a:22:94:ed:7d:f0:c3:6f:e3:c9: fd:5e:1d:4b:0a:c9:2d:37:5e:ff:fd:ea:0f:0a:12:72:aa:e5: 8d:29:e7:e2:19:81:8a:22:76:c1:e2:b7:88:e1:56:8d:a8:d7: c1:95:e6:82:04:e3:b3:0c:8a:87:0d:d6:51:4b:15:13:a4:c2: 6b:1f:ee:f7:54:4c:55:f0:f4:53:68:6d:18:ac:f0:80:4d:40: fc:d9:5c:e4:c5:15:2d:7d:05:29:3d:be:72:e8:50:2e:d0:fb: aa:73:32:7e:56:8a:9c:08:3a:92:5e:0b:ff:24:62:62:52:0f: 19:ff:a6:f7:87:b3:ac:3e:69:e6:3b:36:ed:60:2c:8d:16:36: 62:ca:7e:43:ae:f1:4f:6f:df:fb:d2:8b:c1:34:67:b3:1d:b2: 13:0c:8c:43:74:7a:b4:f3:0d:27:89:2c:66:da:46:63:e6:96: 1c:1d:e5:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6bF2gsAHL7UGhQ90OQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTI3MzdiOTE3NDkyOTE1YThjOTY2YjEyMTVhZmQ4MjgwMDRhNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvys1NG/3t1xvKN38PvC+ITAF5TDf 2b7MgHQ7m4TsXKyO97FRBZj3EnCUAOJoVl20l7YQ2U2/x2y9QPPCAudmtdzAUWQs Np97QTtztbcf3+Bg03UtPcg9ypHtQTz5NQorLkhCecsKh0FEMb42wNuJ2+pDE+TG 8cW14Du5BsmcULWv/BXtNg0opkz+siiSmCHsMGVNw2Cr50xIBMkPXw5BL/OvYxO4 LuinO+BS60zr0H7XQL6w4HX55w/h89T7L3WwpJYPjmm38Gmv7/w5TjbXlj6MOAiN k7dWd0MV5oajHtxSwIZu3ONbwu6v4Y5V16KDu/ezndjoiELJxP98W1a2WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJknN7kXSSkVqMlmsSFa/YKABKWPMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvbVNjM3VSZEpLUldveVdheElWcjlnb0FFcFk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqj5wMA0G CSqGSIb3DQEBCwUAA4IBAQBOQR+ugm0M5D7ujEd1uzSRs/w4lgQ7hL1+jpK3h220 r7klCmfYzhySIp00ytIc5rLb26vi/67zTM+Pc28vePYOihNP3GuEAxqAkyuntLOm D1oilO198MNv48n9Xh1LCsktN17//eoPChJyquWNKefiGYGKInbB4reI4VaNqNfB leaCBOOzDIqHDdZRSxUTpMJrH+73VExV8PRTaG0YrPCATUD82VzkxRUtfQUpPb5y 6FAu0PuqczJ+VoqcCDqSXgv/JGJiUg8Z/6b3h7OsPmnmOzbtYCyNFjZiyn5DrvFP b9/70ovBNGezHbITDIxDdHq08w0niSxm2kZj5pYcHeV2 -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:49 2026 by rpki-client