This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/apX_x1EULE6OQInOykLn4fvDEsM.roa File: apX_x1EULE6OQInOykLn4fvDEsM.roa (raw, json) Hash identifier: Wg0gBA9FtZ5MGhtWvzfiZrQJ2iSQBvq5YHTLEMZVAk4= Subject key identifier: 6A:95:FF:C7:51:14:2C:4E:8E:40:89:CE:CA:42:E7:E1:FB:C3:12:C3 Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7 Certificate serial: 019B7D5AEA5BEEF62448C63842910C6D2891 Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/apX_x1EULE6OQInOykLn4fvDEsM.roa Signing time: Fri 02 Jan 2026 06:17:48 +0000 ROA not before: Fri 02 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13267 IP address blocks: 62.240.192.0/19 maxlen: 19 62.240.192.0/22 maxlen: 22 62.240.192.0/23 maxlen: 23 62.240.194.0/23 maxlen: 23 62.240.196.0/22 maxlen: 22 62.240.196.0/23 maxlen: 23 62.240.200.0/21 maxlen: 21 62.240.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ea:5b:ee:f6:24:48:c6:38:42:91:0c:6d:28:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7 Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a95ffc751142c4e8e4089ceca42e7e1fbc312c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:33:18:de:a0:81:92:b9:56:10:10:2d:13: cc:37:65:a4:fd:14:bb:d7:d7:ae:a9:d9:8e:be:25: b7:0f:3f:ab:c0:d9:de:bd:04:13:28:3e:23:8b:22: 84:88:49:36:19:87:03:f7:95:47:12:f2:c1:1d:8b: ad:b0:3f:f4:ca:6e:58:81:24:44:d6:43:d6:c6:59: 28:ba:72:11:4e:16:2e:bb:ee:f5:50:75:a9:b3:a6: 2c:9e:ac:5a:a9:ff:0d:f2:47:4c:d0:2a:09:43:42: d5:cd:a9:ec:b6:c6:50:35:62:11:d2:18:10:1d:66: 14:f2:47:78:1b:fd:1d:f7:a5:2a:3c:e8:56:77:b3: 99:98:5b:fe:4f:f6:71:3c:de:a7:6d:ce:41:a9:d9: 95:35:62:4a:a7:eb:fe:06:d7:e0:d7:76:fe:b4:6b: f5:e6:ef:e4:95:7d:eb:51:c2:c5:57:9e:1d:a5:5e: a7:2b:92:42:3f:91:8e:18:de:0d:f4:fc:dd:39:89: ff:f8:18:b3:93:c3:22:ad:52:c3:a9:93:b9:83:1f: af:b0:56:d2:a7:ce:a8:92:f5:56:1b:84:92:f1:b7: 6b:15:f5:30:25:c1:18:64:71:f3:bf:4b:83:bc:b0: 21:dc:1a:cc:3f:b5:4a:29:31:3b:f5:67:e3:6b:65: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:FF:C7:51:14:2C:4E:8E:40:89:CE:CA:42:E7:E1:FB:C3:12:C3 X509v3 Authority Key Identifier: keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/apX_x1EULE6OQInOykLn4fvDEsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.240.192.0/19 Signature Algorithm: sha256WithRSAEncryption 7c:87:66:43:27:69:60:b4:de:f1:f7:a1:c9:b4:af:52:9f:0b: c9:37:86:d3:c2:b2:49:41:5b:b9:2e:9c:a3:b8:34:8c:d1:d8: 8d:c3:05:23:4f:2a:72:98:36:10:86:93:1a:a7:ce:71:e7:dc: f3:38:3c:de:65:8a:49:2d:29:a6:f5:23:7f:c8:44:8a:ec:01: 5c:3f:6b:37:cf:58:44:56:77:37:42:48:e2:22:b0:17:6e:40: 35:c4:84:9c:22:1c:33:db:b3:04:af:41:2b:31:f6:0f:8c:d6: 04:ec:d7:2c:8e:9f:2f:9e:5d:bf:18:09:8d:7b:66:89:26:6b: 47:18:a2:22:32:72:ee:2b:0f:fb:75:c9:db:f5:cf:fa:92:02: 11:51:25:c4:b5:53:56:da:2b:5f:6c:c4:75:c0:e1:dd:35:eb: f1:23:45:49:a5:14:21:6f:b7:ee:93:de:80:e9:48:93:26:8f: 18:01:a2:2b:e5:5e:9e:6c:e4:dd:a1:4e:d2:4c:c5:12:ec:1f: fc:50:57:ab:8f:ef:44:c9:5a:23:18:7d:22:7e:0f:23:ca:7d: 0f:db:cf:77:cb:6a:19:c9:c7:c3:46:f3:74:a1:83:f3:5f:93: bf:d4:4b:4e:38:9e:a0:f8:a8:52:0f:6c:10:96:dd:c9:52:86: 1d:69:6f:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wupb7vYkSMY4QpEMbSiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZDYwZDliOTQzYjA4YzQ0N2NmN2U1NDk4OWY1MmIwZGVj NWY3ZTcwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTk1ZmZjNzUxMTQyYzRlOGU0MDg5Y2VjYTQyZTdlMWZiYzMxMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3AzGN6ggZK5VhAQLRPMN2Wk/RS7 19euqdmOviW3Dz+rwNnevQQTKD4jiyKEiEk2GYcD95VHEvLBHYutsD/0ym5YgSRE 1kPWxlkounIRThYuu+71UHWps6Ysnqxaqf8N8kdM0CoJQ0LVzanstsZQNWIR0hgQ HWYU8kd4G/0d96UqPOhWd7OZmFv+T/ZxPN6nbc5BqdmVNWJKp+v+Btfg13b+tGv1 5u/klX3rUcLFV54dpV6nK5JCP5GOGN4N9PzdOYn/+Bizk8MirVLDqZO5gx+vsFbS p86okvVWG4SS8bdrFfUwJcEYZHHzv0uDvLAh3BrMP7VKKTE79Wfja2WqGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqV/8dRFCxOjkCJzspC5+H7wxLDMB8GA1UdIwQY MBaAFG/WDZuUOwjER89+VJifUrDexffnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMt ZDdmMTFkNjg0NzM3LzEvYXBYX3gxRVVMRTZPUUluT3lrTG40ZnZERXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMtZDdmMTFkNjg0NzM3 LzEvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPvDAMA0G CSqGSIb3DQEBCwUAA4IBAQB8h2ZDJ2lgtN7x96HJtK9SnwvJN4bTwrJJQVu5Lpyj uDSM0diNwwUjTypymDYQhpMap85x59zzODzeZYpJLSmm9SN/yESK7AFcP2s3z1hE Vnc3QkjiIrAXbkA1xIScIhwz27MEr0ErMfYPjNYE7Ncsjp8vnl2/GAmNe2aJJmtH GKIiMnLuKw/7dcnb9c/6kgIRUSXEtVNW2itfbMR1wOHdNevxI0VJpRQhb7fuk96A 6UiTJo8YAaIr5V6ebOTdoU7STMUS7B/8UFerj+9EyVojGH0ifg8jyn0P2893y2oZ ycfDRvN0oYPzX5O/1EtOOJ6g+KhSD2wQlt3JUoYdaW9P -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:05 2026 by rpki-client