This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/w8zdjiM74u9Xh40wPO9DxI7URjQ.roa File: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (raw, json) Hash identifier: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y= Subject key identifier: C3:CC:DD:8E:23:3B:E2:EF:57:87:8D:30:3C:EF:43:C4:8E:D4:46:34 Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Certificate serial: 019B7BA4BAF4C3CB804CB8AF5171123DEC5E Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/w8zdjiM74u9Xh40wPO9DxI7URjQ.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42334 IP address blocks: 62.84.64.0/24 maxlen: 24 62.84.65.0/24 maxlen: 24 62.84.66.0/24 maxlen: 24 62.84.67.0/24 maxlen: 24 62.84.68.0/24 maxlen: 24 62.84.69.0/24 maxlen: 24 62.84.70.0/24 maxlen: 24 62.84.71.0/24 maxlen: 24 62.84.72.0/24 maxlen: 24 62.84.73.0/24 maxlen: 24 62.84.74.0/24 maxlen: 24 62.84.75.0/24 maxlen: 24 62.84.76.0/24 maxlen: 24 62.84.77.0/24 maxlen: 24 62.84.78.0/24 maxlen: 24 62.84.79.0/24 maxlen: 24 62.84.80.0/24 maxlen: 24 62.84.81.0/24 maxlen: 24 62.84.82.0/24 maxlen: 24 62.84.83.0/24 maxlen: 24 62.84.84.0/24 maxlen: 24 62.84.85.0/24 maxlen: 24 62.84.86.0/24 maxlen: 24 62.84.87.0/24 maxlen: 24 62.84.88.0/24 maxlen: 24 62.84.89.0/24 maxlen: 24 62.84.90.0/24 maxlen: 24 62.84.91.0/24 maxlen: 24 62.84.92.0/24 maxlen: 24 62.84.93.0/24 maxlen: 24 62.84.94.0/24 maxlen: 24 62.84.95.0/24 maxlen: 24 185.114.252.0/24 maxlen: 24 185.114.253.0/24 maxlen: 24 185.114.254.0/24 maxlen: 24 185.114.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ba:f4:c3:cb:80:4c:b8:af:51:71:12:3d:ec:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3ccdd8e233be2ef57878d303cef43c48ed44634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:ab:dc:a8:e2:66:d2:e8:62:62:9b:9f:24: 27:fc:ac:44:66:78:5f:f0:99:53:c4:10:f4:3a:8f: 68:cb:47:28:ff:49:cc:0b:a8:9f:01:ec:31:ba:94: 65:89:b8:fd:82:9d:cf:0d:49:e7:7a:06:49:e1:ba: d9:3d:e4:55:7c:49:94:00:47:52:25:e5:46:0b:0c: 3c:19:37:c7:1b:d0:f5:79:cb:d7:99:5b:91:76:12: 0d:ec:53:53:42:a3:88:2e:82:eb:7c:28:40:f3:4f: 0c:ab:93:80:cd:1c:d6:89:08:17:1a:e9:cf:65:69: 32:b6:85:92:a4:b6:97:6c:0b:93:10:b1:0c:ba:8e: d1:58:0c:e2:42:82:91:55:c4:d9:c1:67:48:20:18: ef:49:4c:b7:a7:08:81:ae:72:c7:bf:e9:87:e3:11: c2:dd:59:dc:f6:76:a2:29:10:2a:17:af:a8:e9:2c: 25:c7:22:40:81:bd:11:af:bd:b3:13:96:b1:cc:1f: 63:cb:5e:64:b9:59:79:9e:3a:15:19:45:30:d9:40: 6a:be:00:ab:59:93:ef:de:22:55:78:b8:25:8e:42: 81:14:47:ac:7a:fb:e6:fc:d6:4f:aa:76:ac:af:da: 1b:13:3d:3e:ef:9b:16:54:70:7d:5f:18:0b:61:dc: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:DD:8E:23:3B:E2:EF:57:87:8D:30:3C:EF:43:C4:8E:D4:46:34 X509v3 Authority Key Identifier: keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/w8zdjiM74u9Xh40wPO9DxI7URjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.64.0/19 185.114.252.0/22 Signature Algorithm: sha256WithRSAEncryption 18:5b:65:fc:c4:1b:de:11:ba:1d:ef:39:19:74:c5:6a:f2:5d: 25:9b:1c:28:e4:0b:0a:3e:88:de:c5:75:28:94:e9:5b:8a:1e: c5:ed:f5:12:54:23:a6:0d:21:ed:ca:49:22:b2:e5:bb:e1:d7: b3:b4:cb:9d:b8:7f:81:69:8c:6f:6a:24:35:af:d3:15:3a:2b: 2f:07:17:d3:ab:40:a8:56:0c:01:73:4e:fa:81:69:ff:0b:4b: 6b:85:7a:b6:dc:17:16:11:f7:ea:fe:05:66:2b:91:5b:30:c2: 39:a5:9d:1a:70:a7:40:5f:32:3c:d9:04:5f:a5:b0:a2:b6:7a: 29:ee:73:f8:e4:39:d7:0e:d9:fd:27:dc:8a:b4:78:bd:87:49: 2c:69:39:0e:d0:36:44:95:c7:ec:be:fe:fe:5e:7d:41:96:2a: 5f:05:2c:9c:15:1a:95:89:36:71:f4:14:84:f4:b9:e6:03:fc: dd:b7:56:e1:b7:90:08:13:09:75:e7:3d:c7:85:4d:84:f6:f9: 7c:44:29:17:dc:77:4e:fe:31:57:bc:3d:fd:43:ec:66:eb:38: 3f:25:3a:e0:0b:d3:ed:5f:eb:0f:7c:02:d5:88:e1:72:f0:a9: df:a1:63:96:71:06:d1:20:fd:35:84:00:5f:60:27:95:6c:ac: 30:da:4a:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pLr0w8uATLivUXESPexeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy M2U1YmYwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2NjZGQ4ZTIzM2JlMmVmNTc4NzhkMzAzY2VmNDNjNDhlZDQ0NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wCr3KjiZtLoYmKbnyQn/KxEZnhf 8JlTxBD0Oo9oy0co/0nMC6ifAewxupRlibj9gp3PDUnnegZJ4brZPeRVfEmUAEdS JeVGCww8GTfHG9D1ecvXmVuRdhIN7FNTQqOILoLrfChA808Mq5OAzRzWiQgXGunP ZWkytoWSpLaXbAuTELEMuo7RWAziQoKRVcTZwWdIIBjvSUy3pwiBrnLHv+mH4xHC 3Vnc9naiKRAqF6+o6SwlxyJAgb0Rr72zE5axzB9jy15kuVl5njoVGUUw2UBqvgCr WZPv3iJVeLgljkKBFEesevvm/NZPqnasr9obEz0+75sWVHB9XxgLYdy0xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMPM3Y4jO+LvV4eNMDzvQ8SO1EY0MB8GA1UdIwQY MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct YTJmZGI5MzhjYTJkLzEvdzh6ZGppTTc0dTlYaDQwd1BPOUR4STdVUmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFPlRAAwQC uXL8MA0GCSqGSIb3DQEBCwUAA4IBAQAYW2X8xBveEbod7zkZdMVq8l0lmxwo5AsK PojexXUolOlbih7F7fUSVCOmDSHtykkisuW74deztMuduH+BaYxvaiQ1r9MVOisv BxfTq0CoVgwBc076gWn/C0trhXq23BcWEffq/gVmK5FbMMI5pZ0acKdAXzI82QRf pbCitnop7nP45DnXDtn9J9yKtHi9h0ksaTkO0DZElcfsvv7+Xn1BlipfBSycFRqV iTZx9BSE9LnmA/zdt1bht5AIEwl15z3HhU2E9vl8RCkX3HdO/jFXvD39Q+xm6zg/ JTrgC9PtX+sPfALViOFy8KnfoWOWcQbRIP01hABfYCeVbKww2koY -----END CERTIFICATE-----Generated at Tue Jan 27 17:24:49 2026 by rpki-client