This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa File: jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa (raw, json) Hash identifier: 74IQiVstIh3KzJDiJivZ5vXC5OARjoNqNmVIrOMQl9I= Subject key identifier: 8C:F1:3C:78:3C:B9:B0:1A:4E:27:4C:45:F8:92:2A:BB:B0:43:D8:4C Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B97A47F235B48916A2ECC60434FC8DA1F Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa Signing time: Wed 07 Jan 2026 08:48:18 +0000 ROA not before: Wed 07 Jan 2026 08:48:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 62.112.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:a4:7f:23:5b:48:91:6a:2e:cc:60:43:4f:c8:da:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 7 08:48:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cf13c783cb9b01a4e274c45f8922abbb043d84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:dc:28:1a:ab:a8:83:9e:fa:f2:23:ba:74: fd:da:ba:d0:1f:04:c0:90:72:57:d7:46:64:27:a7: 5a:24:83:65:5f:15:88:d1:80:3e:ff:13:71:95:dd: c0:3d:e9:92:39:58:b9:46:fa:f7:81:9a:af:34:37: 64:42:7a:ca:67:8d:4b:72:17:c0:91:40:9c:c6:bc: 8b:b6:35:e3:4e:e0:5b:75:f7:fc:5a:5d:9f:50:eb: 99:e9:4d:51:3f:28:30:8e:cb:ba:39:22:db:5f:9e: 82:d8:53:d1:d8:5f:40:9e:84:46:78:3d:22:22:c7: 5c:0c:84:be:60:56:f4:4b:e7:5f:e0:0f:f4:7a:61: 77:2e:4f:f6:10:96:85:11:20:6b:35:d7:52:3a:69: c0:4f:f6:17:36:1d:04:02:42:e9:ca:55:10:9f:78: d4:a4:b5:2c:ed:21:ff:1d:6f:3b:20:c5:e3:e9:df: 43:34:8e:c0:dc:ca:0a:09:21:f3:c5:e7:78:20:31: 5f:b3:8f:f7:a3:87:01:d7:14:9d:0c:72:3f:38:40: 5d:73:1c:7d:f4:77:7e:0b:c0:fb:fe:44:b6:73:94: 45:b8:a8:7a:db:19:c1:10:84:01:aa:c3:da:f4:ca: ba:b7:d2:2a:d0:f8:69:60:b2:b0:aa:1b:41:7f:46: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:3C:78:3C:B9:B0:1A:4E:27:4C:45:F8:92:2A:BB:B0:43:D8:4C X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.207.0/24 Signature Algorithm: sha256WithRSAEncryption 33:3c:96:87:15:8d:38:f7:f8:f8:1f:f4:4f:69:87:21:c8:19: c5:dc:a8:d9:56:7b:2a:2f:2a:7c:45:96:ca:fe:2e:2b:49:9a: cb:dc:2e:d2:c7:83:1f:9b:10:7b:9e:b2:e3:bb:1b:39:8a:04: 62:c1:c7:3b:fc:6d:f7:cb:86:6d:3e:de:f9:b6:9d:7e:38:29: 4b:07:a4:32:f2:84:5f:9a:c5:b6:f2:e2:41:da:f1:9d:a9:e3: e2:41:40:7a:85:3f:cd:1a:6f:2d:db:91:da:5e:df:93:f2:aa: 51:6d:2d:93:c7:bc:0a:3c:fe:e9:f5:73:23:34:7b:e2:6d:68: 0a:b7:97:7a:ff:04:93:7e:1a:b0:2a:4d:d8:5b:ff:7b:47:4d: 3a:07:bd:a0:2c:1c:2c:21:34:40:9a:d0:a9:a1:e1:5e:4d:7c: e6:e8:82:a8:4b:2b:75:ca:9b:b7:f4:af:77:1b:2e:bf:35:41: 8b:b3:32:a5:30:a8:6a:9f:bc:03:d3:15:3c:77:b3:64:93:d3: 5b:2f:a6:fc:d5:84:fd:92:c1:2d:2d:12:4f:18:15:8d:91:65: 54:7c:cf:fa:d0:f4:f7:ae:b8:b7:32:4d:cb:df:b6:d4:68:5b: 2f:93:8a:01:84:0c:8f:b5:e4:48:75:f5:7e:2a:e3:99:bc:3e: 2f:94:c4:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuXpH8jW0iRai7MYENPyNofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTA3MDg0ODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2YxM2M3ODNjYjliMDFhNGUyNzRjNDVmODkyMmFiYmIwNDNkODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6bcKBqrqIOe+vIjunT92rrQHwTA kHJX10ZkJ6daJINlXxWI0YA+/xNxld3APemSOVi5Rvr3gZqvNDdkQnrKZ41LchfA kUCcxryLtjXjTuBbdff8Wl2fUOuZ6U1RPygwjsu6OSLbX56C2FPR2F9AnoRGeD0i IsdcDIS+YFb0S+df4A/0emF3Lk/2EJaFESBrNddSOmnAT/YXNh0EAkLpylUQn3jU pLUs7SH/HW87IMXj6d9DNI7A3MoKCSHzxed4IDFfs4/3o4cB1xSdDHI/OEBdcxx9 9Hd+C8D7/kS2c5RFuKh62xnBEIQBqsPa9Mq6t9Iq0PhpYLKwqhtBf0bMtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzxPHg8ubAaTidMRfiSKruwQ9hMMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvalBFOGVEeTVzQnBPSjB4Ri1KSXF1N0JEMkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnDPMA0G CSqGSIb3DQEBCwUAA4IBAQAzPJaHFY049/j4H/RPaYchyBnF3KjZVnsqLyp8RZbK /i4rSZrL3C7Sx4MfmxB7nrLjuxs5igRiwcc7/G33y4ZtPt75tp1+OClLB6Qy8oRf msW28uJB2vGdqePiQUB6hT/NGm8t25HaXt+T8qpRbS2Tx7wKPP7p9XMjNHvibWgK t5d6/wSTfhqwKk3YW/97R006B72gLBwsITRAmtCpoeFeTXzm6IKoSyt1ypu39K93 Gy6/NUGLszKlMKhqn7wD0xU8d7Nkk9NbL6b81YT9ksEtLRJPGBWNkWVUfM/60PT3 rri3Mk3L37bUaFsvk4oBhAyPteRIdfV+KuOZvD4vlMT+ -----END CERTIFICATE-----Generated at Fri Jan 9 21:27:43 2026 by rpki-client