This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/62kCfgONuAvqW1NUbM9Iz08pfMI.roa File: 62kCfgONuAvqW1NUbM9Iz08pfMI.roa (raw, json) Hash identifier: fIRjeYSveZsnghNhWxl6roWSFefdl9H5Q1zHdhCDvwE= Subject key identifier: EB:69:02:7E:03:8D:B8:0B:EA:5B:53:54:6C:CF:48:CF:4F:29:7C:C2 Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19 Certificate serial: 019B7835007288A4A5C51436D559FCFCC315 Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/62kCfgONuAvqW1NUbM9Iz08pfMI.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214402 IP address blocks: 2a0d:8140:5fff::/48 maxlen: 48 2a0d:8140:6000::/48 maxlen: 48 2a0d:8140:6fff::/48 maxlen: 48 2a0d:8140:7000::/48 maxlen: 48 2a0d:8140:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:00:72:88:a4:a5:c5:14:36:d5:59:fc:fc:c3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb69027e038db80bea5b53546ccf48cf4f297cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:5b:f4:df:bd:92:17:12:61:ea:6b:35:df: ee:0c:56:2d:d7:7b:2c:88:a2:83:55:9e:b8:db:21: 87:9b:ae:77:57:e6:64:50:83:11:b9:36:34:0a:a5: 86:54:f1:39:69:5f:a9:28:fa:84:d1:6b:48:dc:2f: 48:2f:1a:e7:54:f4:0e:d6:78:fe:25:8a:3f:ae:ea: 25:68:27:bc:ff:d5:9c:7a:82:93:df:75:94:59:b3: df:bd:be:06:d1:76:f3:9c:6b:da:9c:39:35:1d:6b: 4c:76:3e:d1:54:ad:91:15:f2:2c:9f:93:03:fa:4a: 84:7a:1b:8e:c4:ef:f0:7d:c6:a1:fa:02:78:ec:32: 57:a7:19:8d:94:01:0a:44:f4:85:f4:3a:88:e1:0c: 45:90:bc:5a:b3:2c:2c:7f:ad:3a:76:c8:4f:3e:05: ef:b0:5e:15:03:e0:24:31:8e:73:dc:1d:6c:de:82: de:e8:d8:e0:c1:cb:06:22:11:a1:65:e4:5f:85:45: 8a:1c:47:51:2a:f0:35:f9:2a:3e:8a:01:0e:9e:7e: 93:c0:db:13:81:b9:b5:25:2d:30:05:8a:b0:c1:e4: b0:9c:cf:0d:83:c3:3e:c9:da:ab:42:e7:26:16:0c: 63:ab:64:5a:e8:53:1f:7c:2f:ce:67:3f:7b:b8:45: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:69:02:7E:03:8D:B8:0B:EA:5B:53:54:6C:CF:48:CF:4F:29:7C:C2 X509v3 Authority Key Identifier: keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/62kCfgONuAvqW1NUbM9Iz08pfMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:8140:5fff::-2a0d:8140:6000:ffff:ffff:ffff:ffff:ffff 2a0d:8140:6fff::-2a0d:8140:7000:ffff:ffff:ffff:ffff:ffff 2a0d:8140:8000::/48 Signature Algorithm: sha256WithRSAEncryption 90:2a:b8:a1:d9:da:bb:74:b3:b5:35:5a:26:fb:6f:12:af:0d: ca:64:cf:d4:e1:14:31:9f:5b:a7:16:f5:33:96:ad:d0:ef:95: 4f:7a:a0:0f:7d:04:ed:3e:a6:d8:ed:76:ae:ff:58:0d:ce:a5: e6:59:c4:28:fa:5a:48:f2:a3:5c:ed:cf:fa:d7:95:7a:a0:65: 3d:0c:e4:28:93:94:42:6b:75:d7:ff:e4:20:98:ed:ba:79:47: c8:16:00:33:14:e4:a6:fd:2d:98:fe:a3:22:ec:34:4e:70:88: c6:f1:ef:10:80:a2:52:a8:35:24:09:7a:8b:8d:99:0a:b7:18: 73:d3:61:9b:f7:57:7e:22:96:03:4f:c3:a2:3f:a9:f8:aa:71: d6:bf:27:64:7a:db:2c:73:d6:e5:59:03:e9:7b:51:66:a3:85: ac:03:2c:e4:5e:d9:be:75:aa:93:78:52:57:7f:82:49:57:da: a1:e2:7b:18:cd:5a:d0:d7:22:ac:fe:6c:c9:1d:42:fe:b8:08: 0c:85:40:4d:1a:28:7e:14:f1:c8:b2:3f:fe:ac:75:e5:53:ed: 50:77:bb:2c:b8:f4:7a:47:15:21:99:ac:97:8e:a1:04:fd:1f: f0:4f:27:71:63:74:f5:2f:15:1f:29:1f:5a:19:86:19:cd:b8: 45:3d:30:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt4NQByiKSlxRQ21Vn8/MMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz NThkMTkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjY5MDI3ZTAzOGRiODBiZWE1YjUzNTQ2Y2NmNDhjZjRmMjk3Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAublb9N+9khcSYeprNd/uDFYt13ss iKKDVZ642yGHm653V+ZkUIMRuTY0CqWGVPE5aV+pKPqE0WtI3C9ILxrnVPQO1nj+ JYo/ruolaCe8/9WceoKT33WUWbPfvb4G0XbznGvanDk1HWtMdj7RVK2RFfIsn5MD +kqEehuOxO/wfcah+gJ47DJXpxmNlAEKRPSF9DqI4QxFkLxasywsf606dshPPgXv sF4VA+AkMY5z3B1s3oLe6NjgwcsGIhGhZeRfhUWKHEdRKvA1+So+igEOnn6TwNsT gbm1JS0wBYqwweSwnM8Ng8M+ydqrQucmFgxjq2Ra6FMffC/OZz97uEUCEwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFOtpAn4DjbgL6ltTVGzPSM9PKXzCMB8GA1UdIwQY MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt YTU2YmRmYWRiODFlLzEvNjJrQ2ZnT051QXZxVzFOVWJNOUl6MDhwZk1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwAqDYFA X/8DBwAqDYFAYAAwEgMHACoNgUBv/wMHACoNgUBwAAMHACoNgUCAADANBgkqhkiG 9w0BAQsFAAOCAQEAkCq4odnau3SztTVaJvtvEq8NymTP1OEUMZ9bpxb1M5at0O+V T3qgD30E7T6m2O12rv9YDc6l5lnEKPpaSPKjXO3P+teVeqBlPQzkKJOUQmt11//k IJjtunlHyBYAMxTkpv0tmP6jIuw0TnCIxvHvEICiUqg1JAl6i42ZCrcYc9Nhm/dX fiKWA0/Doj+p+Kpx1r8nZHrbLHPW5VkD6XtRZqOFrAMs5F7ZvnWqk3hSV3+CSVfa oeJ7GM1a0NcirP5syR1C/rgIDIVATRoofhTxyLI//qx15VPtUHe7LLj0ekcVIZms l46hBP0f8E8ncWN09S8VHykfWhmGGc24RT0wNw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:04 2026 by rpki-client