This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa File: sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa (raw, json) Hash identifier: E7O6wd0Zjg99STe3wUKf7d1f1MzUTLb1rAZKDrFTMV4= Subject key identifier: B0:93:25:42:59:AE:53:8F:ED:F4:92:D3:58:43:86:DF:60:AA:E8:C4 Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb Certificate serial: 019B7E38EFF48EE7D62E36BD5B59A8EA601D Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 67.63.59.0/24 maxlen: 24 67.63.60.0/24 maxlen: 24 67.63.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ef:f4:8e:e7:d6:2e:36:bd:5b:59:a8:ea:60:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b093254259ae538fedf492d3584386df60aae8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:95:ed:14:1b:0b:fc:4f:e3:f4:df:0f:7e: e9:54:40:8f:48:2d:a6:14:67:16:a3:72:57:b9:e9: 43:49:2f:ca:af:49:f9:7e:09:76:3e:79:bf:8a:03: a0:3c:e2:5e:49:87:cb:84:85:8c:67:b0:9a:8c:34: 02:c7:4b:4f:b2:61:8c:22:9c:f0:8c:e7:b8:14:6d: 75:f8:9c:ae:36:74:89:bf:03:79:f0:28:c3:2c:6e: 4d:07:66:41:6b:6e:10:64:d2:91:b4:ab:fe:99:20: 15:fa:64:b3:36:06:82:97:48:35:7d:d6:c8:cd:1d: 00:90:4d:89:78:c4:46:3f:fc:0d:19:11:8d:c0:92: ac:60:8c:eb:f7:7e:0b:c5:bd:48:31:12:5d:ad:e9: c4:55:53:94:da:7f:73:7e:e9:83:83:16:17:b1:81: 83:78:52:7e:4d:66:32:1e:7b:3a:5e:96:09:ee:8d: 24:ce:c9:9e:0e:c3:01:d5:06:6f:45:6a:03:3d:3d: 52:5d:c2:2f:cc:16:0b:9a:b6:7d:8c:87:a8:a4:78: f5:58:93:ee:9e:05:8f:0e:22:8a:fa:ba:f9:a5:25: 38:17:4f:55:92:64:66:38:61:cd:33:5c:9e:b3:18: 4d:d4:cc:69:6d:5f:46:1e:b3:84:e7:2a:70:d1:ce: ac:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:93:25:42:59:AE:53:8F:ED:F4:92:D3:58:43:86:DF:60:AA:E8:C4 X509v3 Authority Key Identifier: keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.63.59.0-67.63.60.255 67.63.62.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:99:5a:55:44:b9:1e:ba:b1:04:ad:4c:6d:cf:77:62:51:8f: 6d:86:44:f8:89:f4:a2:2c:97:4a:4a:e8:a0:0a:3d:8f:8a:25: 0d:c3:c3:d3:ed:c2:82:27:89:93:39:b6:05:bb:10:8b:df:c2: 0b:83:ca:2a:61:38:e9:36:21:ee:48:50:97:ef:4c:6b:66:fb: 21:a2:ae:0b:6f:b5:75:c9:d8:40:88:6d:96:0e:f8:66:86:27: 08:20:3e:07:d6:f1:d6:f9:c6:d0:33:82:e5:a3:cf:eb:95:7b: f4:63:dd:22:67:37:85:46:d0:29:ee:32:1a:5f:40:a3:18:21: 86:f2:dd:66:c4:58:77:af:b8:f0:b7:23:cd:fe:92:3f:ca:02: cd:93:7c:b3:de:a8:e7:22:ff:a5:eb:3f:2b:89:3b:b6:a5:87: dd:81:e6:3f:34:f4:e0:5a:b5:cd:b8:0c:b2:ed:88:f0:a4:63: eb:84:06:cc:af:a1:33:d3:a9:df:49:3f:76:69:76:83:3a:2a: 1f:6f:59:cf:8d:a9:c5:56:7b:6c:4d:2c:33:f8:89:a1:9a:47: aa:71:df:92:ba:db:1c:a5:e9:63:5f:f0:75:f2:af:9f:47:af: 02:d6:4f:3d:f8:dd:34:f7:6e:f8:24:f7:d8:6f:d6:87:ca:58: 57:db:88:42 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OO/0jufWLja9W1mo6mAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmUyMTcwYTdiY2JlYzMxMDE1NGYyYmNlOTk4MzNmZWMy ODAxZmIwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDkzMjU0MjU5YWU1MzhmZWRmNDkyZDM1ODQzODZkZjYwYWFlOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRmV7RQbC/xP4/TfD37pVECPSC2m FGcWo3JXuelDSS/Kr0n5fgl2Pnm/igOgPOJeSYfLhIWMZ7CajDQCx0tPsmGMIpzw jOe4FG11+JyuNnSJvwN58CjDLG5NB2ZBa24QZNKRtKv+mSAV+mSzNgaCl0g1fdbI zR0AkE2JeMRGP/wNGRGNwJKsYIzr934Lxb1IMRJdrenEVVOU2n9zfumDgxYXsYGD eFJ+TWYyHns6XpYJ7o0kzsmeDsMB1QZvRWoDPT1SXcIvzBYLmrZ9jIeopHj1WJPu ngWPDiKK+rr5pSU4F09VkmRmOGHNM1yesxhN1MxpbV9GHrOE5ypw0c6sGwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLCTJUJZrlOP7fSS01hDht9gqujEMB8GA1UdIwQY MBaAFFguIXCnvL7DEBVPK86Zgz/sKAH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTct YjJmZDliZjA5N2Y4LzEvc0pNbFFsbXVVNF90OUpMVFdFT0czMkNxNk1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTctYjJmZDliZjA5N2Y4 LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABDPzsD BABDPzwDBABDPz4wDQYJKoZIhvcNAQELBQADggEBACqZWlVEuR66sQStTG3Pd2JR j22GRPiJ9KIsl0pK6KAKPY+KJQ3Dw9PtwoIniZM5tgW7EIvfwguDyiphOOk2Ie5I UJfvTGtm+yGirgtvtXXJ2ECIbZYO+GaGJwggPgfW8db5xtAzguWjz+uVe/Rj3SJn N4VG0CnuMhpfQKMYIYby3WbEWHevuPC3I83+kj/KAs2TfLPeqOci/6XrPyuJO7al h92B5j809OBatc24DLLtiPCkY+uEBsyvoTPTqd9JP3ZpdoM6Kh9vWc+NqcVWe2xN LDP4iaGaR6px35K62xyl6WNf8HXyr59HrwLWTz343TT3bvgk99hv1ofKWFfbiEI= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:37 2026 by rpki-client