This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bxDMk8rDIjX1JIaOhPkkS6agVn8.roa File: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (raw, json) Hash identifier: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc= Subject key identifier: 6F:10:CC:93:CA:C3:22:35:F5:24:86:8E:84:F9:24:4B:A6:A0:56:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C4051149D8566D87124A7CD808F5 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bxDMk8rDIjX1JIaOhPkkS6agVn8.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31721 IP address blocks: 62.217.133.0/24 maxlen: 24 62.217.135.0/24 maxlen: 24 62.217.136.0/24 maxlen: 24 62.217.137.0/24 maxlen: 24 62.217.139.0/24 maxlen: 24 62.217.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c4:05:11:49:d8:56:6d:87:12:4a:7c:d8:08:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f10cc93cac32235f524868e84f9244ba6a0567f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:e9:7b:37:9c:23:80:67:ce:fa:6e:5d:53: f2:6a:d3:67:4b:25:8d:6c:7a:81:73:29:7e:39:95: 6a:df:7d:24:d7:b8:d6:b5:bb:5a:0a:29:12:a7:86: 32:b0:70:d6:63:fd:31:48:7b:b5:ef:d2:9c:f2:a6: 4a:13:51:44:e4:99:5b:a9:01:66:a1:86:d2:11:d3: 30:75:30:15:86:2b:34:b7:e7:77:a3:fa:14:8e:76: df:a8:21:cc:e7:f1:a5:04:86:80:36:e5:57:9b:09: 4e:f6:db:98:bb:ea:2f:50:38:f6:11:47:4d:86:e7: 4d:6f:95:21:bc:e9:0d:d5:69:c3:dd:57:fb:31:f1: 8c:3f:b4:07:2b:b7:f3:f8:64:20:ae:49:b9:9a:54: 17:e9:c1:3b:49:6d:e9:eb:9c:2d:1d:e3:9a:f9:b6: 2e:20:60:25:0b:a2:5f:dc:c5:55:f7:cb:7e:97:af: 65:bf:89:8a:34:20:35:e1:ca:64:51:ac:2f:5a:a4: 43:c5:56:60:be:5b:5f:61:57:6f:6a:94:e3:16:0f: d3:96:97:ae:78:c4:a5:b1:28:37:eb:f4:93:60:59: c3:b2:f2:1e:14:65:a0:bf:29:6a:65:25:25:0e:bb: 01:60:df:cb:cc:24:ad:37:1a:91:49:7c:93:8e:21: 97:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:10:CC:93:CA:C3:22:35:F5:24:86:8E:84:F9:24:4B:A6:A0:56:7F X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bxDMk8rDIjX1JIaOhPkkS6agVn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.217.133.0/24 62.217.135.0-62.217.137.255 62.217.139.0/24 62.217.143.0/24 Signature Algorithm: sha256WithRSAEncryption 14:71:41:83:f2:56:1c:df:e5:29:de:cd:ad:61:37:49:2c:11: 8b:2b:34:15:10:9e:ec:52:45:11:eb:ff:04:d7:78:3a:b0:b7: 56:46:fe:ae:f8:6b:53:e5:aa:4c:35:51:42:7c:01:10:3c:37: 8c:0a:e4:7c:e4:cd:dd:b3:98:cf:6a:04:7c:9f:c8:53:4d:03: 0a:cc:47:d3:59:8e:d5:7c:b6:36:3d:ae:01:42:79:fb:5b:31: 10:d7:25:03:df:14:9d:c1:40:aa:1f:6b:75:51:07:26:08:67: ad:c8:7b:6a:aa:6b:88:9f:1d:15:98:01:6e:33:c6:62:7e:7c: 75:88:41:55:f0:5e:f8:13:21:0f:05:91:ed:86:a6:5a:c1:0e: 4b:04:d3:9c:0d:a7:b5:98:ff:3b:97:a2:49:74:82:5f:dd:19: 82:b6:a5:73:7f:f5:66:86:2b:37:f7:e7:2c:0a:88:28:18:dd: e6:d4:ad:b9:2e:98:6e:4b:3e:6b:a0:dd:00:92:cc:09:19:c8: f9:59:70:8d:b1:f3:ec:c5:05:4c:d1:f5:96:7b:ab:82:df:00: f3:72:f6:c9:73:1c:57:58:e4:1c:a2:19:5b:d3:1c:ec:c5:f8: c1:c4:38:ac:41:cc:0f:57:53:55:e1:5b:56:a9:2b:7b:b6:50: 29:46:23:23 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xsQFEUnYVm2HEkp82Aj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjEwY2M5M2NhYzMyMjM1ZjUyNDg2OGU4NGY5MjQ0YmE2YTA1NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyvpezecI4BnzvpuXVPyatNnSyWN bHqBcyl+OZVq330k17jWtbtaCikSp4YysHDWY/0xSHu179Kc8qZKE1FE5JlbqQFm oYbSEdMwdTAVhis0t+d3o/oUjnbfqCHM5/GlBIaANuVXmwlO9tuYu+ovUDj2EUdN hudNb5UhvOkN1WnD3Vf7MfGMP7QHK7fz+GQgrkm5mlQX6cE7SW3p65wtHeOa+bYu IGAlC6Jf3MVV98t+l69lv4mKNCA14cpkUawvWqRDxVZgvltfYVdvapTjFg/Tlpeu eMSlsSg36/STYFnDsvIeFGWgvylqZSUlDrsBYN/LzCStNxqRSXyTjiGXUQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFG8QzJPKwyI19SSGjoT5JEumoFZ/MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvYnhETWs4ckRJalgxSklhT2hQa2tTNmFnVm44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAPtmFMAwD BAA+2YcDBAE+2YgDBAA+2YsDBAA+2Y8wDQYJKoZIhvcNAQELBQADggEBABRxQYPy Vhzf5Sneza1hN0ksEYsrNBUQnuxSRRHr/wTXeDqwt1ZG/q74a1Plqkw1UUJ8ARA8 N4wK5Hzkzd2zmM9qBHyfyFNNAwrMR9NZjtV8tjY9rgFCeftbMRDXJQPfFJ3BQKof a3VRByYIZ63Ie2qqa4ifHRWYAW4zxmJ+fHWIQVXwXvgTIQ8Fke2GplrBDksE05wN p7WY/zuXokl0gl/dGYK2pXN/9WaGKzf35ywKiCgY3ebUrbkumG5LPmug3QCSzAkZ yPlZcI2x8+zFBUzR9ZZ7q4LfAPNy9slzHFdY5ByiGVvTHOzF+MHEOKxBzA9XU1Xh W1apK3u2UClGIyM= -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:50 2026 by rpki-client