This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/Cx0etRilK9OPqVPhXKuGC2ZlVgk.roa File: Cx0etRilK9OPqVPhXKuGC2ZlVgk.roa (raw, json) Hash identifier: REFN0+myM+evXgHngcWpaLUQ/JCZd+oxd4ZqR8bABR0= Subject key identifier: 0B:1D:1E:B5:18:A5:2B:D3:8F:A9:53:E1:5C:AB:86:0B:66:65:56:09 Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12 Certificate serial: 019B7F14DADF42A4ED1555405A4604800356 Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/Cx0etRilK9OPqVPhXKuGC2ZlVgk.roa Signing time: Fri 02 Jan 2026 14:20:31 +0000 ROA not before: Fri 02 Jan 2026 14:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206175 IP address blocks: 62.148.96.0/24 maxlen: 24 62.148.97.0/24 maxlen: 24 62.148.98.0/24 maxlen: 24 62.148.99.0/24 maxlen: 24 62.148.100.0/24 maxlen: 24 62.148.101.0/24 maxlen: 24 62.148.102.0/24 maxlen: 24 62.148.103.0/24 maxlen: 24 62.148.104.0/24 maxlen: 24 62.148.105.0/24 maxlen: 24 62.148.106.0/24 maxlen: 24 62.148.107.0/24 maxlen: 24 62.148.108.0/24 maxlen: 24 62.148.109.0/24 maxlen: 24 62.148.110.0/24 maxlen: 24 62.148.111.0/24 maxlen: 24 62.148.112.0/24 maxlen: 24 62.148.113.0/24 maxlen: 24 62.148.114.0/24 maxlen: 24 62.148.115.0/24 maxlen: 24 62.148.116.0/24 maxlen: 24 62.148.117.0/24 maxlen: 24 62.148.118.0/24 maxlen: 24 62.148.119.0/24 maxlen: 24 62.148.120.0/24 maxlen: 24 62.148.121.0/24 maxlen: 24 62.148.122.0/24 maxlen: 24 62.148.123.0/24 maxlen: 24 62.148.124.0/24 maxlen: 24 62.148.125.0/24 maxlen: 24 62.148.126.0/24 maxlen: 24 62.148.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:da:df:42:a4:ed:15:55:40:5a:46:04:80:03:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12 Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b1d1eb518a52bd38fa953e15cab860b66655609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b3:fd:15:4f:dc:b2:51:90:49:2d:0f:4c:67: 3f:66:b2:9c:ec:ee:c6:54:ae:55:40:63:99:a9:2e: 17:c6:06:26:b0:91:33:a6:0e:c6:19:9a:ff:a8:bf: 00:6a:75:12:fb:18:46:9c:69:e7:20:dd:dd:08:e2: ab:26:76:3c:4f:de:3b:14:4a:33:b1:15:8f:8e:f7: 59:d4:04:da:61:4f:05:32:b7:5a:c6:ba:ad:97:72: 4b:54:e8:37:e6:1a:b1:d7:82:b1:52:7b:62:d7:4c: 4c:d6:ac:78:7b:2a:ad:58:95:bc:c3:2f:5b:63:07: f5:7b:3d:7e:d6:66:22:e0:f9:25:45:d5:06:af:40: cf:6c:fd:eb:49:5f:0a:a4:ad:50:d1:dd:62:32:5a: f2:66:c0:e8:f9:73:f4:7e:6f:98:af:5c:2e:a0:0f: f1:b1:17:a6:b5:47:84:0b:c0:ce:bf:58:2c:d6:50: 77:53:46:2b:f9:85:cb:53:9b:ad:8e:ad:23:22:5b: f4:90:7d:b5:f2:e3:41:51:8f:19:24:62:61:8f:fa: fa:e0:7b:35:28:5f:c4:4e:78:7e:f0:ce:23:e1:54: ff:18:16:8b:f2:d3:c1:67:3e:3d:c7:61:a3:94:b1: b1:b4:f9:88:49:cc:1f:26:39:bd:2c:96:4a:c1:c4: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1D:1E:B5:18:A5:2B:D3:8F:A9:53:E1:5C:AB:86:0B:66:65:56:09 X509v3 Authority Key Identifier: keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/Cx0etRilK9OPqVPhXKuGC2ZlVgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.148.96.0/19 Signature Algorithm: sha256WithRSAEncryption 40:1b:5c:d9:8b:23:8d:c1:f4:c3:ae:db:53:23:18:c0:21:d6: 24:23:c6:df:00:5a:16:67:03:f8:83:1c:1b:03:8c:ff:c6:00: 8c:d3:be:83:7c:c6:9d:f6:9f:ef:46:42:07:d3:d7:8d:6e:99: 21:e6:11:87:70:39:b1:5d:71:19:61:42:a4:07:2a:7d:57:d9: 9e:52:6b:17:b1:dd:20:26:eb:6b:62:83:01:31:e7:27:19:b0: 6a:31:6e:d5:5c:ac:79:1f:16:56:63:f0:3b:76:03:90:ce:d6: 37:9a:0d:2e:12:6b:20:db:9e:e9:32:95:c1:bf:6d:a9:05:a3: b1:d4:cb:9f:ff:94:a3:be:86:ab:cb:0a:0b:43:6a:ea:54:88: 1d:c4:d2:45:e2:7a:f6:ab:2a:16:4e:a2:93:55:21:92:96:d3: 19:b5:dd:69:13:35:d0:e9:94:08:c3:a9:20:a7:dd:9b:e8:5e: f6:27:c4:5b:78:e8:dd:d5:7f:72:21:e7:34:83:bc:db:f9:20: 3b:fd:c4:55:c3:6a:d2:5c:7e:70:5c:16:c5:6f:6d:c3:3a:11: a9:85:fc:83:d0:31:d3:45:c2:74:8b:02:99:35:7e:bc:2e:60: dd:46:14:64:51:26:04:10:70:ab:12:9b:c0:a3:e3:e5:36:8e: be:d0:32:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNrfQqTtFVVAWkYEgANWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmZkZWRmYWE5Mzk5YWQzZDU1MzFmYTQ3MWExMmIzYmZl MzdlMTIwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjFkMWViNTE4YTUyYmQzOGZhOTUzZTE1Y2FiODYwYjY2NjU1NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bP9FU/cslGQSS0PTGc/ZrKc7O7G VK5VQGOZqS4XxgYmsJEzpg7GGZr/qL8AanUS+xhGnGnnIN3dCOKrJnY8T947FEoz sRWPjvdZ1ATaYU8FMrdaxrqtl3JLVOg35hqx14KxUnti10xM1qx4eyqtWJW8wy9b Ywf1ez1+1mYi4PklRdUGr0DPbP3rSV8KpK1Q0d1iMlryZsDo+XP0fm+Yr1wuoA/x sRemtUeEC8DOv1gs1lB3U0Yr+YXLU5utjq0jIlv0kH218uNBUY8ZJGJhj/r64Hs1 KF/ETnh+8M4j4VT/GBaL8tPBZz49x2GjlLGxtPmIScwfJjm9LJZKwcT4hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsdHrUYpSvTj6lT4VyrhgtmZVYJMB8GA1UdIwQY MBaAFEC/3t+qk5mtPVUx+kcaErO/434SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYt OGU5ODUxYjdmODExLzEvQ3gwZXRSaWxLOU9QcVZQaFhLdUdDMlpsVmdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYjU1ZWMtMzU3Ny00MjFmLTg5MTYtOGU5ODUxYjdmODEx LzEvUUxfZTM2cVRtYTA5VlRINlJ4b1NzN19qZmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPpRgMA0G CSqGSIb3DQEBCwUAA4IBAQBAG1zZiyONwfTDrttTIxjAIdYkI8bfAFoWZwP4gxwb A4z/xgCM076DfMad9p/vRkIH09eNbpkh5hGHcDmxXXEZYUKkByp9V9meUmsXsd0g JutrYoMBMecnGbBqMW7VXKx5HxZWY/A7dgOQztY3mg0uEmsg257pMpXBv22pBaOx 1Muf/5SjvoarywoLQ2rqVIgdxNJF4nr2qyoWTqKTVSGSltMZtd1pEzXQ6ZQIw6kg p92b6F72J8RbeOjd1X9yIec0g7zb+SA7/cRVw2rSXH5wXBbFb23DOhGphfyD0DHT RcJ0iwKZNX68LmDdRhRkUSYEEHCrEpvAo+PlNo6+0DLr -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:56 2026 by rpki-client