This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rGNpZQpxgqumWHt9Olsd1uUCwZA.roa File: rGNpZQpxgqumWHt9Olsd1uUCwZA.roa (raw, json) Hash identifier: PC8xtk1jNLFqJgHQbK2f4AHS4YPlCUt7mnIqAqc8Ups= Subject key identifier: AC:63:69:65:0A:71:82:AB:A6:58:7B:7D:3A:5B:1D:D6:E5:02:C1:90 Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a Certificate serial: 019B7C12469BAD0BB006BC63B545E9BA6BE7 Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rGNpZQpxgqumWHt9Olsd1uUCwZA.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48492 IP address blocks: 62.201.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:46:9b:ad:0b:b0:06:bc:63:b5:45:e9:ba:6b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac6369650a7182aba6587b7d3a5b1dd6e502c190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:99:50:63:ff:ae:b4:15:ec:04:d0:3d:d6: 9b:72:2b:93:9f:66:1c:cd:65:34:54:1d:ad:a2:c7: c7:11:c5:76:eb:88:8b:7b:4c:b4:0d:ab:3d:1a:f3: c5:10:c4:f5:ef:52:9c:fc:c7:80:25:6a:42:49:74: 0e:d3:6d:72:db:74:ee:c7:5d:72:83:ca:f8:17:37: 4f:db:a2:85:c5:96:f9:af:2a:57:c4:5d:4b:b3:98: 7c:07:c9:d6:62:97:b8:9d:82:67:4f:dd:dc:54:e2: 45:19:87:f3:d0:b3:97:c8:13:fa:10:1b:e7:b6:65: 8e:ce:2f:a8:9f:3e:b9:7d:97:bd:ab:6c:53:a6:33: 7c:46:b6:c0:f4:8e:aa:7d:20:5a:3c:39:3c:6b:b5: 47:fb:53:d6:e8:c5:9d:46:53:36:dc:83:a0:c3:fe: 68:44:94:ca:79:63:98:f4:a9:ea:4e:24:d9:f7:81: 23:b7:b2:07:ff:e2:f2:8c:8e:7b:53:09:50:0f:14: d9:46:79:f0:61:e6:17:2a:03:ff:3b:50:7a:ea:77: 11:cb:9e:98:38:c1:ec:29:2c:85:bb:85:48:60:1d: 08:46:c2:25:7b:d9:05:80:f0:61:95:4a:54:f4:a2: 1e:f1:3d:63:1b:74:e3:7e:e2:7d:f5:98:6c:16:22: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:69:65:0A:71:82:AB:A6:58:7B:7D:3A:5B:1D:D6:E5:02:C1:90 X509v3 Authority Key Identifier: keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rGNpZQpxgqumWHt9Olsd1uUCwZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.239.0/24 Signature Algorithm: sha256WithRSAEncryption 21:3c:0d:aa:e2:78:e9:aa:77:7c:53:a5:57:eb:fb:b0:5a:de: b8:d2:6e:42:9e:6c:84:44:36:6e:12:1a:0b:c8:1a:19:30:c7: b0:9c:b9:e5:32:68:51:1e:9f:3f:1b:7c:63:58:1d:d9:ce:39: 33:8a:c4:1f:e9:a6:5d:7b:12:a8:61:d6:77:bc:78:29:8f:88: 35:5b:83:42:de:69:3e:d9:55:47:94:34:ec:9e:e9:7b:72:03: 44:c1:fc:7e:85:e8:94:7d:cc:40:dc:ec:09:66:c5:e2:fb:4c: 79:6a:5d:47:0d:9b:00:97:c4:c1:13:34:0e:07:f0:38:77:cf: 71:d6:4d:47:c2:39:2a:68:f6:1e:07:00:b9:9a:22:1d:b1:dd: 1d:0b:ce:01:ab:3e:89:77:5f:6f:67:c2:a0:e8:ad:0f:69:cb: eb:92:67:e2:61:cd:ac:20:62:68:47:4f:25:26:b7:1d:9c:f6: 70:f1:06:29:70:2d:ff:40:e0:21:05:4e:e6:3f:99:af:32:55: aa:f7:26:56:4b:81:1f:48:fa:83:d1:4a:3e:02:27:57:d9:17: 87:16:a7:1e:eb:34:96:ad:27:9d:f8:fb:84:d3:d2:6b:a1:39: 65:c6:bf:6c:d1:cf:62:55:4d:cf:24:f7:4a:84:be:e1:be:60: e3:19:cf:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkabrQuwBrxjtUXpumvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh MTI4MmEwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzYzNjk2NTBhNzE4MmFiYTY1ODdiN2QzYTViMWRkNmU1MDJjMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+mZUGP/rrQV7ATQPdabciuTn2Yc zWU0VB2tosfHEcV264iLe0y0Das9GvPFEMT171Kc/MeAJWpCSXQO021y23Tux11y g8r4FzdP26KFxZb5rypXxF1Ls5h8B8nWYpe4nYJnT93cVOJFGYfz0LOXyBP6EBvn tmWOzi+onz65fZe9q2xTpjN8RrbA9I6qfSBaPDk8a7VH+1PW6MWdRlM23IOgw/5o RJTKeWOY9KnqTiTZ94Ejt7IH/+LyjI57UwlQDxTZRnnwYeYXKgP/O1B66ncRy56Y OMHsKSyFu4VIYB0IRsIle9kFgPBhlUpU9KIe8T1jG3TjfuJ99ZhsFiKvCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxjaWUKcYKrplh7fTpbHdblAsGQMB8GA1UdIwQY MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt ZTdiZTVlMzBhZDJkLzEvckdOcFpRcHhncXVtV0h0OU9sc2QxdVVDd1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsnvMA0G CSqGSIb3DQEBCwUAA4IBAQAhPA2q4njpqnd8U6VX6/uwWt640m5CnmyERDZuEhoL yBoZMMewnLnlMmhRHp8/G3xjWB3ZzjkzisQf6aZdexKoYdZ3vHgpj4g1W4NC3mk+ 2VVHlDTsnul7cgNEwfx+heiUfcxA3OwJZsXi+0x5al1HDZsAl8TBEzQOB/A4d89x 1k1HwjkqaPYeBwC5miIdsd0dC84Bqz6Jd19vZ8Kg6K0PacvrkmfiYc2sIGJoR08l JrcdnPZw8QYpcC3/QOAhBU7mP5mvMlWq9yZWS4EfSPqD0Uo+AidX2ReHFqce6zSW rSed+PuE09JroTllxr9s0c9iVU3PJPdKhL7hvmDjGc+X -----END CERTIFICATE-----Generated at Tue Jan 20 07:30:30 2026 by rpki-client