This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62fpaw9RFNh8jPEaxsV7bXdy9Q4.roa File: 62fpaw9RFNh8jPEaxsV7bXdy9Q4.roa (raw, json) Hash identifier: 1uu7yhWtaiTBXLq/ftleGkXLELslaLHITWtEb59F82E= Subject key identifier: EB:67:E9:6B:0F:51:14:D8:7C:8C:F1:1A:C6:C5:7B:6D:77:72:F5:0E Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CD8553C1F99A99CDB862F21DAEE1 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62fpaw9RFNh8jPEaxsV7bXdy9Q4.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206111 IP address blocks: 81.198.190.0/24 maxlen: 24 87.246.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cd:85:53:c1:f9:9a:99:cd:b8:62:f2:1d:ae:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb67e96b0f5114d87c8cf11ac6c57b6d7772f50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:d8:4b:6b:c7:03:ab:2b:ba:4c:89:0c:48: 93:08:b4:c3:9f:91:2a:fb:17:7f:81:b7:e0:a6:b9: a8:cb:89:8f:54:25:c3:8e:bc:bf:28:62:bc:64:6f: e0:e3:a0:f4:bc:4a:dc:70:bc:23:9d:5f:85:9c:4a: 41:25:9d:fa:f6:11:b0:10:79:28:0e:d3:6b:b6:66: 1b:a6:11:07:9a:e1:7a:bd:48:7f:77:7a:83:be:41: 29:69:fd:0e:ee:cd:2d:9c:ed:43:f8:d4:21:11:a5: 15:3e:04:19:07:d2:d7:71:d4:ff:55:c0:cf:d1:a2: b6:9b:2f:02:9b:e2:51:3b:17:fe:71:06:7f:b0:d0: 81:11:41:8a:aa:07:a4:be:8f:48:40:a3:30:58:43: 39:0a:64:0e:22:61:70:7f:66:0b:95:65:27:96:32: e0:44:69:ca:fb:00:8e:4a:b4:f0:65:22:1b:40:38: 7b:1d:b1:e8:92:b7:fe:06:02:53:d3:f3:24:ea:aa: e0:f9:a5:ae:7f:3a:40:16:f5:6c:0a:a4:06:06:d4: bb:aa:1a:df:ca:e9:38:bb:c9:7e:80:fe:3d:87:65: 83:ea:0e:9c:8b:ee:4f:e4:aa:cb:58:07:16:49:df: 3e:2a:bd:90:40:35:c9:e3:77:6b:9e:b7:b4:b0:da: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:67:E9:6B:0F:51:14:D8:7C:8C:F1:1A:C6:C5:7B:6D:77:72:F5:0E X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62fpaw9RFNh8jPEaxsV7bXdy9Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.198.190.0/24 87.246.178.0/24 Signature Algorithm: sha256WithRSAEncryption 88:84:ff:1a:95:1a:fe:4a:f0:81:78:d5:8b:1c:02:36:0f:94: b4:0c:1c:fb:f3:46:e0:7b:0e:f7:8c:c5:78:7f:81:88:3f:e2: 64:26:ee:b0:9d:ff:ff:3f:8b:5a:85:65:9a:df:f5:0b:c7:cb: 8c:68:14:f5:13:7c:0d:41:bb:86:b7:2e:96:d6:0c:70:36:23: d1:bc:94:b2:f5:13:1a:32:69:e9:90:52:4d:6d:a3:1c:64:7c: 20:05:c4:3e:49:76:52:0f:ae:b2:9e:08:7f:21:39:67:37:40: ab:b7:11:6a:41:9a:9a:22:10:fa:4d:87:60:1c:b8:f6:aa:69: 87:31:2c:d3:62:22:3c:a1:0e:e3:a2:1a:d4:d7:c9:3d:e7:6c: 0b:60:48:ab:7e:d0:b3:71:8e:ee:56:77:5d:54:c5:ca:87:bc: ef:24:ab:70:7b:00:13:e1:d8:47:52:84:e2:75:fa:b8:38:3d: 98:02:1d:30:64:f7:eb:5c:b1:d1:59:d5:4a:24:01:a1:bf:b0: 59:bc:43:ae:19:c2:fb:c1:e9:cb:b4:c7:fe:08:65:63:64:6b: 35:8e:16:26:6c:ca:67:35:63:ed:a1:9a:8b:66:ec:35:8e:c8: e0:ef:ce:b8:6a:dc:fb:1f:37:ca:f1:4a:1a:a6:7a:3c:45:71: eb:c2:ec:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yM2FU8H5mpnNuGLyHa7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjY3ZTk2YjBmNTExNGQ4N2M4Y2YxMWFjNmM1N2I2ZDc3NzJmNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vPYS2vHA6srukyJDEiTCLTDn5Eq +xd/gbfgprmoy4mPVCXDjry/KGK8ZG/g46D0vErccLwjnV+FnEpBJZ369hGwEHko DtNrtmYbphEHmuF6vUh/d3qDvkEpaf0O7s0tnO1D+NQhEaUVPgQZB9LXcdT/VcDP 0aK2my8Cm+JROxf+cQZ/sNCBEUGKqgekvo9IQKMwWEM5CmQOImFwf2YLlWUnljLg RGnK+wCOSrTwZSIbQDh7HbHokrf+BgJT0/Mk6qrg+aWufzpAFvVsCqQGBtS7qhrf yuk4u8l+gP49h2WD6g6ci+5P5KrLWAcWSd8+Kr2QQDXJ43drnre0sNpv3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOtn6WsPURTYfIzxGsbFe213cvUOMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvNjJmcGF3OVJGTmg4alBFYXhzVjdiWGR5OVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUca+AwQA V/ayMA0GCSqGSIb3DQEBCwUAA4IBAQCIhP8alRr+SvCBeNWLHAI2D5S0DBz780bg ew73jMV4f4GIP+JkJu6wnf//P4tahWWa3/ULx8uMaBT1E3wNQbuGty6W1gxwNiPR vJSy9RMaMmnpkFJNbaMcZHwgBcQ+SXZSD66yngh/ITlnN0CrtxFqQZqaIhD6TYdg HLj2qmmHMSzTYiI8oQ7johrU18k952wLYEirftCzcY7uVnddVMXKh7zvJKtwewAT 4dhHUoTidfq4OD2YAh0wZPfrXLHRWdVKJAGhv7BZvEOuGcL7wenLtMf+CGVjZGs1 jhYmbMpnNWPtoZqLZuw1jsjg7864atz7HzfK8Uoapno8RXHrwuxP -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:55 2026 by rpki-client