This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rwtS7Z9nufquf0OhRrpp1xXnEMg.roa File: rwtS7Z9nufquf0OhRrpp1xXnEMg.roa (raw, json) Hash identifier: v1V0LIQ6VbOl0vUenei96wzoFF1nkZgx614lNzS2B9I= Subject key identifier: AF:0B:52:ED:9F:67:B9:FA:AE:7F:43:A1:46:BA:69:D7:15:E7:10:C8 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77B9AAC99A59A6372B7BEA4512E8F Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rwtS7Z9nufquf0OhRrpp1xXnEMg.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205349 IP address blocks: 62.89.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7b:9a:ac:99:a5:9a:63:72:b7:be:a4:51:2e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af0b52ed9f67b9faae7f43a146ba69d715e710c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:86:bc:e2:7b:e8:44:ca:e3:5c:ee:03:1d: 33:66:f1:ac:b1:08:25:08:17:8f:4f:d5:a0:e3:51: 3f:88:24:a2:03:46:1e:7a:48:0c:d5:4f:ce:3b:e8: f4:5a:a0:ca:7f:8d:f8:29:f9:a0:d9:e4:07:bb:62: 8a:e0:0a:41:13:6d:e1:50:fb:cc:52:53:67:78:84: 6d:53:8e:be:d6:9b:16:15:23:ca:f7:ed:e0:d4:c0: 41:d9:4f:72:d0:df:f5:c1:be:72:1f:c6:a3:64:22: ad:8f:62:50:b1:db:8c:a6:14:4a:88:a4:90:2d:ec: 49:12:ff:4e:b9:85:d8:17:af:ad:0c:35:bb:92:9f: ba:fc:a0:c5:c2:c3:ea:09:18:4a:9c:a5:8a:e3:03: c8:3f:f1:64:c6:94:27:40:fb:11:e7:b8:18:25:2a: b9:4c:37:63:ab:d0:17:7a:3c:a1:a2:1a:42:71:58: ba:a6:d4:5a:7d:09:ac:25:54:2e:f0:09:c0:ef:19: 08:21:b9:f5:3a:66:55:47:96:71:ed:43:d7:b3:4e: 0c:29:e1:3f:11:14:cc:a8:d7:45:c2:01:c5:a0:c4: c2:d5:f1:38:f9:ca:71:de:6c:ac:12:0e:b3:ac:a3: bc:d5:aa:01:08:2c:40:7b:97:92:e6:be:4b:92:eb: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0B:52:ED:9F:67:B9:FA:AE:7F:43:A1:46:BA:69:D7:15:E7:10:C8 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rwtS7Z9nufquf0OhRrpp1xXnEMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.205.0/24 Signature Algorithm: sha256WithRSAEncryption a7:36:a1:dd:0c:7d:63:58:06:40:40:4a:fb:e4:cf:cd:ba:8f: b6:4d:e4:75:45:04:78:c8:6e:27:7f:c2:9c:44:46:18:f6:38: 11:28:b1:ea:fc:08:da:56:73:d2:7e:ce:39:9d:34:db:b8:54: 51:b8:03:42:99:cb:ed:42:e6:e2:6e:51:24:b0:ed:dd:79:be: 0b:c1:03:4a:a5:20:fd:ee:9b:0d:b5:82:17:fd:b5:88:cb:f0: 47:31:c0:37:c3:4e:c9:c1:ee:45:70:86:00:b1:3a:0a:f1:a5: 68:2b:e5:82:3c:43:99:0f:8d:60:2c:7c:da:fb:6d:67:57:82: da:38:c2:30:0d:32:4a:ad:41:8a:9f:44:ec:a8:08:7a:f6:71: f7:79:ff:ca:e8:1c:0e:ca:e4:4d:46:bf:1a:62:83:59:08:f7: 56:e5:ae:56:e4:f4:21:37:d9:b8:21:97:a7:af:ce:4f:16:7d: 3b:71:76:cc:eb:40:6b:dd:4c:13:28:5b:62:04:cb:8f:c9:de: 45:8e:43:f0:7f:2e:9a:54:b7:f9:2b:00:f4:ef:09:51:f9:6d: 9f:f2:ba:00:60:0b:7b:bc:eb:a7:90:c6:53:28:13:35:38:f2: a8:b6:44:55:32:6b:96:1d:dc:60:75:b6:4d:a8:2c:ea:83:8d: d5:7b:f9:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3uarJmlmmNyt76kUS6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjBiNTJlZDlmNjdiOWZhYWU3ZjQzYTE0NmJhNjlkNzE1ZTcxMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRuGvOJ76ETK41zuAx0zZvGssQgl CBePT9Wg41E/iCSiA0YeekgM1U/OO+j0WqDKf434Kfmg2eQHu2KK4ApBE23hUPvM UlNneIRtU46+1psWFSPK9+3g1MBB2U9y0N/1wb5yH8ajZCKtj2JQsduMphRKiKSQ LexJEv9OuYXYF6+tDDW7kp+6/KDFwsPqCRhKnKWK4wPIP/FkxpQnQPsR57gYJSq5 TDdjq9AXejyhohpCcVi6ptRafQmsJVQu8AnA7xkIIbn1OmZVR5Zx7UPXs04MKeE/ ERTMqNdFwgHFoMTC1fE4+cpx3mysEg6zrKO81aoBCCxAe5eS5r5LkuuEGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8LUu2fZ7n6rn9DoUa6adcV5xDIMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvcnd0UzdaOW51ZnF1ZjBPaFJycHAxeFhuRU1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnNMA0G CSqGSIb3DQEBCwUAA4IBAQCnNqHdDH1jWAZAQEr75M/Nuo+2TeR1RQR4yG4nf8Kc REYY9jgRKLHq/AjaVnPSfs45nTTbuFRRuANCmcvtQubiblEksO3deb4LwQNKpSD9 7psNtYIX/bWIy/BHMcA3w07Jwe5FcIYAsToK8aVoK+WCPEOZD41gLHza+21nV4La OMIwDTJKrUGKn0TsqAh69nH3ef/K6BwOyuRNRr8aYoNZCPdW5a5W5PQhN9m4IZen r85PFn07cXbM60Br3UwTKFtiBMuPyd5FjkPwfy6aVLf5KwD07wlR+W2f8roAYAt7 vOunkMZTKBM1OPKotkRVMmuWHdxgdbZNqCzqg43Ve/mr -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:22 2026 by rpki-client