This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/NWsLpRr5H3UkJRnMHjOGIQVt28g.roa File: NWsLpRr5H3UkJRnMHjOGIQVt28g.roa (raw, json) Hash identifier: EHfmvqsq16afnghWymElqz/tpkWtbotCUW3xPAW5HSk= Subject key identifier: 35:6B:0B:A5:1A:F9:1F:75:24:25:19:CC:1E:33:86:21:05:6D:DB:C8 Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63 Certificate serial: 019B7FF2B3673ED7896CC86ECCF6CD5AE756 Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/NWsLpRr5H3UkJRnMHjOGIQVt28g.roa Signing time: Fri 02 Jan 2026 18:22:50 +0000 ROA not before: Fri 02 Jan 2026 18:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31055 IP address blocks: 62.168.192.0/24 maxlen: 24 62.168.193.0/24 maxlen: 24 62.168.194.0/24 maxlen: 24 62.168.195.0/24 maxlen: 24 62.168.196.0/24 maxlen: 24 62.168.197.0/24 maxlen: 24 62.168.198.0/24 maxlen: 24 62.168.199.0/24 maxlen: 24 62.168.200.0/24 maxlen: 24 62.168.201.0/24 maxlen: 24 62.168.202.0/24 maxlen: 24 62.168.203.0/24 maxlen: 24 62.168.204.0/24 maxlen: 24 62.168.205.0/24 maxlen: 24 62.168.206.0/24 maxlen: 24 62.168.207.0/24 maxlen: 24 62.168.208.0/24 maxlen: 24 62.168.209.0/24 maxlen: 24 62.168.210.0/24 maxlen: 24 62.168.211.0/24 maxlen: 24 62.168.212.0/24 maxlen: 24 62.168.213.0/24 maxlen: 24 62.168.214.0/24 maxlen: 24 62.168.215.0/24 maxlen: 24 62.168.216.0/24 maxlen: 24 62.168.217.0/24 maxlen: 24 62.168.218.0/24 maxlen: 24 62.168.219.0/24 maxlen: 24 62.168.220.0/24 maxlen: 24 62.168.221.0/24 maxlen: 24 62.168.222.0/24 maxlen: 24 62.168.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b3:67:3e:d7:89:6c:c8:6e:cc:f6:cd:5a:e7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63 Validity Not Before: Jan 2 18:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=356b0ba51af91f75242519cc1e338621056ddbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:6f:76:5a:80:ca:f6:59:8a:c4:d0:d6:2e: 7c:e0:cf:f5:f9:fb:4d:d0:1f:be:80:36:ff:b7:f5: 12:97:f2:6f:fd:1f:1e:08:d6:d4:fc:c8:9a:1d:a8: ea:3f:b1:80:ab:bb:81:34:80:8b:3b:c4:17:80:f0: dc:f4:17:8e:10:45:cf:3e:fa:e1:89:3a:f8:ee:7c: 37:ee:80:14:df:8d:1b:04:46:1b:38:a0:c5:77:43: 85:6e:fe:71:04:2a:67:c7:10:a0:55:ae:2f:77:3b: 41:d2:1e:ac:ee:73:32:55:5a:af:c4:44:83:e5:88: 65:61:02:e9:5b:cd:fa:49:1c:52:62:1a:3e:14:d1: 87:34:2e:05:4e:a4:e0:a4:16:8c:24:2a:51:89:19: 1d:26:2b:18:ea:34:c8:a5:06:ef:fe:ad:a1:3f:8b: cf:d6:cf:83:53:03:18:3a:f7:ce:56:11:e6:52:6e: 33:8e:78:15:b3:87:bd:90:86:1f:d2:65:b0:fb:86: cc:02:c5:f2:a1:c4:6e:d5:9c:22:69:b1:68:fd:d0: f4:f0:40:78:f4:96:9b:ef:c5:7f:96:d9:5d:ec:15: 0c:c0:ce:5a:41:ea:0f:d2:40:16:20:60:66:1b:82: 04:b0:bd:dd:00:08:aa:ad:af:9c:ac:af:27:52:21: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:0B:A5:1A:F9:1F:75:24:25:19:CC:1E:33:86:21:05:6D:DB:C8 X509v3 Authority Key Identifier: keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/NWsLpRr5H3UkJRnMHjOGIQVt28g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.168.192.0/19 Signature Algorithm: sha256WithRSAEncryption b0:b2:41:d4:ee:06:f3:0a:28:60:c9:85:1c:f9:4c:aa:88:a2: d1:c3:d0:46:b8:4b:67:a6:1d:87:e6:fd:b2:08:4f:2f:13:47: 0c:cb:c8:77:c3:3d:5d:66:6f:d7:df:cb:e1:d4:bc:00:5e:fc: 18:ef:d6:e1:bc:f6:48:39:16:dc:7a:de:9d:4b:8b:24:29:09: cc:3e:9f:1e:c0:d6:b6:0b:71:2a:f9:78:45:c8:e0:b9:09:c7: 60:d7:86:76:74:58:4d:53:8c:75:94:a4:41:27:b5:88:d0:83: 57:c6:8c:b9:81:7e:4c:4e:82:11:a1:97:aa:eb:3a:3c:02:d6: 86:4e:6c:7f:d8:d1:19:f5:a9:e3:92:e9:4e:f2:33:e9:33:ce: dd:a3:07:4f:d6:4c:ad:40:1a:80:82:66:82:94:c4:bc:89:a0: 24:9a:96:31:27:ff:53:77:21:ae:5c:4a:67:79:85:6c:4c:35: 56:63:47:ce:fb:86:d4:2b:9f:48:e1:04:ef:60:69:02:9a:95: 8e:fd:05:1d:39:97:8b:14:86:66:b8:36:87:f7:cb:a0:60:48: fb:2d:28:ba:90:4d:3d:87:81:b3:e8:ca:f5:bc:f1:2b:6b:fc: 39:9d:85:de:dd:eb:ae:5f:28:65:5f:4e:eb:e6:7d:03:0b:5f: 3b:68:e1:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8rNnPteJbMhuzPbNWudWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZWJkYjY5YTMzZThmM2FmMzYzYWUxNDRmODUzNTM4ZTgw MzFiNjMwHhcNMjYwMTAyMTgyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTZiMGJhNTFhZjkxZjc1MjQyNTE5Y2MxZTMzODYyMTA1NmRkYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA079vdlqAyvZZisTQ1i584M/1+ftN 0B++gDb/t/USl/Jv/R8eCNbU/MiaHajqP7GAq7uBNICLO8QXgPDc9BeOEEXPPvrh iTr47nw37oAU340bBEYbOKDFd0OFbv5xBCpnxxCgVa4vdztB0h6s7nMyVVqvxESD 5YhlYQLpW836SRxSYho+FNGHNC4FTqTgpBaMJCpRiRkdJisY6jTIpQbv/q2hP4vP 1s+DUwMYOvfOVhHmUm4zjngVs4e9kIYf0mWw+4bMAsXyocRu1ZwiabFo/dD08EB4 9Jab78V/ltld7BUMwM5aQeoP0kAWIGBmG4IEsL3dAAiqra+crK8nUiFj+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDVrC6Ua+R91JCUZzB4zhiEFbdvIMB8GA1UdIwQY MBaAFODr22mjPo8682OuFE+FNTjoAxtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTkt ZDIzMTBiYmEwZTExLzEvTldzTHBScjVIM1VrSlJuTUhqT0dJUVZ0MjhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTktZDIzMTBiYmEwZTEx LzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPqjAMA0G CSqGSIb3DQEBCwUAA4IBAQCwskHU7gbzCihgyYUc+UyqiKLRw9BGuEtnph2H5v2y CE8vE0cMy8h3wz1dZm/X38vh1LwAXvwY79bhvPZIORbcet6dS4skKQnMPp8ewNa2 C3Eq+XhFyOC5Ccdg14Z2dFhNU4x1lKRBJ7WI0INXxoy5gX5MToIRoZeq6zo8AtaG Tmx/2NEZ9anjkulO8jPpM87dowdP1kytQBqAgmaClMS8iaAkmpYxJ/9TdyGuXEpn eYVsTDVWY0fO+4bUK59I4QTvYGkCmpWO/QUdOZeLFIZmuDaH98ugYEj7LSi6kE09 h4Gz6Mr1vPEra/w5nYXe3euuXyhlX07r5n0DC187aOEF -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:44 2026 by rpki-client