This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/w71SOrSH6q3pfWbCAjl2K8GEjAg.roa File: w71SOrSH6q3pfWbCAjl2K8GEjAg.roa (raw, json) Hash identifier: BTDNEWx9l+9162Z4Ouy6NqSr6RbyI64txXFeGTClOG4= Subject key identifier: C3:BD:52:3A:B4:87:EA:AD:E9:7D:66:C2:02:39:76:2B:C1:84:8C:08 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C779F1086ACBF2C4FC06426397B2AD Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/w71SOrSH6q3pfWbCAjl2K8GEjAg.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204314 IP address blocks: 62.89.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:79:f1:08:6a:cb:f2:c4:fc:06:42:63:97:b2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3bd523ab487eaade97d66c20239762bc1848c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:b4:0e:40:32:3f:ee:f7:13:41:4f:e5:2d: 23:25:4f:c6:0b:e1:24:9f:8c:af:21:6a:b5:4f:a2: b7:5d:93:c8:24:99:4a:82:58:48:db:02:23:f2:7b: a9:02:ca:1b:96:99:ca:fd:ce:b1:70:70:5a:2b:24: ec:7d:6a:79:7a:db:5d:8b:95:5d:90:33:87:96:a1: e9:3d:86:2c:1b:2c:d9:59:d6:fc:e1:31:91:20:03: f0:b0:5e:c6:19:6c:bd:3c:a7:41:a9:57:fc:42:e3: 55:50:e2:94:b9:21:0e:62:81:d9:d9:d5:ff:db:48: 41:65:f9:e0:56:90:6b:98:cb:b0:79:38:a8:04:8e: 48:a9:b7:45:69:55:35:f2:d4:51:c7:6d:d3:57:1e: b4:06:de:41:57:35:31:e7:e4:c5:94:7b:b9:c3:e2: ea:35:50:48:02:93:05:00:31:c6:06:ea:64:94:b9: 1b:8f:3e:14:cb:e4:49:23:82:76:ef:91:0f:41:0a: ab:98:9f:a8:df:4f:b5:47:83:68:36:79:5d:4e:56: 37:1d:d2:4f:42:f5:37:61:31:2d:61:3a:38:2c:57: 1f:16:98:db:3b:cb:f6:53:bb:09:fa:75:f2:2e:d3: 65:c4:da:78:9a:a3:c4:0a:f2:d1:d5:53:4f:d5:40: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BD:52:3A:B4:87:EA:AD:E9:7D:66:C2:02:39:76:2B:C1:84:8C:08 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/w71SOrSH6q3pfWbCAjl2K8GEjAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.212.0/24 Signature Algorithm: sha256WithRSAEncryption a8:2a:76:6f:7d:bc:48:b9:cf:97:6e:21:9d:a4:cc:ab:52:9c: 6b:fb:6d:a1:91:7b:9b:61:14:65:66:9e:ae:65:84:b4:e0:bf: 61:4b:33:57:f5:32:13:a2:3e:8e:74:5a:da:88:8f:4e:3a:f8: 90:80:07:5a:4c:1d:02:b1:f0:bd:2d:0e:24:0d:1e:80:d5:6b: c9:cb:f5:a9:13:08:ef:30:41:5d:f1:ef:9b:f6:06:8a:a1:ee: a5:6b:96:70:46:78:3f:64:96:a4:a1:c6:6f:00:47:8b:75:f5: 3e:38:89:f0:41:92:3c:7a:1c:4b:f0:34:cc:9c:e9:cc:75:94: 41:9b:9d:f1:0a:cc:26:62:6c:13:69:80:22:0f:0b:a3:7c:b7: a6:31:e2:62:3d:7b:f0:5c:2d:55:84:f8:0e:ee:31:6b:d1:bb: 68:ed:2c:5d:43:4d:d0:0d:c8:6c:29:51:01:12:9d:54:12:ac: c4:b8:94:35:3d:b8:dc:b4:bf:da:80:e1:b7:53:e7:fc:32:e5: 4b:6a:e5:b9:b9:c5:ad:e3:8b:86:e4:22:f8:19:82:a2:05:a2: b3:6c:c3:a6:83:34:f4:85:32:1a:bc:98:0e:13:8f:5d:84:7f: eb:fb:01:17:68:9b:98:ce:e1:1c:89:d1:87:89:a3:67:85:9e: 1b:4c:c8:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3nxCGrL8sT8BkJjl7KtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JkNTIzYWI0ODdlYWFkZTk3ZDY2YzIwMjM5NzYyYmMxODQ4YzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7m0DkAyP+73E0FP5S0jJU/GC+Ek n4yvIWq1T6K3XZPIJJlKglhI2wIj8nupAsoblpnK/c6xcHBaKyTsfWp5ettdi5Vd kDOHlqHpPYYsGyzZWdb84TGRIAPwsF7GGWy9PKdBqVf8QuNVUOKUuSEOYoHZ2dX/ 20hBZfngVpBrmMuweTioBI5IqbdFaVU18tRRx23TVx60Bt5BVzUx5+TFlHu5w+Lq NVBIApMFADHGBupklLkbjz4Uy+RJI4J275EPQQqrmJ+o30+1R4NoNnldTlY3HdJP QvU3YTEtYTo4LFcfFpjbO8v2U7sJ+nXyLtNlxNp4mqPECvLR1VNP1UCjUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMO9Ujq0h+qt6X1mwgI5divBhIwIMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvdzcxU09yU0g2cTNwZldiQ0FqbDJLOEdFakFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnUMA0G CSqGSIb3DQEBCwUAA4IBAQCoKnZvfbxIuc+XbiGdpMyrUpxr+22hkXubYRRlZp6u ZYS04L9hSzNX9TIToj6OdFraiI9OOviQgAdaTB0CsfC9LQ4kDR6A1WvJy/WpEwjv MEFd8e+b9gaKoe6la5ZwRng/ZJakocZvAEeLdfU+OInwQZI8ehxL8DTMnOnMdZRB m53xCswmYmwTaYAiDwujfLemMeJiPXvwXC1VhPgO7jFr0bto7SxdQ03QDchsKVEB Ep1UEqzEuJQ1PbjctL/agOG3U+f8MuVLauW5ucWt44uG5CL4GYKiBaKzbMOmgzT0 hTIavJgOE49dhH/r+wEXaJuYzuEcidGHiaNnhZ4bTMgi -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:48 2026 by rpki-client