This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/pCqGah-1s51upQgbjtJnrvE6ytI.roa File: pCqGah-1s51upQgbjtJnrvE6ytI.roa (raw, json) Hash identifier: Gf3M3iObbLHOXyMwNFbb8llJIyyUbbMZ5NBwYoUaQM4= Subject key identifier: A4:2A:86:6A:1F:B5:B3:9D:6E:A5:08:1B:8E:D2:67:AE:F1:3A:CA:D2 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B7E383BD022F6B627DF838D5AF929E868 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/pCqGah-1s51upQgbjtJnrvE6ytI.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 62.68.92.0/24 maxlen: 24 193.108.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3b:d0:22:f6:b6:27:df:83:8d:5a:f9:29:e8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42a866a1fb5b39d6ea5081b8ed267aef13acad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:29:af:7b:5a:4d:23:9d:0e:7d:72:de:da: 0e:70:47:64:6b:01:3f:a5:5a:79:7e:21:30:4b:26: bf:f3:f7:be:50:ea:2c:28:a4:d8:ed:f6:76:65:28: 82:46:c1:bb:9d:c0:6f:fd:56:0b:37:0b:0f:fb:77: a7:a1:4d:12:77:d5:94:4d:a8:00:4b:c8:5d:30:70: 2e:e3:47:dc:86:a5:07:1f:93:6a:1f:53:f7:1b:1f: 40:b1:e6:85:13:30:6a:6c:a6:6d:4c:06:8c:62:83: 78:6f:5d:69:79:4d:7f:c3:a1:01:75:f4:b7:ce:ec: 3c:b2:21:22:dc:fc:2f:ba:61:ac:69:40:ef:02:15: bb:4f:14:66:cb:59:c1:ce:42:33:5e:16:40:76:ed: 65:30:51:7e:30:1e:84:82:49:37:ed:99:e0:5d:31: ee:c4:1b:a6:f0:1d:da:ca:8b:25:f4:47:e9:f0:c9: fb:52:c7:41:92:0d:77:63:ea:51:ed:3f:82:76:8f: 99:25:88:20:80:f4:9c:f9:55:3b:f9:c9:86:d2:b5: c1:c0:e5:cf:6f:5d:c1:ae:44:37:2f:fb:1d:a4:66: 84:87:c3:95:03:f7:ea:50:4f:05:68:c2:e1:47:c5: e0:f9:ea:61:eb:d6:59:b7:f9:e0:be:5d:bb:7e:db: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:86:6A:1F:B5:B3:9D:6E:A5:08:1B:8E:D2:67:AE:F1:3A:CA:D2 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/pCqGah-1s51upQgbjtJnrvE6ytI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.92.0/24 193.108.131.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:a3:96:a5:84:70:16:e6:e6:1c:2d:e4:a5:a8:fa:9d:63:20: 9c:29:a6:b6:89:4c:f2:40:43:bb:63:60:fa:37:6d:9d:8e:a1: e2:9d:4e:f0:7b:d2:88:4a:92:65:5b:1b:a1:31:40:01:72:8d: ae:f8:35:90:aa:b5:44:88:2a:eb:fc:97:de:35:08:f0:a1:9b: 6c:37:fb:0a:32:53:cc:0a:85:0a:c0:01:a8:ef:a4:dd:c6:c0: 7b:72:d4:79:c8:f3:94:b1:93:af:ad:71:d4:03:ca:10:01:08: 6f:cb:ac:75:2a:ec:31:90:82:b2:d5:33:d6:6b:3a:c5:4c:a7: 04:b9:61:70:c2:74:35:0e:b8:39:82:0d:02:c3:9c:a3:e2:53: 41:db:17:d9:26:ef:fd:5d:aa:22:4b:27:64:f2:e1:a2:71:07: b6:66:11:06:f0:71:30:56:9a:3c:ef:35:b1:bc:61:fb:71:83: 9a:92:d7:f3:b2:14:c3:10:90:2c:08:e4:0d:8f:3d:99:cd:58: ae:d2:d2:c9:64:f3:d0:1d:8a:8f:46:79:14:37:3d:36:01:47: 24:d2:71:79:e1:c9:67:6d:f2:b0:b8:f9:1a:5c:8d:cd:ab:de: 59:3e:41:a1:b6:91:bc:aa:54:f3:42:32:ab:ad:09:ee:38:7a: 76:ff:6c:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ODvQIva2J9+DjVr5KehoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDJhODY2YTFmYjViMzlkNmVhNTA4MWI4ZWQyNjdhZWYxM2FjYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy8pr3taTSOdDn1y3toOcEdkawE/ pVp5fiEwSya/8/e+UOosKKTY7fZ2ZSiCRsG7ncBv/VYLNwsP+3enoU0Sd9WUTagA S8hdMHAu40fchqUHH5NqH1P3Gx9AseaFEzBqbKZtTAaMYoN4b11peU1/w6EBdfS3 zuw8siEi3PwvumGsaUDvAhW7TxRmy1nBzkIzXhZAdu1lMFF+MB6Egkk37ZngXTHu xBum8B3ayosl9Efp8Mn7UsdBkg13Y+pR7T+Cdo+ZJYgggPSc+VU7+cmG0rXBwOXP b13BrkQ3L/sdpGaEh8OVA/fqUE8FaMLhR8Xg+eph69ZZt/ngvl27ftvyHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKQqhmoftbOdbqUIG47SZ67xOsrSMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvcENxR2FoLTFzNTF1cFFnYmp0Sm5ydkU2eXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkRcAwQA wWyDMA0GCSqGSIb3DQEBCwUAA4IBAQCNo5alhHAW5uYcLeSlqPqdYyCcKaa2iUzy QEO7Y2D6N22djqHinU7we9KISpJlWxuhMUABco2u+DWQqrVEiCrr/JfeNQjwoZts N/sKMlPMCoUKwAGo76TdxsB7ctR5yPOUsZOvrXHUA8oQAQhvy6x1KuwxkIKy1TPW azrFTKcEuWFwwnQ1Drg5gg0Cw5yj4lNB2xfZJu/9XaoiSydk8uGicQe2ZhEG8HEw Vpo87zWxvGH7cYOaktfzshTDEJAsCOQNjz2ZzViu0tLJZPPQHYqPRnkUNz02AUck 0nF54clnbfKwuPkaXI3Nq95ZPkGhtpG8qlTzQjKrrQnuOHp2/2wi -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:17 2026 by rpki-client