This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/CoOWsD_WMrov0INrtlO9ijHEvvk.roa File: CoOWsD_WMrov0INrtlO9ijHEvvk.roa (raw, json) Hash identifier: Sr0i40WcN6Y0+OoNtGn/lvWuAn5kO+cpjLNdnf5+TGE= Subject key identifier: 0A:83:96:B0:3F:D6:32:BA:2F:D0:83:6B:B6:53:BD:8A:31:C4:BE:F9 Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019C092FC0AAAF3E9318CE0D84950F3C6DA2 Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/CoOWsD_WMrov0INrtlO9ijHEvvk.roa Signing time: Thu 29 Jan 2026 09:57:30 +0000 ROA not before: Thu 29 Jan 2026 09:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2162167 IP address blocks: 62.223.12.0/24 maxlen: 24 62.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:2f:c0:aa:af:3e:93:18:ce:0d:84:95:0f:3c:6d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Jan 29 09:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a8396b03fd632ba2fd0836bb653bd8a31c4bef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:f7:ee:bf:67:91:97:b9:f4:33:f9:2f:1e: e2:fd:48:55:11:c4:09:d7:34:f7:15:eb:0f:fa:aa: 07:30:50:28:58:6a:c1:73:fc:9b:93:84:d4:52:49: 00:34:3a:e2:fb:6a:09:a5:86:62:10:21:8b:51:cb: e3:9b:73:4f:a9:ad:fd:33:84:82:67:2b:7d:25:4a: 45:85:1a:18:83:b9:ea:ae:f4:1c:9c:12:ff:b6:71: 3f:4f:f3:e4:03:af:8f:47:e2:c9:8a:0f:9c:71:77: 6d:04:9d:c6:b1:33:ce:c0:d4:9b:10:3b:0c:cf:3a: b5:4d:5d:a2:55:36:25:1f:d0:35:0f:46:34:79:b2: 6b:ca:39:59:f3:29:3d:43:1a:a5:7d:52:04:e5:1f: e8:1a:d2:0d:de:ea:e5:16:ba:66:df:9e:c5:93:6a: f9:46:2d:83:25:30:90:c7:15:c5:c9:12:b1:d3:3e: eb:83:12:d9:15:96:5e:32:58:39:fa:4e:30:c5:3b: 1c:f5:d1:fe:31:66:17:61:c6:3c:ae:2a:5f:e7:f2: fd:b1:9f:3b:8c:50:f0:5b:37:14:e3:03:5f:f4:0e: e3:3a:fb:96:26:52:5d:5e:f7:9b:aa:d0:51:e5:f9: 9b:a3:99:af:a7:8e:ff:7b:1b:93:2a:40:93:3a:9a: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:96:B0:3F:D6:32:BA:2F:D0:83:6B:B6:53:BD:8A:31:C4:BE:F9 X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/CoOWsD_WMrov0INrtlO9ijHEvvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.223.12.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:39:77:c0:79:2a:43:4c:2f:37:da:1f:f0:81:32:69:4a:b7: fc:90:dd:ed:46:c3:3a:fd:a7:ab:e0:35:4d:e1:b9:66:75:78: 69:97:97:01:71:7a:47:06:47:9a:97:43:a1:ad:04:e3:0a:45: fa:4d:de:53:99:2e:b7:5c:f4:22:2c:41:a0:9e:99:47:e0:04: 8c:23:6d:4d:6c:4f:8d:ba:9f:03:c5:1f:78:6d:fd:99:b3:9f: 57:3b:39:bb:21:0c:f2:b5:e1:9b:c3:db:86:d6:76:f5:db:f0: 9d:a7:35:bf:99:cd:53:98:62:35:a2:e9:5f:d6:26:86:e0:5c: 66:71:a4:9b:89:68:d8:34:19:48:05:2a:dd:aa:49:6a:62:9e: 09:cf:2d:8d:d6:54:18:4e:c6:5f:1a:52:aa:e4:41:fc:f1:09: ce:9a:ea:5b:5b:90:29:9f:6f:9b:09:5f:17:fb:9a:4d:5f:7f: bb:be:37:74:eb:9c:d6:f7:ce:f5:ba:69:c1:85:3c:37:6d:66: b8:6f:c9:d3:cc:c9:cb:45:57:b0:f7:06:ed:22:f9:5f:74:cd: 82:bc:cc:c1:5e:0e:42:60:93:02:a5:ba:4c:83:49:b7:e9:e3: c2:6f:21:e7:b7:6f:e7:99:23:ed:f1:fe:3b:55:2f:7f:90:fb: db:cb:e8:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwJL8Cqrz6TGM4NhJUPPG2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjYwMTI5MDk1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTgzOTZiMDNmZDYzMmJhMmZkMDgzNmJiNjUzYmQ4YTMxYzRiZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5f37r9nkZe59DP5Lx7i/UhVEcQJ 1zT3FesP+qoHMFAoWGrBc/ybk4TUUkkANDri+2oJpYZiECGLUcvjm3NPqa39M4SC Zyt9JUpFhRoYg7nqrvQcnBL/tnE/T/PkA6+PR+LJig+ccXdtBJ3GsTPOwNSbEDsM zzq1TV2iVTYlH9A1D0Y0ebJryjlZ8yk9QxqlfVIE5R/oGtIN3urlFrpm357Fk2r5 Ri2DJTCQxxXFyRKx0z7rgxLZFZZeMlg5+k4wxTsc9dH+MWYXYcY8ripf5/L9sZ87 jFDwWzcU4wNf9A7jOvuWJlJdXvebqtBR5fmbo5mvp47/exuTKkCTOppm5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqDlrA/1jK6L9CDa7ZTvYoxxL75MB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvQ29PV3NEX1dNcm92MElOcnRsTzlpakhFdnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPt8MMA0G CSqGSIb3DQEBCwUAA4IBAQB8OXfAeSpDTC832h/wgTJpSrf8kN3tRsM6/aer4DVN 4blmdXhpl5cBcXpHBkeal0OhrQTjCkX6Td5TmS63XPQiLEGgnplH4ASMI21NbE+N up8DxR94bf2Zs59XOzm7IQzyteGbw9uG1nb12/CdpzW/mc1TmGI1oulf1iaG4Fxm caSbiWjYNBlIBSrdqklqYp4Jzy2N1lQYTsZfGlKq5EH88QnOmupbW5Apn2+bCV8X +5pNX3+7vjd065zW9871umnBhTw3bWa4b8nTzMnLRVew9wbtIvlfdM2CvMzBXg5C YJMCpbpMg0m36ePCbyHnt2/nmSPt8f47VS9/kPvby+jG -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:36 2026 by rpki-client