This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/E11knFk0gckPfde_6h3IuK8P4LE.roa
File: E11knFk0gckPfde_6h3IuK8P4LE.roa (raw, json)
Hash identifier: +B12oAANa/hqjobZjc2ZLivelQzH1SahC1DEv/hXMOc=
Subject key identifier: 13:5D:64:9C:59:34:81:C9:0F:7D:D7:BF:EA:1D:C8:B8:AF:0F:E0:B1
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 019B7C12474C12715B09738BC1DF219ECAC0
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/E11knFk0gckPfde_6h3IuK8P4LE.roa
Signing time: Fri 02 Jan 2026 00:18:51 +0000
ROA not before: Fri 02 Jan 2026 00:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62419
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:47:4c:12:71:5b:09:73:8b:c1:df:21:9e:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 2 00:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=135d649c593481c90f7dd7bfea1dc8b8af0fe0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8d:81:62:4d:e7:6b:9d:ca:14:01:cd:79:06:
08:8d:62:00:e8:3e:07:04:28:1f:87:0a:d0:18:66:
3b:c1:46:fa:8f:a1:ae:a6:a8:f4:6a:b0:37:2d:82:
f3:85:c9:c0:6a:c1:6a:e8:9b:88:80:ad:ea:8d:12:
9a:f1:bf:41:0f:a9:59:82:b3:49:b2:bb:38:1d:b8:
4f:24:80:d8:8a:80:4f:98:cb:a8:0c:38:e2:25:e8:
27:e2:ec:4b:58:18:6b:ac:af:c3:78:c6:1c:f5:38:
88:81:80:c4:5a:c5:46:b7:b8:98:d0:03:a7:b1:3c:
96:ef:ac:ca:a3:89:fe:7b:76:b7:2a:fb:d3:53:85:
bd:bd:62:e4:df:c8:d4:fa:70:57:b4:3a:9b:f5:22:
df:97:f5:7f:cb:aa:b2:9c:6f:8b:77:d5:e8:be:a8:
5d:d1:04:26:5a:9d:13:58:a8:48:80:25:fc:b2:24:
ea:ee:36:bc:d9:9a:fa:54:19:1e:88:d7:f6:11:f4:
b1:91:2b:b8:dd:82:d6:b8:7d:b5:34:e5:bb:21:f8:
8b:a6:2e:e3:75:9f:6c:f8:ab:66:24:1d:79:f1:39:
22:18:62:76:85:a8:83:a8:47:27:68:4d:9b:af:24:
a5:14:94:5a:f5:63:ff:ed:2d:75:2a:0b:59:d6:fa:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5D:64:9C:59:34:81:C9:0F:7D:D7:BF:EA:1D:C8:B8:AF:0F:E0:B1
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/E11knFk0gckPfde_6h3IuK8P4LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.202.0/24
62.201.237.0/24
62.201.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0b:94:4a:ab:8e:d4:1f:bc:a8:4b:9e:d0:89:47:d9:16:cd:
37:fe:08:27:e1:1a:6d:97:1f:49:47:3d:fe:b2:6a:0d:18:e7:
9c:d7:6b:fb:ef:e8:0d:58:60:87:54:fd:83:c2:26:16:03:ee:
b8:90:79:1a:2d:f0:39:5b:bc:1b:32:ed:53:61:7b:1d:9b:b8:
b0:4e:80:31:e5:90:11:d1:86:51:00:2a:77:b3:00:46:55:16:
40:24:83:73:7c:82:c2:71:bf:82:13:3d:a5:d7:d9:af:9f:86:
0a:39:98:a8:b0:d7:33:0f:d1:57:38:00:27:6a:fa:59:11:3d:
f4:bf:a2:75:bb:f2:f0:80:44:cc:47:d3:26:ba:03:22:cf:01:
51:e5:38:18:ed:aa:09:2d:87:92:ae:dc:21:29:13:9e:0a:55:
30:9b:b3:e2:6e:27:b5:7d:31:06:f5:85:30:b4:f5:ed:0c:27:
9c:df:a6:ac:84:7d:56:21:3f:2c:f4:38:92:98:74:21:ee:43:
bc:ea:0e:fb:e5:02:47:db:86:bb:4c:89:99:a4:65:13:44:a0:
67:ca:eb:64:5f:86:e9:c9:bc:f2:ff:1d:b3:f2:f1:65:c9:49:
da:c7:e5:22:0d:3d:2a:d4:d0:b7:59:8c:dd:a2:aa:d4:b5:4d:
3b:55:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:28:29 2026 by rpki-client