This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/s7jTmvZ9Uu0lTUaXjscRfprTxvQ.roa File: s7jTmvZ9Uu0lTUaXjscRfprTxvQ.roa (raw, json) Hash identifier: c/c+gPrnfsRNn18SCCqI0mKo4h5PNPD7zev+q5M20v4= Subject key identifier: B3:B8:D3:9A:F6:7D:52:ED:25:4D:46:97:8E:C7:11:7E:9A:D3:C6:F4 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A21503332DC027121AC8FDC02E90B1 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/s7jTmvZ9Uu0lTUaXjscRfprTxvQ.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 62.68.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:15:03:33:2d:c0:27:12:1a:c8:fd:c0:2e:90:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3b8d39af67d52ed254d46978ec7117e9ad3c6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:d1:b4:2d:3e:10:89:54:fb:87:71:3b:7e: 80:3d:c5:bc:58:06:40:47:43:8c:b4:59:78:39:77: 4c:71:94:56:e8:3b:05:2e:55:71:ee:53:1d:4c:9b: 88:79:d4:8e:64:67:53:25:c2:68:89:f7:a5:b8:5b: 5e:bb:5f:37:30:ff:9c:27:a9:1e:d8:b6:46:33:c4: 8c:5e:cd:40:83:e5:aa:c4:59:aa:2a:cc:32:5f:6f: bb:b5:61:bd:c9:3c:bb:4d:f9:6a:98:ca:e9:76:1c: ce:0f:a8:fd:da:92:51:30:28:f2:43:04:9e:b6:e0: df:61:50:5a:3f:a5:ff:3e:33:86:68:b3:3d:ef:fb: f1:fe:ed:88:b5:83:27:9f:7a:99:43:ba:a7:52:b5: 29:6d:1e:11:36:71:98:55:1e:64:2e:03:b7:20:9c: 22:98:60:a1:fa:37:51:9c:95:a7:e2:cb:2b:e6:e7: 4d:14:50:2b:07:89:e0:79:a6:31:2c:39:2e:7b:e2: 73:1b:61:3a:ee:60:4d:85:ed:9a:06:70:e3:0f:a3: 89:0b:cc:d9:6c:1e:99:58:97:15:49:00:00:02:30: ac:8d:81:aa:d3:50:8d:85:ea:37:70:a5:cc:b9:0b: 7e:ef:7a:22:e5:d5:af:5d:11:f6:e0:af:fe:5f:4a: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B8:D3:9A:F6:7D:52:ED:25:4D:46:97:8E:C7:11:7E:9A:D3:C6:F4 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/s7jTmvZ9Uu0lTUaXjscRfprTxvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.80.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:4a:77:de:00:da:9a:61:27:73:74:b9:a4:9e:16:7a:b6:66: 44:98:fd:03:19:22:9a:f4:bf:62:de:59:09:b0:f1:59:44:09: 8a:19:c0:2a:bc:5b:8f:21:c2:ec:08:b8:86:0e:5c:33:0d:b8: cf:0d:df:0f:e0:e7:d8:5c:c0:e8:b6:44:7b:87:c7:b3:72:b3: c6:81:c0:96:ab:1d:09:33:8f:48:2a:3a:10:e3:13:16:c6:fd: 89:c4:21:83:00:e7:91:db:40:fd:81:4d:a8:02:b3:e6:9d:49: 3f:2f:c9:e3:4e:9f:9a:25:a0:27:3e:77:4f:c3:0a:1c:de:4b: 2e:b4:2c:da:bb:3d:14:ef:78:d8:b3:8b:64:33:3f:d1:d9:95: 0f:7a:ae:d0:74:ce:76:76:d2:b0:e3:79:18:10:ce:b4:1e:1e: ca:92:63:bc:13:f2:5a:a9:c7:13:cd:e6:e8:65:c9:79:69:bd: 09:e3:5d:7d:ca:aa:f7:0b:21:d6:12:d3:a3:a5:08:17:52:2e: a3:88:d9:57:8e:1e:5d:1b:5b:57:59:3f:3e:84:c8:d8:22:4a: e8:db:77:4d:04:4a:2e:fa:d2:01:5d:37:0b:1d:dc:fe:81:7d: 51:7b:db:94:57:a5:89:b5:03:9e:63:af:5e:36:58:8d:10:46: 67:2a:74:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohUDMy3AJxIayP3ALpCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2I4ZDM5YWY2N2Q1MmVkMjU0ZDQ2OTc4ZWM3MTE3ZTlhZDNjNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6XRtC0+EIlU+4dxO36APcW8WAZA R0OMtFl4OXdMcZRW6DsFLlVx7lMdTJuIedSOZGdTJcJoifeluFteu183MP+cJ6ke 2LZGM8SMXs1Ag+WqxFmqKswyX2+7tWG9yTy7TflqmMrpdhzOD6j92pJRMCjyQwSe tuDfYVBaP6X/PjOGaLM97/vx/u2ItYMnn3qZQ7qnUrUpbR4RNnGYVR5kLgO3IJwi mGCh+jdRnJWn4ssr5udNFFArB4ngeaYxLDkue+JzG2E67mBNhe2aBnDjD6OJC8zZ bB6ZWJcVSQAAAjCsjYGq01CNheo3cKXMuQt+73oi5dWvXRH24K/+X0r0XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLO405r2fVLtJU1Gl47HEX6a08b0MB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvczdqVG12WjlVdTBsVFVhWGpzY1JmcHJUeHZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRQMA0G CSqGSIb3DQEBCwUAA4IBAQA9SnfeANqaYSdzdLmknhZ6tmZEmP0DGSKa9L9i3lkJ sPFZRAmKGcAqvFuPIcLsCLiGDlwzDbjPDd8P4OfYXMDotkR7h8ezcrPGgcCWqx0J M49IKjoQ4xMWxv2JxCGDAOeR20D9gU2oArPmnUk/L8njTp+aJaAnPndPwwoc3ksu tCzauz0U73jYs4tkMz/R2ZUPeq7QdM52dtKw43kYEM60Hh7KkmO8E/JaqccTzebo Zcl5ab0J4119yqr3CyHWEtOjpQgXUi6jiNlXjh5dG1tXWT8+hMjYIkro23dNBEou +tIBXTcLHdz+gX1Re9uUV6WJtQOeY69eNliNEEZnKnQY -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:39 2026 by rpki-client