This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R08xa-Ocb_b_mHJSSEnimXsFscg.roa File: R08xa-Ocb_b_mHJSSEnimXsFscg.roa (raw, json) Hash identifier: M4I4/3iBD7AMe/to8CAqyHiOUaozH1F6CCZbJiScR3E= Subject key identifier: 47:4F:31:6B:E3:9C:6F:F6:FF:98:72:52:48:49:E2:99:7B:05:B1:C8 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360E9BBADA9F23A90D0898311E3F62 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R08xa-Ocb_b_mHJSSEnimXsFscg.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62300 IP address blocks: 62.233.47.0/24 maxlen: 24 194.32.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:9b:ba:da:9f:23:a9:0d:08:98:31:1e:3f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=474f316be39c6ff6ff9872524849e2997b05b1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:b1:ee:e1:19:7c:6b:db:3c:b7:c3:0e:86: 60:8b:df:ba:6a:dc:44:80:21:8b:dc:c5:23:73:d5: 07:01:2a:ae:df:57:b1:8c:5e:81:44:9a:97:2d:51: 0a:0f:ad:64:8e:25:de:d2:86:38:01:4f:ae:ba:07: 1c:39:97:26:5a:d3:c1:b8:40:72:75:57:e7:5f:11: 75:40:37:0a:c6:9a:d6:be:f6:9e:f2:df:98:fa:a2: c6:71:98:46:f3:ff:97:f2:50:34:0d:44:3b:4a:fe: 46:7d:0b:5d:90:80:aa:66:fb:41:e9:77:f5:2b:bc: 3c:2b:ba:7b:f5:a2:52:14:2f:82:7f:6d:4d:92:3d: 21:95:23:93:5a:31:0e:d6:5f:4e:3c:20:6c:7b:06: 6d:66:15:57:a5:e4:ff:2f:36:cb:b6:71:b6:a8:56: 43:75:b2:77:4e:de:68:15:12:6e:d4:56:e9:a9:b4: 2a:13:9d:b7:a9:ae:9d:9b:a0:82:8d:4c:ba:66:e6: fe:79:f8:68:d6:79:4c:c6:a3:81:13:79:81:c6:29: 3d:70:ba:e3:7b:7f:4e:b7:94:37:dc:b1:fb:1b:63: 73:ff:5d:85:79:81:f3:ea:3e:60:75:a6:75:71:d2: 03:a5:8a:26:9f:ba:b7:c5:dc:a3:c9:73:14:de:19: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:31:6B:E3:9C:6F:F6:FF:98:72:52:48:49:E2:99:7B:05:B1:C8 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R08xa-Ocb_b_mHJSSEnimXsFscg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.233.47.0/24 194.32.241.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:ee:f7:75:05:7c:fa:0a:d0:52:2b:b4:15:3e:2c:7d:48:75: a2:6d:1a:55:bd:b6:4b:b2:7a:c9:3c:56:7c:82:8f:fe:83:ba: c6:18:74:19:c2:2b:e3:ad:3f:b3:93:9d:71:2d:f7:b5:57:fd: d4:43:28:20:97:93:80:84:e3:eb:ac:ce:9b:22:cb:0d:8e:4b: 94:cf:2d:7d:7c:bb:14:d7:30:2d:b1:9d:0f:85:f9:4c:d3:bd: 8b:d6:b2:5a:38:0a:32:a0:78:ec:88:3a:7f:e0:16:ff:14:6f: 27:f5:3f:ba:04:92:79:a4:65:76:ce:8f:16:10:b6:b0:de:e6: f1:75:ef:4b:f1:73:d7:06:08:c3:3f:39:7d:fe:06:aa:1d:15: 2f:74:36:fe:85:26:43:88:79:d7:04:ed:ac:45:35:12:b5:20: c2:cd:e5:1f:96:19:6c:83:b9:d5:ad:68:26:2f:6c:1d:ce:4b: a7:8d:8e:b3:c2:25:1d:cd:02:36:8f:ff:13:56:7c:ae:60:7d: ac:e1:3d:f6:97:b5:8a:6f:50:b1:a2:68:75:3b:bd:c6:bc:dd: 39:0f:48:2c:d2:59:14:e2:1a:2d:d4:dd:20:fd:6a:cc:1d:82: 4c:40:a0:ca:c9:73:ec:f6:a9:78:36:27:4b:10:40:70:63:23: 66:3b:a8:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Ng6butqfI6kNCJgxHj9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzRmMzE2YmUzOWM2ZmY2ZmY5ODcyNTI0ODQ5ZTI5OTdiMDViMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLOx7uEZfGvbPLfDDoZgi9+6atxE gCGL3MUjc9UHASqu31exjF6BRJqXLVEKD61kjiXe0oY4AU+uugccOZcmWtPBuEBy dVfnXxF1QDcKxprWvvae8t+Y+qLGcZhG8/+X8lA0DUQ7Sv5GfQtdkICqZvtB6Xf1 K7w8K7p79aJSFC+Cf21Nkj0hlSOTWjEO1l9OPCBsewZtZhVXpeT/LzbLtnG2qFZD dbJ3Tt5oFRJu1FbpqbQqE523qa6dm6CCjUy6Zub+efho1nlMxqOBE3mBxik9cLrj e39Ot5Q33LH7G2Nz/12FeYHz6j5gdaZ1cdIDpYomn7q3xdyjyXMU3hmw7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEdPMWvjnG/2/5hyUkhJ4pl7BbHIMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvUjA4eGEtT2NiX2JfbUhKU1NFbmltWHNGc2NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPukvAwQA wiDxMA0GCSqGSIb3DQEBCwUAA4IBAQAd7vd1BXz6CtBSK7QVPix9SHWibRpVvbZL snrJPFZ8go/+g7rGGHQZwivjrT+zk51xLfe1V/3UQyggl5OAhOPrrM6bIssNjkuU zy19fLsU1zAtsZ0PhflM072L1rJaOAoyoHjsiDp/4Bb/FG8n9T+6BJJ5pGV2zo8W ELaw3ubxde9L8XPXBgjDPzl9/gaqHRUvdDb+hSZDiHnXBO2sRTUStSDCzeUflhls g7nVrWgmL2wdzkunjY6zwiUdzQI2j/8TVnyuYH2s4T32l7WKb1Cxomh1O73GvN05 D0gs0lkU4hot1N0g/WrMHYJMQKDKyXPs9ql4NidLEEBwYyNmO6jc -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:33 2026 by rpki-client