This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/cnMksPM8qHUJS7PE1xwm-IJZIEs.roa File: cnMksPM8qHUJS7PE1xwm-IJZIEs.roa (raw, json) Hash identifier: F0Xawui/3p0KQ1PsdF0IPS6D5QX+wIN0HvSrMKPyjOo= Subject key identifier: 72:73:24:B0:F3:3C:A8:75:09:4B:B3:C4:D7:1C:26:F8:82:59:20:4B Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8 Certificate serial: 019B79ED5C7C8B7E47D48DA3E1892110B00D Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/cnMksPM8qHUJS7PE1xwm-IJZIEs.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 62.68.84.0/24 maxlen: 24 92.249.7.0/24 maxlen: 24 2a14:12c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5c:7c:8b:7e:47:d4:8d:a3:e1:89:21:10:b0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=727324b0f33ca875094bb3c4d71c26f88259204b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:b6:48:80:38:bd:b2:59:86:c9:b6:a5:61: d3:08:13:cb:b1:c0:0e:a9:35:c9:47:26:7f:17:aa: d4:94:2f:75:ae:b0:f7:37:08:39:92:38:38:70:fd: 64:2c:91:c4:16:66:77:e9:d1:3e:04:27:ca:f2:ed: ef:20:37:73:7b:71:57:48:1d:53:e3:bd:35:fd:7b: c8:73:c3:29:61:b5:e0:50:93:22:e4:bf:97:3b:bc: b3:0c:0f:d3:39:a5:53:f7:f5:42:94:5f:81:8f:b6: 29:83:ef:83:16:ff:d4:ef:d7:b3:90:42:20:32:d9: f0:e6:10:b7:f2:6f:21:6c:34:09:3b:ab:9f:61:e9: 7a:00:d5:c7:ea:99:4a:e5:89:b4:f3:21:c1:c9:d8: c7:0e:31:0a:95:d6:c0:d4:25:63:03:3f:b9:ad:04: f7:d3:00:44:61:57:c7:24:6d:4f:6c:54:07:b7:6e: b6:2a:9a:13:6a:96:f1:0a:d9:41:71:1e:a5:97:a8: a6:45:10:4a:27:61:4e:e9:01:4f:e2:03:89:41:22: 86:ca:22:05:ae:52:d1:6e:fb:d3:27:6f:c8:6c:75: 2e:6c:ac:4b:45:a9:b5:30:84:8d:66:78:b4:92:2d: b5:11:e9:fc:5c:51:db:c9:6d:20:2c:08:3f:c6:81: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:24:B0:F3:3C:A8:75:09:4B:B3:C4:D7:1C:26:F8:82:59:20:4B X509v3 Authority Key Identifier: keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/cnMksPM8qHUJS7PE1xwm-IJZIEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.84.0/24 92.249.7.0/24 IPv6: 2a14:12c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:98:11:3e:05:91:d5:9c:4e:6b:92:5b:80:ab:4f:b7:31:03: f0:2b:bd:23:84:8e:73:f8:50:ce:9f:25:e8:05:63:4c:82:99: e7:10:00:64:c2:92:96:5e:c1:34:6a:9e:a2:2c:6d:ae:80:07: 62:09:0a:d0:4b:bc:6f:a2:56:96:c0:cb:ee:eb:bc:98:3a:3d: c9:a6:cc:43:76:ff:57:2d:57:d7:79:cd:57:db:46:3a:0b:f6: 24:22:cb:57:f1:be:8e:5a:35:23:60:85:4a:79:77:9c:f2:a5: 63:6d:63:4c:50:06:28:c9:fb:66:f4:02:0d:71:47:c4:08:d0: 7f:9e:e3:57:70:be:09:51:46:00:83:87:15:c8:dd:bc:7f:23: f9:98:ad:3a:7f:f1:c5:54:fa:3d:0f:4a:43:f2:3b:03:c1:af: 48:5e:40:e8:ed:9c:1e:3d:fc:15:80:e3:4e:1e:51:6d:48:5d: cf:91:3a:81:8e:a2:b0:ee:fc:f1:cf:67:f8:24:75:57:66:3b: ee:23:57:a7:de:8a:10:4c:ea:71:8b:99:f7:b7:5d:75:af:e1: f7:cd:e9:36:71:59:94:0e:30:82:73:26:f6:23:3a:65:c0:cd: 58:7d:23:8c:7f:c0:76:a4:a5:a3:2e:11:73:08:d8:c2:71:7c: d7:7a:d5:17 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Vx8i35H1I2j4YkhELANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy ZTM0ZjgwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjczMjRiMGYzM2NhODc1MDk0YmIzYzRkNzFjMjZmODgyNTkyMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzia2SIA4vbJZhsm2pWHTCBPLscAO qTXJRyZ/F6rUlC91rrD3Nwg5kjg4cP1kLJHEFmZ36dE+BCfK8u3vIDdze3FXSB1T 4701/XvIc8MpYbXgUJMi5L+XO7yzDA/TOaVT9/VClF+Bj7Ypg++DFv/U79ezkEIg Mtnw5hC38m8hbDQJO6ufYel6ANXH6plK5Ym08yHBydjHDjEKldbA1CVjAz+5rQT3 0wBEYVfHJG1PbFQHt262KpoTapbxCtlBcR6ll6imRRBKJ2FO6QFP4gOJQSKGyiIF rlLRbvvTJ2/IbHUubKxLRam1MISNZni0ki21Een8XFHbyW0gLAg/xoEmjwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHJzJLDzPKh1CUuzxNccJviCWSBLMB8GA1UdIwQY MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt MGIwMmE0NzMyNDc5LzEvY25Na3NQTThxSFVKUzdQRTF4d20tSUpaSUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5 LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAPkRUAwQA XPkHMA0EAgACMAcDBQAqFBLAMA0GCSqGSIb3DQEBCwUAA4IBAQBJmBE+BZHVnE5r kluAq0+3MQPwK70jhI5z+FDOnyXoBWNMgpnnEABkwpKWXsE0ap6iLG2ugAdiCQrQ S7xvolaWwMvu67yYOj3JpsxDdv9XLVfXec1X20Y6C/YkIstX8b6OWjUjYIVKeXec 8qVjbWNMUAYoyftm9AINcUfECNB/nuNXcL4JUUYAg4cVyN28fyP5mK06f/HFVPo9 D0pD8jsDwa9IXkDo7ZwePfwVgONOHlFtSF3PkTqBjqKw7vzxz2f4JHVXZjvuI1en 3ooQTOpxi5n3t111r+H3zek2cVmUDjCCcyb2IzplwM1YfSOMf8B2pKWjLhFzCNjC cXzXetUX -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:31 2026 by rpki-client