This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uWLj6KIkJnGYRGP8Fno-15j4tn8.roa File: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (raw, json) Hash identifier: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU= Subject key identifier: B9:62:E3:E8:A2:24:26:71:98:44:63:FC:16:7A:3E:D7:98:F8:B6:7F Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15BF621C6A1B679C8C14E4A2A7981E Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uWLj6KIkJnGYRGP8Fno-15j4tn8.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35830 IP address blocks: 62.3.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bf:62:1c:6a:1b:67:9c:8c:14:e4:a2:a7:98:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b962e3e8a2242671984463fc167a3ed798f8b67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:41:10:d2:4f:95:72:4f:2c:f5:07:60:35:22: 0e:4d:21:61:cc:0e:00:b9:c6:a6:e8:68:35:81:8c: 10:bc:eb:1b:3b:5f:b1:c7:69:a4:a5:75:b8:17:07: 37:60:ed:dc:ce:ce:2e:6d:4a:30:56:b2:81:58:72: fb:11:bc:13:d5:2b:c5:01:78:b2:97:6f:5e:93:0a: 4f:93:3a:75:dc:63:10:81:59:57:61:8d:ea:09:b3: f0:82:87:89:8c:d4:42:c3:64:1a:18:4f:8b:d3:56: 96:57:68:03:00:1d:ba:e8:0a:2a:0c:20:1d:a4:7b: 27:97:a6:6f:6c:7b:4b:34:ad:46:be:94:23:15:f4: 0c:04:f0:eb:fa:c7:b7:cf:ae:61:29:42:c9:56:e1: 86:19:5e:55:24:a5:3a:6c:3e:a9:3c:c6:73:e4:63: d1:ff:12:9f:5a:3a:30:50:09:46:b3:bc:67:29:41: ea:04:4f:ce:4f:ec:ef:db:fb:ee:e8:e8:b8:67:13: c6:5f:46:66:99:20:0c:22:5c:58:e7:a6:ab:2a:af: ac:ad:0a:cd:6d:35:3a:7b:63:25:30:10:7c:4f:70: d5:23:0f:b3:4f:b4:c6:1b:80:ad:8a:5e:81:9a:af: c0:9c:07:14:61:dd:79:cd:d8:ac:8c:04:75:ff:04: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:E3:E8:A2:24:26:71:98:44:63:FC:16:7A:3E:D7:98:F8:B6:7F X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uWLj6KIkJnGYRGP8Fno-15j4tn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.0.0/24 Signature Algorithm: sha256WithRSAEncryption 39:48:e8:ac:1b:e1:73:7c:c9:e2:bf:e4:3d:72:34:83:cc:d9: d0:da:9f:bb:dc:7b:c0:9d:fa:8f:4e:60:14:30:8c:df:ff:ad: 34:4b:2f:cc:58:42:4b:38:3e:8a:a1:0b:d4:b5:ab:80:53:74: 69:0e:8d:43:07:fa:d9:26:94:6c:01:a5:1e:1e:94:a9:66:45: 4a:08:ad:00:76:66:a1:83:fc:94:57:35:54:e7:80:0e:da:db: bd:e2:4c:78:c3:74:82:1e:7b:56:39:68:c7:5b:15:dc:58:52: e2:da:fe:90:12:9c:74:8c:91:14:db:bf:f0:59:46:fb:b1:f7: 6e:92:1a:b4:80:c8:c4:09:b7:d8:77:fb:c5:51:97:44:83:03: 94:cc:53:96:c8:1f:b2:9f:af:8b:6f:07:5b:f8:30:19:17:53: 68:fe:9f:24:d3:8f:2b:ee:f2:c4:33:2d:5b:19:20:78:5b:22: 60:d3:ea:c1:44:1f:12:91:50:24:ad:e4:53:0b:66:9f:6d:f3: 62:5a:7d:16:e8:72:42:59:59:01:68:b4:74:d2:29:60:01:4b: 40:38:3a:60:f1:b0:6b:22:d6:85:ac:4a:54:85:cd:e9:64:5c: 84:7c:c3:f8:02:dd:d1:6c:a6:95:fd:bc:16:be:2b:5c:41:51: f6:81:7e:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fb9iHGobZ5yMFOSip5geMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTYyZTNlOGEyMjQyNjcxOTg0NDYzZmMxNjdhM2VkNzk4ZjhiNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0EQ0k+Vck8s9QdgNSIOTSFhzA4A ucam6Gg1gYwQvOsbO1+xx2mkpXW4Fwc3YO3czs4ubUowVrKBWHL7EbwT1SvFAXiy l29ekwpPkzp13GMQgVlXYY3qCbPwgoeJjNRCw2QaGE+L01aWV2gDAB266AoqDCAd pHsnl6ZvbHtLNK1GvpQjFfQMBPDr+se3z65hKULJVuGGGV5VJKU6bD6pPMZz5GPR /xKfWjowUAlGs7xnKUHqBE/OT+zv2/vu6Oi4ZxPGX0ZmmSAMIlxY56arKq+srQrN bTU6e2MlMBB8T3DVIw+zT7TGG4Ctil6Bmq/AnAcUYd15zdisjAR1/wQl6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLli4+iiJCZxmERj/BZ6PteY+LZ/MB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvdVdMajZLSWtKbkdZUkdQOEZuby0xNWo0dG44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMAMA0G CSqGSIb3DQEBCwUAA4IBAQA5SOisG+FzfMniv+Q9cjSDzNnQ2p+73HvAnfqPTmAU MIzf/600Sy/MWEJLOD6KoQvUtauAU3RpDo1DB/rZJpRsAaUeHpSpZkVKCK0Admah g/yUVzVU54AO2tu94kx4w3SCHntWOWjHWxXcWFLi2v6QEpx0jJEU27/wWUb7sfdu khq0gMjECbfYd/vFUZdEgwOUzFOWyB+yn6+Lbwdb+DAZF1No/p8k048r7vLEMy1b GSB4WyJg0+rBRB8SkVAkreRTC2afbfNiWn0W6HJCWVkBaLR00ilgAUtAODpg8bBr ItaFrEpUhc3pZFyEfMP4At3RbKaV/bwWvitcQVH2gX4u -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:54 2026 by rpki-client