This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/xTiLnHWcIQBHKnAP3nk781_h0ew.roa File: xTiLnHWcIQBHKnAP3nk781_h0ew.roa (raw, json) Hash identifier: mpbRYgyuoRfIkLm2Fm4iWJpaOkfkeiX8G2PJJeVWGQs= Subject key identifier: C5:38:8B:9C:75:9C:21:00:47:2A:70:0F:DE:79:3B:F3:5F:E1:D1:EC Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022 Certificate serial: 019B7E377DD96AC8FE96D49207B62C0F6A90 Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/xTiLnHWcIQBHKnAP3nk781_h0ew.roa Signing time: Fri 02 Jan 2026 10:18:44 +0000 ROA not before: Fri 02 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39376 IP address blocks: 62.148.0.0/19 maxlen: 19 62.148.0.0/24 maxlen: 24 62.148.1.0/24 maxlen: 24 62.148.2.0/24 maxlen: 24 62.148.3.0/24 maxlen: 24 62.148.4.0/24 maxlen: 24 62.148.5.0/24 maxlen: 24 62.148.6.0/24 maxlen: 24 62.148.7.0/24 maxlen: 24 62.148.8.0/24 maxlen: 24 62.148.9.0/24 maxlen: 24 62.148.10.0/24 maxlen: 24 62.148.11.0/24 maxlen: 24 62.148.12.0/24 maxlen: 24 62.148.13.0/24 maxlen: 24 62.148.14.0/24 maxlen: 24 62.148.15.0/24 maxlen: 24 62.148.16.0/24 maxlen: 24 62.148.17.0/24 maxlen: 24 62.148.18.0/24 maxlen: 24 62.148.19.0/24 maxlen: 24 62.148.20.0/24 maxlen: 24 62.148.21.0/24 maxlen: 24 62.148.22.0/24 maxlen: 24 62.148.23.0/24 maxlen: 24 62.148.24.0/24 maxlen: 24 62.148.25.0/24 maxlen: 24 62.148.26.0/24 maxlen: 24 62.148.27.0/24 maxlen: 24 62.148.28.0/24 maxlen: 24 62.148.29.0/24 maxlen: 24 62.148.30.0/24 maxlen: 24 62.148.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:7d:d9:6a:c8:fe:96:d4:92:07:b6:2c:0f:6a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022 Validity Not Before: Jan 2 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5388b9c759c2100472a700fde793bf35fe1d1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:ce:74:17:06:2b:1b:4c:b9:68:20:e2:90: f2:a6:a7:63:8a:ec:8c:f8:08:3f:26:73:9e:16:3a: 67:8c:5e:df:84:e0:b0:6b:aa:c7:49:ef:c0:04:d8: fe:44:94:58:3c:ed:18:3c:bd:1f:09:93:cb:e1:65: 32:45:06:c8:78:d5:bc:bc:86:d2:1c:30:62:05:45: a4:ff:69:49:c0:05:c9:aa:46:ae:d0:c9:a2:18:d9: d4:0a:07:79:17:00:cb:6a:96:4e:8d:a0:3b:0a:f4: c7:b4:9d:4e:16:ae:9a:4a:36:63:8b:ac:32:71:29: d9:05:01:94:98:cc:14:0d:a6:6b:32:dd:42:22:51: 64:70:65:2e:40:09:8c:6a:5a:7d:6b:bf:fc:66:48: 83:05:f2:f2:89:db:c1:f8:90:22:25:4c:65:58:64: a4:5a:ca:97:3e:aa:fb:18:55:e4:2a:57:92:a8:46: 9f:a4:54:c9:7c:ce:e2:5d:9f:27:28:69:d5:d0:ad: 4e:85:19:a9:3c:de:3a:3b:6b:e5:5f:d9:ff:1e:81: e0:0d:af:97:a9:c2:d8:20:7b:bb:d1:6e:20:37:d6: cc:57:47:44:e9:7a:77:5c:5f:52:5a:30:b0:ab:ee: d2:19:a6:ac:5d:22:e5:b5:d4:46:60:82:ff:7f:fc: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:38:8B:9C:75:9C:21:00:47:2A:70:0F:DE:79:3B:F3:5F:E1:D1:EC X509v3 Authority Key Identifier: keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/xTiLnHWcIQBHKnAP3nk781_h0ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.148.0.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:53:33:6b:00:73:38:cf:1b:d7:8f:d4:2b:ec:9a:6e:6f:3c: 86:be:8d:74:fb:eb:1e:f8:94:6e:46:2b:07:41:f1:dc:e3:a1: ed:b8:ff:96:63:4f:dc:3a:fd:5b:f6:74:4e:ce:0d:22:ef:c1: db:73:4a:02:07:42:a7:0c:ba:8b:74:fd:48:df:24:70:90:c8: af:9d:78:37:be:94:66:77:a7:c4:39:f7:cf:70:44:25:14:d2: 7c:e6:2d:60:20:82:e0:73:18:f2:ad:c6:57:ea:5b:58:b4:19: 5b:8e:34:20:cf:38:73:5c:40:63:23:77:a7:0c:d1:5d:c3:4a: a5:a3:5f:0f:5d:ff:a7:a0:55:c8:0c:55:7d:d0:13:75:91:6a: 66:50:6c:df:cb:45:64:c7:f7:70:06:aa:da:b6:24:f3:56:b7: e7:71:b8:54:33:f7:5d:db:73:3e:15:b8:0d:c0:38:22:0f:7f: 75:a6:28:95:fd:ff:ac:41:d6:af:e8:24:1d:d8:e0:0a:63:f5: d4:7c:07:48:5f:77:58:94:2f:0b:52:73:e5:3b:9d:9b:60:f3: 42:19:8d:92:f2:98:50:a0:b1:ac:69:a5:18:8d:b8:66:d2:5c: 2d:8b:29:06:21:f1:2c:1f:1d:87:2a:f2:fc:d4:0f:95:d8:04: 34:1a:15:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N33Zasj+ltSSB7YsD2qQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNTMyZTNkYzM3MThmMmUxYjU1NmE2OTQ3MGIxZTczOWRk MzkwMjIwHhcNMjYwMTAyMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTM4OGI5Yzc1OWMyMTAwNDcyYTcwMGZkZTc5M2JmMzVmZTFkMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1DOdBcGKxtMuWgg4pDypqdjiuyM +Ag/JnOeFjpnjF7fhOCwa6rHSe/ABNj+RJRYPO0YPL0fCZPL4WUyRQbIeNW8vIbS HDBiBUWk/2lJwAXJqkau0MmiGNnUCgd5FwDLapZOjaA7CvTHtJ1OFq6aSjZji6wy cSnZBQGUmMwUDaZrMt1CIlFkcGUuQAmMalp9a7/8ZkiDBfLyidvB+JAiJUxlWGSk WsqXPqr7GFXkKleSqEafpFTJfM7iXZ8nKGnV0K1OhRmpPN46O2vlX9n/HoHgDa+X qcLYIHu70W4gN9bMV0dE6Xp3XF9SWjCwq+7SGaasXSLltdRGYIL/f/zMgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMU4i5x1nCEARypwD955O/Nf4dHsMB8GA1UdIwQY MBaAFDBTLj3DcY8uG1VqaUcLHnOd05AiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODct NjZhZDFkYzg3MzYzLzEveFRpTG5IV2NJUUJIS25BUDNuazc4MV9oMGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODctNjZhZDFkYzg3MzYz LzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPpQAMA0G CSqGSIb3DQEBCwUAA4IBAQCOUzNrAHM4zxvXj9Qr7JpubzyGvo10++se+JRuRisH QfHc46HtuP+WY0/cOv1b9nROzg0i78Hbc0oCB0KnDLqLdP1I3yRwkMivnXg3vpRm d6fEOffPcEQlFNJ85i1gIILgcxjyrcZX6ltYtBlbjjQgzzhzXEBjI3enDNFdw0ql o18PXf+noFXIDFV90BN1kWpmUGzfy0Vkx/dwBqratiTzVrfncbhUM/dd23M+FbgN wDgiD391piiV/f+sQdav6CQd2OAKY/XUfAdIX3dYlC8LUnPlO52bYPNCGY2S8phQ oLGsaaUYjbhm0lwtiykGIfEsHx2HKvL81A+V2AQ0GhXV -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:32 2026 by rpki-client