This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/1-QSBwL6YQNpRB581xj69Bh0HK0w.roa File: 1-QSBwL6YQNpRB581xj69Bh0HK0w.roa (raw, json) Hash identifier: 5GWzZ29/zinUcM0sRPnSs7Ch4eJ52d1lcTmUUiRhGHw= Subject key identifier: F9:04:81:C0:BE:98:40:DA:51:07:9F:35:C6:3E:BD:06:1D:07:2B:4C Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Certificate serial: 019B79ECCF035BCDDAA74D983F652E59A2BB Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/1-QSBwL6YQNpRB581xj69Bh0HK0w.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202012 IP address blocks: 62.40.101.0/24 maxlen: 24 62.40.105.0/24 maxlen: 24 62.40.111.0/24 maxlen: 24 62.40.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cf:03:5b:cd:da:a7:4d:98:3f:65:2e:59:a2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f90481c0be9840da51079f35c63ebd061d072b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1e:2d:5e:d8:fc:6c:dc:36:65:23:be:3a:6a: 41:23:e4:21:89:65:b9:2f:f8:e5:89:64:74:dc:ac: c7:6e:1f:23:42:d5:a2:e1:4b:18:10:40:3f:c7:77: 35:0c:19:be:a8:a9:45:a0:62:78:fc:20:55:39:b9: 87:da:3a:8b:80:24:df:6f:f2:0f:7d:26:a4:46:2a: bb:5f:16:70:31:c2:44:31:6e:94:2e:1a:b1:19:4b: 17:14:ca:92:9b:a6:25:cc:37:5b:be:5d:11:b2:6b: 11:0b:c0:ca:54:2a:af:a7:a2:66:a9:af:9b:b8:a0: 65:be:22:f1:0f:38:a7:36:f7:a8:01:64:b0:15:ec: 1a:1a:f2:9b:c8:cd:f1:1b:8e:52:fb:74:64:5d:20: 59:ea:96:58:bd:ad:19:4a:56:bc:d1:0c:8d:b0:69: 74:e4:20:75:79:aa:1c:89:5c:3e:4c:d2:9d:8b:bb: 89:b0:ce:bd:9f:36:41:a2:88:5a:40:2a:e6:28:0c: 97:87:48:47:7d:e3:96:1b:98:3a:97:ae:90:9d:3d: 95:0c:00:fc:91:e0:e3:1c:bd:72:6a:89:d2:47:e7: 04:16:d6:d4:81:50:eb:81:20:0a:b4:5d:82:52:c0: 2f:70:2b:df:32:a5:01:82:b1:52:fd:fd:49:1d:50: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:04:81:C0:BE:98:40:DA:51:07:9F:35:C6:3E:BD:06:1D:07:2B:4C X509v3 Authority Key Identifier: keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/1-QSBwL6YQNpRB581xj69Bh0HK0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.40.101.0/24 62.40.105.0/24 62.40.111.0-62.40.112.255 Signature Algorithm: sha256WithRSAEncryption 32:01:dc:16:e1:eb:08:30:d0:0e:27:73:89:18:96:5f:58:d0: d2:46:48:67:c9:83:83:f4:8d:7f:9b:5e:48:5b:9a:6c:da:c1: 39:4a:8c:06:04:a1:dd:71:67:25:c8:32:02:3f:0b:6a:81:5e: 5c:8d:b3:1d:2e:b0:1f:71:53:15:ca:74:b1:15:52:69:04:c5: b2:a9:42:54:85:cd:36:20:97:7b:f4:d0:0d:f1:06:49:96:35: e5:4c:af:30:1c:cf:70:24:f1:c0:7d:b7:7b:fa:76:62:0a:f7: 2c:82:58:75:26:99:b7:fb:28:ac:84:b8:f7:05:a3:35:8a:c1: ba:7d:1d:c8:66:d5:5a:6c:84:9a:2a:c5:0c:29:bf:70:ef:35: 41:85:7d:b4:c5:3a:d5:b9:c3:33:d1:37:dc:de:af:04:1d:2d: a4:54:38:66:f6:bb:fd:77:84:e1:49:ef:f1:9c:77:6a:10:53: f5:24:92:62:0f:e5:97:bb:67:ef:40:b7:58:d0:57:d3:04:50: f0:da:83:f5:d1:dc:d8:82:6e:d8:8f:99:6e:83:26:51:6e:4b: dc:82:42:61:63:21:36:98:1e:e3:a8:df:9d:b3:e4:b9:ec:50: 5e:b7:43:6a:a6:fd:35:92:c4:d5:82:dd:72:f8:09:92:c1:a1: e5:ea:c1:32 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57M8DW83ap02YP2UuWaK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk OTRmNjEwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTA0ODFjMGJlOTg0MGRhNTEwNzlmMzVjNjNlYmQwNjFkMDcyYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B4tXtj8bNw2ZSO+OmpBI+QhiWW5 L/jliWR03KzHbh8jQtWi4UsYEEA/x3c1DBm+qKlFoGJ4/CBVObmH2jqLgCTfb/IP fSakRiq7XxZwMcJEMW6ULhqxGUsXFMqSm6YlzDdbvl0RsmsRC8DKVCqvp6Jmqa+b uKBlviLxDzinNveoAWSwFewaGvKbyM3xG45S+3RkXSBZ6pZYva0ZSla80QyNsGl0 5CB1eaociVw+TNKdi7uJsM69nzZBoohaQCrmKAyXh0hHfeOWG5g6l66QnT2VDAD8 keDjHL1yaonSR+cEFtbUgVDrgSAKtF2CUsAvcCvfMqUBgrFS/f1JHVBO9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPkEgcC+mEDaUQefNcY+vQYdBytMMB8GA1UdIwQY MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt ZWY0YjY1OWVmZjhkLzEvMS1RU0J3TDZZUU5wUkI1ODF4ajY5QmgwSEswdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmIvYzJmNjFhLTE1ZjktNGM2Yi05MGU1LWVmNGI2NTllZmY4 ZC8xL3p0ZFZjejZSSURvWHd3azhwZG5MQTVMWlQyRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAD4oZQME AD4oaTAMAwQAPihvAwQAPihwMA0GCSqGSIb3DQEBCwUAA4IBAQAyAdwW4esIMNAO J3OJGJZfWNDSRkhnyYOD9I1/m15IW5ps2sE5SowGBKHdcWclyDICPwtqgV5cjbMd LrAfcVMVynSxFVJpBMWyqUJUhc02IJd79NAN8QZJljXlTK8wHM9wJPHAfbd7+nZi Cvcsglh1Jpm3+yishLj3BaM1isG6fR3IZtVabISaKsUMKb9w7zVBhX20xTrVucMz 0Tfc3q8EHS2kVDhm9rv9d4ThSe/xnHdqEFP1JJJiD+WXu2fvQLdY0FfTBFDw2oP1 0dzYgm7Yj5lugyZRbkvcgkJhYyE2mB7jqN+ds+S57FBet0Nqpv01ksTVgt1y+AmS waHl6sEy -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:39 2026 by rpki-client