This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qCYIJHzRkfLzHCxz5xOQXEpku1c.roa File: qCYIJHzRkfLzHCxz5xOQXEpku1c.roa (raw, json) Hash identifier: vnsiVizVnvaL++/5J04Zb2FNcQ9tB0xOV5OxmO/a/Fk= Subject key identifier: A8:26:08:24:7C:D1:91:F2:F3:1C:2C:73:E7:13:90:5C:4A:64:BB:57 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7714AA9F0DFFA652080C6C7BF01F4 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qCYIJHzRkfLzHCxz5xOQXEpku1c.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60484 IP address blocks: 62.89.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:4a:a9:f0:df:fa:65:20:80:c6:c7:bf:01:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a82608247cd191f2f31c2c73e713905c4a64bb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:4a:a4:d2:89:7c:48:18:b9:4c:8b:e9:23: 1d:70:4a:91:dd:3b:7b:13:5f:aa:bd:6a:7b:17:5d: ec:79:06:d0:7b:d3:22:9d:20:a5:e7:8f:bd:a4:4a: 3e:0f:45:42:15:ae:be:0d:40:0a:e0:15:d5:86:88: 14:ed:17:21:c6:10:97:8f:ac:10:11:ef:c7:29:e8: 99:0c:2a:8e:7a:b3:95:e1:bd:99:30:7e:69:b5:bf: 2a:a4:d4:53:a8:25:39:60:37:e3:68:eb:c1:5a:fb: 3c:71:b3:f4:7b:37:1e:dc:0d:53:12:32:a7:dc:f0: 34:50:56:c3:18:ef:f6:82:9f:95:12:94:5f:02:a6: d3:a4:c1:91:68:3d:49:5b:3a:e8:5b:d8:23:5f:e9: 70:c0:58:1f:69:c7:16:e2:8d:7a:69:d2:a1:b0:d2: 40:05:89:83:14:0d:e5:e4:27:52:e7:53:2c:99:96: 4b:2f:6b:5a:b2:bb:e6:c9:f8:06:21:f7:d7:6b:2f: 48:10:a9:5f:52:ed:dc:4e:4a:db:3c:eb:53:86:94: 66:1b:f3:5b:91:3e:eb:4d:fb:a5:e0:f8:b2:b4:3c: 41:a4:19:a7:35:7a:6c:e7:d5:20:d0:38:fe:28:60: 58:5d:73:8a:78:36:4b:fd:2e:8e:9e:da:15:4c:88: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:26:08:24:7C:D1:91:F2:F3:1C:2C:73:E7:13:90:5C:4A:64:BB:57 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qCYIJHzRkfLzHCxz5xOQXEpku1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.196.0/24 Signature Algorithm: sha256WithRSAEncryption 69:5f:a8:3f:08:74:f7:2b:39:31:e9:fb:26:fb:4b:21:0c:e6: 88:cd:7e:8d:0d:ea:bc:ac:a6:83:99:3b:22:28:99:a6:31:db: 81:c9:b9:6d:64:fd:b9:36:3c:eb:bf:5a:0f:1e:0b:27:04:a1: a2:9e:29:03:ff:c0:b8:60:c8:78:17:18:8c:62:d5:46:cf:da: 6e:28:f8:f0:3e:53:b0:0d:78:d4:61:16:ad:a9:9e:b8:20:25: d7:80:5a:d3:00:10:98:8e:52:ef:66:b4:b4:96:a7:44:34:b6: 9f:e5:81:1f:0a:67:50:fa:1b:00:de:3d:8e:c2:8e:af:8f:4d: 09:dd:c9:b4:6b:ff:4d:47:79:28:4e:8e:71:ba:c2:cf:50:43: 06:47:69:2d:0c:87:54:69:f7:5d:94:be:5e:79:4b:02:03:0a: 3a:fe:0f:44:ce:71:22:64:c9:d2:bd:56:a0:07:25:a8:69:72: 06:16:2c:89:20:e9:13:b5:bd:81:73:90:6b:44:78:ef:62:df: aa:cb:e6:a6:b1:78:cc:3e:c2:f8:56:1c:dc:4d:1f:1a:41:c1: 7f:9e:6e:02:0b:c2:8e:53:16:93:54:07:9d:f0:5b:c4:65:ca: bb:48:b2:00:7c:17:cc:e8:a4:b8:a7:c2:2a:69:87:42:a8:db: 08:52:d0:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3FKqfDf+mUggMbHvwH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODI2MDgyNDdjZDE5MWYyZjMxYzJjNzNlNzEzOTA1YzRhNjRiYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYhKpNKJfEgYuUyL6SMdcEqR3Tt7 E1+qvWp7F13seQbQe9MinSCl54+9pEo+D0VCFa6+DUAK4BXVhogU7RchxhCXj6wQ Ee/HKeiZDCqOerOV4b2ZMH5ptb8qpNRTqCU5YDfjaOvBWvs8cbP0ezce3A1TEjKn 3PA0UFbDGO/2gp+VEpRfAqbTpMGRaD1JWzroW9gjX+lwwFgfaccW4o16adKhsNJA BYmDFA3l5CdS51MsmZZLL2tasrvmyfgGIffXay9IEKlfUu3cTkrbPOtThpRmG/Nb kT7rTful4PiytDxBpBmnNXps59Ug0Dj+KGBYXXOKeDZL/S6OntoVTIhnKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKgmCCR80ZHy8xwsc+cTkFxKZLtXMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvcUNZSUpIelJrZkx6SEN4ejV4T1FYRXBrdTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnEMA0G CSqGSIb3DQEBCwUAA4IBAQBpX6g/CHT3Kzkx6fsm+0shDOaIzX6NDeq8rKaDmTsi KJmmMduBybltZP25Njzrv1oPHgsnBKGinikD/8C4YMh4FxiMYtVGz9puKPjwPlOw DXjUYRatqZ64ICXXgFrTABCYjlLvZrS0lqdENLaf5YEfCmdQ+hsA3j2Owo6vj00J 3cm0a/9NR3koTo5xusLPUEMGR2ktDIdUafddlL5eeUsCAwo6/g9EznEiZMnSvVag ByWoaXIGFiyJIOkTtb2Bc5BrRHjvYt+qy+amsXjMPsL4VhzcTR8aQcF/nm4CC8KO UxaTVAed8FvEZcq7SLIAfBfM6KS4p8IqaYdCqNsIUtBO -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:23 2026 by rpki-client