This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa File: BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa (raw, json) Hash identifier: ZQNzUNXmrSk991XXIwhfVUbzjZt07GMgCNtboIqd/6A= Subject key identifier: 05:9E:30:4C:21:B7:68:55:B6:33:A6:6B:8D:EA:0C:6B:B5:4B:CD:29 Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Certificate serial: 019B77C6AC13A0606EBB4BE4C3B3EE4140B4 Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58343 IP address blocks: 62.201.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ac:13:a0:60:6e:bb:4b:e4:c3:b3:ee:41:40:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=059e304c21b76855b633a66b8dea0c6bb54bcd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:f5:22:0c:73:82:97:07:2c:d4:7e:8a:5a: d9:fb:52:f2:56:06:0a:87:00:b6:13:30:5e:08:95: c8:01:d9:ca:3f:0b:9e:dc:43:94:cf:e0:44:52:1a: 12:a8:24:91:18:05:10:95:2b:cd:56:74:df:58:d4: db:ff:38:9e:4b:e8:e9:b0:9f:e0:cf:68:58:78:dc: b4:92:13:c8:3b:01:25:e7:6d:0f:f4:99:b2:ae:1d: e6:d0:20:d5:a3:9e:4e:c9:5e:80:c8:4a:72:14:0c: f9:e8:4d:d4:19:ad:7c:a4:4a:a6:0e:c0:4f:ad:e3: 4b:eb:9a:eb:f1:85:5b:73:3d:3d:fd:b9:32:ed:ef: 8d:85:25:0b:8b:fa:5b:ed:fd:3c:04:20:9b:44:ac: 3e:88:20:f0:5c:3c:e9:a1:90:cd:2f:a8:4d:a8:a9: bf:92:76:af:e2:d2:be:bd:d6:5d:de:30:5e:19:9b: f7:f5:b9:01:b0:b8:65:c3:73:61:d6:1f:d4:c3:0d: 46:a6:69:0a:f3:e7:a9:f0:9d:1e:c9:1a:31:2a:93: d3:46:88:bc:ee:7a:62:d2:40:72:80:62:3f:07:ac: 4a:89:08:ce:9f:78:da:a8:71:14:d4:76:54:ee:fd: 43:04:9b:32:33:03:a4:55:8c:cb:3a:d5:f6:18:8c: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:30:4C:21:B7:68:55:B6:33:A6:6B:8D:EA:0C:6B:B5:4B:CD:29 X509v3 Authority Key Identifier: keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/BZ4wTCG3aFW2M6ZrjeoMa7VLzSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.42.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:e2:38:73:0b:aa:90:71:9e:55:2d:87:84:0f:77:6b:47:05: 8c:ad:e9:9d:dd:2e:b0:84:d4:58:51:2a:76:30:a2:ad:80:c9: 89:54:58:8b:43:4c:32:5f:6f:73:b6:fa:15:ca:7d:9c:bf:e5: 60:1a:35:54:47:aa:25:bf:55:a6:39:79:2d:3e:47:dc:af:26: b8:2a:1a:d3:c9:7d:f5:e8:e7:fd:bf:88:5c:04:59:5a:4c:2d: 25:cf:5a:51:5f:ea:db:6d:10:5c:12:91:99:21:ca:3c:20:27: 14:ee:3a:6d:3d:72:e6:8c:7b:01:b2:b6:d7:43:01:b4:11:08: f9:48:0d:2b:23:d3:34:d7:92:44:d5:c6:09:6d:63:9e:f7:2f: 14:86:11:5d:97:08:54:24:4a:6a:ee:64:40:b9:2a:ac:2d:30: 30:0d:21:83:a7:66:11:9a:6a:1e:1a:4b:83:05:cf:ee:ad:43: e4:0f:fe:1f:f6:ab:58:bd:46:f4:ab:a3:ab:25:46:17:b6:ae: f1:b4:cf:53:48:fd:85:71:6a:83:64:e8:17:5f:ed:8c:0e:ed: 15:af:85:1c:5f:09:c9:fb:84:fa:3e:1d:6b:1b:11:b0:53:b2: 8f:1a:d3:81:60:04:1b:7b:33:b1:22:b9:9b:82:cf:14:02:73: bb:33:fa:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqwToGBuu0vkw7PuQUC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3 ZWIxNjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTllMzA0YzIxYjc2ODU1YjYzM2E2NmI4ZGVhMGM2YmI1NGJjZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscL1IgxzgpcHLNR+ilrZ+1LyVgYK hwC2EzBeCJXIAdnKPwue3EOUz+BEUhoSqCSRGAUQlSvNVnTfWNTb/zieS+jpsJ/g z2hYeNy0khPIOwEl520P9Jmyrh3m0CDVo55OyV6AyEpyFAz56E3UGa18pEqmDsBP reNL65rr8YVbcz09/bky7e+NhSULi/pb7f08BCCbRKw+iCDwXDzpoZDNL6hNqKm/ knav4tK+vdZd3jBeGZv39bkBsLhlw3Nh1h/Uww1GpmkK8+ep8J0eyRoxKpPTRoi8 7npi0kBygGI/B6xKiQjOn3jaqHEU1HZU7v1DBJsyMwOkVYzLOtX2GIybnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAWeMEwht2hVtjOma43qDGu1S80pMB8GA1UdIwQY MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt MjhjYjNiYmYwNWFlLzEvQlo0d1RDRzNhRlcyTTZacmplb01hN1ZMelNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPskqMA0G CSqGSIb3DQEBCwUAA4IBAQAu4jhzC6qQcZ5VLYeED3drRwWMremd3S6whNRYUSp2 MKKtgMmJVFiLQ0wyX29ztvoVyn2cv+VgGjVUR6olv1WmOXktPkfcrya4KhrTyX31 6Of9v4hcBFlaTC0lz1pRX+rbbRBcEpGZIco8ICcU7jptPXLmjHsBsrbXQwG0EQj5 SA0rI9M015JE1cYJbWOe9y8UhhFdlwhUJEpq7mRAuSqsLTAwDSGDp2YRmmoeGkuD Bc/urUPkD/4f9qtYvUb0q6OrJUYXtq7xtM9TSP2FcWqDZOgXX+2MDu0Vr4UcXwnJ +4T6Ph1rGxGwU7KPGtOBYAQbezOxIrmbgs8UAnO7M/pN -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:35 2026 by rpki-client