This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/88GXt-Nj8epfXsaOzg77sNdRo5s.roa File: 88GXt-Nj8epfXsaOzg77sNdRo5s.roa (raw, json) Hash identifier: xLg/Jf5JnayYecy0KNeCwmuhUM+tMuNIkboAxtbEGYM= Subject key identifier: F3:C1:97:B7:E3:63:F1:EA:5F:5E:C6:8E:CE:0E:FB:B0:D7:51:A3:9B Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019B7C11574E2175CE85F35880A0F16310D2 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/88GXt-Nj8epfXsaOzg77sNdRo5s.roa Signing time: Fri 02 Jan 2026 00:17:49 +0000 ROA not before: Fri 02 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56924 IP address blocks: 62.174.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:57:4e:21:75:ce:85:f3:58:80:a0:f1:63:10:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jan 2 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c197b7e363f1ea5f5ec68ece0efbb0d751a39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:10:6a:35:5e:d9:5d:8d:a7:47:35:68:44: ec:f4:94:b3:a0:dd:07:5e:3a:eb:65:8b:7b:e5:ca: 3a:c2:ee:bc:84:99:6a:dd:04:f3:95:82:2d:3a:e7: b9:d6:19:e7:df:29:ba:ac:47:c0:97:9f:57:8d:12: 03:0c:99:be:46:34:24:95:c9:8a:b1:c1:4a:a9:f5: 71:99:c5:ca:ce:43:ad:94:24:6c:7f:52:35:a1:38: a8:b5:06:d0:f2:42:15:5d:18:e0:c7:97:ac:a9:1d: 19:73:65:13:56:7e:ee:d6:20:a5:9d:90:66:27:14: 36:15:f2:db:39:7d:f7:01:f5:bf:cb:0d:bb:71:4a: 6d:04:51:67:01:cb:cd:50:62:e0:66:1b:19:ab:cc: 0e:a0:cd:11:f4:b3:27:be:e2:bd:68:57:39:d2:d0: ab:ca:9a:b9:75:38:77:43:25:50:41:f4:0c:07:a9: af:e7:f1:1f:d2:4a:f9:17:13:92:7f:ff:81:ad:7e: 9f:43:16:47:fd:c0:0b:8d:0e:71:f8:12:b4:89:5b: 53:00:72:0f:55:3f:50:94:b2:25:2e:fa:03:ee:f7: dd:d7:6e:6f:da:e9:78:2d:e1:8c:7e:f4:25:89:f2: e0:ea:f0:8c:dd:bc:27:b8:9d:a5:e0:0d:58:a5:c8: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C1:97:B7:E3:63:F1:EA:5F:5E:C6:8E:CE:0E:FB:B0:D7:51:A3:9B X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/88GXt-Nj8epfXsaOzg77sNdRo5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.174.87.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:39:35:96:4c:8e:8e:e9:cb:d1:77:ab:17:b0:66:19:76:c7: 7d:e4:c0:c1:32:00:1d:d0:2d:cc:38:d0:45:2a:b2:ab:0b:8d: a1:de:86:be:06:fb:bf:42:ac:2d:2c:78:7e:96:f8:87:76:ff: 8a:6e:b0:e6:10:a7:c2:b5:3d:3a:9f:91:3f:47:d2:7d:2f:6d: c7:89:3d:15:a5:f7:53:d6:96:27:fe:3c:38:6a:2d:51:13:57: 6b:30:77:20:46:23:36:e9:00:01:8d:b3:47:6e:97:c8:90:a3: 18:6e:26:71:91:b1:fd:00:d5:34:5a:3a:b2:9f:86:bc:d6:27: 76:e5:e8:d8:f6:62:9b:7f:62:e9:6c:4f:2a:8a:43:94:02:69: cc:18:04:87:e1:5e:1f:b9:7b:e7:7e:f3:89:3e:b6:85:d4:4b: 55:b1:73:a3:62:d1:e9:95:da:b9:30:a2:8b:34:43:af:f8:00: 4c:02:5b:cc:d7:cb:1f:bf:fd:1d:48:4b:6c:c5:bf:ef:5c:43: b1:49:1c:6e:a7:98:c7:fd:19:89:9c:85:fc:3d:22:83:02:67: 32:b4:d6:21:da:65:7f:0b:ae:51:94:ba:39:7a:fc:3c:8c:86: 69:ff:46:1f:4b:49:dd:85:a5:96:71:98:eb:dc:c4:7b:1f:36: 55:bc:98:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EVdOIXXOhfNYgKDxYxDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjYwMTAyMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2MxOTdiN2UzNjNmMWVhNWY1ZWM2OGVjZTBlZmJiMGQ3NTFhMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3oQajVe2V2Np0c1aETs9JSzoN0H XjrrZYt75co6wu68hJlq3QTzlYItOue51hnn3ym6rEfAl59XjRIDDJm+RjQklcmK scFKqfVxmcXKzkOtlCRsf1I1oTiotQbQ8kIVXRjgx5esqR0Zc2UTVn7u1iClnZBm JxQ2FfLbOX33AfW/yw27cUptBFFnAcvNUGLgZhsZq8wOoM0R9LMnvuK9aFc50tCr ypq5dTh3QyVQQfQMB6mv5/Ef0kr5FxOSf/+BrX6fQxZH/cALjQ5x+BK0iVtTAHIP VT9QlLIlLvoD7vfd125v2ul4LeGMfvQlifLg6vCM3bwnuJ2l4A1YpchmWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPBl7fjY/HqX17Gjs4O+7DXUaObMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvODhHWHQtTmo4ZXBmWHNhT3pnNzdzTmRSbzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPq5XMA0G CSqGSIb3DQEBCwUAA4IBAQCKOTWWTI6O6cvRd6sXsGYZdsd95MDBMgAd0C3MONBF KrKrC42h3oa+Bvu/QqwtLHh+lviHdv+KbrDmEKfCtT06n5E/R9J9L23HiT0VpfdT 1pYn/jw4ai1RE1drMHcgRiM26QABjbNHbpfIkKMYbiZxkbH9ANU0Wjqyn4a81id2 5ejY9mKbf2LpbE8qikOUAmnMGASH4V4fuXvnfvOJPraF1EtVsXOjYtHpldq5MKKL NEOv+ABMAlvM18sfv/0dSEtsxb/vXEOxSRxup5jH/RmJnIX8PSKDAmcytNYh2mV/ C65RlLo5evw8jIZp/0YfS0ndhaWWcZjr3MR7HzZVvJiN -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:39 2026 by rpki-client