This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/i4q0EQdBFH93II4eDRiSHOLxQeA.roa File: i4q0EQdBFH93II4eDRiSHOLxQeA.roa (raw, json) Hash identifier: dk6dcEYcetWhFVCOrHQQFbsHCLjgjCUhe6dwUDmarb4= Subject key identifier: 8B:8A:B4:11:07:41:14:7F:77:20:8E:1E:0D:18:92:1C:E2:F1:41:E0 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EB8CCC9D76C16DC47138667C54DF1 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/i4q0EQdBFH93II4eDRiSHOLxQeA.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42086 IP address blocks: 62.204.141.0/24 maxlen: 24 62.204.156.0/23 maxlen: 23 82.103.87.0/24 maxlen: 24 212.91.190.0/24 maxlen: 24 213.169.52.0/24 maxlen: 24 213.169.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b8:cc:c9:d7:6c:16:dc:47:13:86:67:c5:4d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b8ab4110741147f77208e1e0d18921ce2f141e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ac:b1:80:f0:71:fa:36:c3:81:08:6b:99:5c: 09:7c:44:b5:3f:14:84:9b:2a:a0:09:e8:ce:7c:70: 00:93:d2:44:35:a7:77:c0:34:64:58:42:28:fb:f2: 90:03:d8:70:4d:04:88:87:30:f4:5b:2e:d5:77:a2: e5:4c:a7:b5:dd:81:cb:3f:05:9f:fe:2a:3e:d7:86: 9b:21:46:15:8b:db:c0:10:49:11:e4:01:5f:de:c0: 0b:09:12:01:8e:a9:4a:4a:52:bf:0b:1f:d1:7f:b2: 8f:63:2a:ef:61:df:74:06:e2:a7:c2:a1:c5:35:fc: 8a:8d:43:57:cc:46:be:c4:b1:fc:48:50:13:14:96: c9:72:a5:6a:d9:5f:83:33:7d:dc:72:21:66:fd:79: f1:d4:50:f2:12:84:b1:30:77:27:39:20:09:61:e4: 39:aa:31:41:52:fd:8f:e2:fc:3d:a3:b4:08:7f:7d: 4d:b9:d4:b8:90:8e:6f:79:17:ef:4f:b9:fc:39:33: 1a:9d:2e:08:dd:62:16:54:da:bc:a3:09:ec:5d:cc: 91:59:7e:f9:29:9e:bf:6f:cc:5c:2a:8a:5e:14:fe: 8f:71:71:10:e9:50:e9:7e:f6:dc:a5:f0:8a:2a:bf: 8a:c2:68:ed:34:aa:3f:cf:d7:5e:d3:1f:85:09:65: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8A:B4:11:07:41:14:7F:77:20:8E:1E:0D:18:92:1C:E2:F1:41:E0 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/i4q0EQdBFH93II4eDRiSHOLxQeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.204.141.0/24 62.204.156.0/23 82.103.87.0/24 212.91.190.0/24 213.169.52.0/23 Signature Algorithm: sha256WithRSAEncryption 06:11:5d:88:a8:93:2e:9c:ca:03:03:1b:db:d9:93:b7:dc:cc: 19:99:35:e3:8c:0d:1c:ae:ce:70:ce:13:25:0b:08:aa:9d:15: 6f:db:32:f1:fb:e6:24:17:3c:01:3b:7d:05:4c:fe:bf:a7:d3: 03:ae:2b:d7:91:b1:e1:05:4a:af:55:09:d9:7d:d1:23:7a:4c: ca:f0:a6:71:95:fd:37:14:1a:36:a8:84:03:1f:6e:8c:42:2d: 0f:d5:f2:dc:f0:ea:d6:c5:28:44:22:d1:1f:d3:46:84:bc:2b: e6:37:21:97:cb:5a:aa:34:e4:68:eb:fb:67:5a:bc:27:96:e9: 1e:bb:6e:6f:dd:f4:76:12:27:00:ef:4f:9a:1d:14:2e:eb:1f: 8e:4e:08:0c:6f:3e:2d:bf:29:68:39:38:de:86:ae:3b:95:6d: c4:6e:4f:81:67:98:b8:e4:52:d4:07:05:cc:a4:85:14:5a:e4: eb:fa:73:5c:19:17:fa:23:67:2d:8f:09:7e:60:65:a8:3c:da: 1c:08:de:5f:40:3a:44:ca:02:2b:59:36:22:35:95:dc:70:cb: 7a:4c:3b:96:31:2e:0b:82:73:7f:be:bf:44:5f:80:cf:92:c1: 71:10:2f:ea:b4:38:9e:cf:ed:1e:7e:b9:f6:99:ea:14:ec:f8: 26:82:8e:01 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5frjMyddsFtxHE4ZnxU3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjhhYjQxMTA3NDExNDdmNzcyMDhlMWUwZDE4OTIxY2UyZjE0MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16yxgPBx+jbDgQhrmVwJfES1PxSE myqgCejOfHAAk9JENad3wDRkWEIo+/KQA9hwTQSIhzD0Wy7Vd6LlTKe13YHLPwWf /io+14abIUYVi9vAEEkR5AFf3sALCRIBjqlKSlK/Cx/Rf7KPYyrvYd90BuKnwqHF NfyKjUNXzEa+xLH8SFATFJbJcqVq2V+DM33cciFm/Xnx1FDyEoSxMHcnOSAJYeQ5 qjFBUv2P4vw9o7QIf31NudS4kI5veRfvT7n8OTManS4I3WIWVNq8ownsXcyRWX75 KZ6/b8xcKopeFP6PcXEQ6VDpfvbcpfCKKr+KwmjtNKo/z9de0x+FCWUgsQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIuKtBEHQRR/dyCOHg0Ykhzi8UHgMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvaTRxMEVRZEJGSDkzSUk0ZURSaVNIT0x4UWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPsyNAwQB PsycAwQAUmdXAwQA1Fu+AwQB1ak0MA0GCSqGSIb3DQEBCwUAA4IBAQAGEV2IqJMu nMoDAxvb2ZO33MwZmTXjjA0crs5wzhMlCwiqnRVv2zLx++YkFzwBO30FTP6/p9MD rivXkbHhBUqvVQnZfdEjekzK8KZxlf03FBo2qIQDH26MQi0P1fLc8OrWxShEItEf 00aEvCvmNyGXy1qqNORo6/tnWrwnlukeu25v3fR2EicA70+aHRQu6x+OTggMbz4t vyloOTjehq47lW3Ebk+BZ5i45FLUBwXMpIUUWuTr+nNcGRf6I2ctjwl+YGWoPNoc CN5fQDpEygIrWTYiNZXccMt6TDuWMS4LgnN/vr9EX4DPksFxEC/qtDiez+0efrn2 meoU7Pgmgo4B -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:34 2026 by rpki-client