This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nWo_YS4-rTEZWs2wQQ9JJ5C-KZc.roa File: nWo_YS4-rTEZWs2wQQ9JJ5C-KZc.roa (raw, json) Hash identifier: /nP2//4kV2UZqdWHCWsR17cC6L3a1eWhQaGoT1PDAOM= Subject key identifier: 9D:6A:3F:61:2E:3E:AD:31:19:5A:CD:B0:41:0F:49:27:90:BE:29:97 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14F7F13D18880E6D428EC64560EAA5 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nWo_YS4-rTEZWs2wQQ9JJ5C-KZc.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24631 IP address blocks: 62.220.97.0/24 maxlen: 24 62.220.102.0/24 maxlen: 24 87.107.102.0/24 maxlen: 24 87.107.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f7:f1:3d:18:88:0e:6d:42:8e:c6:45:60:ea:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d6a3f612e3ead31195acdb0410f492790be2997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:c3:29:85:0e:b0:65:b3:3a:08:b7:2c:a7: 59:9c:61:84:79:97:d2:a0:cb:68:76:c3:33:ab:64: 96:d1:84:0a:5c:91:fc:a8:ec:87:40:9c:3b:ba:b4: 71:73:32:0c:a3:6b:3c:d1:94:f1:61:99:14:cf:d0: aa:f7:d5:6d:df:72:85:7e:e8:ab:ec:df:38:5e:23: e6:db:3b:35:4a:bc:f5:3b:ff:bb:70:fa:e1:85:67: 29:c6:8f:34:24:f8:84:c0:31:5d:6a:be:35:c8:50: d1:d9:dc:e8:55:e2:e1:51:6b:78:5f:47:c1:d4:bf: 6f:4d:f9:e3:c8:89:0f:83:c2:13:38:cf:2f:9b:89: 6c:34:69:da:b7:99:e3:f5:9d:4f:93:28:9d:46:9d: 0e:24:9c:e4:a6:f4:6c:2c:42:47:66:7e:83:2d:e8: 40:b2:47:20:95:18:f1:a2:22:0f:ee:79:04:61:40: 75:53:f3:1b:43:6a:d7:c9:e8:6c:4d:4a:b6:19:2c: 2f:c2:95:ca:c4:8a:28:34:11:41:8e:a0:c8:53:a7: a7:27:f0:6e:43:e8:d0:0d:1f:ed:28:b6:0a:5b:58: 5e:28:96:97:55:e9:3a:27:ec:f9:f3:4a:03:cf:03: c0:59:8b:8d:e6:fe:57:89:ca:a5:a9:5f:87:b7:77: e7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6A:3F:61:2E:3E:AD:31:19:5A:CD:B0:41:0F:49:27:90:BE:29:97 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/nWo_YS4-rTEZWs2wQQ9JJ5C-KZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.97.0/24 62.220.102.0/24 87.107.102.0/24 87.107.172.0/24 Signature Algorithm: sha256WithRSAEncryption bc:2e:8c:8b:42:f6:91:40:c2:dd:36:0f:c5:09:be:2c:cc:ff: f9:c4:ad:32:7f:4e:0c:a4:16:7a:9b:f0:69:10:a0:73:73:64: c4:33:aa:c4:3f:b4:0b:40:d7:11:bc:0c:8d:f5:54:f7:61:37: e5:b3:bb:da:57:29:66:c7:77:d5:3e:8f:74:b0:85:52:f4:6c: 1d:37:9c:46:b0:61:76:79:44:eb:9d:0e:cc:50:f7:1a:2c:26: 8b:fe:2a:20:9c:57:2e:75:1e:62:24:89:31:cf:be:61:b9:4e: 00:f6:99:09:41:a1:04:48:c7:be:ae:e1:34:f9:8f:b5:fc:09: 83:17:28:fd:fc:17:d6:c7:6f:b6:55:fb:94:21:17:1d:67:09: 17:3e:33:17:4b:5e:dc:e2:ca:4f:b7:e9:3b:28:4b:d4:18:ce: 97:92:d7:94:af:3f:b6:ae:e5:98:ad:8c:85:05:72:e9:9c:e4: 3f:7a:83:80:05:16:58:50:32:98:29:9d:4d:57:ac:bb:e8:06: d9:74:88:fe:9e:7a:24:6e:19:1c:44:3f:fd:68:44:24:83:31: d4:45:ab:4f:65:da:7f:39:79:ed:ac:e6:9d:17:fd:86:3e:7d: d2:77:20:a6:12:48:09:b9:22:53:4a:a2:0f:bc:c1:9e:83:7b: 07:b7:5b:c3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FPfxPRiIDm1CjsZFYOqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDZhM2Y2MTJlM2VhZDMxMTk1YWNkYjA0MTBmNDkyNzkwYmUyOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokfDKYUOsGWzOgi3LKdZnGGEeZfS oMtodsMzq2SW0YQKXJH8qOyHQJw7urRxczIMo2s80ZTxYZkUz9Cq99Vt33KFfuir 7N84XiPm2zs1Srz1O/+7cPrhhWcpxo80JPiEwDFdar41yFDR2dzoVeLhUWt4X0fB 1L9vTfnjyIkPg8ITOM8vm4lsNGnat5nj9Z1PkyidRp0OJJzkpvRsLEJHZn6DLehA skcglRjxoiIP7nkEYUB1U/MbQ2rXyehsTUq2GSwvwpXKxIooNBFBjqDIU6enJ/Bu Q+jQDR/tKLYKW1heKJaXVek6J+z580oDzwPAWYuN5v5XicqlqV+Ht3fnRQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ1qP2EuPq0xGVrNsEEPSSeQvimXMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvbldvX1lTNC1yVEVaV3Myd1FROUpKNUMtS1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPtxhAwQA PtxmAwQAV2tmAwQAV2usMA0GCSqGSIb3DQEBCwUAA4IBAQC8LoyLQvaRQMLdNg/F Cb4szP/5xK0yf04MpBZ6m/BpEKBzc2TEM6rEP7QLQNcRvAyN9VT3YTfls7vaVylm x3fVPo90sIVS9GwdN5xGsGF2eUTrnQ7MUPcaLCaL/iognFcudR5iJIkxz75huU4A 9pkJQaEESMe+ruE0+Y+1/AmDFyj9/BfWx2+2VfuUIRcdZwkXPjMXS17c4spPt+k7 KEvUGM6XkteUrz+2ruWYrYyFBXLpnOQ/eoOABRZYUDKYKZ1NV6y76AbZdIj+nnok bhkcRD/9aEQkgzHURatPZdp/OXntrOadF/2GPn3SdyCmEkgJuSJTSqIPvMGeg3sH t1vD -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:44 2026 by rpki-client