This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/b62jiGCoCOfphBx0Greu8Z3ZdAo.roa File: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (raw, json) Hash identifier: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0= Subject key identifier: 6F:AD:A3:88:60:A8:08:E7:E9:84:1C:74:1A:B7:AE:F1:9D:D9:74:0A Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE78A2042DD6646C8ED332B80ACDA Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/b62jiGCoCOfphBx0Greu8Z3ZdAo.roa Signing time: Thu 01 Jan 2026 14:17:41 +0000 ROA not before: Thu 01 Jan 2026 14:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214118 IP address blocks: 213.33.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e7:8a:20:42:dd:66:46:c8:ed:33:2b:80:ac:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fada38860a808e7e9841c741ab7aef19dd9740a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:ab:ee:28:8d:1f:97:6d:b3:ae:25:1d:e6: 05:e4:0b:1e:0d:68:03:da:bd:52:26:90:91:79:c6: ef:b8:03:f7:00:3c:0a:e1:39:f7:23:a8:4f:cc:53: 00:88:e9:6d:b2:31:f4:7b:b9:31:6e:f4:54:72:52: e6:b2:52:d1:81:7f:14:9f:bf:20:bc:f6:6a:8a:d7: 9c:09:78:8e:32:b8:8d:bc:1b:0d:a6:97:5a:be:62: 83:29:94:fc:3d:93:9b:c4:d8:87:eb:e5:f8:ea:8e: c5:74:92:04:77:9a:e6:ec:c1:04:93:4f:70:c0:6a: 12:1c:44:b8:e2:1c:50:52:8b:41:7d:62:79:5e:7b: 3e:c5:63:dc:3d:9d:ff:d7:36:91:48:e9:50:34:9b: 26:2d:1c:4f:26:6d:d0:a9:7b:7e:80:0b:88:b7:8b: cc:97:6a:00:23:b5:e9:83:19:19:3b:29:30:90:ea: 15:3f:a4:8c:ce:84:71:e5:b5:3a:9f:37:a9:f7:ed: f7:d4:e9:b8:c4:c9:25:cd:57:a3:ed:bf:5c:85:4e: e1:4a:00:61:a5:6d:e8:14:01:a8:6c:f1:53:6d:68: 73:34:53:95:f5:78:b9:0d:b8:9d:06:05:8b:21:3f: 38:df:82:c3:38:00:0a:3e:23:c4:b9:6c:b9:ec:b6: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AD:A3:88:60:A8:08:E7:E9:84:1C:74:1A:B7:AE:F1:9D:D9:74:0A X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/b62jiGCoCOfphBx0Greu8Z3ZdAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.33.118.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:a7:e7:b7:8b:63:02:b6:b3:96:11:e3:1a:90:a6:36:86:b1: 1a:6a:b8:c4:d9:db:65:84:e9:6b:76:aa:32:53:d0:b2:9f:bd: c1:5d:fb:fa:ea:81:ba:d3:4f:ca:4d:93:31:22:ff:cb:32:75: 2b:cd:c5:e2:a9:96:07:29:17:11:a2:f8:0f:49:4a:da:c5:fc: 98:31:fa:4b:8d:46:44:c7:19:62:c1:b0:de:ec:d9:cc:c6:c5: d0:c0:d3:ee:56:c0:57:47:ad:94:18:85:71:79:20:67:ce:ee: bc:65:33:ce:e0:b4:3b:db:db:7e:d7:6e:ea:15:ef:a4:a4:7f: 45:e5:20:86:2c:44:32:37:47:e8:06:ba:d3:c9:ef:87:99:36: 29:1d:7d:60:77:4a:d8:60:74:89:db:5a:a4:52:97:8a:f8:29: d6:34:76:7d:c0:25:fd:49:01:bc:fa:30:7b:ce:5a:19:0a:c1: ee:a8:fb:26:c6:dd:b9:6d:47:b1:af:16:ec:19:23:c6:ca:48: e8:50:b4:2d:35:0e:cc:33:f8:6f:54:bb:93:8c:b2:58:5a:b9: d5:fc:7f:04:a9:da:00:4f:b5:83:43:6a:b8:e3:1a:92:8e:8a: 58:0f:56:cd:76:a9:90:dd:27:aa:d0:53:6c:b6:1e:5d:5e:36: 4f:bf:97:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+eKIELdZkbI7TMrgKzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmFkYTM4ODYwYTgwOGU3ZTk4NDFjNzQxYWI3YWVmMTlkZDk3NDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApour7iiNH5dts64lHeYF5AseDWgD 2r1SJpCRecbvuAP3ADwK4Tn3I6hPzFMAiOltsjH0e7kxbvRUclLmslLRgX8Un78g vPZqitecCXiOMriNvBsNppdavmKDKZT8PZObxNiH6+X46o7FdJIEd5rm7MEEk09w wGoSHES44hxQUotBfWJ5Xns+xWPcPZ3/1zaRSOlQNJsmLRxPJm3QqXt+gAuIt4vM l2oAI7XpgxkZOykwkOoVP6SMzoRx5bU6nzep9+331Om4xMklzVej7b9chU7hSgBh pW3oFAGobPFTbWhzNFOV9Xi5DbidBgWLIT8434LDOAAKPiPEuWy57LaKZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+to4hgqAjn6YQcdBq3rvGd2XQKMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvYjYyamlHQ29DT2ZwaEJ4MEdyZXU4WjNaZEFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SF2MA0G CSqGSIb3DQEBCwUAA4IBAQBqp+e3i2MCtrOWEeMakKY2hrEaarjE2dtlhOlrdqoy U9Cyn73BXfv66oG600/KTZMxIv/LMnUrzcXiqZYHKRcRovgPSUraxfyYMfpLjUZE xxliwbDe7NnMxsXQwNPuVsBXR62UGIVxeSBnzu68ZTPO4LQ729t+127qFe+kpH9F 5SCGLEQyN0foBrrTye+HmTYpHX1gd0rYYHSJ21qkUpeK+CnWNHZ9wCX9SQG8+jB7 zloZCsHuqPsmxt25bUexrxbsGSPGykjoULQtNQ7MM/hvVLuTjLJYWrnV/H8EqdoA T7WDQ2q44xqSjopYD1bNdqmQ3Seq0FNsth5dXjZPv5dN -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:33 2026 by rpki-client