This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/8xKkE6ADlYzYZWYWJU0qv0aH1Vw.roa File: 8xKkE6ADlYzYZWYWJU0qv0aH1Vw.roa (raw, json) Hash identifier: 7ZLui6sbysS29s0Jpa9z+o/zQHdNLeqvbeD4lOcnED4= Subject key identifier: F3:12:A4:13:A0:03:95:8C:D8:65:66:16:25:4D:2A:BF:46:87:D5:5C Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76411C92E467B05FDA9D143019B7B Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/8xKkE6ADlYzYZWYWJU0qv0aH1Vw.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24783 IP address blocks: 62.109.160.0/19 maxlen: 19 62.109.173.0/24 maxlen: 24 62.109.176.0/22 maxlen: 22 62.109.180.0/23 maxlen: 23 62.109.183.0/24 maxlen: 24 62.109.184.0/24 maxlen: 24 62.109.187.0/24 maxlen: 24 62.109.188.0/22 maxlen: 22 62.109.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:64:11:c9:2e:46:7b:05:fd:a9:d1:43:01:9b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f312a413a003958cd8656616254d2abf4687d55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:02:a2:45:da:16:3f:bf:53:67:7c:00:af: da:a8:a3:db:ef:53:fb:6c:75:5d:ea:87:71:8f:c1: 6e:c3:b4:9c:15:9b:1f:b2:71:7d:a6:46:3c:b4:6b: 9c:d2:bc:e0:c4:01:89:74:f3:aa:ef:c2:8c:3e:16: 90:eb:d5:b7:de:13:29:60:7b:83:3e:b5:26:c4:78: 17:65:5d:37:a3:6d:ec:be:c8:fd:ad:13:c8:e0:92: f8:f1:02:27:ca:1f:43:32:28:49:2a:a5:4f:05:3e: 44:59:c9:8e:51:e9:b9:dc:55:e0:79:f2:c3:e9:ab: 8a:8e:d1:d7:13:bc:fd:12:d5:b0:fe:6d:e0:ee:bb: d3:96:af:8b:ed:b2:7c:53:89:50:15:8e:a6:84:64: c4:8c:13:07:61:c0:c7:b1:50:c0:ee:45:9f:b1:d4: b2:05:26:dc:88:31:65:4f:c9:84:aa:65:ae:32:2e: c0:ea:15:be:05:31:8e:2f:12:05:73:41:6f:8e:d6: 65:3c:46:2b:e6:a3:b2:b7:b9:11:a3:44:5b:11:5f: ff:79:1b:0d:f2:3f:03:c6:22:46:7b:35:d8:10:74: 9b:dc:b6:80:9f:35:6b:06:b8:8d:73:61:e1:11:5f: 5b:65:ab:35:64:0a:02:3b:e5:d3:df:d1:99:e6:99: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:12:A4:13:A0:03:95:8C:D8:65:66:16:25:4D:2A:BF:46:87:D5:5C X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/8xKkE6ADlYzYZWYWJU0qv0aH1Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.109.160.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:80:94:0d:0a:90:36:48:6c:af:8d:ac:00:de:82:dc:b8:9c: b0:15:88:da:ef:fe:96:8b:d1:e3:78:c3:42:1d:31:31:f3:b2: ab:8d:52:51:4e:7d:d5:74:84:e2:cb:c8:00:13:c6:e1:f2:26: c8:f1:e0:81:47:94:a9:e0:65:a5:60:61:61:97:36:68:c2:4f: 1d:ec:db:fe:c9:d6:95:2e:ff:98:c4:a5:85:fd:1b:5d:50:b6: fa:cd:c7:90:db:bc:5c:66:35:5d:a5:7c:ec:bd:96:84:0a:84: 4e:d3:ae:43:1c:2d:92:09:7f:17:60:1b:f3:ac:46:ed:6a:f0: 0e:29:03:a7:a4:43:25:92:f3:2f:68:42:68:90:94:59:50:4f: de:9a:58:cc:96:44:1f:71:27:c3:e3:fe:00:2c:42:ce:9a:10: 96:9f:6e:f6:17:87:21:4e:d8:c9:af:95:92:9e:9c:99:99:f7: 58:72:63:f5:12:0a:4c:25:6d:6a:ca:d5:98:8f:2f:d6:f7:f0: fe:e4:02:6a:bc:7b:53:ae:33:13:cc:d3:78:2a:ba:c1:80:86: cc:9c:4e:cf:55:0e:e9:05:99:c9:cc:e5:fd:c2:e7:29:25:03: 07:fe:25:75:89:77:d3:f4:5c:ce:b6:de:2c:98:04:cd:30:b0: 76:54:11:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2QRyS5GewX9qdFDAZt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzEyYTQxM2EwMDM5NThjZDg2NTY2MTYyNTRkMmFiZjQ2ODdkNTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8YCokXaFj+/U2d8AK/aqKPb71P7 bHVd6odxj8Fuw7ScFZsfsnF9pkY8tGuc0rzgxAGJdPOq78KMPhaQ69W33hMpYHuD PrUmxHgXZV03o23svsj9rRPI4JL48QInyh9DMihJKqVPBT5EWcmOUem53FXgefLD 6auKjtHXE7z9EtWw/m3g7rvTlq+L7bJ8U4lQFY6mhGTEjBMHYcDHsVDA7kWfsdSy BSbciDFlT8mEqmWuMi7A6hW+BTGOLxIFc0FvjtZlPEYr5qOyt7kRo0RbEV//eRsN 8j8DxiJGezXYEHSb3LaAnzVrBriNc2HhEV9bZas1ZAoCO+XT39GZ5pk4UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMSpBOgA5WM2GVmFiVNKr9Gh9VcMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvOHhLa0U2QURsWXpZWldZV0pVMHF2MGFIMVZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPm2gMA0G CSqGSIb3DQEBCwUAA4IBAQA8gJQNCpA2SGyvjawA3oLcuJywFYja7/6Wi9HjeMNC HTEx87KrjVJRTn3VdITiy8gAE8bh8ibI8eCBR5Sp4GWlYGFhlzZowk8d7Nv+ydaV Lv+YxKWF/RtdULb6zceQ27xcZjVdpXzsvZaECoRO065DHC2SCX8XYBvzrEbtavAO KQOnpEMlkvMvaEJokJRZUE/emljMlkQfcSfD4/4ALELOmhCWn272F4chTtjJr5WS npyZmfdYcmP1EgpMJW1qytWYjy/W9/D+5AJqvHtTrjMTzNN4KrrBgIbMnE7PVQ7p BZnJzOX9wucpJQMH/iV1iXfT9FzOtt4smATNMLB2VBFM -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:01 2026 by rpki-client