This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa File: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (raw, json) Hash identifier: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk= Subject key identifier: 1F:8E:32:DB:30:34:B5:CB:F1:D5:F5:D9:D0:6E:4E:43:8D:CA:A4:18 Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Certificate serial: 019B79ECA964643E9FC3FFC17D44A251F291 Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 62.108.64.0/22 maxlen: 24 62.108.68.0/22 maxlen: 24 62.108.72.0/22 maxlen: 24 62.108.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a9:64:64:3e:9f:c3:ff:c1:7d:44:a2:51:f2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f8e32db3034b5cbf1d5f5d9d06e4e438dcaa418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:04:de:3c:92:14:f7:d6:8d:e1:a9:55:09: 10:ad:89:7f:4e:73:52:4d:76:de:0e:01:bf:cc:5d: 68:d4:05:35:2b:41:1c:ef:6e:56:1e:c4:c7:b4:cd: cc:d1:57:6f:47:6d:a3:93:d3:b8:69:14:75:f8:cb: 1e:74:f5:c3:2f:bb:ad:ac:07:59:52:0e:5f:72:bb: ba:a5:71:23:8f:6d:08:c2:e9:3d:40:8e:16:23:c1: 5f:0e:67:a8:d2:6f:57:20:0f:f8:06:78:e5:27:e9: a0:8d:c4:0f:c3:34:e1:f6:9d:57:30:75:43:ab:76: 49:f1:d0:92:33:d6:03:ab:cc:f3:7a:7a:f9:e6:cd: 17:d9:ff:c2:12:d2:e9:87:ca:7b:d8:42:8d:cd:bb: 6a:11:3f:47:5d:67:cb:18:69:bb:15:a8:e4:76:34: f4:5b:75:0b:29:e4:44:ca:3b:4d:44:76:c9:54:c8: be:e7:25:06:2a:90:d2:ef:cd:30:f3:72:a2:93:1f: 23:97:78:7c:ae:c5:1b:cf:86:c9:b6:01:9f:49:c3: 01:28:76:3b:24:47:87:32:c9:c2:9b:02:12:71:d7: 5f:f9:8a:02:f6:b1:87:60:ca:99:75:3a:91:51:07: 1b:91:7d:91:aa:aa:e0:4b:55:f1:d6:d6:f6:25:c0: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8E:32:DB:30:34:B5:CB:F1:D5:F5:D9:D0:6E:4E:43:8D:CA:A4:18 X509v3 Authority Key Identifier: keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.64.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:3d:ab:65:d8:f3:9b:5c:25:29:fb:b0:db:eb:62:d7:01:ac: 1a:06:26:5d:38:d6:32:5b:5b:d2:22:4a:22:0c:ff:d3:36:58: df:36:79:ac:3a:8c:8f:26:2f:59:0a:b5:d6:21:bb:40:63:31: 90:5a:8c:10:a1:18:ef:d1:06:d5:34:08:ec:af:1e:90:73:28: d9:c8:72:1f:7f:44:a4:f9:a8:2a:09:71:da:e4:94:37:b6:f0: 18:d3:18:4b:3e:b5:7f:29:33:ec:d5:ca:c6:85:56:26:7f:8c: 08:9b:eb:f1:37:af:ba:bc:fd:b2:1e:85:88:7f:95:b1:50:ff: a0:02:a2:8e:29:1a:a9:87:8c:5c:3d:98:ba:12:d4:ee:b4:8e: 84:55:d1:76:40:f3:a8:44:51:e1:a2:f0:68:5a:76:18:d5:35: a1:a4:21:dc:2b:a9:9e:e0:15:8f:5c:7a:4e:93:a8:61:2c:e9: 49:d5:99:04:5d:85:a5:15:29:fe:bc:fe:c1:bc:55:2b:aa:3c: 48:7e:11:8d:f2:19:d1:c9:94:97:ab:c7:7b:56:ea:09:be:79: 2d:ac:15:6d:4c:2c:f0:90:f7:23:f8:16:d1:f4:fb:ef:09:2d: 50:aa:f2:33:4f:d1:42:5f:1a:bc:6e:cd:e2:ea:6e:cd:3f:79: 7a:38:d8:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KlkZD6fw//BfUSiUfKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4 Mjc2YjcwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjhlMzJkYjMwMzRiNWNiZjFkNWY1ZDlkMDZlNGU0MzhkY2FhNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG4E3jySFPfWjeGpVQkQrYl/TnNS TXbeDgG/zF1o1AU1K0Ec725WHsTHtM3M0VdvR22jk9O4aRR1+MsedPXDL7utrAdZ Ug5fcru6pXEjj20Iwuk9QI4WI8FfDmeo0m9XIA/4BnjlJ+mgjcQPwzTh9p1XMHVD q3ZJ8dCSM9YDq8zzenr55s0X2f/CEtLph8p72EKNzbtqET9HXWfLGGm7FajkdjT0 W3ULKeREyjtNRHbJVMi+5yUGKpDS780w83Kikx8jl3h8rsUbz4bJtgGfScMBKHY7 JEeHMsnCmwIScddf+YoC9rGHYMqZdTqRUQcbkX2RqqrgS1Xx1tb2JcATSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+OMtswNLXL8dX12dBuTkONyqQYMB8GA1UdIwQY MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt NDhkYzg4YjU2MDIwLzEvSDQ0eTJ6QTB0Y3Z4MWZYWjBHNU9RNDNLcEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPmxAMA0G CSqGSIb3DQEBCwUAA4IBAQB8Patl2PObXCUp+7Db62LXAawaBiZdONYyW1vSIkoi DP/TNljfNnmsOoyPJi9ZCrXWIbtAYzGQWowQoRjv0QbVNAjsrx6QcyjZyHIff0Sk +agqCXHa5JQ3tvAY0xhLPrV/KTPs1crGhVYmf4wIm+vxN6+6vP2yHoWIf5WxUP+g AqKOKRqph4xcPZi6EtTutI6EVdF2QPOoRFHhovBoWnYY1TWhpCHcK6me4BWPXHpO k6hhLOlJ1ZkEXYWlFSn+vP7BvFUrqjxIfhGN8hnRyZSXq8d7VuoJvnktrBVtTCzw kPcj+BbR9PvvCS1QqvIzT9FCXxq8bs3i6m7NP3l6ONg5 -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:10 2026 by rpki-client