This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V4ixdPeB8e7i-qI-ftMCopFZkwM.roa File: V4ixdPeB8e7i-qI-ftMCopFZkwM.roa (raw, json) Hash identifier: EXBmNGITC+ygcEGdx8Fl0i0aLep2GCQAlbXY/LKPMcA= Subject key identifier: 57:88:B1:74:F7:81:F1:EE:E2:FA:A2:3E:7E:D3:02:A2:91:59:93:03 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F150467CE7BFDFA333F853B83EF044D Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V4ixdPeB8e7i-qI-ftMCopFZkwM.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204544 IP address blocks: 62.220.126.0/23 maxlen: 24 81.12.24.0/22 maxlen: 24 81.12.30.0/23 maxlen: 24 87.107.6.0/23 maxlen: 24 87.107.8.0/23 maxlen: 24 87.107.144.0/24 maxlen: 24 87.107.152.0/23 maxlen: 24 87.107.166.0/23 maxlen: 24 87.107.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:04:67:ce:7b:fd:fa:33:3f:85:3b:83:ef:04:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5788b174f781f1eee2faa23e7ed302a291599303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:5c:a9:05:e2:14:26:5a:d8:32:86:98:d2: 17:2b:a4:ef:45:ba:06:47:06:86:60:89:e5:58:47: 08:c5:a7:01:0b:92:00:ed:9a:eb:45:1d:03:88:24: 55:45:98:7e:d8:40:7b:3d:9e:35:f3:99:1f:e1:7d: 8f:67:e7:8d:18:11:71:a9:30:25:a4:31:00:2d:fd: 30:68:13:5a:ce:f1:cf:e3:80:d1:65:d5:b5:75:41: 60:8c:0f:25:9c:29:3c:1b:8d:5a:26:b5:29:c9:36: 36:40:9c:1c:4f:2e:99:65:ce:cf:da:8e:15:3d:f5: e4:e3:69:d4:4e:cf:aa:79:7a:28:18:a3:a7:61:57: e5:68:e6:9f:40:18:17:b9:43:7e:d4:a6:1c:75:36: 4f:75:6f:52:30:54:22:ed:49:70:39:27:c7:8f:05: 1a:e8:c3:ee:60:ac:da:ee:45:67:c1:f2:9b:32:d2: 40:05:b5:4a:4e:79:d6:4c:80:ff:1d:76:86:20:a9: 53:13:ab:fd:8e:32:81:09:b6:3b:c9:f9:09:f4:ce: 73:f7:35:54:5f:62:b3:93:d1:ee:6f:6a:26:e7:ce: 40:f0:5d:d3:42:40:10:26:a0:5e:1e:cd:f7:a2:48: 82:19:06:1e:42:3c:4f:0c:98:1a:f1:ce:62:d1:72: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:88:B1:74:F7:81:F1:EE:E2:FA:A2:3E:7E:D3:02:A2:91:59:93:03 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V4ixdPeB8e7i-qI-ftMCopFZkwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.126.0/23 81.12.24.0/22 81.12.30.0/23 87.107.6.0-87.107.9.255 87.107.144.0/24 87.107.152.0/23 87.107.166.0/23 87.107.174.0/23 Signature Algorithm: sha256WithRSAEncryption bd:5b:32:9e:02:94:a8:a5:30:e9:45:e5:2d:11:7e:a7:d2:65: 79:e0:0c:d9:a9:96:e5:b9:4d:07:e4:7b:64:2d:f6:4a:dc:de: 77:cd:5a:6c:5e:a0:75:6b:8d:ff:bf:fe:aa:7d:72:8b:ff:ae: 1b:1f:a1:23:16:6f:a4:98:13:5a:69:6c:f7:d7:88:38:bb:c9: 1f:ad:62:7c:a9:20:15:f5:40:75:c0:ff:fb:d0:01:9e:57:82: d0:ff:62:74:fd:5b:a0:65:8e:d8:3f:fb:57:1c:b9:7a:0b:c2: 11:6d:2c:6e:20:0f:01:26:0f:97:72:2a:05:8b:0c:65:99:e4: 1b:52:55:0d:ed:59:77:d4:0a:b7:86:1f:45:9b:b3:a4:ac:1e: 61:b8:97:73:93:15:d6:fe:b9:f3:0c:83:53:df:00:18:5b:1b: 1a:e2:97:2d:ee:8f:85:7c:fb:21:31:5f:3d:7e:94:c8:ad:ea: fa:f6:e5:10:7f:db:f3:68:5d:b8:06:5a:22:aa:17:f9:af:5b: 16:96:11:8c:92:61:21:68:8b:75:2c:b0:9f:80:71:fe:64:fc: 3f:b7:ee:8f:8c:e1:97:84:dd:d8:f0:60:91:f3:8b:f9:bc:b7: b3:d3:fb:4c:d0:a0:46:9f:5b:aa:17:55:d0:7e:2a:a0:21:78: 2f:b6:45:27 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt/FQRnznv9+jM/hTuD7wRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Nzg4YjE3NGY3ODFmMWVlZTJmYWEyM2U3ZWQzMDJhMjkxNTk5MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvblcqQXiFCZa2DKGmNIXK6TvRboG RwaGYInlWEcIxacBC5IA7ZrrRR0DiCRVRZh+2EB7PZ4185kf4X2PZ+eNGBFxqTAl pDEALf0waBNazvHP44DRZdW1dUFgjA8lnCk8G41aJrUpyTY2QJwcTy6ZZc7P2o4V PfXk42nUTs+qeXooGKOnYVflaOafQBgXuUN+1KYcdTZPdW9SMFQi7UlwOSfHjwUa 6MPuYKza7kVnwfKbMtJABbVKTnnWTID/HXaGIKlTE6v9jjKBCbY7yfkJ9M5z9zVU X2Kzk9Hub2om585A8F3TQkAQJqBeHs33okiCGQYeQjxPDJga8c5i0XI3UQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFFeIsXT3gfHu4vqiPn7TAqKRWZMDMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvVjRpeGRQZUI4ZTdpLXFJLWZ0TUNvcEZaa3dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBPtx+AwQC UQwYAwQBUQweMAwDBAFXawYDBAFXawgDBABXa5ADBAFXa5gDBAFXa6YDBAFXa64w DQYJKoZIhvcNAQELBQADggEBAL1bMp4ClKilMOlF5S0RfqfSZXngDNmpluW5TQfk e2Qt9krc3nfNWmxeoHVrjf+//qp9cov/rhsfoSMWb6SYE1ppbPfXiDi7yR+tYnyp IBX1QHXA//vQAZ5XgtD/YnT9W6Bljtg/+1ccuXoLwhFtLG4gDwEmD5dyKgWLDGWZ 5BtSVQ3tWXfUCreGH0Wbs6SsHmG4l3OTFdb+ufMMg1PfABhbGxrily3uj4V8+yEx Xz1+lMit6vr25RB/2/NoXbgGWiKqF/mvWxaWEYySYSFoi3UssJ+Acf5k/D+37o+M 4ZeE3djwYJHzi/m8t7PT+0zQoEafW6oXVdB+KqAheC+2RSc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:39 2026 by rpki-client