This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa File: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (raw, json) Hash identifier: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo= Subject key identifier: 2A:9C:57:32:D4:E2:FA:96:74:9A:1D:54:B0:F2:01:E4:60:82:FD:50 Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8 Certificate serial: 019B7AC9380582334DAA6A56C757217F6177 Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 62.202.152.0/21 maxlen: 24 62.202.160.0/20 maxlen: 24 2a02:1215:ffff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:38:05:82:33:4d:aa:6a:56:c7:57:21:7f:61:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a9c5732d4e2fa96749a1d54b0f201e46082fd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:c8:67:e3:9e:92:ef:59:42:1d:c3:14:ec: d9:df:f3:c5:c2:f8:f0:38:51:1e:8f:1f:e5:ab:1d: dc:3a:52:83:a0:db:55:7f:5c:aa:cd:f6:e5:4c:a6: 41:c9:57:02:3f:1e:72:9d:ae:31:1e:e1:04:16:5c: 37:ad:54:4b:5d:90:e8:23:90:e4:24:28:49:d1:7f: 68:9d:ca:5d:1f:70:0b:d5:9b:6e:a7:6f:1a:e5:61: 43:9f:2f:cf:31:11:df:fc:d5:91:e0:53:f0:82:a6: ec:10:c2:fa:b9:51:22:b5:fe:a9:ec:09:00:15:42: 4a:e0:fe:71:a6:07:21:bf:78:dc:80:67:4c:f2:97: fc:3c:e2:0f:46:08:7f:83:ec:83:2e:ef:4d:8a:4f: 19:d9:5d:ee:3c:ce:8f:58:5b:b7:2e:80:a8:ea:ed: 1f:db:b4:16:85:28:45:0f:36:ed:ee:34:c4:9f:43: c4:ff:b3:18:62:a9:b3:41:6c:6a:12:66:30:e8:93: 57:48:4e:8e:7b:eb:1a:f3:4a:b7:b9:82:92:33:88: 42:1e:ba:77:6f:5e:70:e2:1a:91:f7:a3:30:ba:a5: 05:33:f7:32:d1:25:a7:80:94:7b:09:36:25:3d:58: d1:0f:8b:27:a4:d8:06:2b:91:0f:13:0e:a2:f6:f9: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:57:32:D4:E2:FA:96:74:9A:1D:54:B0:F2:01:E4:60:82:FD:50 X509v3 Authority Key Identifier: keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.202.152.0-62.202.175.255 IPv6: 2a02:1215:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 92:25:26:90:0a:e1:11:7f:f5:cd:09:a6:69:a8:02:a5:1c:8d: 20:9e:c0:3f:bc:f7:84:5f:50:03:5d:bd:04:7d:85:f2:87:86: 51:17:c9:be:a6:46:7f:a7:36:26:ea:02:72:d9:ee:cd:eb:b5: 2f:07:11:01:a8:d5:bd:b8:9b:31:55:88:bf:33:7d:1f:99:02: 70:b8:8d:d2:ed:ad:3e:32:b3:58:62:91:fd:87:62:e4:8d:33: d5:e6:e1:6e:53:54:70:0b:12:10:60:ba:b1:03:9c:20:29:c4: 2b:6b:d6:ee:15:bd:5e:c9:b8:5d:9d:0c:e0:1a:0d:46:0c:48: 21:dd:ee:c7:dc:6b:64:35:7a:e0:af:59:19:0f:70:e3:80:68: 4a:69:4d:f4:42:95:73:55:69:fc:c7:4b:09:60:bb:f1:40:64: 77:83:db:3c:23:ee:8b:d1:6f:58:2f:2f:64:fc:f5:d9:cb:b6: 85:ca:12:18:c9:eb:91:89:b2:3f:fd:e0:89:d1:4a:2e:b5:d5: 0b:89:28:70:64:d8:0b:e9:93:7b:42:a7:38:8e:ec:a4:3d:18: 80:bb:74:fd:01:2e:25:d3:92:10:92:3c:b9:ae:97:24:d9:0a: bf:c6:e1:41:56:d3:92:e3:0d:aa:1a:b6:e6:2a:90:eb:16:82: f7:25:fc:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6yTgFgjNNqmpWx1chf2F3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz OTM0YjgwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTljNTczMmQ0ZTJmYTk2NzQ5YTFkNTRiMGYyMDFlNDYwODJmZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLDIZ+Oeku9ZQh3DFOzZ3/PFwvjw OFEejx/lqx3cOlKDoNtVf1yqzfblTKZByVcCPx5yna4xHuEEFlw3rVRLXZDoI5Dk JChJ0X9oncpdH3AL1Ztup28a5WFDny/PMRHf/NWR4FPwgqbsEML6uVEitf6p7AkA FUJK4P5xpgchv3jcgGdM8pf8POIPRgh/g+yDLu9Nik8Z2V3uPM6PWFu3LoCo6u0f 27QWhShFDzbt7jTEn0PE/7MYYqmzQWxqEmYw6JNXSE6Oe+sa80q3uYKSM4hCHrp3 b15w4hqR96MwuqUFM/cy0SWngJR7CTYlPVjRD4snpNgGK5EPEw6i9vlrUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqcVzLU4vqWdJodVLDyAeRggv1QMB8GA1UdIwQY MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt MDI1M2QwNGZiOGZmLzEvS3B4WE10VGktcFowbWgxVXNQSUI1R0NDX1ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAM+ypgD BAQ+yqAwDwQCAAIwCQMHACoCEhX//zANBgkqhkiG9w0BAQsFAAOCAQEAkiUmkArh EX/1zQmmaagCpRyNIJ7AP7z3hF9QA129BH2F8oeGURfJvqZGf6c2JuoCctnuzeu1 LwcRAajVvbibMVWIvzN9H5kCcLiN0u2tPjKzWGKR/Ydi5I0z1ebhblNUcAsSEGC6 sQOcICnEK2vW7hW9Xsm4XZ0M4BoNRgxIId3ux9xrZDV64K9ZGQ9w44BoSmlN9EKV c1Vp/MdLCWC78UBkd4PbPCPui9FvWC8vZPz12cu2hcoSGMnrkYmyP/3gidFKLrXV C4kocGTYC+mTe0KnOI7spD0YgLt0/QEuJdOSEJI8ua6XJNkKv8bhQVbTkuMNqhq2 5iqQ6xaC9yX8JA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:35 2026 by rpki-client