This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/7c62Dyrz3RaJzfk_-Ma-zaftthU.roa File: 7c62Dyrz3RaJzfk_-Ma-zaftthU.roa (raw, json) Hash identifier: 5w8HqttxdVYBqrIS/AtjxBDT7h9Q7oeMmHiR82+Pkxk= Subject key identifier: ED:CE:B6:0F:2A:F3:DD:16:89:CD:F9:3F:F8:C6:BE:CD:A7:ED:B6:15 Certificate issuer: /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de Certificate serial: 019B7834F3FC43021C60818CE028C13799D7 Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/7c62Dyrz3RaJzfk_-Ma-zaftthU.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215308 IP address blocks: 185.175.11.0/24 maxlen: 24 2a0d:187::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f3:fc:43:02:1c:60:81:8c:e0:28:c1:37:99:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edceb60f2af3dd1689cdf93ff8c6becda7edb615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:8a:cb:c3:e2:44:7a:dd:a4:85:21:0a:d8: d8:79:3d:26:50:b1:0c:e1:40:b2:78:22:d5:81:56: 18:63:81:2f:d5:92:95:2c:50:1a:87:8c:5d:3c:d3: 63:05:f6:5f:1c:b4:f4:70:67:a0:ff:7f:8b:98:b4: 06:ef:ae:49:13:fc:1f:1c:78:8d:13:7a:fd:7a:a7: 84:b6:8b:a2:2a:9e:99:f7:3c:40:58:43:a9:32:c9: b9:ff:6f:ec:2d:59:c0:c8:2e:a0:a6:53:db:e1:c9: 9e:c3:2c:2b:44:f3:a6:f8:4f:53:9f:07:9d:1e:d5: 75:54:d1:24:1b:70:17:b1:01:ef:9d:4a:be:6f:37: 83:27:c5:63:0f:57:33:c3:eb:58:41:72:58:64:94: 56:da:0f:1c:e2:b0:0b:03:4a:f6:1d:5e:bc:c7:81: 8c:b1:66:97:d7:7a:2c:04:d0:96:67:52:3e:34:89: 45:09:cd:c6:db:10:71:73:d5:20:bc:9e:30:cf:95: 8d:a2:b1:27:b9:aa:9b:84:e6:11:8c:85:d8:f6:40: f8:e9:03:0b:63:b6:d8:3d:fc:db:c7:6f:ae:74:98: 70:d2:7e:2d:25:cc:0a:d7:63:ed:9b:29:f6:97:c7: 78:5d:9f:10:ad:b6:ea:4d:9d:5c:91:4c:1b:aa:cd: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:B6:0F:2A:F3:DD:16:89:CD:F9:3F:F8:C6:BE:CD:A7:ED:B6:15 X509v3 Authority Key Identifier: keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/7c62Dyrz3RaJzfk_-Ma-zaftthU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.11.0/24 IPv6: 2a0d:187::/32 Signature Algorithm: sha256WithRSAEncryption 78:6f:fd:ee:91:77:74:cb:f7:7b:38:b9:91:36:e8:3a:17:58: c7:9a:90:81:51:46:af:89:33:10:73:42:e6:8b:dd:e7:9e:c8: 56:a4:b8:bd:65:c9:a2:d5:c7:4a:d6:3d:bc:c0:f5:67:4d:63: 6c:a0:f3:a5:9b:7d:5f:fc:f9:17:2f:5a:1d:4f:8c:79:29:57: ce:f7:c8:00:a3:09:bf:9d:00:d8:25:f9:ca:6f:69:52:e2:d4: 4c:8a:18:bc:79:8e:d4:7f:a9:ad:87:3d:71:21:5e:f7:6c:a9: 8c:95:48:cc:8c:8c:a3:ac:3b:cd:15:07:c5:13:d0:2a:22:a2: f1:cf:9f:c3:e5:68:4b:b8:75:93:d1:09:6d:30:ac:bc:eb:90: f8:24:4a:ea:ed:2e:4e:06:bf:69:c9:4b:fe:80:cc:6c:aa:77: 53:6f:84:55:a3:d8:b7:82:dc:d1:1f:a9:52:03:51:64:7e:c6: 9c:3f:fc:7d:f5:22:90:69:61:ca:bd:83:19:b0:d4:80:36:60: 7e:26:89:d1:29:0a:e6:f5:18:20:6e:ea:42:1d:bf:91:c7:31: 7d:e4:7c:c6:5f:09:25:df:d6:e8:94:57:e7:f6:5e:89:51:0e: 64:61:bc:b1:75:30:a7:51:42:84:dc:84:cd:cb:78:77:f0:cc: 81:2d:7d:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NPP8QwIcYIGM4CjBN5nXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYWQ4YjE2MDk5ZDZjZGY4YzNhODExY2E1ODYwZGYwZjZi YWY2ZGUwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNlYjYwZjJhZjNkZDE2ODljZGY5M2ZmOGM2YmVjZGE3ZWRiNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+6Ky8PiRHrdpIUhCtjYeT0mULEM 4UCyeCLVgVYYY4Ev1ZKVLFAah4xdPNNjBfZfHLT0cGeg/3+LmLQG765JE/wfHHiN E3r9eqeEtouiKp6Z9zxAWEOpMsm5/2/sLVnAyC6gplPb4cmewywrRPOm+E9Tnwed HtV1VNEkG3AXsQHvnUq+bzeDJ8VjD1czw+tYQXJYZJRW2g8c4rALA0r2HV68x4GM sWaX13osBNCWZ1I+NIlFCc3G2xBxc9UgvJ4wz5WNorEnuaqbhOYRjIXY9kD46QML Y7bYPfzbx2+udJhw0n4tJcwK12Ptmyn2l8d4XZ8QrbbqTZ1ckUwbqs1eCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO3Otg8q890Wic35P/jGvs2n7bYVMB8GA1UdIwQY MBaAFN+tixYJnWzfjDqBHKWGDfD2uvbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEt OGJjYTI3Y2IzMGMwLzEvN2M2MkR5cnozUmFKemZrXy1NYS16YWZ0dGhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEtOGJjYTI3Y2IzMGMw LzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAua8LMA0E AgACMAcDBQAqDQGHMA0GCSqGSIb3DQEBCwUAA4IBAQB4b/3ukXd0y/d7OLmRNug6 F1jHmpCBUUaviTMQc0Lmi93nnshWpLi9Zcmi1cdK1j28wPVnTWNsoPOlm31f/PkX L1odT4x5KVfO98gAowm/nQDYJfnKb2lS4tRMihi8eY7Uf6mthz1xIV73bKmMlUjM jIyjrDvNFQfFE9AqIqLxz5/D5WhLuHWT0QltMKy865D4JErq7S5OBr9pyUv+gMxs qndTb4RVo9i3gtzRH6lSA1FkfsacP/x99SKQaWHKvYMZsNSANmB+JonRKQrm9Rgg bupCHb+RxzF95HzGXwkl39bolFfn9l6JUQ5kYbyxdTCnUUKE3ITNy3h38MyBLX1v -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:35 2026 by rpki-client