This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/EXnm5GMNBH3ppLUeSGSb-X8qsSY.roa File: EXnm5GMNBH3ppLUeSGSb-X8qsSY.roa (raw, json) Hash identifier: kwkA+KaKZn+wsqhhu9W1i6vshCDzT/Icaj+nQRUQM3o= Subject key identifier: 11:79:E6:E4:63:0D:04:7D:E9:A4:B5:1E:48:64:9B:F9:7F:2A:B1:26 Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Certificate serial: 019B7B36480BD9D32625FE950B8399D8E1CB Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/EXnm5GMNBH3ppLUeSGSb-X8qsSY.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42504 IP address blocks: 62.122.64.0/21 maxlen: 21 62.122.64.0/24 maxlen: 24 62.122.65.0/24 maxlen: 24 62.122.66.0/24 maxlen: 24 62.122.67.0/24 maxlen: 24 62.122.68.0/24 maxlen: 24 62.122.69.0/24 maxlen: 24 62.122.70.0/24 maxlen: 24 91.192.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:48:0b:d9:d3:26:25:fe:95:0b:83:99:d8:e1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1179e6e4630d047de9a4b51e48649bf97f2ab126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e6:ee:ce:5e:46:c6:8b:87:3f:a2:49:e6:b5: bb:57:bb:49:17:48:1c:0c:f8:95:16:0a:e1:e8:a4: 10:70:5a:a6:5a:16:f5:5b:a8:9c:86:1e:83:18:b1: 6f:92:ea:3e:93:14:a7:d7:50:c9:2e:8d:7c:86:ef: e1:ba:f0:f0:61:7c:76:f7:30:cd:e3:89:49:d8:af: 10:bc:6b:23:8e:c7:77:dc:24:56:66:87:3c:7a:ed: e3:d1:6c:0d:c6:21:11:b5:fc:68:5c:46:8e:a6:05: 69:e1:7c:ec:5e:28:3c:3e:44:6a:9d:73:b8:be:16: a5:bd:d6:e1:43:62:2e:f9:94:a5:86:c2:29:8f:4e: 07:d9:d1:92:7f:6d:c8:dd:fa:8f:95:03:d9:da:1f: 63:03:cf:a4:ec:50:38:75:13:41:b8:9e:30:6f:ec: 7b:1d:6d:a1:b0:4a:1c:38:83:5a:0e:e3:86:b0:f7: 2d:1d:ab:fe:f4:07:95:2e:d0:c4:d2:ec:ed:cc:34: 63:c2:44:b3:36:e8:a6:80:89:08:50:43:98:15:50: e7:f1:bb:ae:3c:70:e9:91:4a:0b:93:9e:98:de:0f: 70:8e:7f:7b:4b:41:4f:ea:04:f6:ed:bc:2a:df:65: 71:e2:cf:28:04:de:e2:25:41:a9:c1:27:d0:84:2e: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:E6:E4:63:0D:04:7D:E9:A4:B5:1E:48:64:9B:F9:7F:2A:B1:26 X509v3 Authority Key Identifier: keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/EXnm5GMNBH3ppLUeSGSb-X8qsSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.64.0/21 91.192.152.0/22 Signature Algorithm: sha256WithRSAEncryption d0:1f:22:24:af:ce:4c:43:bd:89:d9:18:4d:1e:a6:aa:c4:e9: fc:12:cb:0c:ef:23:50:5f:c9:f3:77:0f:d7:12:49:6d:ff:a4: 58:99:ff:fc:4f:06:fd:5a:aa:95:9f:ca:ea:37:87:ae:9f:78: 19:6b:62:22:78:30:4a:d3:48:e7:c6:c4:17:12:03:5b:4f:43: 40:39:19:6a:66:40:dc:a0:60:a1:c5:ab:6d:ef:89:29:f2:54: 9c:9d:f1:10:12:2d:16:7f:d3:0e:f4:06:a9:d8:fb:46:8f:96: 9e:70:a7:e9:6b:ff:04:e4:57:10:04:4e:66:c7:c6:a5:cc:e0: 11:fe:9e:f6:15:e5:d0:c9:ee:cc:b5:c6:32:f6:1b:3d:c2:b1: 3e:0c:6c:70:8e:98:1c:5c:56:4c:0e:a5:b9:66:fb:40:3d:48: 4b:bf:45:75:41:b0:88:f5:8b:a6:6d:1d:3b:7b:de:7e:d5:06: a2:64:7c:0b:61:c5:43:49:75:e0:8c:11:16:fc:4e:83:62:fe: 7a:df:c0:71:77:90:63:29:d3:22:02:29:42:66:5c:b1:54:91: 2f:eb:00:0c:ad:cb:9b:bc:20:b9:42:07:25:0c:de:af:64:1e: 53:a3:f7:18:12:0e:e8:d7:4e:e8:09:e9:cd:ca:70:ea:26:95: 60:4c:3c:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NkgL2dMmJf6VC4OZ2OHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm NzQzMTIwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTc5ZTZlNDYzMGQwNDdkZTlhNGI1MWU0ODY0OWJmOTdmMmFiMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiubuzl5GxouHP6JJ5rW7V7tJF0gc DPiVFgrh6KQQcFqmWhb1W6ichh6DGLFvkuo+kxSn11DJLo18hu/huvDwYXx29zDN 44lJ2K8QvGsjjsd33CRWZoc8eu3j0WwNxiERtfxoXEaOpgVp4XzsXig8PkRqnXO4 vhalvdbhQ2Iu+ZSlhsIpj04H2dGSf23I3fqPlQPZ2h9jA8+k7FA4dRNBuJ4wb+x7 HW2hsEocOINaDuOGsPctHav+9AeVLtDE0uztzDRjwkSzNuimgIkIUEOYFVDn8buu PHDpkUoLk56Y3g9wjn97S0FP6gT27bwq32Vx4s8oBN7iJUGpwSfQhC7IkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBF55uRjDQR96aS1Hkhkm/l/KrEmMB8GA1UdIwQY MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt ZjBmOGIwNzc1NTIzLzEvRVhubTVHTU5CSDNwcExVZVNHU2ItWDhxc1NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPnpAAwQC W8CYMA0GCSqGSIb3DQEBCwUAA4IBAQDQHyIkr85MQ72J2RhNHqaqxOn8EssM7yNQ X8nzdw/XEklt/6RYmf/8Twb9WqqVn8rqN4eun3gZa2IieDBK00jnxsQXEgNbT0NA ORlqZkDcoGChxatt74kp8lScnfEQEi0Wf9MO9Aap2PtGj5aecKfpa/8E5FcQBE5m x8alzOAR/p72FeXQye7MtcYy9hs9wrE+DGxwjpgcXFZMDqW5ZvtAPUhLv0V1QbCI 9YumbR07e95+1QaiZHwLYcVDSXXgjBEW/E6DYv5638Bxd5BjKdMiAilCZlyxVJEv 6wAMrcubvCC5QgclDN6vZB5To/cYEg7o107oCenNynDqJpVgTDye -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:28 2026 by rpki-client