This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa File: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (raw, json) Hash identifier: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg= Subject key identifier: A8:47:D7:51:F4:07:97:F1:2C:3F:F3:F8:2E:4E:36:4A:7A:A0:31:82 Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f Certificate serial: 019B7DCAEC2F4414029E095E578C2609EA0D Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15584 IP address blocks: 62.101.0.0/21 maxlen: 21 62.101.0.0/23 maxlen: 23 62.101.0.0/24 maxlen: 24 62.101.1.0/24 maxlen: 24 62.101.2.0/23 maxlen: 23 62.101.2.0/24 maxlen: 24 62.101.3.0/24 maxlen: 24 62.101.4.0/22 maxlen: 22 62.101.4.0/23 maxlen: 23 62.101.4.0/24 maxlen: 24 62.101.5.0/24 maxlen: 24 62.101.6.0/24 maxlen: 24 62.101.7.0/24 maxlen: 24 62.101.8.0/21 maxlen: 21 62.101.8.0/23 maxlen: 23 62.101.8.0/24 maxlen: 24 62.101.9.0/24 maxlen: 24 62.101.10.0/23 maxlen: 23 62.101.10.0/24 maxlen: 24 62.101.11.0/24 maxlen: 24 62.101.12.0/22 maxlen: 22 62.101.12.0/24 maxlen: 24 62.101.13.0/24 maxlen: 24 62.101.14.0/24 maxlen: 24 62.101.15.0/24 maxlen: 24 62.101.30.0/23 maxlen: 23 62.101.30.0/24 maxlen: 24 62.101.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ec:2f:44:14:02:9e:09:5e:57:8c:26:09:ea:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a847d751f40797f12c3ff3f82e4e364a7aa03182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:55:46:25:3f:83:48:e2:f4:23:f6:89:ed: fe:55:3d:2b:ce:cf:64:71:5e:09:9c:60:a4:b4:bc: e0:df:f1:7c:4e:54:7e:89:b6:8f:ed:aa:43:c4:44: 35:90:55:cc:64:3b:9c:17:88:70:f3:60:57:09:a0: 50:96:57:9b:d4:8c:01:a7:86:4f:34:d8:37:e3:c6: 5a:1b:f8:67:6c:01:cb:f0:b8:15:eb:8e:11:44:98: 36:f1:22:03:86:a4:a6:55:f7:00:36:25:c6:57:6e: 27:98:05:08:89:61:e1:5d:23:d9:9e:40:36:23:b8: dc:f1:d9:a0:78:24:d3:1f:ee:7f:7d:a5:12:5d:bf: 08:07:73:4d:7a:b1:bd:e0:0b:dc:2a:a9:cf:7d:77: 40:63:c9:f6:8d:fe:c4:9d:e6:84:39:f5:29:2f:88: a0:0e:92:40:aa:99:01:3a:b2:9d:db:7a:c7:3c:af: 1c:a5:30:5b:68:44:aa:4d:bb:2b:b3:aa:f7:7d:f8: 98:c3:c3:d9:cb:9e:94:84:dc:97:c0:5d:37:7a:e1: 28:d8:81:53:9f:3e:e5:03:15:d2:a7:59:8f:30:fb: 8d:bc:a0:62:10:2d:03:43:5e:78:6c:32:d6:56:1a: c6:94:a7:e1:d6:de:62:7e:29:73:55:fe:6d:3e:c0: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:47:D7:51:F4:07:97:F1:2C:3F:F3:F8:2E:4E:36:4A:7A:A0:31:82 X509v3 Authority Key Identifier: keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.101.0.0/20 62.101.30.0/23 Signature Algorithm: sha256WithRSAEncryption 52:2e:30:66:92:a0:e3:15:bd:5c:f6:ea:37:59:83:a7:47:52: d3:90:f5:2c:8e:79:71:e4:b5:99:5e:5b:67:bd:65:45:87:2d: 3b:2b:c8:72:af:47:48:15:0c:55:d7:41:37:98:f0:b0:66:8b: 34:99:3d:5a:55:e9:fe:ba:2d:cb:58:4b:d7:74:99:c4:38:8f: a5:71:a5:f5:9a:dd:61:0a:73:b3:4f:85:75:ac:4a:18:d4:b7: ab:6b:f1:67:04:2c:dc:aa:67:ee:ee:6e:0e:79:ed:48:01:0b: e3:a8:4d:60:6d:f5:4e:94:ed:92:f0:fb:7a:59:8e:a0:92:78: ea:50:61:5f:6c:60:ec:8b:0e:e1:67:ac:80:94:a7:2c:9e:5a: 92:8e:86:53:71:cd:f1:05:f6:11:c2:5b:81:78:60:0b:bc:46: 6b:49:78:43:2f:e9:52:b9:54:91:c4:49:94:b5:33:95:a1:a4: e3:63:7b:78:05:e4:a3:e7:80:bc:4e:71:6a:6d:d1:0f:57:1a: 32:90:d3:65:74:42:d7:3d:31:c3:fc:5f:f6:63:c2:49:9b:b5: 32:35:b4:96:01:64:3b:33:6a:4f:28:ae:ee:86:e9:5f:6a:52: 72:bc:2f:b6:a0:ea:8c:e5:7f:b1:30:6c:71:06:3f:47:b3:85: af:c4:b4:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yuwvRBQCngleV4wmCeoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDg1OGJjMmRjYmIzNzZkNzkxYTliZTlhZjE1MjAyMzg1 MzVkOWYwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODQ3ZDc1MWY0MDc5N2YxMmMzZmYzZjgyZTRlMzY0YTdhYTAzMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzZVRiU/g0ji9CP2ie3+VT0rzs9k cV4JnGCktLzg3/F8TlR+ibaP7apDxEQ1kFXMZDucF4hw82BXCaBQlleb1IwBp4ZP NNg348ZaG/hnbAHL8LgV644RRJg28SIDhqSmVfcANiXGV24nmAUIiWHhXSPZnkA2 I7jc8dmgeCTTH+5/faUSXb8IB3NNerG94AvcKqnPfXdAY8n2jf7EneaEOfUpL4ig DpJAqpkBOrKd23rHPK8cpTBbaESqTbsrs6r3ffiYw8PZy56UhNyXwF03euEo2IFT nz7lAxXSp1mPMPuNvKBiEC0DQ154bDLWVhrGlKfh1t5ifilzVf5tPsDHBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKhH11H0B5fxLD/z+C5ONkp6oDGCMB8GA1UdIwQY MBaAFIYIWLwty7N215GpvprxUgI4U12fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQt OTkwYmIxY2NkMjBjLzEvcUVmWFVmUUhsX0VzUF9QNExrNDJTbnFnTVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQtOTkwYmIxY2NkMjBj LzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEPmUAAwQB PmUeMA0GCSqGSIb3DQEBCwUAA4IBAQBSLjBmkqDjFb1c9uo3WYOnR1LTkPUsjnlx 5LWZXltnvWVFhy07K8hyr0dIFQxV10E3mPCwZos0mT1aVen+ui3LWEvXdJnEOI+l caX1mt1hCnOzT4V1rEoY1Lera/FnBCzcqmfu7m4Oee1IAQvjqE1gbfVOlO2S8Pt6 WY6gknjqUGFfbGDsiw7hZ6yAlKcsnlqSjoZTcc3xBfYRwluBeGALvEZrSXhDL+lS uVSRxEmUtTOVoaTjY3t4BeSj54C8TnFqbdEPVxoykNNldELXPTHD/F/2Y8JJm7Uy NbSWAWQ7M2pPKK7uhulfalJyvC+2oOqM5X+xMGxxBj9Hs4WvxLQ8 -----END CERTIFICATE-----Generated at Mon Feb 2 07:55:55 2026 by rpki-client