This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/a-CG0EdlGf_I1PJjTgHujhf7tVM.roa File: a-CG0EdlGf_I1PJjTgHujhf7tVM.roa (raw, json) Hash identifier: CGd/1+YrJhm5fLArjGTSAaDtx6ze/TdderTPkWaTbLs= Subject key identifier: 6B:E0:86:D0:47:65:19:FF:C8:D4:F2:63:4E:01:EE:8E:17:FB:B5:53 Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019B7F8316D3B778E0E9C4B273076185D811 Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/a-CG0EdlGf_I1PJjTgHujhf7tVM.roa Signing time: Fri 02 Jan 2026 16:20:55 +0000 ROA not before: Fri 02 Jan 2026 16:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6700 IP address blocks: 62.108.96.0/19 maxlen: 19 62.108.103.0/24 maxlen: 24 62.108.105.0/24 maxlen: 24 62.108.107.0/24 maxlen: 24 62.193.128.0/19 maxlen: 19 91.148.64.0/18 maxlen: 18 91.148.72.0/24 maxlen: 24 91.223.162.0/24 maxlen: 24 178.20.205.0/24 maxlen: 24 185.47.210.0/24 maxlen: 24 194.106.160.0/19 maxlen: 19 194.106.166.0/24 maxlen: 24 194.106.170.0/24 maxlen: 24 195.252.64.0/18 maxlen: 18 213.244.232.0/21 maxlen: 21 217.26.64.0/20 maxlen: 20 2001:8c8::/32 maxlen: 32 2a02:e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:16:d3:b7:78:e0:e9:c4:b2:73:07:61:85:d8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6be086d0476519ffc8d4f2634e01ee8e17fbb553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:2f:e7:ae:e5:ce:9d:7b:77:fb:e5:ec:6f: 8b:65:b3:16:80:ea:e5:ab:c2:ef:ac:79:18:38:a2: 02:8b:28:65:bb:8d:95:98:df:22:5d:4c:73:e7:47: c3:b3:91:db:21:a5:65:a7:7a:ea:57:d8:69:53:1d: fa:a3:2a:72:6f:b4:a6:35:9f:c6:15:70:45:00:57: 72:1d:21:6b:22:62:49:ea:79:5d:fb:51:b2:6d:e0: bc:cd:e4:97:a6:18:dc:ef:c7:85:58:2d:c6:25:2d: 20:a8:7d:e1:ee:d8:e9:f3:84:d6:5a:d7:cd:0f:d4: 67:c1:f9:80:06:28:01:6b:a0:6f:78:6a:e8:0d:7c: aa:bf:e2:09:4e:2a:c9:a3:ce:50:7b:e0:31:51:b6: 22:87:5b:ec:21:20:cb:a8:bf:ef:4b:57:3c:d0:cc: 34:bf:a5:84:7b:b9:89:28:8e:55:e4:a1:9a:c9:91: 81:7b:8f:4d:de:c5:be:d4:c8:e6:7e:d6:b7:cf:bb: 74:49:91:eb:31:db:43:b4:bc:af:0e:01:fb:8a:b8: 92:03:23:53:39:d8:aa:56:e3:08:e1:10:13:64:94: 17:2d:53:cd:35:5b:ee:29:23:74:b8:df:97:ed:d6: e4:d7:0f:5b:6e:c3:f8:fb:83:5c:0e:98:37:d0:07: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E0:86:D0:47:65:19:FF:C8:D4:F2:63:4E:01:EE:8E:17:FB:B5:53 X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/a-CG0EdlGf_I1PJjTgHujhf7tVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.96.0/19 62.193.128.0/19 91.148.64.0/18 91.223.162.0/24 178.20.205.0/24 185.47.210.0/24 194.106.160.0/19 195.252.64.0/18 213.244.232.0/21 217.26.64.0/20 IPv6: 2001:8c8::/32 2a02:e40::/32 Signature Algorithm: sha256WithRSAEncryption 47:35:ca:aa:d3:28:52:58:49:ee:1e:df:83:90:35:5f:88:b7: 93:a4:75:d1:71:49:67:3a:bd:ee:0b:d6:87:34:c6:08:38:c5: 3c:af:68:fc:09:7c:df:13:43:c2:3f:4f:9e:d7:1e:3d:bf:c5: f7:ed:be:0a:61:81:f1:0d:4e:de:a2:be:42:72:18:4c:67:a5: 2c:1d:e2:c8:9b:9f:4e:f5:f3:98:50:aa:e6:52:03:46:ce:14: 8d:27:11:6d:96:7f:64:85:a8:e9:62:49:55:5d:ed:f3:e5:9d: 64:29:5d:98:f3:5a:20:f1:cc:d2:82:ff:f0:43:51:93:1e:a6: aa:21:f6:db:9f:50:d4:9b:ab:81:5c:cb:57:66:21:06:39:f4: 5e:da:4d:07:9e:9d:68:99:77:4e:52:a1:2c:92:c9:95:9d:71: 4b:07:7d:95:7b:b7:73:3b:b8:09:08:81:d6:19:d1:cf:e6:16: 23:1e:12:9b:44:3c:47:ba:34:5d:d0:6f:3e:5b:2c:b8:c1:ef: cd:08:71:83:0f:24:f0:82:11:7f:46:49:07:5c:7d:7c:14:0e: 0e:31:f3:1a:f5:b9:69:39:1c:eb:34:9c:03:cc:88:17:34:77: 73:cd:dd:2c:0a:fd:a3:0f:82:83:a9:0d:db:53:3e:74:d6:fb: 4f:87:8c:c3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt/gxbTt3jg6cSycwdhhdgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmUwODZkMDQ3NjUxOWZmYzhkNGYyNjM0ZTAxZWU4ZTE3ZmJiNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc8v567lzp17d/vl7G+LZbMWgOrl q8LvrHkYOKICiyhlu42VmN8iXUxz50fDs5HbIaVlp3rqV9hpUx36oypyb7SmNZ/G FXBFAFdyHSFrImJJ6nld+1GybeC8zeSXphjc78eFWC3GJS0gqH3h7tjp84TWWtfN D9RnwfmABigBa6BveGroDXyqv+IJTirJo85Qe+AxUbYih1vsISDLqL/vS1c80Mw0 v6WEe7mJKI5V5KGayZGBe49N3sW+1Mjmfta3z7t0SZHrMdtDtLyvDgH7iriSAyNT OdiqVuMI4RATZJQXLVPNNVvuKSN0uN+X7dbk1w9bbsP4+4NcDpg30AdZFQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFGvghtBHZRn/yNTyY04B7o4X+7VTMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvYS1DRzBFZGxHZl9JMVBKalRnSHVqaGY3dFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQFPmxgAwQF PsGAAwQGW5RAAwQAW9+iAwQAshTNAwQAuS/SAwQFwmqgAwQGw/xAAwQD1fToAwQE 2RpAMBQEAgACMA4DBQAgAQjIAwUAKgIOQDANBgkqhkiG9w0BAQsFAAOCAQEARzXK qtMoUlhJ7h7fg5A1X4i3k6R10XFJZzq97gvWhzTGCDjFPK9o/Al83xNDwj9Pntce Pb/F9+2+CmGB8Q1O3qK+QnIYTGelLB3iyJufTvXzmFCq5lIDRs4UjScRbZZ/ZIWo 6WJJVV3t8+WdZCldmPNaIPHM0oL/8ENRkx6mqiH2259Q1JurgVzLV2YhBjn0XtpN B56daJl3TlKhLJLJlZ1xSwd9lXu3czu4CQiB1hnRz+YWIx4Sm0Q8R7o0XdBvPlss uMHvzQhxgw8k8IIRf0ZJB1x9fBQODjHzGvW5aTkc6zScA8yIFzR3c83dLAr9ow+C g6kN21M+dNb7T4eMww== -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:46 2026 by rpki-client