This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/qaZbA-D1etRlTM-FU--ac0dB_ss.roa File: qaZbA-D1etRlTM-FU--ac0dB_ss.roa (raw, json) Hash identifier: BN6YD3t+6V0VWjVd4lNO3C0Ljn5myDizRC13ZwN4dhY= Subject key identifier: A9:A6:5B:03:E0:F5:7A:D4:65:4C:CF:85:53:EF:9A:73:47:41:FE:CB Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019B791113F79F6E4FA7F11D9FC44462A155 Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/qaZbA-D1etRlTM-FU--ac0dB_ss.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216167 IP address blocks: 62.223.8.0/24 maxlen: 24 62.223.10.0/24 maxlen: 24 62.223.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:13:f7:9f:6e:4f:a7:f1:1d:9f:c4:44:62:a1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9a65b03e0f57ad4654ccf8553ef9a734741fecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:cd:ba:c7:6a:a0:af:62:68:5b:e6:aa:3c: 74:77:a3:eb:e3:18:90:14:74:cf:ff:69:50:d7:50: 88:cd:57:d1:30:e4:2d:9a:aa:ae:7b:e5:73:1b:8a: e4:7a:49:ed:e4:a8:f3:d9:6f:7e:a6:03:2c:d1:5b: c1:78:5c:41:82:93:a6:1d:10:50:13:aa:31:fa:1e: 00:f7:e4:9d:33:59:b5:57:d2:37:42:1e:6f:97:57: 00:4c:10:c5:5a:18:e3:35:f6:32:42:5b:8d:56:89: 2c:03:ec:37:5f:5c:5f:7c:db:e2:71:c7:0d:74:bd: a5:d4:2a:40:be:70:2b:c7:d4:eb:fe:ca:03:5f:53: 39:0b:9d:48:7a:0c:d8:2a:3b:0f:99:e5:1f:26:5d: 6b:52:57:34:6e:a3:29:ef:19:3e:90:12:e6:d0:91: 3c:16:77:a2:78:a9:9a:d6:b1:06:07:d0:70:0c:14: 9a:8e:6f:5d:93:81:2c:be:18:fe:ea:f4:ab:e3:54: d2:7a:67:f8:1f:74:85:6e:18:0e:d0:fd:bf:32:f1: 46:13:dd:2d:b7:91:c9:bd:42:83:ca:fc:70:3b:06: 28:ba:ef:2b:3e:b9:09:53:b9:11:50:91:9f:9e:c2: e2:06:c3:04:f4:65:11:b7:8b:9a:f2:3f:9b:01:49: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:5B:03:E0:F5:7A:D4:65:4C:CF:85:53:EF:9A:73:47:41:FE:CB X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/qaZbA-D1etRlTM-FU--ac0dB_ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.223.8.0/24 62.223.10.0/23 Signature Algorithm: sha256WithRSAEncryption b1:8e:d9:f3:72:e3:06:de:72:50:76:3f:c9:07:f9:b9:ec:75: 15:fe:06:b0:59:e1:03:43:6b:b4:09:08:05:08:9f:38:f0:6f: cc:32:5f:98:79:5b:d9:54:d2:c0:76:6b:9d:a9:51:57:f6:82: 82:9d:fa:33:16:dd:43:89:54:b7:6c:0f:40:be:c6:b5:3e:65: 1b:1e:fc:06:7b:99:5e:a8:88:f6:5a:ed:f3:8d:2d:14:18:c4: 55:f6:0a:47:33:2e:db:76:37:76:52:0a:b2:24:d5:9f:40:e7: c6:94:ba:c4:87:93:24:d3:7d:62:9c:80:57:64:5c:76:22:09: 98:1f:e7:e2:61:03:66:d8:94:d5:06:24:e2:9f:9a:60:60:e0: 14:9d:68:b6:63:0c:9a:45:51:63:af:fd:a8:ed:36:08:ec:9e: a9:30:7f:a2:21:70:f4:ad:cb:87:d1:7f:e5:06:80:4a:17:4a: 2f:d7:54:8a:5d:f0:bb:56:df:aa:94:b7:1b:bb:1e:0e:4d:24: 65:f5:b6:a4:f4:bd:87:98:95:dd:43:72:21:18:19:68:e3:12: 56:87:f2:91:58:66:ef:28:39:2b:fb:95:3d:38:e1:5a:d6:e6: a4:82:99:eb:54:e8:2f:b8:b2:a6:08:26:31:b0:e7:ae:f1:84: f1:a6:54:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERP3n25Pp/Edn8REYqFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWE2NWIwM2UwZjU3YWQ0NjU0Y2NmODU1M2VmOWE3MzQ3NDFmZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmXNusdqoK9iaFvmqjx0d6Pr4xiQ FHTP/2lQ11CIzVfRMOQtmqque+VzG4rkeknt5Kjz2W9+pgMs0VvBeFxBgpOmHRBQ E6ox+h4A9+SdM1m1V9I3Qh5vl1cATBDFWhjjNfYyQluNVoksA+w3X1xffNvicccN dL2l1CpAvnArx9Tr/soDX1M5C51IegzYKjsPmeUfJl1rUlc0bqMp7xk+kBLm0JE8 FneieKma1rEGB9BwDBSajm9dk4Esvhj+6vSr41TSemf4H3SFbhgO0P2/MvFGE90t t5HJvUKDyvxwOwYouu8rPrkJU7kRUJGfnsLiBsME9GURt4ua8j+bAUmQrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKmmWwPg9XrUZUzPhVPvmnNHQf7LMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvcWFaYkEtRDFldFJsVE0tRlUtLWFjMGRCX3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPt8IAwQB Pt8KMA0GCSqGSIb3DQEBCwUAA4IBAQCxjtnzcuMG3nJQdj/JB/m57HUV/gawWeED Q2u0CQgFCJ848G/MMl+YeVvZVNLAdmudqVFX9oKCnfozFt1DiVS3bA9Avsa1PmUb HvwGe5leqIj2Wu3zjS0UGMRV9gpHMy7bdjd2UgqyJNWfQOfGlLrEh5Mk031inIBX ZFx2IgmYH+fiYQNm2JTVBiTin5pgYOAUnWi2YwyaRVFjr/2o7TYI7J6pMH+iIXD0 rcuH0X/lBoBKF0ov11SKXfC7Vt+qlLcbux4OTSRl9bak9L2HmJXdQ3IhGBlo4xJW h/KRWGbvKDkr+5U9OOFa1uakgpnrVOgvuLKmCCYxsOeu8YTxplTk -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:00 2026 by rpki-client