This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/62TElGWuqEvmUBYUDm2rqBVV3SI.roa
File: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (raw, json)
Hash identifier: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=
Subject key identifier: EB:64:C4:94:65:AE:A8:4B:E6:50:16:14:0E:6D:AB:A8:15:55:DD:22
Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial: 019B7CEE11CB4AB52D414085ADA38C60A16F
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/62TElGWuqEvmUBYUDm2rqBVV3SI.roa
Signing time: Fri 02 Jan 2026 04:18:55 +0000
ROA not before: Fri 02 Jan 2026 04:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39203
IP address blocks: 194.105.140.0/24 maxlen: 24
194.105.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:11:cb:4a:b5:2d:41:40:85:ad:a3:8c:60:a1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Validity
Not Before: Jan 2 04:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb64c49465aea84be65016140e6daba81555dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:c4:e3:ae:c9:a0:31:3d:6e:5c:e6:13:70:
f5:6c:af:9d:38:c2:59:88:5f:4c:e8:af:c0:2e:f1:
33:32:a7:45:4e:73:ab:98:6d:b5:76:dd:e2:e3:6d:
3d:87:51:2e:f6:3c:10:d2:cc:cc:b7:04:d3:5d:ed:
19:a5:b5:8e:e7:5c:d0:12:41:96:58:06:2c:37:0b:
c5:db:01:54:b6:d9:fc:3d:28:7d:d1:d9:49:70:4d:
38:01:9e:48:28:c1:fa:da:00:54:5f:db:ab:76:ff:
55:a9:43:46:9d:96:43:7e:44:c1:7b:ea:f6:c7:42:
a0:56:03:80:25:65:87:97:59:6a:7c:be:54:4e:4f:
4b:3a:9b:f7:8a:5f:03:18:10:da:c2:6d:c2:61:a2:
f0:a5:23:b6:2f:fc:c9:2d:9c:55:0d:0a:91:dd:e1:
46:85:6d:1f:95:ae:23:de:02:db:24:7f:4a:f8:cd:
0b:f4:ee:29:c2:c7:a4:08:4e:59:8d:ef:b6:99:d6:
c3:f0:b6:d3:e6:f7:0b:3a:2b:8f:55:9f:60:9e:d2:
2b:5d:b0:04:ea:5b:ac:58:44:fc:bb:6d:cc:18:29:
30:71:e8:3c:83:c7:ee:b3:21:e7:e7:5f:9d:15:ed:
04:c5:55:82:5d:0e:65:10:71:3a:0f:51:18:ba:83:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:64:C4:94:65:AE:A8:4B:E6:50:16:14:0E:6D:AB:A8:15:55:DD:22
X509v3 Authority Key Identifier:
keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/62TElGWuqEvmUBYUDm2rqBVV3SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.140.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:9a:08:ab:b6:c6:d5:4f:71:a8:c9:76:ed:af:50:e5:60:61:
da:a4:f5:fc:50:cc:15:cf:a5:38:6a:73:28:bc:f7:16:3a:22:
cb:f0:0e:ef:1b:7f:87:87:10:08:a6:b5:97:dc:ef:51:06:dc:
52:83:17:08:e7:37:51:df:25:19:67:88:c6:20:4d:76:99:fd:
46:90:6b:18:d1:b7:5f:d3:d7:83:71:f0:f6:63:1b:47:c1:c6:
af:eb:38:0d:07:80:6d:a3:f8:1a:b0:7b:68:af:73:ed:61:e6:
4b:2c:c3:0b:1a:08:4f:c7:5c:b5:77:52:d1:01:aa:34:b5:5e:
ed:e5:e7:c9:dc:c9:b1:e3:91:c0:dc:bc:56:a8:99:a2:0e:0e:
12:7d:38:97:cc:76:00:c4:c4:4e:72:4c:48:73:ab:4e:dd:32:
ea:d6:c2:d9:27:e7:ab:11:bf:ea:9d:7f:b8:d8:f0:ec:b4:c7:
97:91:1a:02:46:53:54:75:85:93:23:d3:e1:2c:4f:59:f1:09:
fb:2c:bc:af:69:7f:c1:99:48:0d:92:83:53:28:78:e8:17:fa:
85:0f:ac:da:d2:b8:e3:28:06:b1:1b:b6:12:c2:ab:b1:f1:13:
76:1f:29:c8:7c:e4:22:89:f7:e1:9b:5c:80:a7:86:75:89:8b:
32:15:11:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87hHLSrUtQUCFraOMYKFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGUzZmRiMTFkODI2YmMwMTY2MzI5MGJkN2NhNDA2Yjhk
NzY1MDcwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjY0YzQ5NDY1YWVhODRiZTY1MDE2MTQwZTZkYWJhODE1NTVkZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRXE467JoDE9blzmE3D1bK+dOMJZ
iF9M6K/ALvEzMqdFTnOrmG21dt3i4209h1Eu9jwQ0szMtwTTXe0ZpbWO51zQEkGW
WAYsNwvF2wFUttn8PSh90dlJcE04AZ5IKMH62gBUX9urdv9VqUNGnZZDfkTBe+r2
x0KgVgOAJWWHl1lqfL5UTk9LOpv3il8DGBDawm3CYaLwpSO2L/zJLZxVDQqR3eFG
hW0fla4j3gLbJH9K+M0L9O4pwsekCE5Zje+2mdbD8LbT5vcLOiuPVZ9gntIrXbAE
6lusWET8u23MGCkwceg8g8fusyHn51+dFe0ExVWCXQ5lEHE6D1EYuoPtEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOtkxJRlrqhL5lAWFA5tq6gVVd0iMB8GA1UdIwQY
MBaAFDMOP9sR2Ca8AWYykL18pAa412UHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYt
OWQyYTQyYWZmYjFiLzEvNjJURWxHV3VxRXZtVUJZVURtMnJxQlZWM1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYtOWQyYTQyYWZmYjFi
LzEvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmmMMA0G
CSqGSIb3DQEBCwUAA4IBAQB9mgirtsbVT3GoyXbtr1DlYGHapPX8UMwVz6U4anMo
vPcWOiLL8A7vG3+HhxAIprWX3O9RBtxSgxcI5zdR3yUZZ4jGIE12mf1GkGsY0bdf
09eDcfD2YxtHwcav6zgNB4Bto/gasHtor3PtYeZLLMMLGghPx1y1d1LRAao0tV7t
5efJ3Mmx45HA3LxWqJmiDg4SfTiXzHYAxMROckxIc6tO3TLq1sLZJ+erEb/qnX+4
2PDstMeXkRoCRlNUdYWTI9PhLE9Z8Qn7LLyvaX/BmUgNkoNTKHjoF/qFD6za0rjj
KAaxG7YSwqux8RN2HynIfOQiiffhm1yAp4Z1iYsyFRHf
-----END CERTIFICATE-----
Generated at Mon Jan 12 09:21:22 2026 by rpki-client