This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/tkJi06CdYjIn25noZIzPiK0yCl0.roa File: tkJi06CdYjIn25noZIzPiK0yCl0.roa (raw, json) Hash identifier: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE= Subject key identifier: B6:42:62:D3:A0:9D:62:32:27:DB:99:E8:64:8C:CF:88:AD:32:0A:5D Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B7C13365C05AE7105FE17BA246D3A9998 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/tkJi06CdYjIn25noZIzPiK0yCl0.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 62.68.69.0/24 maxlen: 24 91.221.80.0/24 maxlen: 24 185.83.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:36:5c:05:ae:71:05:fe:17:ba:24:6d:3a:99:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b64262d3a09d623227db99e8648ccf88ad320a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:e9:c6:46:02:14:28:65:f7:57:46:57:c3: 04:0e:28:61:5d:a8:fd:51:5d:0b:b4:cf:c5:67:9f: 3f:c1:09:16:bc:54:ae:40:09:40:03:0f:a6:f0:19: f0:de:98:37:f1:4d:c1:4b:c0:1d:51:d8:fc:96:fd: 0f:e7:ca:27:b1:46:72:cf:01:d7:bc:9a:89:68:17: 45:e4:ff:82:6b:75:1b:43:dc:90:bc:b6:04:4e:b9: 51:50:11:01:9c:bd:b7:c5:b2:32:74:c2:a5:ad:aa: 52:58:c2:0a:8a:ca:e4:29:78:4a:4c:2d:38:a1:78: c6:5e:ce:83:bd:35:5c:fa:f4:01:41:55:75:6f:13: 15:b9:13:82:6e:f6:cf:ab:30:58:bb:98:8c:c0:7c: b1:fc:51:9e:5d:fb:62:78:ab:57:24:a7:20:a5:99: 70:4d:38:14:e2:70:8b:97:e8:56:3e:c6:d1:18:09: ed:04:72:7d:04:e2:28:0e:d2:d5:ca:57:26:d0:3a: 01:24:c5:56:f0:50:eb:12:5a:ed:51:f0:05:27:cd: 6c:8c:57:10:b2:be:e6:d1:32:d7:cd:15:0d:4d:42: 1d:ec:4f:5f:f0:28:d0:75:26:b9:63:c6:4e:9b:40: 23:71:e3:ae:f5:6c:dc:fa:0f:7d:4b:52:9a:d2:88: 69:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:42:62:D3:A0:9D:62:32:27:DB:99:E8:64:8C:CF:88:AD:32:0A:5D X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/tkJi06CdYjIn25noZIzPiK0yCl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.69.0/24 91.221.80.0/24 185.83.230.0/24 Signature Algorithm: sha256WithRSAEncryption 18:ec:5c:e9:02:c7:0f:97:0d:72:c7:49:e1:fc:3d:a9:07:72: 36:2a:af:b3:5e:b3:c6:93:84:9c:49:d3:e8:6b:13:b5:da:e9: 4b:f8:a1:3d:08:2c:b1:9b:c3:37:ea:35:cf:9c:e8:48:91:d2: 4e:b5:a3:44:71:15:79:ce:4d:87:35:61:01:89:52:03:52:a6: d4:de:b7:16:fd:cb:2b:a9:38:40:df:aa:bd:bc:8f:6a:1a:3d: 47:e3:69:b8:7d:fd:76:dd:1a:f1:1c:d5:61:0c:21:4b:74:fa: 5a:99:39:01:1d:71:91:62:9e:17:72:b6:1b:e0:85:33:86:0d: 16:e0:0d:f6:00:46:2a:93:73:23:07:be:33:5e:7c:79:51:92: 8e:9f:10:fc:12:68:62:35:6d:d2:44:8d:6a:8d:08:85:2d:0a: 8d:37:7c:bf:67:a4:56:84:ac:16:f7:1b:53:5c:a6:6b:56:94: 0b:7e:45:fc:50:6f:35:9e:8c:9b:7b:31:85:d8:17:ab:1f:21: 95:bb:1d:7c:e5:c2:11:95:cc:e6:ed:36:cb:8f:09:c4:f1:c3: 61:de:43:e3:82:b5:8b:38:92:58:f9:e3:8d:f7:03:27:5b:58: 7b:d5:a4:6a:b8:3b:6b:e5:74:c6:18:5e:e3:b9:de:7d:aa:c6: ca:68:42:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EzZcBa5xBf4XuiRtOpmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjQyNjJkM2EwOWQ2MjMyMjdkYjk5ZTg2NDhjY2Y4OGFkMzIwYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwrpxkYCFChl91dGV8MEDihhXaj9 UV0LtM/FZ58/wQkWvFSuQAlAAw+m8Bnw3pg38U3BS8AdUdj8lv0P58onsUZyzwHX vJqJaBdF5P+Ca3UbQ9yQvLYETrlRUBEBnL23xbIydMKlrapSWMIKisrkKXhKTC04 oXjGXs6DvTVc+vQBQVV1bxMVuROCbvbPqzBYu5iMwHyx/FGeXftieKtXJKcgpZlw TTgU4nCLl+hWPsbRGAntBHJ9BOIoDtLVylcm0DoBJMVW8FDrElrtUfAFJ81sjFcQ sr7m0TLXzRUNTUId7E9f8CjQdSa5Y8ZOm0AjceOu9Wzc+g99S1Ka0ohpGQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLZCYtOgnWIyJ9uZ6GSMz4itMgpdMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvdGtKaTA2Q2RZakluMjVub1pJelBpSzB5Q2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkRFAwQA W91QAwQAuVPmMA0GCSqGSIb3DQEBCwUAA4IBAQAY7FzpAscPlw1yx0nh/D2pB3I2 Kq+zXrPGk4ScSdPoaxO12ulL+KE9CCyxm8M36jXPnOhIkdJOtaNEcRV5zk2HNWEB iVIDUqbU3rcW/csrqThA36q9vI9qGj1H42m4ff123RrxHNVhDCFLdPpamTkBHXGR Yp4XcrYb4IUzhg0W4A32AEYqk3MjB74zXnx5UZKOnxD8EmhiNW3SRI1qjQiFLQqN N3y/Z6RWhKwW9xtTXKZrVpQLfkX8UG81noybezGF2BerHyGVux185cIRlczm7TbL jwnE8cNh3kPjgrWLOJJY+eON9wMnW1h71aRquDtr5XTGGF7jud59qsbKaEKZ -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:57 2026 by rpki-client