This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa File: lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa (raw, json) Hash identifier: lvS/HG4Wmfi6qhwCb98veZZcG3v9+cu3cSiTBzCtKa4= Subject key identifier: 95:18:B4:C1:86:D1:7C:A1:F6:5E:51:CB:D0:57:10:F9:E5:D8:43:67 Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Certificate serial: 019B77C6AAF8EAA555E694276F969D9CBB5F Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 62.201.32.0/21 maxlen: 21 62.201.40.0/24 maxlen: 24 62.201.41.0/24 maxlen: 24 62.201.43.0/24 maxlen: 24 62.201.44.0/22 maxlen: 22 62.201.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:aa:f8:ea:a5:55:e6:94:27:6f:96:9d:9c:bb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9518b4c186d17ca1f65e51cbd05710f9e5d84367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:ed:47:58:81:1e:42:46:2b:cd:b8:d0:86: e6:f8:b6:90:81:45:1a:16:da:9c:40:3b:e7:62:61: 90:d1:7c:66:e6:9d:18:6c:2f:fc:63:ca:45:57:bc: 9e:70:d9:21:d4:4c:7e:f3:e4:f4:6e:cb:4a:e9:45: 31:d4:3b:d8:ea:7a:31:5f:22:44:a0:6d:09:8b:02: f5:a0:5b:2a:46:18:b1:26:da:2c:ff:e2:47:9d:fd: 3c:28:62:6c:00:84:12:1a:ee:e1:b2:e1:f8:4a:2f: c7:00:cf:66:cd:00:bd:d1:b1:ab:ab:98:29:fb:6f: 6a:a1:04:2e:9a:78:b3:e1:28:33:8e:69:cc:9d:cc: 03:76:c2:53:ae:16:af:f2:dc:d3:59:3e:13:7a:cb: 7d:5d:8b:35:6f:8c:6a:b1:2d:13:20:4a:9d:e8:fb: eb:61:a1:36:57:bf:0a:f1:b2:b9:65:43:35:c9:fe: 56:16:85:00:07:e5:01:5b:89:19:b5:1f:a1:5a:ff: 3a:0f:70:23:47:60:22:7e:70:f6:41:16:56:37:44: 7f:ed:66:88:80:5a:28:47:9c:9b:fb:d8:26:33:be: 53:6e:98:5f:3d:6f:e6:f1:76:b5:1e:26:f6:ae:0d: 50:d1:91:91:5d:4d:05:35:ca:5b:9a:3b:ff:83:35: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:18:B4:C1:86:D1:7C:A1:F6:5E:51:CB:D0:57:10:F9:E5:D8:43:67 X509v3 Authority Key Identifier: keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/lRi0wYbRfKH2XlHL0FcQ-eXYQ2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.32.0-62.201.41.255 62.201.43.0-62.201.63.255 Signature Algorithm: sha256WithRSAEncryption 23:7c:47:17:9c:be:94:29:17:52:b2:ec:61:93:24:89:21:eb: f9:4a:69:ce:81:cf:2e:57:a2:57:e1:09:01:ac:ce:36:fe:70: 9f:5f:0d:34:0f:ab:12:63:01:23:d6:00:4b:ef:18:68:10:da: ff:a9:ff:68:c3:74:3f:c8:b2:7e:a3:85:6c:63:43:42:e5:af: 5f:88:f1:d9:e5:ec:f1:ad:30:8b:00:a4:19:dd:40:3f:81:33: 04:b1:c0:10:96:da:50:59:f2:12:4e:57:18:03:b9:70:2a:ad: ee:15:e6:4b:f6:34:9d:68:a1:33:73:f1:7e:66:78:c2:f0:cc: 77:7e:71:d5:0e:ff:61:ee:e0:23:6f:5d:65:f0:bf:cf:2a:e3: 8f:46:b6:6f:aa:08:7e:52:cc:af:f1:4c:9a:5c:f4:37:88:3b: cd:01:c9:ba:4d:ad:ec:26:d8:7d:51:fc:e7:f4:37:93:b0:be: 11:da:80:34:a9:bc:0e:97:57:dc:f9:8b:f7:d6:4f:c9:b5:ca: 03:ce:6c:1c:97:c6:0f:39:fa:ac:37:23:4e:60:90:1d:cb:1b: a9:61:82:8f:da:8c:e0:cd:19:7c:b5:d2:5d:52:59:b0:92:24: 2f:ca:6e:6b:4d:d8:fd:a4:09:c9:63:22:a1:3c:dd:9d:df:c6: 18:04:58:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xqr46qVV5pQnb5adnLtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3 ZWIxNjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTE4YjRjMTg2ZDE3Y2ExZjY1ZTUxY2JkMDU3MTBmOWU1ZDg0MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl/tR1iBHkJGK8240Ibm+LaQgUUa FtqcQDvnYmGQ0Xxm5p0YbC/8Y8pFV7yecNkh1Ex+8+T0bstK6UUx1DvY6noxXyJE oG0JiwL1oFsqRhixJtos/+JHnf08KGJsAIQSGu7hsuH4Si/HAM9mzQC90bGrq5gp +29qoQQumniz4SgzjmnMncwDdsJTrhav8tzTWT4Test9XYs1b4xqsS0TIEqd6Pvr YaE2V78K8bK5ZUM1yf5WFoUAB+UBW4kZtR+hWv86D3AjR2AifnD2QRZWN0R/7WaI gFooR5yb+9gmM75TbphfPW/m8Xa1Hib2rg1Q0ZGRXU0FNcpbmjv/gzUN/wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJUYtMGG0Xyh9l5Ry9BXEPnl2ENnMB8GA1UdIwQY MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt MjhjYjNiYmYwNWFlLzEvbFJpMHdZYlJmS0gyWGxITDBGY1EtZVhZUTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAU+ySAD BAE+ySgwDAMEAD7JKwMEBj7JADANBgkqhkiG9w0BAQsFAAOCAQEAI3xHF5y+lCkX UrLsYZMkiSHr+UppzoHPLleiV+EJAazONv5wn18NNA+rEmMBI9YAS+8YaBDa/6n/ aMN0P8iyfqOFbGNDQuWvX4jx2eXs8a0wiwCkGd1AP4EzBLHAEJbaUFnyEk5XGAO5 cCqt7hXmS/Y0nWihM3PxfmZ4wvDMd35x1Q7/Ye7gI29dZfC/zyrjj0a2b6oIflLM r/FMmlz0N4g7zQHJuk2t7CbYfVH85/Q3k7C+EdqANKm8DpdX3PmL99ZPybXKA85s HJfGDzn6rDcjTmCQHcsbqWGCj9qM4M0ZfLXSXVJZsJIkL8pua03Y/aQJyWMioTzd nd/GGARYrA== -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:29 2026 by rpki-client