This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa File: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (raw, json) Hash identifier: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM= Subject key identifier: 97:43:56:70:40:7F:7C:23:27:21:A1:AE:60:30:34:BC:CF:95:03:39 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA3204956AD594B5E0C6036B8A31A25 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198510 IP address blocks: 62.112.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:20:49:56:ad:59:4b:5e:0c:60:36:b8:a3:1a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97435670407f7c232721a1ae603034bccf950339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:9d:a1:34:7f:82:fd:e3:63:05:4e:e2:a3: e2:cd:2b:fa:4c:e2:64:16:34:23:40:65:65:e7:59: 7b:2a:47:4a:73:f6:fa:3d:b5:c4:d2:d7:f2:b9:41: 13:c0:f2:55:69:ec:2d:c8:d6:21:ff:85:00:28:c0: d1:86:9d:5f:72:e6:7d:28:23:5f:1f:a3:03:80:b0: 9d:bd:3b:81:7b:34:77:4d:c7:0a:dd:8e:ca:a5:f6: 70:f0:22:a7:ea:cf:02:b0:24:dc:9d:f2:0c:f8:34: 90:93:0d:b8:4f:77:dc:dc:23:9c:ed:b1:32:15:4e: fc:56:0f:6b:f9:53:25:e2:24:b0:b7:f2:56:ac:23: 5a:29:86:ca:05:55:ca:4a:4e:2e:36:05:89:fd:40: 15:60:ac:cf:7d:7e:eb:e6:e7:ef:bb:72:e7:12:42: 96:4e:8f:ba:f6:00:15:82:40:e0:70:c5:0b:f1:35: 77:ab:b0:c4:c3:1d:5e:6c:17:25:c1:f4:1f:f4:fc: c0:5d:5e:ec:b2:a3:5a:4f:8a:c8:99:7e:8b:29:d9: 88:28:c6:53:4e:72:ed:f8:7f:74:06:57:32:8f:86: 7c:74:e8:99:2d:5e:3a:d3:72:2f:07:d5:97:f9:17: 31:1c:a7:34:b5:f2:0b:2d:9d:c6:20:6c:6d:0a:73: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:56:70:40:7F:7C:23:27:21:A1:AE:60:30:34:BC:CF:95:03:39 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.204.0/24 Signature Algorithm: sha256WithRSAEncryption aa:cc:63:92:7f:a3:03:f4:8b:c7:96:df:40:f2:2f:18:d9:4d: d3:88:7c:a1:7f:45:8b:06:0b:e0:b4:73:31:c2:42:de:52:f3: c7:42:a5:1f:45:86:48:3b:d7:92:aa:88:72:30:fd:b1:2e:4b: a5:22:02:3d:18:09:10:fd:79:45:96:1d:a0:ec:a1:6c:a7:6c: f7:27:3b:71:06:2d:09:c3:0e:a7:d7:73:cc:23:ac:98:7c:46: 68:c7:0c:4d:40:c3:82:d7:a8:1d:79:17:5d:27:d5:89:db:75: 3e:a7:7a:6a:e7:12:2b:ce:09:ed:51:c8:6a:4c:1f:57:82:82: 7a:be:f7:f4:c8:25:91:00:de:59:67:7d:5e:b1:94:09:16:09: 55:b0:b4:a3:e9:3d:84:d8:f7:93:5b:7b:f4:f1:99:d4:76:06: 1e:21:27:e8:a7:9d:7d:b6:cf:d9:80:86:de:8d:de:6b:6b:18: b0:2b:ed:76:a1:d0:67:5a:c8:37:33:d8:26:84:c1:4f:b1:13: 98:84:ab:5c:69:59:c1:09:0e:fb:3f:27:c1:4a:c8:22:53:91: 48:9d:41:93:62:89:db:ed:6d:17:0d:22:28:84:bc:be:26:42: 19:3d:c8:3a:09:67:f7:ac:fe:42:38:a2:71:95:f5:43:12:5f: d1:3c:25:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyBJVq1ZS14MYDa4oxolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzQzNTY3MDQwN2Y3YzIzMjcyMWExYWU2MDMwMzRiY2NmOTUwMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7adoTR/gv3jYwVO4qPizSv6TOJk FjQjQGVl51l7KkdKc/b6PbXE0tfyuUETwPJVaewtyNYh/4UAKMDRhp1fcuZ9KCNf H6MDgLCdvTuBezR3TccK3Y7KpfZw8CKn6s8CsCTcnfIM+DSQkw24T3fc3COc7bEy FU78Vg9r+VMl4iSwt/JWrCNaKYbKBVXKSk4uNgWJ/UAVYKzPfX7r5ufvu3LnEkKW To+69gAVgkDgcMUL8TV3q7DEwx1ebBclwfQf9PzAXV7ssqNaT4rImX6LKdmIKMZT TnLt+H90Blcyj4Z8dOiZLV4603IvB9WX+RcxHKc0tfILLZ3GIGxtCnPfdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdDVnBAf3wjJyGhrmAwNLzPlQM5MB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvbDBOV2NFQl9mQ01uSWFHdVlEQTB2TS1WQXprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnDMMA0G CSqGSIb3DQEBCwUAA4IBAQCqzGOSf6MD9IvHlt9A8i8Y2U3TiHyhf0WLBgvgtHMx wkLeUvPHQqUfRYZIO9eSqohyMP2xLkulIgI9GAkQ/XlFlh2g7KFsp2z3JztxBi0J ww6n13PMI6yYfEZoxwxNQMOC16gdeRddJ9WJ23U+p3pq5xIrzgntUchqTB9XgoJ6 vvf0yCWRAN5ZZ31esZQJFglVsLSj6T2E2PeTW3v08ZnUdgYeISfop519ts/ZgIbe jd5raxiwK+12odBnWsg3M9gmhMFPsROYhKtcaVnBCQ77PyfBSsgiU5FInUGTYonb 7W0XDSIohLy+JkIZPcg6CWf3rP5COKJxlfVDEl/RPCXZ -----END CERTIFICATE-----Generated at Fri Jan 9 21:26:42 2026 by rpki-client