This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/BcVatgINhehxpYUrBXABJ41nAt0.roa File: BcVatgINhehxpYUrBXABJ41nAt0.roa (raw, json) Hash identifier: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns= Subject key identifier: 05:C5:5A:B6:02:0D:85:E8:71:A5:85:2B:05:70:01:27:8D:67:02:DD Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d Certificate serial: 019B79ED3039D1CA75A52C9577A411929BBF Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/BcVatgINhehxpYUrBXABJ41nAt0.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197775 IP address blocks: 62.102.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:30:39:d1:ca:75:a5:2c:95:77:a4:11:92:9b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c55ab6020d85e871a5852b057001278d6702dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:70:de:82:92:cb:51:0f:b8:86:fe:95:7d: 2a:35:a1:51:2a:8a:ea:fa:e9:03:ac:d1:40:dc:72: 88:f8:23:22:0b:e5:30:f7:ff:e9:e4:8e:f1:07:2e: 78:b1:b3:1e:fa:db:b0:d4:63:f9:39:9d:79:5e:e3: 36:6e:a0:a0:2a:b7:b5:95:d8:5e:6c:c0:14:59:4e: 08:54:b5:98:12:d0:1f:8d:08:a2:1b:4e:3c:e6:e0: 8d:ff:48:5b:4e:92:fc:2f:c1:60:07:0c:01:da:f7: 66:5e:ef:82:f3:0d:bb:15:d6:dd:c1:64:d6:92:21: eb:e5:58:f6:0f:df:d1:f7:83:d7:1a:de:7f:65:fb: f9:1e:32:bf:82:b1:66:74:e7:7e:d0:95:80:09:f5: e4:b5:1d:50:59:32:dd:50:af:c7:86:7a:b3:77:0f: aa:16:16:73:b8:bf:68:de:85:eb:6a:a4:b6:6f:1f: f8:a6:a0:03:a6:3a:dd:d5:e6:47:f7:dc:f5:2a:4a: a1:69:7d:2e:03:1d:29:e0:9a:0b:99:f2:f6:8a:3a: 54:d2:43:82:c3:16:98:bd:90:b4:88:af:f8:26:7e: 73:e6:89:c8:a8:ce:9e:8a:fc:c4:38:64:53:f9:87: 3f:a5:e6:50:fe:7f:f5:6f:4b:0b:a9:0c:9f:e3:e9: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:5A:B6:02:0D:85:E8:71:A5:85:2B:05:70:01:27:8D:67:02:DD X509v3 Authority Key Identifier: keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/BcVatgINhehxpYUrBXABJ41nAt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.102.150.0/24 Signature Algorithm: sha256WithRSAEncryption 37:17:f5:8c:14:64:85:3b:ef:05:78:4b:88:a8:c3:f6:22:79: a0:a3:46:c1:57:6f:c8:8c:69:3d:f5:c0:15:30:c4:57:40:81: 4b:c0:43:e4:fa:a2:bf:d6:3e:58:48:ee:e0:5f:ee:da:8c:36: 7f:51:71:d4:95:89:d2:50:20:1e:a7:e6:bc:31:0f:c8:aa:6d: 41:96:db:11:5b:fd:66:b5:65:e2:2a:68:20:a3:be:ad:12:51: ae:61:96:be:1d:77:d5:f0:bc:00:05:95:47:d0:29:a4:39:62: fe:4d:60:0a:17:df:2b:0e:f3:0c:df:0f:a0:4e:4c:93:25:82: 3c:7c:56:e1:36:e4:ea:21:b8:6c:09:96:18:5d:ec:b8:29:e4: ce:31:bc:fc:40:14:ee:4d:3a:37:2f:48:cb:7f:5c:34:74:e6: e6:ed:cc:eb:ba:86:a3:f6:d8:b8:28:62:38:f9:bf:57:c7:6c: 6c:ed:b1:bb:09:3f:fd:8a:71:25:8f:d9:31:5f:2d:ec:78:33: 99:c2:49:d0:5e:9f:5c:53:ba:58:d3:ab:5c:72:25:39:09:80: 4d:0e:61:fe:b8:bf:54:42:c1:e6:38:29:4c:2b:ef:2d:05:cd: c1:ac:97:6f:4e:a7:66:c7:c1:7d:22:1e:87:e4:cf:96:5e:78: 5c:be:8d:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TA50cp1pSyVd6QRkpu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw MTQxMmQwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWM1NWFiNjAyMGQ4NWU4NzFhNTg1MmIwNTcwMDEyNzhkNjcwMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyRw3oKSy1EPuIb+lX0qNaFRKorq +ukDrNFA3HKI+CMiC+Uw9//p5I7xBy54sbMe+tuw1GP5OZ15XuM2bqCgKre1ldhe bMAUWU4IVLWYEtAfjQiiG0485uCN/0hbTpL8L8FgBwwB2vdmXu+C8w27FdbdwWTW kiHr5Vj2D9/R94PXGt5/Zfv5HjK/grFmdOd+0JWACfXktR1QWTLdUK/Hhnqzdw+q FhZzuL9o3oXraqS2bx/4pqADpjrd1eZH99z1KkqhaX0uAx0p4JoLmfL2ijpU0kOC wxaYvZC0iK/4Jn5z5onIqM6eivzEOGRT+Yc/peZQ/n/1b0sLqQyf4+kj4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXFWrYCDYXocaWFKwVwASeNZwLdMB8GA1UdIwQY MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt MDYxNjM5ODEyYzc0LzEvQmNWYXRnSU5oZWh4cFlVckJYQUJKNDFuQXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0 LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmaWMA0G CSqGSIb3DQEBCwUAA4IBAQA3F/WMFGSFO+8FeEuIqMP2Inmgo0bBV2/IjGk99cAV MMRXQIFLwEPk+qK/1j5YSO7gX+7ajDZ/UXHUlYnSUCAep+a8MQ/Iqm1BltsRW/1m tWXiKmggo76tElGuYZa+HXfV8LwABZVH0CmkOWL+TWAKF98rDvMM3w+gTkyTJYI8 fFbhNuTqIbhsCZYYXey4KeTOMbz8QBTuTTo3L0jLf1w0dObm7czruoaj9ti4KGI4 +b9Xx2xs7bG7CT/9inElj9kxXy3seDOZwknQXp9cU7pY06tcciU5CYBNDmH+uL9U QsHmOClMK+8tBc3BrJdvTqdmx8F9Ih6H5M+WXnhcvo1v -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:52 2026 by rpki-client