This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/wruoJGCkndyJjRWEP8IowcC6dp8.roa File: wruoJGCkndyJjRWEP8IowcC6dp8.roa (raw, json) Hash identifier: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA= Subject key identifier: C2:BB:A8:24:60:A4:9D:DC:89:8D:15:84:3F:C2:28:C1:C0:BA:76:9F Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019B7911136B24B2D8A74F493E40FAAAC648 Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/wruoJGCkndyJjRWEP8IowcC6dp8.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60788 IP address blocks: 62.223.18.0/24 maxlen: 24 62.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:13:6b:24:b2:d8:a7:4f:49:3e:40:fa:aa:c6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2bba82460a49ddc898d15843fc228c1c0ba769f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ae:65:dc:5f:21:5b:eb:47:75:3e:35:c8:f6: 10:97:0e:69:e7:4e:69:c1:12:ce:30:7b:d5:f0:90: c0:13:bb:9a:cf:8f:25:55:9d:43:91:3b:0e:cd:59: 35:cd:14:d0:68:ed:8a:0e:58:61:24:aa:7b:70:fa: 7b:4c:91:b5:1d:af:2c:d7:3a:ef:82:ab:ec:65:01: 9a:73:9a:ea:f2:5b:4a:c0:50:d2:ea:ae:18:4b:8c: 86:81:c3:4c:96:28:3e:72:a7:1f:98:f7:c3:fb:a5: f3:d9:d9:58:8c:21:cb:bd:10:7a:db:c0:6a:fa:b6: 59:ca:39:8a:88:2a:ce:1a:fe:8d:2d:13:4c:93:35: 1f:bb:97:1f:88:d2:33:99:bf:54:42:9e:25:2f:f7: b7:d0:5e:b0:9f:59:1e:1d:52:c7:eb:b9:21:e4:8a: 50:9f:9a:02:9b:e0:b4:a8:a8:5a:20:3e:97:63:76: 51:6c:8e:c8:28:a0:cc:73:c1:a0:39:bf:da:a0:99: 3f:bf:e3:a8:b8:9c:b5:31:4e:7c:26:e6:c8:25:70: b5:b8:4a:4c:9a:d1:90:8c:13:d6:3e:fa:c3:08:6a: 4a:56:ee:32:3d:f0:c4:74:cb:e2:fd:3b:52:62:ce: 3b:e3:65:5e:29:c1:c9:5b:97:e1:76:94:d7:9e:90: ed:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BB:A8:24:60:A4:9D:DC:89:8D:15:84:3F:C2:28:C1:C0:BA:76:9F X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/wruoJGCkndyJjRWEP8IowcC6dp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.223.18.0/24 62.223.20.0/24 Signature Algorithm: sha256WithRSAEncryption 90:45:15:55:8f:14:7f:34:31:a7:ba:b9:35:f8:91:0f:89:bc: 2a:8e:5e:e9:8d:bc:ab:20:f1:04:f8:d7:95:e0:d7:62:94:0d: 61:06:b9:df:93:f3:c6:46:4f:ef:39:c9:1a:e3:54:33:6f:ba: 2a:67:8b:6e:05:c4:6a:f7:78:d2:8a:27:6b:57:bf:71:23:04: bb:34:4d:ab:b6:8e:56:20:92:4a:92:5c:23:06:b2:62:8a:23: 99:a5:7e:11:75:90:7c:63:66:df:aa:5b:31:07:38:33:bd:eb: a5:5b:9a:ca:ae:2a:d1:90:e2:f2:40:c0:86:64:8e:93:e0:3f: 43:a1:b2:77:ab:12:0f:6a:57:7b:c4:4b:77:5e:be:29:3e:d6: e5:78:8d:f0:30:35:e5:7d:28:c6:27:c3:d9:fa:5d:cd:9a:a4: 19:56:5f:9f:00:94:83:f7:a9:e5:8a:89:95:e9:3d:b8:4f:e9: dc:42:2f:22:f0:d5:42:12:4b:47:1a:cd:1b:39:c0:57:97:a1: 85:e3:e7:b6:5d:25:29:97:03:2a:9d:ca:ad:70:f1:b3:db:6c: 1d:b9:8c:23:c9:36:c4:2a:8e:7f:67:33:c3:b8:99:bf:fe:de: 1c:13:bb:d2:37:91:d4:dc:e3:d9:59:0a:a3:83:30:2f:93:d2: 02:db:ea:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERNrJLLYp09JPkD6qsZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmJiYTgyNDYwYTQ5ZGRjODk4ZDE1ODQzZmMyMjhjMWMwYmE3NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA665l3F8hW+tHdT41yPYQlw5p505p wRLOMHvV8JDAE7uaz48lVZ1DkTsOzVk1zRTQaO2KDlhhJKp7cPp7TJG1Ha8s1zrv gqvsZQGac5rq8ltKwFDS6q4YS4yGgcNMlig+cqcfmPfD+6Xz2dlYjCHLvRB628Bq +rZZyjmKiCrOGv6NLRNMkzUfu5cfiNIzmb9UQp4lL/e30F6wn1keHVLH67kh5IpQ n5oCm+C0qKhaID6XY3ZRbI7IKKDMc8GgOb/aoJk/v+OouJy1MU58JubIJXC1uEpM mtGQjBPWPvrDCGpKVu4yPfDEdMvi/TtSYs4742VeKcHJW5fhdpTXnpDtKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMK7qCRgpJ3ciY0VhD/CKMHAunafMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvd3J1b0pHQ2tuZHlKalJXRVA4SW93Y0M2ZHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPt8SAwQA Pt8UMA0GCSqGSIb3DQEBCwUAA4IBAQCQRRVVjxR/NDGnurk1+JEPibwqjl7pjbyr IPEE+NeV4NdilA1hBrnfk/PGRk/vOcka41Qzb7oqZ4tuBcRq93jSiidrV79xIwS7 NE2rto5WIJJKklwjBrJiiiOZpX4RdZB8Y2bfqlsxBzgzveulW5rKrirRkOLyQMCG ZI6T4D9DobJ3qxIPald7xEt3Xr4pPtbleI3wMDXlfSjGJ8PZ+l3NmqQZVl+fAJSD 96nliomV6T24T+ncQi8i8NVCEktHGs0bOcBXl6GF4+e2XSUplwMqncqtcPGz22wd uYwjyTbEKo5/ZzPDuJm//t4cE7vSN5HU3OPZWQqjgzAvk9IC2+pB -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:25 2026 by rpki-client