This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa File: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (raw, json) Hash identifier: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk= Subject key identifier: AC:29:8E:25:A8:8F:9B:5D:22:FC:DB:6E:D8:C7:73:68:8F:73:7B:A5 Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Certificate serial: 019B7EA6A7E86B9EAC5C05BEC29819BEDE9F Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15472 IP address blocks: 62.100.64.0/21 maxlen: 21 62.100.72.0/23 maxlen: 23 62.100.85.0/24 maxlen: 24 62.100.88.0/21 maxlen: 21 62.100.88.0/23 maxlen: 23 62.100.91.0/24 maxlen: 24 62.100.92.0/22 maxlen: 22 185.193.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a7:e8:6b:9e:ac:5c:05:be:c2:98:19:be:de:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac298e25a88f9b5d22fcdb6ed8c773688f737ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:1e:38:f5:92:88:fc:ec:eb:9e:a3:e1:94: 7e:db:66:2c:6f:ec:9f:c9:d4:95:d0:ad:ed:69:e9: 7c:7f:eb:9b:bc:0c:c2:38:45:51:ed:06:83:0c:c1: 6a:d0:3d:40:74:9a:8c:d3:ae:c4:a6:d2:4f:96:0b: 23:bb:c4:6c:ea:07:b7:23:4e:f5:52:0a:55:7d:6a: 2b:29:3f:07:d6:b6:f2:70:e7:28:21:a1:e4:3f:3d: 24:dc:fa:0f:85:85:e8:12:3d:8d:ea:2a:e3:32:1d: 2a:37:29:28:75:e9:c2:b5:15:d4:3a:c4:3d:a4:75: 98:91:7d:65:43:6b:a9:70:1e:e4:4a:da:44:09:88: e8:a5:53:76:a3:5f:67:6d:c5:5f:ad:36:2a:93:c3: d9:f3:82:20:3e:1a:dd:e1:82:fa:18:3c:73:5d:1f: 40:0d:c7:57:9b:78:e0:e9:e3:4c:61:9b:43:c9:7a: 1d:cc:34:77:b8:f2:db:33:fe:e9:70:29:e1:ef:23: 20:b3:a8:5f:56:a3:4e:df:ac:b3:e8:0f:0c:85:89: 86:59:ac:d0:ab:b9:a5:57:32:9c:6b:a4:a5:59:92: 39:ac:fd:a0:50:57:24:69:c7:1e:c1:eb:79:82:c9: 64:6b:78:71:1a:b6:77:e5:25:45:97:df:d4:45:66: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:29:8E:25:A8:8F:9B:5D:22:FC:DB:6E:D8:C7:73:68:8F:73:7B:A5 X509v3 Authority Key Identifier: keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.100.64.0-62.100.73.255 62.100.85.0/24 62.100.88.0/21 185.193.188.0/22 Signature Algorithm: sha256WithRSAEncryption 41:03:9f:ed:5b:66:b0:20:02:fc:75:0a:dc:f9:12:a8:9e:7f: 0a:ca:d4:09:c8:26:07:57:08:4c:63:6e:2b:87:ce:86:37:59: 8f:46:b4:2b:c4:7c:f8:d0:92:b4:10:a1:77:92:8a:1a:d3:d9: 54:a2:30:44:48:c6:12:88:e6:a1:86:fd:4f:fa:86:6c:0d:52: b5:48:ed:91:2f:ec:8f:5a:2e:68:15:c0:36:20:0c:c3:41:74: 15:85:8b:02:78:84:54:cf:8a:18:43:e2:9e:9d:76:2a:d8:39: b4:ef:e9:ac:50:93:ef:e3:eb:8c:10:62:55:17:90:e6:b7:3b: 6c:41:6f:7d:84:9a:f9:20:c9:8b:87:ac:c4:19:94:9f:6d:e3: e9:1d:97:45:2b:ed:32:48:53:e9:05:57:03:e4:16:aa:08:5d: e8:3f:fd:54:f8:11:82:7b:cb:d9:56:d3:ca:4a:56:aa:33:96: 06:aa:43:40:58:df:28:eb:66:88:ef:95:67:26:8d:b0:88:8d: 7d:ba:76:d2:8e:0f:52:f0:c7:ab:f4:d1:34:4e:02:6f:2a:8a: 1c:5d:b0:7d:86:5c:20:16:2c:5e:b4:15:14:a6:94:e6:8d:86: 97:88:da:b2:04:14:10:8c:8c:1d:e1:c9:44:fa:1c:ef:38:f6: 40:81:2c:20 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+pqfoa56sXAW+wpgZvt6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz ZjBkYzUwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzI5OGUyNWE4OGY5YjVkMjJmY2RiNmVkOGM3NzM2ODhmNzM3YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroMeOPWSiPzs656j4ZR+22Ysb+yf ydSV0K3tael8f+ubvAzCOEVR7QaDDMFq0D1AdJqM067EptJPlgsju8Rs6ge3I071 UgpVfWorKT8H1rbycOcoIaHkPz0k3PoPhYXoEj2N6irjMh0qNykodenCtRXUOsQ9 pHWYkX1lQ2upcB7kStpECYjopVN2o19nbcVfrTYqk8PZ84IgPhrd4YL6GDxzXR9A DcdXm3jg6eNMYZtDyXodzDR3uPLbM/7pcCnh7yMgs6hfVqNO36yz6A8MhYmGWazQ q7mlVzKca6SlWZI5rP2gUFckaccewet5gslka3hxGrZ35SVFl9/URWaBqwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKwpjiWoj5tdIvzbbtjHc2iPc3ulMB8GA1UdIwQY MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt OGI4YTAxYmQ3NDE0LzEvckNtT0phaVBtMTBpX050dTJNZHphSTl6ZTZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0 LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAY+ZEAD BAE+ZEgDBAA+ZFUDBAM+ZFgDBAK5wbwwDQYJKoZIhvcNAQELBQADggEBAEEDn+1b ZrAgAvx1Ctz5EqiefwrK1AnIJgdXCExjbiuHzoY3WY9GtCvEfPjQkrQQoXeSihrT 2VSiMERIxhKI5qGG/U/6hmwNUrVI7ZEv7I9aLmgVwDYgDMNBdBWFiwJ4hFTPihhD 4p6ddirYObTv6axQk+/j64wQYlUXkOa3O2xBb32EmvkgyYuHrMQZlJ9t4+kdl0Ur 7TJIU+kFVwPkFqoIXeg//VT4EYJ7y9lW08pKVqozlgaqQ0BY3yjrZojvlWcmjbCI jX26dtKOD1Lwx6v00TROAm8qihxdsH2GXCAWLF60FRSmlOaNhpeI2rIEFBCMjB3h yUT6HO849kCBLCA= -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:00 2026 by rpki-client