This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/j8xEJpTKhKt1AHgegniQhPSol8M.roa File: j8xEJpTKhKt1AHgegniQhPSol8M.roa (raw, json) Hash identifier: mHBzFVfv7R2Ysx6/8+IyLDpDA5DEJN6keM4dvpvoAQ0= Subject key identifier: 8F:CC:44:26:94:CA:84:AB:75:00:78:1E:82:78:90:84:F4:A8:97:C3 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019A53E27C1E7DB54A999D53A938AAB87243 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/j8xEJpTKhKt1AHgegniQhPSol8M.roa Signing time: Wed 05 Nov 2025 11:59:03 +0000 ROA not before: Wed 05 Nov 2025 11:59:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51026 IP address blocks: 62.220.126.0/24 maxlen: 24 62.220.127.0/24 maxlen: 24 81.12.24.0/22 maxlen: 24 81.12.24.0/24 maxlen: 24 81.12.25.0/24 maxlen: 24 81.12.26.0/24 maxlen: 24 81.12.27.0/24 maxlen: 24 81.12.30.0/24 maxlen: 24 81.12.31.0/24 maxlen: 24 87.107.6.0/23 maxlen: 24 87.107.8.0/23 maxlen: 24 87.107.108.0/23 maxlen: 24 87.107.110.0/23 maxlen: 24 87.107.110.0/24 maxlen: 24 87.107.111.0/24 maxlen: 24 87.107.144.0/24 maxlen: 24 87.107.152.0/24 maxlen: 24 87.107.153.0/24 maxlen: 24 87.107.166.0/24 maxlen: 24 87.107.167.0/24 maxlen: 24 87.107.174.0/24 maxlen: 24 87.107.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:e2:7c:1e:7d:b5:4a:99:9d:53:a9:38:aa:b8:72:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Nov 5 11:59:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fcc442694ca84ab7500781e82789084f4a897c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:5d:42:c1:0c:b5:45:47:4e:1c:7c:3d:29: ab:ef:f2:09:80:84:7f:0a:10:3a:10:36:59:da:25: f6:cc:ac:88:42:84:40:90:d0:81:31:40:ea:94:1a: 15:02:7f:d8:ea:37:29:8f:8d:4b:e8:15:27:b3:33: ec:4b:39:11:c6:61:85:c5:da:3d:e3:03:74:1c:87: e2:ed:b8:36:49:b9:6f:5b:91:2a:96:f1:06:e2:51: c6:c7:c2:1e:ba:0a:37:3f:ab:b1:43:ba:7e:cb:d4: 9b:23:51:de:95:93:3c:0d:d6:f8:86:ce:e2:ed:7c: 1b:cf:43:ef:f0:21:37:97:47:5f:e3:88:83:f5:7d: f7:bd:ee:f0:0b:48:68:05:e5:56:15:90:d1:48:66: b5:9b:f8:1c:84:32:7e:07:28:94:2a:cf:c7:0b:c3: 13:4d:c9:49:89:63:db:23:ef:7d:f8:bf:84:5c:ce: ad:e5:27:0f:37:43:ce:64:e8:3a:63:0f:56:c6:f2: 84:d6:72:cb:f3:9b:24:63:8e:25:8f:17:76:e1:27: 69:d0:65:43:fb:aa:48:90:99:43:62:9f:99:fb:16: 93:c8:d5:c2:8e:0a:ae:ee:4b:08:d7:d8:26:f0:ae: db:de:ec:63:f3:0a:33:00:43:bf:7b:e6:03:6e:c4: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CC:44:26:94:CA:84:AB:75:00:78:1E:82:78:90:84:F4:A8:97:C3 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/j8xEJpTKhKt1AHgegniQhPSol8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.126.0/23 81.12.24.0/22 81.12.30.0/23 87.107.6.0-87.107.9.255 87.107.108.0/22 87.107.144.0/24 87.107.152.0/23 87.107.166.0/23 87.107.174.0/23 Signature Algorithm: sha256WithRSAEncryption 05:61:4d:1f:4f:55:60:84:46:55:97:6a:06:7b:8b:46:d7:fb: 5c:e0:13:52:c4:d6:23:53:f1:dc:9d:f9:c9:e1:96:da:c2:c4: 8e:80:1f:98:c2:c1:d9:ce:18:f8:9b:5e:39:99:c4:f0:82:91: 0c:fd:83:84:f2:49:62:e3:3a:f3:74:94:92:f3:9a:c0:6f:9e: 55:d4:68:f8:43:59:c0:d2:3b:c7:43:0b:4e:cc:55:40:fc:1f: 55:51:8b:8e:79:76:67:77:97:cc:df:74:21:51:0d:0f:11:56: 85:a4:85:8d:7c:7f:8b:11:96:70:d8:0e:53:47:12:5b:32:6e: 4f:da:55:4f:e7:6c:e9:78:ef:a4:72:b8:96:2f:61:14:65:8d: 8d:a9:25:cf:e4:3d:ef:25:b2:85:0c:21:8c:f7:92:a2:dd:70: 21:1a:fe:4c:53:7e:06:eb:9d:67:dd:05:5e:8d:6c:86:ff:0d: db:96:a4:c8:31:1b:36:92:05:0f:e6:5e:49:ad:2c:ee:f6:0e: 04:1f:7e:51:a4:9a:70:37:7b:06:83:d6:72:cd:2c:5b:e8:0a: 0d:a2:6e:6b:13:6a:5b:ab:71:04:7b:09:d4:20:22:c1:99:76: 07:1d:37:33:f9:0f:5e:af:80:9a:4e:d9:e2:3b:7a:08:d5:f0: be:2b:25:6c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZpT4nwefbVKmZ1TqTiquHJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjUxMTA1MTE1OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmNjNDQyNjk0Y2E4NGFiNzUwMDc4MWU4Mjc4OTA4NGY0YTg5N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLhdQsEMtUVHThx8PSmr7/IJgIR/ ChA6EDZZ2iX2zKyIQoRAkNCBMUDqlBoVAn/Y6jcpj41L6BUnszPsSzkRxmGFxdo9 4wN0HIfi7bg2SblvW5EqlvEG4lHGx8Ieugo3P6uxQ7p+y9SbI1HelZM8Ddb4hs7i 7Xwbz0Pv8CE3l0df44iD9X33ve7wC0hoBeVWFZDRSGa1m/gchDJ+ByiUKs/HC8MT TclJiWPbI+99+L+EXM6t5ScPN0POZOg6Yw9WxvKE1nLL85skY44ljxd24Sdp0GVD +6pIkJlDYp+Z+xaTyNXCjgqu7ksI19gm8K7b3uxj8wozAEO/e+YDbsR9MwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFI/MRCaUyoSrdQB4HoJ4kIT0qJfDMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvajh4RUpwVEtoS3QxQUhnZWduaVFoUFNvbDhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBPtx+AwQC UQwYAwQBUQweMAwDBAFXawYDBAFXawgDBAJXa2wDBABXa5ADBAFXa5gDBAFXa6YD BAFXa64wDQYJKoZIhvcNAQELBQADggEBAAVhTR9PVWCERlWXagZ7i0bX+1zgE1LE 1iNT8dyd+cnhltrCxI6AH5jCwdnOGPibXjmZxPCCkQz9g4TySWLjOvN0lJLzmsBv nlXUaPhDWcDSO8dDC07MVUD8H1VRi455dmd3l8zfdCFRDQ8RVoWkhY18f4sRlnDY DlNHElsybk/aVU/nbOl476RyuJYvYRRljY2pJc/kPe8lsoUMIYz3kqLdcCEa/kxT fgbrnWfdBV6NbIb/DduWpMgxGzaSBQ/mXkmtLO72DgQfflGkmnA3ewaD1nLNLFvo Cg2ibmsTalurcQR7CdQgIsGZdgcdNzP5D16vgJpO2eI7egjV8L4rJWw= -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:09 2025 by rpki-client