This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/D3Scbfl6fBr15c-mbPSi-zu0HHY.roa
File: D3Scbfl6fBr15c-mbPSi-zu0HHY.roa (raw, json)
Hash identifier: GocWeJMCxjrHRiAM5S4dU7oou7wP+fPBVESKdHPj5Io=
Subject key identifier: 0F:74:9C:6D:F9:7A:7C:1A:F5:E5:CF:A6:6C:F4:A2:FB:3B:B4:1C:76
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 019B7BA50964FB971EA19214A4D5D511418F
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/D3Scbfl6fBr15c-mbPSi-zu0HHY.roa
Signing time: Thu 01 Jan 2026 22:19:31 +0000
ROA not before: Thu 01 Jan 2026 22:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48744
IP address blocks: 62.122.8.0/22 maxlen: 22
62.122.8.0/24 maxlen: 24
62.122.9.0/24 maxlen: 24
62.122.10.0/24 maxlen: 24
62.122.11.0/24 maxlen: 24
62.122.12.0/22 maxlen: 22
62.122.12.0/24 maxlen: 24
62.122.13.0/24 maxlen: 24
62.122.14.0/24 maxlen: 24
62.122.15.0/24 maxlen: 24
185.240.124.0/23 maxlen: 23
185.240.124.0/24 maxlen: 24
185.240.126.0/23 maxlen: 23
185.240.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:09:64:fb:97:1e:a1:92:14:a4:d5:d5:11:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Jan 1 22:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f749c6df97a7c1af5e5cfa66cf4a2fb3bb41c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:11:b8:07:46:11:f0:66:3c:88:ac:51:dd:
83:86:ed:b7:c5:53:f4:e4:39:83:44:e5:aa:4f:f8:
a9:3e:b7:f2:d8:dd:d9:ee:d9:03:1a:a1:7d:f3:ab:
cc:bc:94:62:fd:02:6d:95:ae:f4:f3:9d:36:b3:37:
dc:45:58:48:bd:80:c4:5e:e4:1c:2f:e8:68:70:80:
7e:73:be:fc:0d:a7:12:4c:7e:6b:d8:1e:03:49:4a:
9c:64:bf:94:6a:5c:2c:ce:f4:5a:6d:f5:04:5f:6d:
d1:1b:1f:aa:d1:60:00:14:23:5f:49:b0:88:0c:cb:
40:4a:02:17:b2:c6:fb:e4:dc:09:55:98:cd:ee:be:
e7:ec:c0:2c:8d:aa:3c:4c:23:0a:73:f3:1f:dc:5e:
c0:86:9a:95:d6:90:e9:c1:67:7e:6d:50:03:5d:05:
9e:2b:b6:5b:be:54:58:6e:ad:7f:7c:c4:cf:3c:2b:
a5:70:d1:d2:54:42:da:a4:ec:1a:07:73:a9:0a:6e:
5e:8e:d4:45:01:ec:0a:f9:4b:23:67:c1:cf:51:37:
c0:e6:cc:55:7c:e3:83:57:c4:d0:d8:88:2c:b2:75:
49:c2:cb:1c:52:76:0a:d9:e8:2c:11:cc:65:d5:11:
58:25:32:84:ac:43:d5:56:0f:b6:2b:7f:0a:f3:96:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:9C:6D:F9:7A:7C:1A:F5:E5:CF:A6:6C:F4:A2:FB:3B:B4:1C:76
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/D3Scbfl6fBr15c-mbPSi-zu0HHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.8.0/21
185.240.124.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ec:e8:14:9c:af:4f:59:a6:a8:b2:da:71:1a:be:93:ba:e0:
ce:63:83:e3:11:b8:0d:d5:c0:b5:ff:48:a1:d6:03:9a:da:46:
92:04:d1:ad:c7:c8:34:c4:4a:51:f1:b6:b3:a0:64:0f:8f:bb:
90:14:0e:4f:bf:cc:bb:88:e7:52:4d:ae:f4:49:e4:ef:2e:01:
d8:9b:19:78:ac:6c:7d:38:1a:b9:30:f0:e1:f6:95:00:9a:03:
ef:54:16:6e:e4:0d:04:8d:f2:35:73:89:b2:c8:28:39:e1:a3:
33:98:37:10:db:e8:75:09:2c:a3:66:06:d5:15:18:65:a0:a8:
96:b2:ac:5c:74:18:d6:12:fb:80:46:47:de:bd:e0:08:1e:d3:
a9:11:9d:f0:e4:cb:47:9e:54:d2:fb:1b:d9:99:eb:3f:6e:79:
ac:8e:fd:38:3e:75:44:d9:c5:40:22:f6:88:49:2a:ca:b3:c1:
82:e4:bb:ec:56:94:5a:ea:25:1b:6f:2c:de:20:d9:26:14:e3:
7a:f2:bc:5b:98:5e:bd:17:bd:72:fb:52:4b:b1:a6:36:83:65:
93:56:f4:db:69:8a:2c:c9:93:c0:22:4e:f5:f4:e9:3b:b2:58:
be:ea:4e:a7:02:f2:36:f6:57:69:f0:10:13:c8:f7:a1:21:fc:
bf:dc:24:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:49 2026 by rpki-client