This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/dENVCD_XZ3nvwZuxkEOco4CHe4U.roa File: dENVCD_XZ3nvwZuxkEOco4CHe4U.roa (raw, json) Hash identifier: rRLTwaIJTN8YwcNsiLSuRpjn4wvb6H8iEYEA2TwNDr8= Subject key identifier: 74:43:55:08:3F:D7:67:79:EF:C1:9B:B1:90:43:9C:A3:80:87:7B:85 Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270 Certificate serial: 019B7F15E4798C630C8D9ED68E0E74F1205A Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/dENVCD_XZ3nvwZuxkEOco4CHe4U.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47589 IP address blocks: 62.150.164.0/22 maxlen: 22 62.150.204.0/22 maxlen: 22 62.150.224.0/22 maxlen: 22 62.150.228.0/22 maxlen: 22 62.150.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e4:79:8c:63:0c:8d:9e:d6:8e:0e:74:f1:20:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=744355083fd76779efc19bb190439ca380877b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:c0:b0:3c:c1:0a:bb:de:7b:c7:7e:1a:83: 65:4c:a2:97:e9:af:f0:cc:62:7a:e5:14:c8:10:49: 73:9a:e5:fa:ed:e0:dc:23:85:0d:a7:cf:13:2f:ab: 45:00:dd:09:92:18:b7:23:75:da:7b:17:26:97:95: 9c:29:7a:55:89:96:8f:fb:9c:03:e2:09:ac:5e:3c: 35:da:cc:5d:f7:bf:a5:11:9e:a0:3f:00:d2:01:f3: 6e:26:85:e2:2a:84:0e:3c:bb:34:63:7a:e4:c2:3d: 9d:cb:c6:bf:dc:90:55:5f:a9:8d:93:fe:68:e7:9a: 8b:db:52:1c:60:8d:03:59:4b:36:fd:8f:6d:e0:80: 68:f4:f2:e1:4f:d8:b1:4b:92:41:eb:53:ac:c8:46: 68:a8:09:19:ac:ef:a5:b2:09:61:ff:73:9b:45:dc: 50:de:2d:58:68:ff:65:b3:24:21:05:90:77:b9:41: a5:3f:f2:54:40:dd:9d:c5:11:72:5d:bc:23:3e:d1: c5:69:39:78:aa:12:b0:51:dd:7b:b8:39:c7:fd:56: a3:13:68:26:e7:2b:ec:f9:dd:d5:df:6c:f6:32:e5: 9e:3a:01:98:ff:78:ad:53:96:40:fc:06:81:5b:32: a2:66:44:42:36:d0:fd:30:85:42:03:2a:67:14:b2: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:43:55:08:3F:D7:67:79:EF:C1:9B:B1:90:43:9C:A3:80:87:7B:85 X509v3 Authority Key Identifier: keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/dENVCD_XZ3nvwZuxkEOco4CHe4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.150.164.0/22 62.150.204.0/22 62.150.224.0/21 62.150.244.0/22 Signature Algorithm: sha256WithRSAEncryption 75:00:a2:55:e6:39:20:56:0b:ed:88:59:68:aa:8f:c6:8d:cc: 08:2a:64:20:d6:b4:54:2a:8c:65:ac:65:1d:54:d3:5f:6f:92: 39:76:eb:4b:f4:6c:be:fe:ec:f4:09:68:39:0e:fa:2b:65:70: be:da:4c:a3:bd:18:af:ce:5d:4f:cb:2c:77:6e:f2:73:13:00: f9:d6:42:74:33:d6:0c:26:0f:0d:c2:76:49:5b:2d:06:c9:a0: b3:c9:4a:0f:75:26:bc:a7:28:52:32:ad:11:bf:1b:ba:08:21: c2:6a:69:3c:3c:5a:58:ff:a4:64:1a:4f:90:1e:01:e3:8a:4f: 47:8d:20:e8:78:b5:6a:d8:f3:f9:dd:fe:0c:fd:ec:0f:55:b6: bc:0e:9f:e9:3f:7a:8b:d1:25:ad:5f:37:48:7a:bb:a0:45:6f: 3c:55:61:8f:70:df:b2:51:32:20:3b:dc:09:6a:f7:8a:c5:8d: 20:e4:f9:46:59:a3:df:75:ec:9f:3f:1b:91:21:9c:70:cf:6e: 65:5a:cd:1d:d3:db:14:91:63:65:7c:d7:c6:14:cf:f4:fb:bc: e4:40:16:a3:79:50:b1:d3:a2:ff:3c:fe:09:49:fd:c7:cb:21: 11:2d:f2:e9:87:7c:be:54:5f:50:a4:a7:a3:77:0a:d4:7c:d7: 5f:19:60:b4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FeR5jGMMjZ7Wjg508SBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk MTcyNzAwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQzNTUwODNmZDc2Nzc5ZWZjMTliYjE5MDQzOWNhMzgwODc3Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8PAsDzBCrvee8d+GoNlTKKX6a/w zGJ65RTIEElzmuX67eDcI4UNp88TL6tFAN0Jkhi3I3Xaexcml5WcKXpViZaP+5wD 4gmsXjw12sxd97+lEZ6gPwDSAfNuJoXiKoQOPLs0Y3rkwj2dy8a/3JBVX6mNk/5o 55qL21IcYI0DWUs2/Y9t4IBo9PLhT9ixS5JB61OsyEZoqAkZrO+lsglh/3ObRdxQ 3i1YaP9lsyQhBZB3uUGlP/JUQN2dxRFyXbwjPtHFaTl4qhKwUd17uDnH/VajE2gm 5yvs+d3V32z2MuWeOgGY/3itU5ZA/AaBWzKiZkRCNtD9MIVCAypnFLKpSQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHRDVQg/12d578GbsZBDnKOAh3uFMB8GA1UdIwQY MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt NTAzNGYxOTk1M2EzLzEvZEVOVkNEX1haM252d1p1eGtFT2NvNENIZTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCPpakAwQC PpbMAwQDPpbgAwQCPpb0MA0GCSqGSIb3DQEBCwUAA4IBAQB1AKJV5jkgVgvtiFlo qo/GjcwIKmQg1rRUKoxlrGUdVNNfb5I5dutL9Gy+/uz0CWg5DvorZXC+2kyjvRiv zl1Pyyx3bvJzEwD51kJ0M9YMJg8NwnZJWy0GyaCzyUoPdSa8pyhSMq0Rvxu6CCHC amk8PFpY/6RkGk+QHgHjik9HjSDoeLVq2PP53f4M/ewPVba8Dp/pP3qL0SWtXzdI erugRW88VWGPcN+yUTIgO9wJaveKxY0g5PlGWaPfdeyfPxuRIZxwz25lWs0d09sU kWNlfNfGFM/0+7zkQBajeVCx06L/PP4JSf3HyyERLfLph3y+VF9QpKejdwrUfNdf GWC0 -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:21 2026 by rpki-client