This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IMdJWDmtKEmw0EYVAlWAxTlk_l0.roa File: IMdJWDmtKEmw0EYVAlWAxTlk_l0.roa (raw, json) Hash identifier: prplIaM3PWEhlFcjnviG8bsFClULprJWrb9nQc2Cyx8= Subject key identifier: 20:C7:49:58:39:AD:28:49:B0:D0:46:15:02:55:80:C5:39:64:FE:5D Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDDD688F251DA71C4395E3EB7130D1 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IMdJWDmtKEmw0EYVAlWAxTlk_l0.roa Signing time: Fri 02 Jan 2026 04:18:42 +0000 ROA not before: Fri 02 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20454 IP address blocks: 176.57.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:dd:68:8f:25:1d:a7:1c:43:95:e3:eb:71:30:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20c7495839ad2849b0d04615025580c53964fe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:17:21:79:78:96:31:52:d9:db:83:d4:29: 11:86:35:84:14:07:89:66:c1:60:7f:00:51:6b:fc: a1:4e:03:1a:d4:5f:33:d9:a1:a2:af:71:87:14:e0: 74:c9:51:06:35:a7:4a:6e:31:35:6b:cc:12:d8:64: 62:2b:7a:61:7f:b2:8e:d4:99:6c:c6:ce:83:5c:d4: 1d:5d:00:a1:63:47:6e:8e:e1:fa:97:b5:ab:5d:a0: 27:f0:cb:ec:31:e4:8d:5a:00:f9:7c:e3:b2:7d:6c: 73:68:d3:0e:14:4a:35:01:ad:f3:f8:6f:00:f8:07: f4:1b:a8:12:07:1c:fe:f0:80:bd:5b:5b:0a:a2:50: d1:27:be:9a:11:f1:88:63:a6:76:e9:42:e4:bc:cb: d9:69:ea:1a:80:e8:1a:53:cc:d4:6a:68:6e:4a:d5: 33:78:40:ee:d7:c9:2f:d2:3a:18:6a:15:8f:88:49: 44:69:09:5c:f4:12:a2:88:28:87:3e:34:6d:39:f4: 36:f2:40:4d:7f:45:ab:21:4d:94:07:31:77:6d:66: 79:12:49:66:ed:59:23:c4:46:3d:54:b3:be:bd:86: bf:24:e9:b6:9e:0f:2c:60:1b:4e:11:5f:9d:31:df: c9:bb:a3:a2:a7:c6:e2:42:a4:0f:27:ba:12:27:56: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C7:49:58:39:AD:28:49:B0:D0:46:15:02:55:80:C5:39:64:FE:5D X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IMdJWDmtKEmw0EYVAlWAxTlk_l0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.62.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:e5:0a:d4:94:09:56:42:32:9b:ec:96:fc:02:4c:96:56:b2: 3d:b9:69:6b:0e:eb:12:98:68:81:cc:04:4b:8a:7c:52:0a:d8: 16:89:1d:35:d2:0f:7c:65:c7:8d:e0:fb:92:20:33:2d:c7:d6: cd:91:b5:11:0a:bb:ca:ae:8e:1f:1f:c8:06:c5:4d:93:11:5d: 3d:04:9f:af:13:7b:7c:0d:33:85:f5:98:67:24:72:18:13:70: 92:5f:33:6a:c8:df:e7:38:ef:67:91:67:4e:9e:a9:c6:19:72: d7:cc:ec:4f:07:c0:04:5f:5a:cb:4e:a8:49:7d:a7:a7:5d:04: 32:66:5a:a1:48:ce:42:ce:e4:09:b1:69:f2:03:28:b2:70:d8: 1a:b0:e8:5e:59:fb:46:37:fc:92:10:7d:a1:60:21:6c:3b:71: 53:ed:80:b4:32:ab:a6:ac:c5:8f:ed:43:9e:55:0a:9f:e3:cb: c7:a2:e8:f3:82:0d:dc:73:c7:1c:e2:8d:7b:89:cb:90:39:71: 4b:a5:4f:4d:9b:03:e7:d0:5d:51:1a:86:6a:7e:f8:74:0d:02: c6:18:9d:ec:87:10:fb:e8:8c:72:0c:7b:75:b4:cd:38:75:47: 10:76:bd:06:e0:ef:7e:09:a8:04:ba:87:6c:a0:1f:99:4a:94: 55:91:f7:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87d1ojyUdpxxDlePrcTDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGM3NDk1ODM5YWQyODQ5YjBkMDQ2MTUwMjU1ODBjNTM5NjRmZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybgXIXl4ljFS2duD1CkRhjWEFAeJ ZsFgfwBRa/yhTgMa1F8z2aGir3GHFOB0yVEGNadKbjE1a8wS2GRiK3phf7KO1Jls xs6DXNQdXQChY0dujuH6l7WrXaAn8MvsMeSNWgD5fOOyfWxzaNMOFEo1Aa3z+G8A +Af0G6gSBxz+8IC9W1sKolDRJ76aEfGIY6Z26ULkvMvZaeoagOgaU8zUamhuStUz eEDu18kv0joYahWPiElEaQlc9BKiiCiHPjRtOfQ28kBNf0WrIU2UBzF3bWZ5Eklm 7VkjxEY9VLO+vYa/JOm2ng8sYBtOEV+dMd/Ju6Oip8biQqQPJ7oSJ1Z2mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCDHSVg5rShJsNBGFQJVgMU5ZP5dMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvSU1kSldEbXRLRW13MEVZVkFsV0F4VGxrX2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDk+MA0G CSqGSIb3DQEBCwUAA4IBAQCM5QrUlAlWQjKb7Jb8AkyWVrI9uWlrDusSmGiBzARL inxSCtgWiR010g98ZceN4PuSIDMtx9bNkbURCrvKro4fH8gGxU2TEV09BJ+vE3t8 DTOF9ZhnJHIYE3CSXzNqyN/nOO9nkWdOnqnGGXLXzOxPB8AEX1rLTqhJfaenXQQy ZlqhSM5CzuQJsWnyAyiycNgasOheWftGN/ySEH2hYCFsO3FT7YC0MqumrMWP7UOe VQqf48vHoujzgg3cc8cc4o17icuQOXFLpU9NmwPn0F1RGoZqfvh0DQLGGJ3shxD7 6IxyDHt1tM04dUcQdr0G4O9+CagEuodsoB+ZSpRVkffF -----END CERTIFICATE-----Generated at Fri Jan 2 17:50:51 2026 by rpki-client