This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NiVIuX2iKepJC3MJrYPlXCYlNW4.roa File: NiVIuX2iKepJC3MJrYPlXCYlNW4.roa (raw, json) Hash identifier: 0PJ58QdqiuazLURixxjrG6inY6KXz+fFfyhz2O4wWqI= Subject key identifier: 36:25:48:B9:7D:A2:29:EA:49:0B:73:09:AD:83:E5:5C:26:25:35:6E Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76A2B93FC4EC959635AF54D011F87 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NiVIuX2iKepJC3MJrYPlXCYlNW4.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43197 IP address blocks: 62.89.208.0/22 maxlen: 24 62.89.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6a:2b:93:fc:4e:c9:59:63:5a:f5:4d:01:1f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=362548b97da229ea490b7309ad83e55c2625356e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:02:2a:14:13:da:b5:ac:5e:95:2b:2a:42: 0b:f1:da:03:9f:aa:d8:bc:41:55:0e:4f:a2:57:da: c8:b2:d6:a8:9a:4e:fe:56:7f:a2:c1:6b:c4:c8:1e: 90:b0:e0:4e:f4:18:6e:97:ad:b8:c5:67:05:a7:48: c0:31:b8:43:45:cd:ff:4d:d4:7f:10:a8:e0:ec:a8: 1b:62:ff:bf:95:79:fe:8b:12:13:90:aa:1b:9e:fa: 96:8f:66:78:25:f0:28:6d:02:db:b5:f1:e2:00:cd: 5f:21:bd:9f:e3:f9:48:40:b0:52:cd:60:12:db:71: f9:82:5b:b8:02:6c:63:54:14:4f:84:48:d2:26:17: 05:87:26:dc:37:a4:20:e3:85:1c:18:ce:0c:39:30: 34:56:b8:45:77:0b:5b:75:9b:a9:ed:9c:70:b8:dd: 83:a7:a6:78:a6:9f:c1:99:21:2b:37:82:63:d5:be: ca:68:75:04:7d:54:ff:4a:d9:b4:37:b8:f4:83:ae: 77:a4:5f:f6:6a:1a:75:7f:ae:d1:90:cb:eb:c8:17: ff:ec:fc:7a:dc:17:7c:77:93:cf:2b:47:b3:50:3b: 50:2a:58:a2:68:4d:84:95:71:88:0d:d7:bf:91:b9: 50:85:cc:2a:1f:0e:06:6d:32:a5:d0:a7:e8:e1:f3: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:25:48:B9:7D:A2:29:EA:49:0B:73:09:AD:83:E5:5C:26:25:35:6E X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NiVIuX2iKepJC3MJrYPlXCYlNW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.208.0/22 62.89.220.0/22 Signature Algorithm: sha256WithRSAEncryption 66:fa:44:db:bc:92:9d:d6:ac:d1:92:c7:be:d8:75:21:38:6c: 91:d4:4c:e8:db:31:3b:af:2d:ff:1a:d1:43:b2:a4:39:d3:f3: db:f4:e6:af:b6:77:32:e9:95:2f:ca:81:7d:86:8a:f5:bb:1c: 87:83:c1:f1:dc:2f:01:8b:9f:48:7d:a1:f3:e0:79:d8:7a:06: 4d:7a:dd:c7:8f:fc:08:e4:07:69:c1:3e:44:ec:ed:9e:0f:2b: af:a7:80:8f:ba:d2:a6:4a:70:f6:d0:bb:eb:a6:cb:e7:49:81: 65:aa:0a:ca:b1:2a:ed:d3:a0:15:40:61:c4:19:a7:a0:b5:e0: cb:bf:d4:04:a0:4a:29:f0:2f:ef:32:5a:dd:82:d1:6a:3a:4d: df:d0:46:a7:fb:33:60:d4:65:cc:63:7d:b2:6a:00:43:89:cf: e5:f7:8e:08:a6:27:a0:c6:bd:15:f1:98:cf:9d:87:69:bb:65: a3:f0:c6:b7:a7:19:34:00:f9:d5:60:7b:db:43:a2:3b:90:22: 01:8a:9d:da:ad:a0:c2:7e:4a:2e:9f:66:7c:07:31:64:e4:06: 0b:90:fb:8a:34:ea:67:66:cf:f2:f5:9e:28:d0:43:68:56:d4: c9:6e:77:22:79:af:a1:00:4a:ab:b3:74:98:6e:e9:83:7e:88: 3f:32:83:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2ork/xOyVljWvVNAR+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjI1NDhiOTdkYTIyOWVhNDkwYjczMDlhZDgzZTU1YzI2MjUzNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCsCKhQT2rWsXpUrKkIL8doDn6rY vEFVDk+iV9rIstaomk7+Vn+iwWvEyB6QsOBO9Bhul624xWcFp0jAMbhDRc3/TdR/ EKjg7KgbYv+/lXn+ixITkKobnvqWj2Z4JfAobQLbtfHiAM1fIb2f4/lIQLBSzWAS 23H5glu4AmxjVBRPhEjSJhcFhybcN6Qg44UcGM4MOTA0VrhFdwtbdZup7ZxwuN2D p6Z4pp/BmSErN4Jj1b7KaHUEfVT/Stm0N7j0g653pF/2ahp1f67RkMvryBf/7Px6 3Bd8d5PPK0ezUDtQKliiaE2ElXGIDde/kblQhcwqHw4GbTKl0Kfo4fPqRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDYlSLl9oinqSQtzCa2D5VwmJTVuMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvTmlWSXVYMmlLZXBKQzNNSnJZUGxYQ1lsTlc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPlnQAwQC PlncMA0GCSqGSIb3DQEBCwUAA4IBAQBm+kTbvJKd1qzRkse+2HUhOGyR1Ezo2zE7 ry3/GtFDsqQ50/Pb9Oavtncy6ZUvyoF9hor1uxyHg8Hx3C8Bi59IfaHz4HnYegZN et3Hj/wI5AdpwT5E7O2eDyuvp4CPutKmSnD20LvrpsvnSYFlqgrKsSrt06AVQGHE GaegteDLv9QEoEop8C/vMlrdgtFqOk3f0Ean+zNg1GXMY32yagBDic/l944Ipieg xr0V8ZjPnYdpu2Wj8Ma3pxk0APnVYHvbQ6I7kCIBip3araDCfkoun2Z8BzFk5AYL kPuKNOpnZs/y9Z4o0ENoVtTJbnciea+hAEqrs3SYbumDfog/MoOX -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:45 2026 by rpki-client