This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/OfJWGzh3EJhJDnotwpPBu62vy1g.roa File: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (raw, json) Hash identifier: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4= Subject key identifier: 39:F2:56:1B:38:77:10:98:49:0E:7A:2D:C2:93:C1:BB:AD:AF:CB:58 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D1D95CB517FB32362C091DDD034B9 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/OfJWGzh3EJhJDnotwpPBu62vy1g.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59651 IP address blocks: 62.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:95:cb:51:7f:b3:23:62:c0:91:dd:d0:34:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39f2561b38771098490e7a2dc293c1bbadafcb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:36:67:c7:a9:e9:2b:65:b1:14:df:2f:44: 66:02:46:12:69:46:d7:42:2c:78:d3:3b:bc:0d:f1: 79:a2:92:40:55:04:da:9b:f6:7d:c6:16:ec:ba:a3: 49:fd:c8:a7:69:eb:e7:f8:dd:86:cf:53:27:3e:bb: 66:eb:c4:b6:e7:f7:3c:79:2f:ba:5e:de:60:67:fc: 4b:cc:9d:43:d0:6d:b2:5b:dd:85:03:7c:c9:c8:94: 32:c8:71:fc:7d:f1:e7:75:73:d9:18:e6:f2:51:fb: aa:0f:6d:e1:9c:e7:bb:86:22:97:8f:f9:05:ad:8e: f2:e6:55:9b:cb:e6:19:c7:b9:1f:8b:40:80:df:25: aa:7a:f9:87:70:8d:ba:93:cc:13:12:da:f9:4d:3e: 18:c4:c9:fc:db:70:a8:e3:c3:97:97:f4:d5:14:2a: 0c:a6:44:da:7c:d1:85:84:49:5b:b0:62:55:f3:24: c4:99:39:f8:45:44:16:15:06:99:33:84:30:89:fb: 2d:f0:2a:83:78:b3:a0:b7:ae:5c:41:bb:f3:7f:05: f9:3a:7a:16:50:b2:50:df:4b:7c:cd:23:25:ac:ee: 40:ce:ac:51:dc:5c:a1:a4:85:8c:ee:8f:49:4f:b3: 60:ad:44:04:70:31:16:41:fe:04:e2:2b:60:54:a9: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F2:56:1B:38:77:10:98:49:0E:7A:2D:C2:93:C1:BB:AD:AF:CB:58 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/OfJWGzh3EJhJDnotwpPBu62vy1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.233.39.0/24 Signature Algorithm: sha256WithRSAEncryption a7:c9:bf:e4:95:6c:6a:64:2a:c9:d9:13:02:3f:9b:41:49:12: 3b:38:e7:e5:d8:e6:65:24:f1:ea:7d:ff:44:d6:8e:85:7e:43: e2:1b:10:83:34:a0:4c:ea:ef:c9:ba:e2:73:75:27:9b:ad:75: f7:aa:cf:18:a6:b4:ba:70:e3:74:25:3d:c4:c3:e0:5b:64:c6: 93:ce:9f:bb:33:af:5c:8a:3a:f7:7e:f9:ad:27:a6:35:8e:39: a1:b3:2c:a5:00:fd:fd:36:6f:00:b0:90:50:23:de:99:38:8f: d3:c1:8f:a9:48:5a:99:71:40:42:2f:d0:ea:26:b9:08:82:d9: e3:b8:87:e4:83:3d:73:7a:1d:86:04:06:7f:48:c5:30:c5:18: ea:aa:03:f8:c3:0b:e5:d0:7a:78:ce:ee:17:8a:e6:9d:e5:df: 4f:24:31:ea:20:86:30:fb:69:57:5a:d8:39:f6:09:a2:20:c6: 55:c9:57:2e:e8:64:ab:50:74:ff:0d:1c:47:30:5a:92:00:fa: 1e:ef:05:64:a7:56:e9:4c:32:57:46:e0:50:d5:13:b5:38:f7: db:1c:51:d4:8c:e4:33:e7:20:e6:99:86:e9:ca:e3:28:f4:a0: e1:b0:a9:54:33:25:c7:4c:39:46:1f:cd:ab:2c:6b:f7:77:52: 27:cb:c0:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XR2Vy1F/syNiwJHd0DS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWYyNTYxYjM4NzcxMDk4NDkwZTdhMmRjMjkzYzFiYmFkYWZjYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK82Z8ep6StlsRTfL0RmAkYSaUbX Qix40zu8DfF5opJAVQTam/Z9xhbsuqNJ/cinaevn+N2Gz1MnPrtm68S25/c8eS+6 Xt5gZ/xLzJ1D0G2yW92FA3zJyJQyyHH8ffHndXPZGObyUfuqD23hnOe7hiKXj/kF rY7y5lWby+YZx7kfi0CA3yWqevmHcI26k8wTEtr5TT4YxMn823Co48OXl/TVFCoM pkTafNGFhElbsGJV8yTEmTn4RUQWFQaZM4Qwifst8CqDeLOgt65cQbvzfwX5OnoW ULJQ30t8zSMlrO5AzqxR3FyhpIWM7o9JT7NgrUQEcDEWQf4E4itgVKl9QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnyVhs4dxCYSQ56LcKTwbutr8tYMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvT2ZKV0d6aDNFSmhKRG5vdHdwUEJ1NjJ2eTFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuknMA0G CSqGSIb3DQEBCwUAA4IBAQCnyb/klWxqZCrJ2RMCP5tBSRI7OOfl2OZlJPHqff9E 1o6FfkPiGxCDNKBM6u/JuuJzdSebrXX3qs8YprS6cON0JT3Ew+BbZMaTzp+7M69c ijr3fvmtJ6Y1jjmhsyylAP39Nm8AsJBQI96ZOI/TwY+pSFqZcUBCL9DqJrkIgtnj uIfkgz1zeh2GBAZ/SMUwxRjqqgP4wwvl0Hp4zu4Xiuad5d9PJDHqIIYw+2lXWtg5 9gmiIMZVyVcu6GSrUHT/DRxHMFqSAPoe7wVkp1bpTDJXRuBQ1RO1OPfbHFHUjOQz 5yDmmYbpyuMo9KDhsKlUMyXHTDlGH82rLGv3d1Iny8Dw -----END CERTIFICATE-----Generated at Tue Jan 20 00:42:30 2026 by rpki-client