This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Jf-nAFGenT3a17KrOD2Ll7IAeQo.roa File: Jf-nAFGenT3a17KrOD2Ll7IAeQo.roa (raw, json) Hash identifier: fpXKptWV3Mx4hlnJtLsI/xthKyGhnOcXmzp1jHmUmqE= Subject key identifier: 25:FF:A7:00:51:9E:9D:3D:DA:D7:B2:AB:38:3D:8B:97:B2:00:79:0A Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C780ADEF87216571C510418ADBCC1B Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Jf-nAFGenT3a17KrOD2Ll7IAeQo.roa Signing time: Thu 01 Jan 2026 04:18:41 +0000 ROA not before: Thu 01 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215106 IP address blocks: 62.89.216.0/24 maxlen: 24 81.23.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:80:ad:ef:87:21:65:71:c5:10:41:8a:db:cc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25ffa700519e9d3ddad7b2ab383d8b97b200790a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:1b:fe:bb:a3:57:ab:13:7c:9f:e7:58:3c: 91:5d:7b:a6:ba:36:dc:c6:ce:5b:d7:bd:ae:bb:4d: 00:4e:99:90:3b:53:24:3a:0c:dc:39:c8:7f:77:79: 35:68:6d:64:6b:5e:e8:bb:7c:5b:5e:5f:dc:40:4a: 22:dd:ef:f9:c0:5a:c5:e7:0c:c4:85:5b:52:0d:5a: 68:df:6b:c5:c9:e1:4c:fd:ad:ce:7f:60:e8:c3:78: c9:ec:d4:77:3c:6b:6a:6c:50:ce:81:0e:37:e6:71: b1:0d:91:af:7a:e5:b6:71:6f:6d:10:d8:8b:40:50: 8c:3d:4a:09:4e:a5:d2:1c:40:db:0d:8e:e3:ce:41: fa:d9:80:70:9b:52:76:b5:e9:19:a0:10:04:f7:da: ae:e4:8e:c1:ff:dc:00:28:1d:8a:5c:b4:7d:b5:28: 38:d4:8d:19:a2:6f:27:41:b6:e9:ea:20:df:1d:6f: 51:50:d6:d9:d8:40:0c:4e:60:fe:90:02:f1:60:7c: 13:a1:06:fb:ce:f8:7d:2b:86:0a:64:ba:7c:7d:4f: ff:60:80:c5:1a:fa:f3:6e:e1:11:43:66:59:4d:3f: 3d:41:69:98:59:bc:c5:1a:9e:6c:64:e6:e4:91:9f: 23:fa:bd:83:93:35:f4:f0:0a:94:97:a2:8c:c5:0d: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FF:A7:00:51:9E:9D:3D:DA:D7:B2:AB:38:3D:8B:97:B2:00:79:0A X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Jf-nAFGenT3a17KrOD2Ll7IAeQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.216.0/24 81.23.13.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:89:15:0b:70:dc:bf:b4:8f:b9:a2:73:70:3a:34:9c:1f:3e: 92:6a:5b:4d:ce:02:b3:a9:85:9f:8d:a6:91:0f:4e:b7:2a:27: af:64:58:25:f8:2b:33:bc:db:00:7e:5b:65:72:b5:8c:c4:78: 90:41:4b:5b:ea:7b:73:c4:e5:d0:ce:4b:55:8e:2f:5a:4c:5d: 61:32:e2:d4:c6:4b:7e:fb:d4:4a:2a:de:f8:e3:bf:1a:dc:c5: 3f:8b:51:12:cd:42:fe:44:e5:44:19:f0:d1:30:a2:c8:f2:4d: 15:10:4d:5f:ab:70:a5:74:56:6a:45:07:08:d1:d3:ff:8e:fa: 8b:09:cb:96:a9:a3:fb:a4:d5:d4:ac:d3:b0:d4:15:e7:3a:bc: 53:ee:d6:1a:33:95:69:70:44:ac:99:a5:10:1a:c3:80:9c:7e: b3:dd:bf:a3:a0:0c:2b:45:9b:8b:7a:ca:bb:65:0d:75:39:d0: c8:36:e6:bd:1f:a7:b1:1d:04:4b:a0:da:7c:76:8a:c7:17:77: e9:f0:85:d1:27:44:2f:1e:25:44:ae:f0:58:b5:ef:89:92:8c: 73:c9:c2:41:4e:f5:36:77:ae:3d:02:60:f7:63:65:a7:82:1a: ae:b1:a0:6a:13:34:2a:74:3d:da:05:11:2d:12:f9:53:2b:19: eb:21:d8:15 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x4Ct74chZXHFEEGK28wbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWZmYTcwMDUxOWU5ZDNkZGFkN2IyYWIzODNkOGI5N2IyMDA3OTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSkb/rujV6sTfJ/nWDyRXXumujbc xs5b172uu00ATpmQO1MkOgzcOch/d3k1aG1ka17ou3xbXl/cQEoi3e/5wFrF5wzE hVtSDVpo32vFyeFM/a3Of2Dow3jJ7NR3PGtqbFDOgQ435nGxDZGveuW2cW9tENiL QFCMPUoJTqXSHEDbDY7jzkH62YBwm1J2tekZoBAE99qu5I7B/9wAKB2KXLR9tSg4 1I0Zom8nQbbp6iDfHW9RUNbZ2EAMTmD+kALxYHwToQb7zvh9K4YKZLp8fU//YIDF GvrzbuERQ2ZZTT89QWmYWbzFGp5sZObkkZ8j+r2DkzX08AqUl6KMxQ1ZdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCX/pwBRnp092teyqzg9i5eyAHkKMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvSmYtbkFGR2VuVDNhMTdLck9EMkxsN0lBZVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPlnYAwQA URcNMA0GCSqGSIb3DQEBCwUAA4IBAQCPiRULcNy/tI+5onNwOjScHz6SaltNzgKz qYWfjaaRD063KievZFgl+CszvNsAfltlcrWMxHiQQUtb6ntzxOXQzktVji9aTF1h MuLUxkt++9RKKt74478a3MU/i1ESzUL+ROVEGfDRMKLI8k0VEE1fq3CldFZqRQcI 0dP/jvqLCcuWqaP7pNXUrNOw1BXnOrxT7tYaM5VpcESsmaUQGsOAnH6z3b+joAwr RZuLesq7ZQ11OdDINua9H6exHQRLoNp8dorHF3fp8IXRJ0QvHiVErvBYte+Jkoxz ycJBTvU2d649AmD3Y2WnghqusaBqEzQqdD3aBREtEvlTKxnrIdgV -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:10 2026 by rpki-client