This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iGQ2fqJaWCMoHOXukFNXAkyVLco.roa File: iGQ2fqJaWCMoHOXukFNXAkyVLco.roa (raw, json) Hash identifier: DPLEw/aZc9KBY15x5zrffBvRJjn3cXKSxiX/x6MQ7XY= Subject key identifier: 88:64:36:7E:A2:5A:58:23:28:1C:E5:EE:90:53:57:02:4C:95:2D:CA Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C774D35126801032232A72FB067421 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iGQ2fqJaWCMoHOXukFNXAkyVLco.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200823 IP address blocks: 62.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:74:d3:51:26:80:10:32:23:2a:72:fb:06:74:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8864367ea25a5823281ce5ee905357024c952dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:e8:d9:4f:8b:68:55:e1:b8:93:09:2a:f5: 37:58:8c:ad:ec:20:a5:ff:09:c9:f5:99:2f:bf:af: c6:94:de:7b:1f:ac:99:a4:0b:99:4f:cb:84:5e:49: ec:7e:86:7a:12:43:3d:58:26:92:42:12:31:59:d9: 5a:53:1f:7e:47:55:f2:9d:6f:17:56:b2:fc:57:31: 46:ed:91:23:cc:2b:89:2d:ae:83:d1:5e:9e:72:ec: e8:f6:e4:e5:77:5d:cb:c0:93:f5:a5:ea:7a:5f:f6: 15:e0:ff:97:77:76:6a:d9:99:ed:bd:25:5f:29:3a: 1e:23:6a:a8:d8:36:59:5e:07:e0:0f:dc:89:d9:ff: 70:af:10:cc:25:75:e6:37:0e:08:ab:69:e7:2a:73: a6:f6:95:38:d6:f1:ae:e7:25:8a:be:c9:81:ca:70: 82:80:fe:99:ec:71:7b:0a:d2:13:4a:09:23:72:c7: a9:7b:3d:f9:17:5c:63:75:bd:f4:e4:7b:52:d9:49: f2:e2:e5:c5:40:18:be:17:22:b6:20:8c:82:2c:70: 79:78:00:70:c6:d5:c9:9d:e9:8d:e8:d4:86:d6:20: 2d:65:3d:4d:3b:f6:f7:da:35:ed:d9:d9:e6:09:05: 00:3e:c0:8f:18:73:18:b9:29:30:2b:f5:b1:78:94: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:64:36:7E:A2:5A:58:23:28:1C:E5:EE:90:53:57:02:4C:95:2D:CA X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iGQ2fqJaWCMoHOXukFNXAkyVLco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.192.0/24 Signature Algorithm: sha256WithRSAEncryption 58:a8:71:86:a0:ef:44:6a:5f:71:d9:78:6a:f5:f5:68:8e:9e: bb:57:9c:6b:ab:13:64:05:90:e6:8a:2c:63:97:ee:e1:f1:a3: 5b:b6:0f:0b:8e:81:52:4a:43:0a:7b:ff:38:21:ee:6a:17:1b: df:a4:fb:59:25:0c:05:c4:4b:fe:9f:ba:43:f1:27:14:43:c0: 45:71:dc:4e:20:54:d5:60:72:4c:10:8f:30:ad:af:5c:d2:b0: 08:df:e0:9e:2c:45:40:21:45:f7:9d:cc:a0:f2:1c:bb:61:89: d1:1a:e1:0f:93:8b:00:2d:8d:e1:dc:0d:9e:17:43:ad:83:ab: c0:9b:98:5d:9a:be:d6:f7:28:6f:ec:29:1f:8e:82:b6:a0:05: 7c:0b:09:9d:ac:97:64:92:27:86:23:67:9c:3f:d6:a5:b5:3f: e0:92:e6:be:83:c1:8c:bb:1f:17:1f:87:c3:e4:1f:d4:e5:a8: 04:78:3f:bd:ee:b0:60:a8:56:3f:71:0d:08:5f:8d:72:24:4a: ef:37:66:63:68:fb:c6:6b:65:24:b5:02:3e:49:b9:d1:d2:09: 66:b3:9a:22:0f:78:4b:59:9b:e4:a0:d4:5e:20:0a:e7:d3:80: 8a:ca:92:89:94:bc:41:67:55:a3:e8:78:83:12:a9:7b:db:84: 63:db:80:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3TTUSaAEDIjKnL7BnQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODY0MzY3ZWEyNWE1ODIzMjgxY2U1ZWU5MDUzNTcwMjRjOTUyZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bjo2U+LaFXhuJMJKvU3WIyt7CCl /wnJ9Zkvv6/GlN57H6yZpAuZT8uEXknsfoZ6EkM9WCaSQhIxWdlaUx9+R1XynW8X VrL8VzFG7ZEjzCuJLa6D0V6ecuzo9uTld13LwJP1pep6X/YV4P+Xd3Zq2ZntvSVf KToeI2qo2DZZXgfgD9yJ2f9wrxDMJXXmNw4Iq2nnKnOm9pU41vGu5yWKvsmBynCC gP6Z7HF7CtITSgkjcsepez35F1xjdb305HtS2Uny4uXFQBi+FyK2IIyCLHB5eABw xtXJnemN6NSG1iAtZT1NO/b32jXt2dnmCQUAPsCPGHMYuSkwK/WxeJS9aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhkNn6iWlgjKBzl7pBTVwJMlS3KMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvaUdRMmZxSmFXQ01vSE9YdWtGTlhBa3lWTGNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnAMA0G CSqGSIb3DQEBCwUAA4IBAQBYqHGGoO9Eal9x2Xhq9fVojp67V5xrqxNkBZDmiixj l+7h8aNbtg8LjoFSSkMKe/84Ie5qFxvfpPtZJQwFxEv+n7pD8ScUQ8BFcdxOIFTV YHJMEI8wra9c0rAI3+CeLEVAIUX3ncyg8hy7YYnRGuEPk4sALY3h3A2eF0Otg6vA m5hdmr7W9yhv7CkfjoK2oAV8CwmdrJdkkieGI2ecP9altT/gkua+g8GMux8XH4fD 5B/U5agEeD+97rBgqFY/cQ0IX41yJErvN2ZjaPvGa2UktQI+SbnR0glms5oiD3hL WZvkoNReIArn04CKypKJlLxBZ1Wj6HiDEql724Rj24A6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:05 2026 by rpki-client