This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/wUrse7e0uVL1xNA23Yfsfg_-PZg.roa File: wUrse7e0uVL1xNA23Yfsfg_-PZg.roa (raw, json) Hash identifier: GKtwNbEa19rz8r44r6wfkdAxRFh4u/hNQmkbpTbo8c8= Subject key identifier: C1:4A:EC:7B:B7:B4:B9:52:F5:C4:D0:36:DD:87:EC:7E:0F:FE:3D:98 Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Certificate serial: 019B7B35EA2CA68C75070F3189E74F286A80 Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/wUrse7e0uVL1xNA23Yfsfg_-PZg.roa Signing time: Thu 01 Jan 2026 20:18:09 +0000 ROA not before: Thu 01 Jan 2026 20:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216183 IP address blocks: 62.3.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ea:2c:a6:8c:75:07:0f:31:89:e7:4f:28:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Validity Not Before: Jan 1 20:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c14aec7bb7b4b952f5c4d036dd87ec7e0ffe3d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:25:47:28:31:3c:68:8f:80:18:14:a7:bb: eb:60:b1:fb:80:19:e1:36:6b:f0:9c:f2:43:59:6b: d7:08:bd:71:df:23:83:e0:ac:de:0e:c1:21:aa:06: dc:f7:78:04:36:db:2e:c6:ea:23:c1:f6:b5:bd:fc: bd:ec:ea:ef:df:cc:7b:5b:e0:36:ae:cc:69:95:37: 02:41:95:21:ec:94:94:48:23:34:d6:f8:7d:57:25: 20:bd:ac:73:53:e0:1d:e8:d5:ac:00:d9:56:88:81: c8:00:e1:3f:da:a0:59:dc:c5:be:17:dd:35:1e:82: 9c:ed:64:c3:fa:cc:05:a8:bf:7c:b5:eb:34:49:54: ad:ac:15:9f:78:c7:da:18:45:95:9a:f2:7e:f5:79: fc:17:28:7b:4c:43:6d:73:4b:20:9d:9f:31:78:46: da:43:3c:e4:f9:67:08:14:10:ba:3d:8a:98:f6:7c: 90:05:b4:9a:99:b0:77:f6:b6:7d:ae:d3:48:10:1e: 37:f4:c1:9a:9a:e8:57:39:04:d8:bb:10:be:af:88: 43:da:61:b0:fe:49:1f:28:1f:06:3f:56:86:9d:71: 98:af:5a:20:59:fe:2e:9b:8f:36:00:23:8c:b2:7e: a5:f8:c7:b4:1d:91:ab:ae:1b:34:a5:1f:ec:71:80: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4A:EC:7B:B7:B4:B9:52:F5:C4:D0:36:DD:87:EC:7E:0F:FE:3D:98 X509v3 Authority Key Identifier: keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/wUrse7e0uVL1xNA23Yfsfg_-PZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.54.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:2e:7f:7b:21:1b:e3:d1:95:1f:1f:b2:8c:bc:96:0f:b1:dd: 43:b9:97:f5:e5:b2:26:b2:91:ef:0b:93:88:fc:4d:23:61:0f: f2:b6:10:7e:2f:09:24:87:25:e5:a8:70:59:40:c7:56:c6:ac: a9:88:54:68:90:c1:b2:1e:0a:11:65:72:bb:61:85:db:8c:c3: db:b9:39:6b:ce:f6:5a:00:46:f1:d5:e4:4d:51:70:54:d9:c3: 3e:df:e5:75:5a:0b:f5:f6:ec:c4:49:d8:5a:22:88:fe:17:38: 4a:99:ea:47:ff:ad:f5:78:00:6f:ad:a8:7b:45:e3:a7:51:fc: 55:73:c4:e0:eb:99:fb:1a:b4:51:a0:99:03:5b:d6:cc:8a:85: 3d:2b:a8:9c:c3:50:70:f9:47:0e:c2:f6:5e:47:64:5e:39:2a: 4c:0b:a6:6d:39:3a:84:7a:61:ba:dc:a3:3a:02:9f:8b:90:1d: fd:65:59:1d:d8:84:5a:60:c7:1a:3c:94:d8:67:0a:22:6a:06: ca:77:12:3a:fc:59:c6:73:17:2f:48:2e:d4:78:d7:55:05:a8: 99:d6:0a:47:dd:cb:9a:d6:b9:c2:da:67:9a:f5:f1:3b:ee:b9: 3a:d7:ad:19:33:fe:68:29:92:18:16:2c:db:d7:d4:aa:0a:bf: 69:d3:a6:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Neospox1Bw8xiedPKGqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz NjViNjAwHhcNMjYwMTAxMjAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTRhZWM3YmI3YjRiOTUyZjVjNGQwMzZkZDg3ZWM3ZTBmZmUzZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfMlRygxPGiPgBgUp7vrYLH7gBnh NmvwnPJDWWvXCL1x3yOD4KzeDsEhqgbc93gENtsuxuojwfa1vfy97Orv38x7W+A2 rsxplTcCQZUh7JSUSCM01vh9VyUgvaxzU+Ad6NWsANlWiIHIAOE/2qBZ3MW+F901 HoKc7WTD+swFqL98tes0SVStrBWfeMfaGEWVmvJ+9Xn8Fyh7TENtc0sgnZ8xeEba Qzzk+WcIFBC6PYqY9nyQBbSambB39rZ9rtNIEB439MGamuhXOQTYuxC+r4hD2mGw /kkfKB8GP1aGnXGYr1ogWf4um482ACOMsn6l+Me0HZGrrhs0pR/scYArXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFK7Hu3tLlS9cTQNt2H7H4P/j2YMB8GA1UdIwQY MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt MjRkOGU3NDdjMzhmLzEvd1Vyc2U3ZTB1VkwxeE5BMjNZZnNmZ18tUFpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM2MA0G CSqGSIb3DQEBCwUAA4IBAQBeLn97IRvj0ZUfH7KMvJYPsd1DuZf15bImspHvC5OI /E0jYQ/ythB+LwkkhyXlqHBZQMdWxqypiFRokMGyHgoRZXK7YYXbjMPbuTlrzvZa AEbx1eRNUXBU2cM+3+V1Wgv19uzESdhaIoj+FzhKmepH/631eABvrah7ReOnUfxV c8Tg65n7GrRRoJkDW9bMioU9K6icw1Bw+UcOwvZeR2ReOSpMC6ZtOTqEemG63KM6 Ap+LkB39ZVkd2IRaYMcaPJTYZwoiagbKdxI6/FnGcxcvSC7UeNdVBaiZ1gpH3cua 1rnC2mea9fE77rk6160ZM/5oKZIYFizb19SqCr9p06Yc -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:19 2026 by rpki-client