This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/R3poqSsXdzbv4MHUHWgCkXAq9I4.roa File: R3poqSsXdzbv4MHUHWgCkXAq9I4.roa (raw, json) Hash identifier: UqlMv5I4NjRkJ6hCMSsOVF6wSeTKbPw5Tx4hrYNWA7M= Subject key identifier: 47:7A:68:A9:2B:17:77:36:EF:E0:C1:D4:1D:68:02:91:70:2A:F4:8E Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f Certificate serial: 019B7DCA57370A866D71082D78B3756408B1 Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/R3poqSsXdzbv4MHUHWgCkXAq9I4.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60023 IP address blocks: 185.62.52.0/22 maxlen: 22 2a04:ef40::/29 maxlen: 29 2a0b:d180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:57:37:0a:86:6d:71:08:2d:78:b3:75:64:08:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=477a68a92b177736efe0c1d41d680291702af48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:30:d1:2c:77:9f:30:14:7d:a3:65:6e:b7: b8:15:24:ec:81:1a:d7:9f:71:c6:a1:1b:d9:5b:e8: fa:77:ba:2c:c0:3c:6d:63:19:8f:1f:be:cd:ce:fb: ba:63:1f:60:b8:69:b1:a4:e6:7d:3e:a7:d0:3c:73: d1:ef:6d:47:b8:27:50:0e:77:8a:c5:eb:88:9c:9e: 94:d7:d2:36:74:35:aa:38:4b:a6:2b:66:54:1a:50: a4:5b:28:dd:5b:6f:8c:16:ee:42:08:62:db:0b:a9: 79:e8:fc:53:a2:6d:b4:a0:88:7b:b9:60:23:f5:21: 94:28:95:ea:e5:84:bc:17:8c:f3:d7:18:48:96:c9: 70:60:43:fd:90:57:bb:7e:36:f8:5d:cc:7a:00:64: 15:b0:83:d9:c3:86:db:36:df:28:46:72:34:2e:4c: 20:54:90:65:24:f9:3e:fa:5d:34:64:82:4e:bf:e5: d8:77:91:66:5d:e4:c1:38:b5:a8:7d:f1:c5:af:ab: cc:10:c6:b0:7b:f5:fa:7c:d2:80:f0:03:06:39:d5: fd:09:69:35:b2:0e:66:fd:42:9a:8d:0a:80:af:db: f7:1a:c3:75:84:4a:24:f2:3b:23:d7:7f:57:dc:5f: 6d:7c:2a:cc:2c:0c:0d:93:7b:b3:32:53:e6:30:d2: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7A:68:A9:2B:17:77:36:EF:E0:C1:D4:1D:68:02:91:70:2A:F4:8E X509v3 Authority Key Identifier: keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/R3poqSsXdzbv4MHUHWgCkXAq9I4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.52.0/22 IPv6: 2a04:ef40::/29 2a0b:d180::/29 Signature Algorithm: sha256WithRSAEncryption 46:9e:0a:29:10:f6:a1:fd:46:71:19:df:3f:c4:a2:99:c0:4e: 71:21:dc:ba:c2:cb:f5:60:10:26:cc:f2:0f:67:14:67:e3:f1: 50:e2:f6:58:99:c3:34:68:06:53:d0:4e:d3:eb:18:3c:78:b2: 84:cd:d4:e7:b5:e8:54:2f:af:83:a0:60:a0:32:61:00:bb:7d: 97:a5:f0:6b:62:be:5e:cb:06:75:a6:f5:8c:86:4b:44:1c:d1: b2:51:1e:ad:d3:a8:76:4d:45:cd:4d:ba:f9:91:fe:55:c7:bf: 51:91:b1:9f:a6:16:5b:63:67:48:bc:62:4e:38:c4:6d:e3:c0: a5:d3:d6:fb:50:67:b2:02:54:30:ca:af:fd:9c:3b:46:ff:2a: fc:75:13:57:32:be:48:30:36:1c:36:f6:6f:3e:c1:da:4f:a7: e8:70:f1:58:79:08:36:10:4c:69:e8:45:15:d9:41:1c:1d:83: 8d:0f:3b:ef:7f:a2:93:42:32:e7:4b:21:ac:7d:72:3d:31:12: dd:a9:fc:17:65:8d:e5:85:1a:ff:1c:f8:1e:22:b7:fe:e1:68: 21:e9:7f:47:eb:59:7c:cd:1d:a3:37:e2:15:65:0b:0f:75:60: ac:02:2b:d3:85:d8:4a:e9:39:e8:98:72:05:30:cd:27:c2:44: 3b:df:6d:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9ylc3CoZtcQgteLN1ZAixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDFhZTI2MTJkMjUyNzE2N2M4M2Y3YWZjMTZmNWU2NzRk ODhiMGYwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzdhNjhhOTJiMTc3NzM2ZWZlMGMxZDQxZDY4MDI5MTcwMmFmNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Qw0Sx3nzAUfaNlbre4FSTsgRrX n3HGoRvZW+j6d7oswDxtYxmPH77Nzvu6Yx9guGmxpOZ9PqfQPHPR721HuCdQDneK xeuInJ6U19I2dDWqOEumK2ZUGlCkWyjdW2+MFu5CCGLbC6l56PxTom20oIh7uWAj 9SGUKJXq5YS8F4zz1xhIlslwYEP9kFe7fjb4Xcx6AGQVsIPZw4bbNt8oRnI0Lkwg VJBlJPk++l00ZIJOv+XYd5FmXeTBOLWoffHFr6vMEMawe/X6fNKA8AMGOdX9CWk1 sg5m/UKajQqAr9v3GsN1hEok8jsj139X3F9tfCrMLAwNk3uzMlPmMNJs1QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFEd6aKkrF3c27+DB1B1oApFwKvSOMB8GA1UdIwQY MBaAFMRBriYS0lJxZ8g/evwW9eZ02IsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjkt MjRlN2U2YWRhMWUyLzEvUjNwb3FTc1hkemJ2NE1IVUhXZ0NrWEFxOUk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjktMjRlN2U2YWRhMWUy LzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCuT40MBQE AgACMA4DBQMqBO9AAwUDKgvRgDANBgkqhkiG9w0BAQsFAAOCAQEARp4KKRD2of1G cRnfP8SimcBOcSHcusLL9WAQJszyD2cUZ+PxUOL2WJnDNGgGU9BO0+sYPHiyhM3U 57XoVC+vg6BgoDJhALt9l6Xwa2K+XssGdab1jIZLRBzRslEerdOodk1FzU26+ZH+ Vce/UZGxn6YWW2NnSLxiTjjEbePApdPW+1BnsgJUMMqv/Zw7Rv8q/HUTVzK+SDA2 HDb2bz7B2k+n6HDxWHkINhBMaehFFdlBHB2DjQ8773+ik0Iy50shrH1yPTES3an8 F2WN5YUa/xz4HiK3/uFoIel/R+tZfM0dozfiFWULD3VgrAIr04XYSuk56JhyBTDN J8JEO99tLA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:50 2026 by rpki-client