This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/I96PBjrYup8aPv2pR7TdLFEHJHk.roa File: I96PBjrYup8aPv2pR7TdLFEHJHk.roa (raw, json) Hash identifier: WYpW9pgQH+tfWd38rRUvQVayJbzQqdLy/3DGSA3PmaA= Subject key identifier: 23:DE:8F:06:3A:D8:BA:9F:1A:3E:FD:A9:47:B4:DD:2C:51:07:24:79 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019BBBB59892DD124E59A3F575E38B23E0C0 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/I96PBjrYup8aPv2pR7TdLFEHJHk.roa Signing time: Wed 14 Jan 2026 08:53:18 +0000 ROA not before: Wed 14 Jan 2026 08:53:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43832 IP address blocks: 62.76.62.0/23 maxlen: 23 62.76.62.0/24 maxlen: 24 62.76.76.0/23 maxlen: 23 62.76.76.0/24 maxlen: 24 193.232.93.0/24 maxlen: 24 193.232.124.0/24 maxlen: 24 194.85.104.0/24 maxlen: 24 194.85.108.0/24 maxlen: 24 2001:67c:1442::/48 maxlen: 48 2001:67c:1444::/48 maxlen: 48 2001:6d0:d6::/48 maxlen: 48 2001:6d0:6d0::/48 maxlen: 48 2001:6d0:ffb9::/48 maxlen: 48 2001:6d0:fffc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:b5:98:92:dd:12:4e:59:a3:f5:75:e3:8b:23:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 14 08:53:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23de8f063ad8ba9f1a3efda947b4dd2c51072479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:f3:d0:d7:b1:79:be:45:56:6c:e4:5e:eb: 05:6d:25:26:a2:3d:ee:11:92:69:55:43:14:9d:05: d8:73:77:2f:7b:85:b6:b7:0b:93:f1:2c:20:89:14: 97:2c:02:57:79:9a:49:de:18:94:8c:b4:e3:a2:8d: 53:7a:b7:6d:8d:d2:98:e1:50:da:ae:80:9b:2b:d4: fe:09:9b:fc:96:be:9b:37:59:36:f8:f4:b4:42:06: 1a:e2:c3:8c:df:d4:27:7e:2a:da:4b:f2:f0:11:44: df:15:ae:82:7a:15:d5:25:87:c0:f6:1e:fe:f4:b9: 3f:71:e9:ff:3b:06:5b:4c:13:a8:91:19:9a:a2:2a: d2:1c:67:2d:33:41:fb:d1:ef:7c:9f:2e:ea:89:02: f3:82:0b:2f:25:a6:ad:71:61:2b:d7:a6:aa:81:d9: 6b:57:14:9a:e9:7d:af:20:f3:25:cb:45:28:e8:60: e2:7d:4b:f6:43:e3:2d:fd:7a:fd:87:b7:b5:b5:12: 57:9d:76:17:a3:d1:45:74:8b:4a:d4:1e:8c:1d:6c: e2:b0:4b:6d:ef:da:07:99:09:be:27:16:11:f3:61: 1a:c9:9e:f9:a1:ce:c6:af:73:4e:0e:8a:bf:3b:c0: f3:d0:04:b3:88:26:a0:cd:06:ad:f3:67:ce:cf:2f: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DE:8F:06:3A:D8:BA:9F:1A:3E:FD:A9:47:B4:DD:2C:51:07:24:79 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/I96PBjrYup8aPv2pR7TdLFEHJHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.62.0/23 62.76.76.0/23 193.232.93.0/24 193.232.124.0/24 194.85.104.0/24 194.85.108.0/24 IPv6: 2001:67c:1442::/48 2001:67c:1444::/48 2001:6d0:d6::/48 2001:6d0:6d0::/48 2001:6d0:ffb9::/48 2001:6d0:fffc::/48 Signature Algorithm: sha256WithRSAEncryption 0b:95:e9:96:ab:8c:0a:77:9b:a4:76:85:18:4e:d0:d0:42:44: 1f:87:e5:52:0b:cd:a4:aa:d9:78:31:9b:89:f6:db:94:48:c3: 52:6f:ef:c2:48:d1:52:cb:79:00:d2:b1:a6:4a:1b:04:38:cb: a6:04:c3:6f:a4:46:76:d4:4f:2c:6b:33:7d:89:97:64:c5:67: b2:df:56:38:22:4b:08:7d:06:89:9b:02:91:0d:6b:3b:51:7f: 76:b5:c5:57:6c:3a:38:ad:ee:2f:e6:5d:86:48:6d:4a:fd:1d: 8c:b7:b4:8f:af:d3:ff:d7:9d:0f:c5:2b:d3:75:e7:6e:d9:68: e5:2e:54:f1:ee:82:74:f9:20:1d:66:2b:b0:63:82:4b:a7:57: 31:a1:93:c2:d1:24:65:63:1c:b1:2c:3e:32:db:96:d2:de:ab: 09:b1:14:ef:b8:d6:e7:4e:ac:14:83:b6:dd:36:01:16:bb:38: 76:ed:79:06:98:39:fd:65:40:48:5f:8d:61:c8:61:bf:6f:f3: ad:2e:0d:94:07:8f:ee:7a:64:37:b8:73:82:c0:66:a2:5b:1d: 2b:37:e4:19:34:48:a8:7c:ff:1c:4e:2d:e6:36:53:dd:83:ea: fa:3d:32:7b:89:e2:a2:ac:84:f4:9f:0b:e8:cb:89:12:8b:34: 3f:77:bc:24 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZu7tZiS3RJOWaP1deOLI+DAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTE0MDg1MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2RlOGYwNjNhZDhiYTlmMWEzZWZkYTk0N2I0ZGQyYzUxMDcyNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHrz0Nexeb5FVmzkXusFbSUmoj3u EZJpVUMUnQXYc3cve4W2twuT8SwgiRSXLAJXeZpJ3hiUjLTjoo1TerdtjdKY4VDa roCbK9T+CZv8lr6bN1k2+PS0QgYa4sOM39QnfiraS/LwEUTfFa6CehXVJYfA9h7+ 9Lk/cen/OwZbTBOokRmaoirSHGctM0H70e98ny7qiQLzggsvJaatcWEr16aqgdlr VxSa6X2vIPMly0Uo6GDifUv2Q+Mt/Xr9h7e1tRJXnXYXo9FFdItK1B6MHWzisEtt 79oHmQm+JxYR82EayZ75oc7Gr3NODoq/O8Dz0ASziCagzQat82fOzy8AVQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFCPejwY62LqfGj79qUe03SxRByR5MB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvSTk2UEJqcll1cDhhUHYycFI3VGRMRkVISkhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajAqBAIAATAkAwQBPkw+AwQB PkxMAwQAwehdAwQAweh8AwQAwlVoAwQAwlVsMDwEAgACMDYDBwAgAQZ8FEIDBwAg AQZ8FEQDBwAgAQbQANYDBwAgAQbQBtADBwAgAQbQ/7kDBwAgAQbQ//wwDQYJKoZI hvcNAQELBQADggEBAAuV6ZarjAp3m6R2hRhO0NBCRB+H5VILzaSq2Xgxm4n225RI w1Jv78JI0VLLeQDSsaZKGwQ4y6YEw2+kRnbUTyxrM32Jl2TFZ7LfVjgiSwh9Bomb ApENaztRf3a1xVdsOjit7i/mXYZIbUr9HYy3tI+v0//XnQ/FK9N1527ZaOUuVPHu gnT5IB1mK7BjgkunVzGhk8LRJGVjHLEsPjLbltLeqwmxFO+41udOrBSDtt02ARa7 OHbteQaYOf1lQEhfjWHIYb9v860uDZQHj+56ZDe4c4LAZqJbHSs35Bk0SKh8/xxO LeY2U92D6vo9MnuJ4qKshPSfC+jLiRKLND93vCQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:15 2026 by rpki-client