This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/O9gvHkG2h2zO-WbCdSfRap-erlk.roa File: O9gvHkG2h2zO-WbCdSfRap-erlk.roa (raw, json) Hash identifier: oEpItWYo36cnFY6gqJseSt67WlSCENpXs7wywbBecHA= Subject key identifier: 3B:D8:2F:1E:41:B6:87:6C:CE:F9:66:C2:75:27:D1:6A:9F:9E:AE:59 Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd Certificate serial: 019B78A2483554147C370DBDDEAE3E1C55CC Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/O9gvHkG2h2zO-WbCdSfRap-erlk.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213939 IP address blocks: 62.164.197.0/24 maxlen: 24 212.108.103.0/24 maxlen: 24 2a01:e340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:48:35:54:14:7c:37:0d:bd:de:ae:3e:1c:55:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bd82f1e41b6876ccef966c27527d16a9f9eae59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:a5:19:2f:bf:ad:95:05:19:5a:4d:3e:c6: 77:31:1c:f6:a3:6f:55:6f:85:81:48:1f:25:52:02: 9a:c7:a9:aa:ad:cc:ff:31:36:25:dc:a1:f6:82:7e: 29:01:09:82:8a:7f:5a:aa:7c:58:e2:92:3d:ea:0b: 72:41:76:22:20:24:16:69:4e:5a:8e:ec:ae:a4:c2: 5b:6e:0b:76:6f:99:c5:a2:cb:9e:34:1e:04:ec:b9: 6e:36:d9:20:c9:2e:51:8a:b0:c1:fa:59:85:e2:c8: b3:86:4e:47:f0:c6:6d:29:48:4a:99:b0:a2:99:be: 34:32:1f:fc:89:83:f2:dd:15:c8:48:58:65:df:59: ee:a3:5e:ae:2d:d3:c7:96:37:af:37:e3:c0:b9:59: f3:76:b9:b7:3a:9c:3f:8b:95:75:dc:70:9c:7e:c0: 39:18:c6:79:96:4e:07:72:13:9e:f1:84:d7:fe:3b: 93:f2:95:1d:33:f4:e7:dc:ec:33:cc:1c:bb:ca:42: 49:1c:d0:7f:dc:65:75:0e:71:1e:12:0b:ec:fb:48: 32:87:ee:90:3a:16:a3:ce:75:9c:de:a7:62:1e:41: 8a:8d:d4:bf:51:09:a9:d0:c0:b4:54:18:62:b6:a2: 95:c5:5e:03:09:7b:d4:5b:06:91:ac:18:8c:f4:4a: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D8:2F:1E:41:B6:87:6C:CE:F9:66:C2:75:27:D1:6A:9F:9E:AE:59 X509v3 Authority Key Identifier: keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/O9gvHkG2h2zO-WbCdSfRap-erlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.197.0/24 212.108.103.0/24 IPv6: 2a01:e340::/29 Signature Algorithm: sha256WithRSAEncryption 3e:e3:a7:c2:15:30:59:c3:b4:8f:5e:3d:7f:9d:e6:3e:cd:5d: d1:96:fa:2e:da:46:2b:e6:17:c8:ce:c0:83:9b:d6:74:ea:0c: 3c:df:a0:0e:c0:7f:f4:81:f2:73:a2:01:b1:ff:63:19:de:7b: e2:2e:9d:5c:49:c5:84:81:04:9c:61:17:ea:25:33:90:72:cf: 8c:b5:5d:5b:73:14:ab:24:ad:f4:33:2a:e8:e6:a6:c0:65:dc: b9:aa:f8:16:e4:9a:e1:54:79:36:05:8b:5c:db:15:1b:c6:ea: 4c:92:65:53:3d:5b:d4:53:67:25:ae:71:4e:74:a3:07:2f:67: 6c:d0:ca:6e:6a:3f:f3:33:0d:75:a1:4c:8b:bf:b9:d3:23:d5: eb:86:82:f0:04:80:7e:9b:6e:45:2e:ae:c6:5c:78:0e:bb:4c: 67:dc:b4:8d:54:38:1b:bb:e3:f0:f0:05:05:77:37:ab:39:d2: fe:44:55:a3:d7:a0:1f:0b:9e:ba:9d:af:13:08:31:00:f3:75: fd:15:ec:4a:68:c6:74:07:90:76:da:00:16:ee:f2:16:56:34: 1e:fd:ad:dc:01:16:a0:0b:fb:38:9f:cc:31:e4:8c:d8:63:41: df:79:e2:74:5b:18:35:0a:47:f5:fb:04:0d:d7:cf:54:4d:8e: c5:50:6f:62 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4okg1VBR8Nw293q4+HFXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjkxYzJjMDhmMDBkNjc2M2QyZTllNmEyYzQ0MjExMzBm M2RkYmQwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQ4MmYxZTQxYjY4NzZjY2VmOTY2YzI3NTI3ZDE2YTlmOWVhZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqGlGS+/rZUFGVpNPsZ3MRz2o29V b4WBSB8lUgKax6mqrcz/MTYl3KH2gn4pAQmCin9aqnxY4pI96gtyQXYiICQWaU5a juyupMJbbgt2b5nFosueNB4E7LluNtkgyS5RirDB+lmF4sizhk5H8MZtKUhKmbCi mb40Mh/8iYPy3RXISFhl31nuo16uLdPHljevN+PAuVnzdrm3Opw/i5V13HCcfsA5 GMZ5lk4HchOe8YTX/juT8pUdM/Tn3OwzzBy7ykJJHNB/3GV1DnEeEgvs+0gyh+6Q OhajznWc3qdiHkGKjdS/UQmp0MC0VBhitqKVxV4DCXvUWwaRrBiM9EqBBQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDvYLx5BtodszvlmwnUn0Wqfnq5ZMB8GA1UdIwQY MBaAFPa5HCwI8A1nY9Lp5qLEQhEw8929MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2Yt OGM5MWY5NmJlNjI1LzEvTzlndkhrRzJoMnpPLVdiQ2RTZlJhcC1lcmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2YtOGM5MWY5NmJlNjI1 LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAPqTFAwQA 1GxnMA0EAgACMAcDBQMqAeNAMA0GCSqGSIb3DQEBCwUAA4IBAQA+46fCFTBZw7SP Xj1/neY+zV3Rlvou2kYr5hfIzsCDm9Z06gw836AOwH/0gfJzogGx/2MZ3nviLp1c ScWEgQScYRfqJTOQcs+MtV1bcxSrJK30Myro5qbAZdy5qvgW5JrhVHk2BYtc2xUb xupMkmVTPVvUU2clrnFOdKMHL2ds0Mpuaj/zMw11oUyLv7nTI9XrhoLwBIB+m25F Lq7GXHgOu0xn3LSNVDgbu+Pw8AUFdzerOdL+RFWj16AfC566na8TCDEA83X9FexK aMZ0B5B22gAW7vIWVjQe/a3cARagC/s4n8wx5IzYY0HfeeJ0Wxg1Ckf1+wQN189U TY7FUG9i -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:57 2026 by rpki-client