This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/nWANyekwMN1ajseL7l03yPyYN6o.roa File: nWANyekwMN1ajseL7l03yPyYN6o.roa (raw, json) Hash identifier: J50Y1+ShAOFy3i/le2uIAvMIPMam//PGPnyLFegYOaA= Subject key identifier: 9D:60:0D:C9:E9:30:30:DD:5A:8E:C7:8B:EE:5D:37:C8:FC:98:37:AA Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588 Certificate serial: 019B7CED82626346C91857E874A9F6F49AA2 Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/nWANyekwMN1ajseL7l03yPyYN6o.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197248 IP address blocks: 62.112.192.0/21 maxlen: 21 62.112.208.0/21 maxlen: 21 77.111.88.0/21 maxlen: 24 93.88.192.0/21 maxlen: 21 93.88.194.0/24 maxlen: 24 109.61.0.0/22 maxlen: 22 109.61.8.0/21 maxlen: 21 109.61.20.0/22 maxlen: 22 109.61.22.0/24 maxlen: 24 109.61.24.0/21 maxlen: 21 109.61.48.0/20 maxlen: 20 109.61.64.0/20 maxlen: 21 109.61.96.0/21 maxlen: 21 109.61.112.0/21 maxlen: 21 185.229.249.0/24 maxlen: 24 2a01:be00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:82:62:63:46:c9:18:57:e8:74:a9:f6:f4:9a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588 Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d600dc9e93030dd5a8ec78bee5d37c8fc9837aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5a:e2:9a:e9:4e:0b:7e:19:78:75:4a:08:d9: 86:be:ab:90:8f:e2:ec:1e:a2:a4:2e:34:08:fe:6f: 79:8c:16:49:79:a2:ee:c8:6e:84:1c:0c:58:c2:9b: 13:fc:3f:b7:37:e0:27:c5:20:ca:20:5e:5b:90:83: 73:72:ec:0b:1b:53:de:71:c6:07:b1:29:11:0e:28: 98:0b:f0:5d:6b:94:5f:d6:42:e3:36:8c:a4:ea:5e: 0c:d6:9a:5e:90:7f:88:07:81:37:cc:d6:07:ee:b8: 44:c7:82:68:d4:14:01:fb:c8:9e:65:94:73:36:fb: 91:7a:be:04:c6:56:e8:3b:52:52:f2:78:9a:98:de: 54:95:60:96:cc:94:b6:0e:17:43:4b:76:4c:21:dc: 7d:ec:74:b1:da:f4:5d:7d:d4:62:ab:8f:8d:f6:21: 79:60:53:22:df:d8:00:ab:a9:8d:1d:60:1e:20:72: f1:7f:94:53:8d:63:2d:70:f1:f0:4a:da:92:6d:8b: 9e:7c:c0:ef:93:dc:16:a8:4e:60:40:89:22:7a:12: d2:aa:db:aa:35:53:70:ad:dc:1b:2f:ff:fc:35:e4: e0:62:64:e7:81:b7:99:d1:eb:1e:d0:b6:20:dd:38: 25:87:aa:d4:6a:68:0c:3e:77:5b:8a:ee:15:e6:71: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:60:0D:C9:E9:30:30:DD:5A:8E:C7:8B:EE:5D:37:C8:FC:98:37:AA X509v3 Authority Key Identifier: keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/nWANyekwMN1ajseL7l03yPyYN6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.192.0/21 62.112.208.0/21 77.111.88.0/21 93.88.192.0/21 109.61.0.0/22 109.61.8.0/21 109.61.20.0-109.61.31.255 109.61.48.0-109.61.79.255 109.61.96.0/21 109.61.112.0/21 185.229.249.0/24 IPv6: 2a01:be00::/29 Signature Algorithm: sha256WithRSAEncryption 35:d6:84:c2:1a:6e:c3:3c:85:ad:3c:05:dc:5f:c8:fd:4e:15: 92:a0:55:a3:13:e0:1d:1e:66:fa:fd:b2:6f:f7:3c:cb:61:45: 1f:dd:7c:fc:0b:1d:ba:e5:ad:49:da:c5:8e:4b:8c:e5:d5:b4: 24:57:76:17:04:af:3c:4f:66:29:1d:fb:54:2a:4f:84:8e:c0: c9:9b:5b:66:9c:e6:be:e4:79:7d:b4:11:b1:aa:0d:a9:e0:62: 04:2b:fe:ad:a9:36:9b:91:48:41:fe:fb:c8:73:96:86:c3:f8: 99:5f:cc:8f:ad:a4:9a:3c:2b:bc:b2:57:f0:9d:d8:0e:08:c5: 71:11:9b:7a:3b:76:83:48:3b:9c:77:95:5d:e8:72:4f:05:a2: f5:b0:30:ab:4a:5c:cd:0c:ba:ee:eb:49:1b:bb:3b:74:d8:1e: ba:92:15:8d:5f:ee:cb:0b:3e:ac:24:1f:1f:2e:10:35:65:7e: b9:14:05:3f:d8:a2:e9:fa:ed:a7:b9:20:db:f9:3e:2c:f2:f7: 15:92:7b:2e:1e:12:54:b2:33:ed:2f:69:b8:21:84:5e:09:f1: 97:dd:b1:82:17:35:43:d2:0f:b3:73:15:93:df:e3:17:73:74: eb:a6:ed:a1:58:81:71:27:21:92:31:48:9e:9c:6d:34:a6:0a: 72:f8:80:67 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZt87YJiY0bJGFfodKn29JqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzk0YTEyNWZhM2FjZTBjNDdhNmZlMzRmNDA4NmI0ZDNi YTU1ODgwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDYwMGRjOWU5MzAzMGRkNWE4ZWM3OGJlZTVkMzdjOGZjOTgzN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilrimulOC34ZeHVKCNmGvquQj+Ls HqKkLjQI/m95jBZJeaLuyG6EHAxYwpsT/D+3N+AnxSDKIF5bkINzcuwLG1PeccYH sSkRDiiYC/Bda5Rf1kLjNoyk6l4M1ppekH+IB4E3zNYH7rhEx4Jo1BQB+8ieZZRz NvuRer4ExlboO1JS8niamN5UlWCWzJS2DhdDS3ZMIdx97HSx2vRdfdRiq4+N9iF5 YFMi39gAq6mNHWAeIHLxf5RTjWMtcPHwStqSbYuefMDvk9wWqE5gQIkiehLSqtuq NVNwrdwbL//8NeTgYmTngbeZ0ese0LYg3Tglh6rUamgMPndbiu4V5nEwEQIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFJ1gDcnpMDDdWo7Hi+5dN8j8mDeqMB8GA1UdIwQY MBaAFCM5ShJfo6zgxHpv409AhrTTulWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2Et ZDQzMjA3ZDYyZGZlLzEvbldBTnlla3dNTjFhanNlTDdsMDN5UHlZTjZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2EtZDQzMjA3ZDYyZGZl LzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQDPnDAAwQD PnDQAwQDTW9YAwQDXVjAAwQCbT0AAwQDbT0IMAwDBAJtPRQDBAVtPQAwDAMEBG09 MAMEBG09QAMEA209YAMEA209cAMEALnl+TANBAIAAjAHAwUDKgG+ADANBgkqhkiG 9w0BAQsFAAOCAQEANdaEwhpuwzyFrTwF3F/I/U4VkqBVoxPgHR5m+v2yb/c8y2FF H918/AsduuWtSdrFjkuM5dW0JFd2FwSvPE9mKR37VCpPhI7AyZtbZpzmvuR5fbQR saoNqeBiBCv+rak2m5FIQf77yHOWhsP4mV/Mj62kmjwrvLJX8J3YDgjFcRGbejt2 g0g7nHeVXehyTwWi9bAwq0pczQy67utJG7s7dNgeupIVjV/uyws+rCQfHy4QNWV+ uRQFP9ii6frtp7kg2/k+LPL3FZJ7Lh4SVLIz7S9puCGEXgnxl92xghc1Q9IPs3MV k9/jF3N066btoViBcSchkjFInpxtNKYKcviAZw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:02 2026 by rpki-client