This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/K2pv1joH33JGXTFgdf1GvHFNyOI.roa File: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (raw, json) Hash identifier: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0= Subject key identifier: 2B:6A:6F:D6:3A:07:DF:72:46:5D:31:60:75:FD:46:BC:71:4D:C8:E2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B7B36D0686256E20D319C76B5401A1DD6 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/K2pv1joH33JGXTFgdf1GvHFNyOI.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61121 IP address blocks: 62.181.50.0/23 maxlen: 23 62.181.50.0/24 maxlen: 24 62.181.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d0:68:62:56:e2:0d:31:9c:76:b5:40:1a:1d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b6a6fd63a07df72465d316075fd46bc714dc8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:3a:51:b7:bb:af:91:2a:62:69:27:0f:0f: 07:bb:ce:6a:20:ec:52:84:e5:d1:9d:e1:f0:1f:91: 21:db:92:2b:52:c5:85:6e:91:b5:91:fd:b1:85:f6: f7:c0:00:5c:c5:86:3c:d5:d8:bd:b3:f3:79:a6:be: 11:2f:44:44:72:9c:36:8f:65:52:86:da:ce:09:1d: 34:6e:b6:b2:44:12:99:f1:3a:61:6d:c9:98:ab:27: fd:fb:21:0f:5a:44:1a:e1:e7:0c:d3:97:21:c8:c4: 44:fa:6f:ad:d5:14:3c:c1:96:19:4e:10:76:b6:b4: 6a:d2:11:6a:99:43:ce:18:12:db:d7:1a:92:eb:4d: f5:b3:53:19:29:3f:a9:ce:76:8c:59:cd:2b:d2:69: b6:92:41:8a:42:09:cb:34:03:9f:82:ac:2c:59:82: f1:28:c1:c1:d3:20:6d:14:d9:d3:7f:af:c8:46:aa: 2e:1e:6c:bf:73:e4:96:e1:65:a6:8c:28:d9:5b:ec: 15:1f:0c:78:dc:f8:c5:eb:f5:4c:45:5e:86:b8:82: 1e:60:c1:e9:88:90:73:5b:53:47:b9:02:29:4c:34: 75:e3:7c:9e:1a:2b:f8:97:a2:cf:be:7f:e0:e4:58: 82:40:6b:34:f1:64:de:7c:f5:c0:8d:46:c9:61:ae: ad:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:6F:D6:3A:07:DF:72:46:5D:31:60:75:FD:46:BC:71:4D:C8:E2 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/K2pv1joH33JGXTFgdf1GvHFNyOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.50.0/23 Signature Algorithm: sha256WithRSAEncryption 22:93:3b:56:dc:81:a5:fa:94:98:32:54:33:55:0e:40:ec:b4: bc:c8:1b:2e:1c:c7:ca:42:50:5a:1b:80:5e:ce:0c:47:e3:74: 51:37:8c:ff:de:93:fd:95:93:d6:9d:2b:ec:7f:fd:0c:85:9c: 2e:1c:34:af:26:0b:9f:c3:4a:0d:2c:37:96:cc:43:59:65:9c: 60:5f:ec:c9:07:4d:33:b6:bd:1e:4b:89:c9:e4:57:69:36:e3: 5d:df:4f:97:e9:7b:67:56:98:f2:9b:c0:c7:bc:fe:42:5d:d5: 0c:c3:e4:ac:24:b0:50:25:f7:83:54:9c:2d:9e:39:5d:8f:52: 24:b5:f1:95:a7:77:a3:69:3c:24:88:bb:ad:09:82:3b:ba:04: ca:57:9e:1e:61:86:59:f9:b8:b1:84:92:b9:5f:92:f1:41:a2: a9:9f:5e:3a:6e:99:35:98:2d:a0:19:7c:af:c8:b5:b0:60:f9: a2:b5:e9:bf:ec:fa:75:f7:85:7c:e3:16:4b:98:31:44:68:a1: 5e:6e:a8:b1:c1:8c:4b:fd:12:90:f5:43:3e:ff:be:0f:4d:af: d0:bd:ca:ac:a9:40:7b:7f:27:0a:49:d7:4f:2a:e2:a9:78:e4: fe:6d:eb:3e:39:cc:b7:9a:c0:9a:5a:59:87:9d:b1:7e:15:17: 40:05:2a:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtBoYlbiDTGcdrVAGh3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjZhNmZkNjNhMDdkZjcyNDY1ZDMxNjA3NWZkNDZiYzcxNGRjOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vc6Ube7r5EqYmknDw8Hu85qIOxS hOXRneHwH5Eh25IrUsWFbpG1kf2xhfb3wABcxYY81di9s/N5pr4RL0REcpw2j2VS htrOCR00brayRBKZ8TphbcmYqyf9+yEPWkQa4ecM05chyMRE+m+t1RQ8wZYZThB2 trRq0hFqmUPOGBLb1xqS6031s1MZKT+pznaMWc0r0mm2kkGKQgnLNAOfgqwsWYLx KMHB0yBtFNnTf6/IRqouHmy/c+SW4WWmjCjZW+wVHwx43PjF6/VMRV6GuIIeYMHp iJBzW1NHuQIpTDR143yeGiv4l6LPvn/g5FiCQGs08WTefPXAjUbJYa6tVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCtqb9Y6B99yRl0xYHX9RrxxTcjiMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvSzJwdjFqb0gzM0pHWFRGZ2RmMUd2SEZOeU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPrUyMA0G CSqGSIb3DQEBCwUAA4IBAQAikztW3IGl+pSYMlQzVQ5A7LS8yBsuHMfKQlBaG4Be zgxH43RRN4z/3pP9lZPWnSvsf/0MhZwuHDSvJgufw0oNLDeWzENZZZxgX+zJB00z tr0eS4nJ5FdpNuNd30+X6XtnVpjym8DHvP5CXdUMw+SsJLBQJfeDVJwtnjldj1Ik tfGVp3ejaTwkiLutCYI7ugTKV54eYYZZ+bixhJK5X5LxQaKpn146bpk1mC2gGXyv yLWwYPmitem/7Pp194V84xZLmDFEaKFebqixwYxL/RKQ9UM+/74PTa/QvcqsqUB7 fycKSddPKuKpeOT+bes+Ocy3msCaWlmHnbF+FRdABSpE -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:17 2026 by rpki-client