This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/I71PuVVYIMK7eKx3TbD6UmTtfmY.roa File: I71PuVVYIMK7eKx3TbD6UmTtfmY.roa (raw, json) Hash identifier: f8xo+SLEbeRvrFxn4sfL5Jy2dZKJkorXXcSR+3YzFlo= Subject key identifier: 23:BD:4F:B9:55:58:20:C2:BB:78:AC:77:4D:B0:FA:52:64:ED:7E:66 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED3D6CEDB524BBB5E99C63679C32B Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/I71PuVVYIMK7eKx3TbD6UmTtfmY.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202209 IP address blocks: 62.204.129.0/24 maxlen: 24 82.103.82.0/24 maxlen: 24 82.103.93.0/24 maxlen: 24 85.118.85.0/24 maxlen: 24 85.118.86.0/24 maxlen: 24 212.91.177.0/24 maxlen: 24 217.79.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:d6:ce:db:52:4b:bb:5e:99:c6:36:79:c3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23bd4fb9555820c2bb78ac774db0fa5264ed7e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:0e:e2:27:4e:37:fc:0c:66:73:3a:0d:bb: 8a:02:50:3a:cb:d5:42:7c:18:1a:88:40:1a:24:48: 4c:a4:76:f5:7f:7a:c9:df:eb:60:80:dc:bc:3f:72: 2a:9b:d7:34:ee:ee:ef:dd:ab:59:5c:5f:57:f2:f9: d3:7b:cd:aa:92:59:ba:22:a5:c6:0a:44:cb:be:7d: 8c:84:8f:b6:7c:48:6d:30:f6:d8:ba:b7:b7:e9:e3: 30:2e:57:a9:18:b9:c9:82:e6:10:63:e6:00:83:03: 1b:96:b9:e1:b7:4b:19:45:f5:5c:6c:03:15:71:19: ea:7d:c6:5a:18:91:e6:c2:84:e0:00:9a:5b:28:48: b2:fb:cf:7c:ef:f8:d3:0c:a9:84:08:0b:34:92:3f: 19:63:62:e3:aa:d4:e8:9f:36:0e:31:67:88:82:e3: 82:e3:2b:fe:0e:a0:02:44:46:3c:30:70:66:5e:af: 68:8a:70:04:57:b8:bb:98:8c:7d:e7:1a:ce:9c:dd: b6:a2:ab:85:35:a3:58:5a:1f:b1:95:bb:84:20:c4: 53:40:89:a6:73:25:97:c2:30:04:d7:2f:c4:2d:de: 96:9a:b5:28:d5:46:d3:9d:50:b3:0e:42:ba:75:e1: 44:95:47:9b:00:5d:9e:1b:4b:95:f3:be:39:b1:1d: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:4F:B9:55:58:20:C2:BB:78:AC:77:4D:B0:FA:52:64:ED:7E:66 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/I71PuVVYIMK7eKx3TbD6UmTtfmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.204.129.0/24 82.103.82.0/24 82.103.93.0/24 85.118.85.0-85.118.86.255 212.91.177.0/24 217.79.33.0/24 Signature Algorithm: sha256WithRSAEncryption 24:db:3a:fe:41:5e:32:75:66:18:aa:98:25:59:94:ab:f0:ac: fd:f0:19:cb:22:76:dc:56:a4:02:6c:b9:64:63:98:ae:17:7e: 07:c8:e5:fc:64:fe:a1:3c:0b:04:06:e7:af:d4:d0:a0:93:27: 1c:48:c2:89:d5:8a:81:3f:aa:5e:a2:ba:e9:93:0f:92:ba:cb: 27:68:35:5a:84:e7:c5:ea:af:07:be:e6:81:26:42:64:1e:49: 4c:ce:fa:65:26:ef:ce:c7:81:d1:b5:85:1a:c5:d2:9a:b9:4e: d5:15:c6:7f:ac:b0:fd:6b:dc:90:85:37:68:23:78:14:b7:40: 09:ee:65:b8:8e:1c:00:d7:88:8d:27:21:93:a4:80:7e:08:95: ad:43:e9:14:2e:a9:4b:e9:8a:02:71:fb:ce:ea:64:c9:8e:4b: 8d:33:c1:e7:cc:3a:c7:e7:4e:54:88:7e:86:44:c4:91:15:37: db:12:b4:02:62:74:b0:ad:b9:a7:2b:e2:ee:65:72:46:0b:ce: c8:b1:26:88:c2:bf:98:38:d8:2c:32:c5:47:fc:df:a7:6f:aa: c8:41:35:63:d0:f3:f4:2d:72:c0:88:c9:c3:87:25:4c:7c:42: 6b:ee:0a:74:19:0f:6b:68:36:c0:ec:e9:c2:27:0a:ed:b6:26: 52:e9:26:a8 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5ftPWzttSS7temcY2ecMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2JkNGZiOTU1NTgyMGMyYmI3OGFjNzc0ZGIwZmE1MjY0ZWQ3ZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu0O4idON/wMZnM6DbuKAlA6y9VC fBgaiEAaJEhMpHb1f3rJ3+tggNy8P3Iqm9c07u7v3atZXF9X8vnTe82qklm6IqXG CkTLvn2MhI+2fEhtMPbYure36eMwLlepGLnJguYQY+YAgwMblrnht0sZRfVcbAMV cRnqfcZaGJHmwoTgAJpbKEiy+8987/jTDKmECAs0kj8ZY2LjqtTonzYOMWeIguOC 4yv+DqACREY8MHBmXq9oinAEV7i7mIx95xrOnN22oquFNaNYWh+xlbuEIMRTQImm cyWXwjAE1y/ELd6WmrUo1UbTnVCzDkK6deFElUebAF2eG0uV8745sR1i5QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFCO9T7lVWCDCu3isd02w+lJk7X5mMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvSTcxUHVWVllJTUs3ZUt4M1RiRDZVbVR0Zm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAPsyBAwQA UmdSAwQAUmddMAwDBABVdlUDBABVdlYDBADUW7EDBADZTyEwDQYJKoZIhvcNAQEL BQADggEBACTbOv5BXjJ1ZhiqmCVZlKvwrP3wGcsidtxWpAJsuWRjmK4XfgfI5fxk /qE8CwQG56/U0KCTJxxIwonVioE/ql6iuumTD5K6yydoNVqE58Xqrwe+5oEmQmQe SUzO+mUm787HgdG1hRrF0pq5TtUVxn+ssP1r3JCFN2gjeBS3QAnuZbiOHADXiI0n IZOkgH4Ila1D6RQuqUvpigJx+87qZMmOS40zwefMOsfnTlSIfoZExJEVN9sStAJi dLCtuacr4u5lckYLzsixJojCv5g42CwyxUf836dvqshBNWPQ8/QtcsCIycOHJUx8 QmvuCnQZD2toNsDs6cInCu22JlLpJqg= -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:30 2026 by rpki-client