This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mTEhvnY5i7S9Gf7I8T_ILMmX0j8.roa
File: mTEhvnY5i7S9Gf7I8T_ILMmX0j8.roa (raw, json)
Hash identifier: NHkfz5TdNuUzRhxOAL0GrxNivvcHn1U7qtHS8l0ah6A=
Subject key identifier: 99:31:21:BE:76:39:8B:B4:BD:19:FE:C8:F1:3F:C8:2C:C9:97:D2:3F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019B7C8007FC484D7391CC17204BBAE15CFC
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mTEhvnY5i7S9Gf7I8T_ILMmX0j8.roa
Signing time: Fri 02 Jan 2026 02:18:44 +0000
ROA not before: Fri 02 Jan 2026 02:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8908
IP address blocks: 62.160.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:07:fc:48:4d:73:91:cc:17:20:4b:ba:e1:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 2 02:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=993121be76398bb4bd19fec8f13fc82cc997d23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:bb:93:79:08:c0:a2:62:3b:4f:a7:ba:e9:
fe:9f:44:19:0d:f6:ef:87:d5:eb:6d:14:3d:18:ad:
ee:eb:a6:a3:57:5c:1b:e7:e4:a9:50:e2:8f:f2:a2:
32:7f:37:81:6c:32:50:9a:52:9c:eb:9e:e6:cf:22:
ea:f5:f8:12:9d:73:96:77:40:52:1a:89:03:a4:57:
81:f7:ab:01:50:25:e9:d8:c0:6b:b4:c4:33:7f:06:
51:55:5c:10:c7:9b:0d:ab:3d:b1:22:71:9f:c1:d7:
b0:9d:b1:05:42:3b:07:fe:7b:84:74:e3:18:81:0d:
48:23:46:6e:ab:8d:68:ef:82:c8:5b:49:2e:9a:bd:
97:ea:dd:2d:30:bf:e3:db:14:2b:41:e9:73:ac:92:
5f:10:c3:0c:d8:07:f1:ec:af:6f:61:28:6c:68:f2:
60:ec:3b:1e:23:07:39:2a:7f:33:b3:ac:18:52:99:
71:36:32:a9:ff:8f:a4:b0:d2:39:42:8a:b1:06:6d:
e5:bb:32:da:30:82:a4:a4:b4:0a:9c:1b:5a:c7:32:
19:bd:65:47:3f:ae:89:d4:8b:cc:1f:58:4d:4e:ce:
8f:08:0b:bb:2b:1f:78:38:02:16:0b:b7:1a:82:bd:
3f:68:34:1c:ec:e5:bc:3f:05:91:fe:a5:08:a2:4c:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:21:BE:76:39:8B:B4:BD:19:FE:C8:F1:3F:C8:2C:C9:97:D2:3F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mTEhvnY5i7S9Gf7I8T_ILMmX0j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.160.27.0/24
Signature Algorithm: sha256WithRSAEncryption
84:76:40:d2:c7:52:ab:84:f8:fb:3b:f3:0d:fc:57:31:c7:ad:
c4:5f:a0:f9:5e:ba:36:f9:5f:55:15:b7:3b:d3:d0:12:57:d0:
90:95:7f:0d:00:4a:89:14:2c:8f:a4:4e:ce:9b:fd:7b:37:2f:
d0:4d:91:c8:fc:9d:e2:98:7b:0c:96:13:8c:f0:07:9a:67:62:
63:16:99:8a:25:66:68:6d:83:68:d1:f3:e8:d2:af:39:ec:cb:
0e:18:cb:22:ca:fe:44:4f:ed:95:a1:88:b5:51:7a:9f:04:03:
85:96:1e:19:be:0b:dd:7e:0b:1d:71:d7:1d:6a:b3:1d:6d:8a:
0e:72:81:72:f2:fc:d4:86:7c:6d:60:22:bd:6f:b1:e2:16:1a:
f4:58:14:b0:3d:2f:88:4d:fa:d8:9e:43:5f:c7:18:0b:50:cd:
96:7f:f4:bc:b6:e9:88:03:c8:a0:0c:20:3f:42:d7:65:cf:70:
bf:66:9a:bd:06:be:b9:4c:e7:4b:0c:4c:8e:b4:c5:ca:c5:0e:
82:42:1b:b6:83:91:bd:d9:35:4f:6d:b4:73:7f:71:56:96:17:
c6:6b:82:27:f2:71:4b:35:9c:68:9a:09:a8:5d:ea:aa:af:c2:
c7:c1:a2:d7:a0:02:06:3e:f4:47:c7:b8:ca:a7:5f:e1:d1:13:
12:d9:26:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gAf8SE1zkcwXIEu64Vz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTMxMjFiZTc2Mzk4YmI0YmQxOWZlYzhmMTNmYzgyY2M5OTdkMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZW7k3kIwKJiO0+nuun+n0QZDfbv
h9XrbRQ9GK3u66ajV1wb5+SpUOKP8qIyfzeBbDJQmlKc657mzyLq9fgSnXOWd0BS
GokDpFeB96sBUCXp2MBrtMQzfwZRVVwQx5sNqz2xInGfwdewnbEFQjsH/nuEdOMY
gQ1II0Zuq41o74LIW0kumr2X6t0tML/j2xQrQelzrJJfEMMM2Afx7K9vYShsaPJg
7DseIwc5Kn8zs6wYUplxNjKp/4+ksNI5QoqxBm3luzLaMIKkpLQKnBtaxzIZvWVH
P66J1IvMH1hNTs6PCAu7Kx94OAIWC7cagr0/aDQc7OW8PwWR/qUIokztZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkxIb52OYu0vRn+yPE/yCzJl9I/MB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvbVRFaHZuWTVpN1M5R2Y3SThUX0lMTW1YMGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqAbMA0G
CSqGSIb3DQEBCwUAA4IBAQCEdkDSx1KrhPj7O/MN/Fcxx63EX6D5Xro2+V9VFbc7
09ASV9CQlX8NAEqJFCyPpE7Om/17Ny/QTZHI/J3imHsMlhOM8AeaZ2JjFpmKJWZo
bYNo0fPo0q857MsOGMsiyv5ET+2VoYi1UXqfBAOFlh4ZvgvdfgsdcdcdarMdbYoO
coFy8vzUhnxtYCK9b7HiFhr0WBSwPS+ITfrYnkNfxxgLUM2Wf/S8tumIA8igDCA/
Qtdlz3C/Zpq9Br65TOdLDEyOtMXKxQ6CQhu2g5G92TVPbbRzf3FWlhfGa4In8nFL
NZxomgmoXeqqr8LHwaLXoAIGPvRHx7jKp1/h0RMS2SZI
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:01:47 2026 by rpki-client