This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/JC6b9AAY2rwkq1FORl5Abxr-m1w.roa File: JC6b9AAY2rwkq1FORl5Abxr-m1w.roa (raw, json) Hash identifier: TFvVsSvQ0TaMuOye+x7ZRV34hFmw1XW7pj5/x7K+d10= Subject key identifier: 24:2E:9B:F4:00:18:DA:BC:24:AB:51:4E:46:5E:40:6F:1A:FE:9B:5C Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019B7BA43E3A140A4065DFE8502E4E685742 Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/JC6b9AAY2rwkq1FORl5Abxr-m1w.roa Signing time: Thu 01 Jan 2026 22:18:40 +0000 ROA not before: Thu 01 Jan 2026 22:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213867 IP address blocks: 62.172.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3e:3a:14:0a:40:65:df:e8:50:2e:4e:68:57:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Jan 1 22:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=242e9bf40018dabc24ab514e465e406f1afe9b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:45:3b:4e:e2:3e:6e:09:96:c9:5f:eb:03: 80:fe:33:87:4f:b9:dc:a6:6f:6c:7f:cc:88:b6:1f: ef:bd:05:cd:89:2a:b0:08:c6:23:b7:72:98:84:03: 28:5c:b2:2c:b5:80:fa:50:15:c8:83:d5:1b:83:98: 74:78:83:01:8c:7c:bf:b3:a8:12:1f:94:e4:21:5e: ca:5a:24:a3:8f:4e:78:32:8e:08:b4:99:f1:cd:6f: 5f:1c:be:fb:f7:65:bb:59:fc:b9:77:9d:56:30:e8: db:3c:11:94:13:1e:78:ff:5e:fb:b0:ea:a2:50:ce: 67:41:9c:e1:22:06:2d:90:24:1a:7e:96:64:af:47: 51:1a:b7:88:28:6c:a2:a0:23:d4:f4:e5:4e:67:49: 62:ff:9e:36:b8:b4:f0:c8:d1:4e:74:2d:ab:cb:c3: 5c:6f:4d:ff:47:bf:ed:86:9d:f0:cd:8a:70:4f:11: 8f:eb:5d:3e:46:21:36:8f:07:d5:e0:91:36:97:f0: 83:1b:04:e2:e9:87:d1:87:15:69:63:29:cc:87:b4: aa:2a:a4:92:98:d1:0a:11:c1:5a:15:13:3c:68:27: a9:fa:e1:65:0c:c1:c6:10:dc:17:b2:b1:ae:41:b9: 0f:b5:e1:ca:31:b4:ac:2f:9a:1b:d7:61:0f:22:ff: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:9B:F4:00:18:DA:BC:24:AB:51:4E:46:5E:40:6F:1A:FE:9B:5C X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/JC6b9AAY2rwkq1FORl5Abxr-m1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.172.173.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a8:0a:fb:e6:bf:28:50:80:65:19:86:e1:dc:69:fe:b1:93: 11:cc:e7:21:8d:ec:fa:88:a7:5a:c0:be:5b:3d:a5:5d:1b:c0: 1e:cb:aa:6c:69:49:ce:24:18:38:6b:20:9e:3f:65:c8:b5:0d: fa:3d:40:7e:3b:ed:c4:cc:23:0e:3c:fe:79:ac:1a:d1:cf:3b: be:d2:9e:e7:dd:8b:bf:ff:04:8f:8f:17:86:0a:0c:9d:55:a4: ee:7f:8e:73:e2:89:57:17:6a:e7:d6:5d:b8:53:e8:54:df:b4: 7b:69:25:d6:32:8b:84:aa:04:4b:b4:68:d0:e7:4f:6c:03:09: 6f:05:a9:a1:dd:a5:e6:c1:2a:17:a7:ba:c2:06:51:f7:f6:b0: 6b:ae:7c:41:59:a5:23:94:a7:9c:8b:78:31:51:d8:9e:50:cd: b6:ce:9a:55:12:fa:65:04:7b:10:8e:57:ee:c4:ff:14:50:d2: b5:81:5d:1d:81:c3:45:ff:c6:da:aa:10:68:56:ab:f8:3d:36: 11:51:a6:c9:24:f2:d9:8a:73:79:a1:64:9d:ad:72:5a:c9:2c: c3:c2:f0:c2:b9:69:0c:4d:24:79:8f:56:31:83:bf:42:b3:4f: f2:16:52:d6:fd:9a:71:e7:61:fd:08:e2:9e:12:fc:3e:ec:67: d2:13:03:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pD46FApAZd/oUC5OaFdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjYwMTAxMjIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDJlOWJmNDAwMThkYWJjMjRhYjUxNGU0NjVlNDA2ZjFhZmU5YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2ZFO07iPm4Jlslf6wOA/jOHT7nc pm9sf8yIth/vvQXNiSqwCMYjt3KYhAMoXLIstYD6UBXIg9Ubg5h0eIMBjHy/s6gS H5TkIV7KWiSjj054Mo4ItJnxzW9fHL7792W7Wfy5d51WMOjbPBGUEx54/177sOqi UM5nQZzhIgYtkCQafpZkr0dRGreIKGyioCPU9OVOZ0li/542uLTwyNFOdC2ry8Nc b03/R7/thp3wzYpwTxGP610+RiE2jwfV4JE2l/CDGwTi6YfRhxVpYynMh7SqKqSS mNEKEcFaFRM8aCep+uFlDMHGENwXsrGuQbkPteHKMbSsL5ob12EPIv+Z9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQum/QAGNq8JKtRTkZeQG8a/ptcMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvSkM2YjlBQVkycndrcTFGT1JsNUFieHItbTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqytMA0G CSqGSIb3DQEBCwUAA4IBAQBBqAr75r8oUIBlGYbh3Gn+sZMRzOchjez6iKdawL5b PaVdG8Aey6psaUnOJBg4ayCeP2XItQ36PUB+O+3EzCMOPP55rBrRzzu+0p7n3Yu/ /wSPjxeGCgydVaTuf45z4olXF2rn1l24U+hU37R7aSXWMouEqgRLtGjQ509sAwlv Bamh3aXmwSoXp7rCBlH39rBrrnxBWaUjlKeci3gxUdieUM22zppVEvplBHsQjlfu xP8UUNK1gV0dgcNF/8baqhBoVqv4PTYRUabJJPLZinN5oWSdrXJaySzDwvDCuWkM TSR5j1Yxg79Cs0/yFlLW/Zpx52H9COKeEvw+7GfSEwOk -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:41 2026 by rpki-client