This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_1agZbDchCwDGrkWbgBDrxVhKeg.roa File: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (raw, json) Hash identifier: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE= Subject key identifier: FF:56:A0:65:B0:DC:84:2C:03:1A:B9:16:6E:00:43:AF:15:61:29:E8 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE9FC690C70F0A2612DB1CFFEEE44 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_1agZbDchCwDGrkWbgBDrxVhKeg.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210542 IP address blocks: 62.72.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e9:fc:69:0c:70:f0:a2:61:2d:b1:cf:fe:ee:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff56a065b0dc842c031ab9166e0043af156129e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:a3:80:e1:97:8c:5e:f2:25:f5:e6:3f:c6: 7e:f8:21:c9:e9:11:07:67:c7:ff:de:f1:3f:f3:92: 64:36:4f:6d:b2:d9:c8:62:39:4c:aa:77:66:9f:d9: f1:c0:6a:fe:50:64:a6:bc:eb:0a:e8:42:4f:49:10: 72:2e:20:76:05:ab:02:fb:f5:13:44:1b:b2:79:bc: dc:d1:f0:f2:cb:bd:24:34:57:6c:d3:19:e9:92:14: de:83:91:8b:35:14:95:0b:35:93:b2:46:68:05:ee: 46:5d:28:a6:cb:1e:a8:e8:3b:e6:a3:f5:e7:67:45: fa:c2:b0:7a:53:ed:44:31:25:c9:1a:17:14:9a:1a: 18:22:71:3a:ea:35:3f:fc:31:d6:02:c1:91:7a:a0: 23:34:3e:bb:ae:b3:5e:f5:40:bb:97:be:3d:8f:28: e6:1d:6e:86:99:5b:6c:2f:22:2b:b6:c0:25:9b:31: 81:ac:38:bd:00:45:48:61:e6:3a:fb:b1:54:ef:00: a9:25:00:3a:ad:46:12:d3:5b:de:58:42:75:0b:fe: ea:a8:74:c9:dd:76:3b:d9:50:21:e4:2b:fd:ca:ff: 38:6d:f6:7a:39:52:f9:4b:3e:f0:33:c4:64:92:2d: 09:b8:5c:72:7f:4a:75:f8:26:ec:dc:bd:a9:67:07: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:56:A0:65:B0:DC:84:2C:03:1A:B9:16:6E:00:43:AF:15:61:29:E8 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_1agZbDchCwDGrkWbgBDrxVhKeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.182.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:22:f5:5d:7f:2b:27:78:18:7c:f9:2f:7e:b5:5b:b7:c0:7c: e5:e4:24:c6:b9:a0:21:ca:4f:55:37:45:1c:86:a6:ea:eb:7e: 15:fd:3f:90:6e:5c:64:44:51:84:ca:83:7f:2b:bb:08:e6:93: 58:a6:bc:13:75:f5:5f:7a:ff:5a:87:58:c6:89:7d:13:98:40: ae:11:27:2a:9d:ac:80:b9:72:d9:62:d2:5f:9d:a3:8a:3a:9d: da:28:71:ed:d9:77:ba:c7:28:32:03:93:26:41:89:7e:8d:b5: 65:55:7e:6b:b9:a0:48:54:b4:ac:ea:5a:39:1c:34:40:6d:79: c8:42:d4:da:52:3b:3a:1f:07:c6:91:d4:02:6c:98:8a:db:37: 8f:2c:96:70:b1:22:c3:c6:25:1b:9b:bc:2e:c9:9f:57:2f:cb: b8:9a:27:96:77:7e:2e:1e:b8:19:b8:b3:06:b6:17:e7:c8:5b: 52:40:58:06:bd:0c:81:cc:10:6d:b5:52:bb:20:3e:14:ed:bb: be:7e:29:de:3d:08:9d:e0:52:c6:79:d2:c2:1e:44:99:bf:ee: ff:24:55:4e:c7:ea:2a:7d:c8:a0:2d:53:ee:5d:24:6e:c0:64: a5:21:1a:70:c7:54:e7:41:80:71:e3:12:47:e3:65:89:f6:a7: 61:2b:a0:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87en8aQxw8KJhLbHP/u5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjU2YTA2NWIwZGM4NDJjMDMxYWI5MTY2ZTAwNDNhZjE1NjEyOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHqjgOGXjF7yJfXmP8Z++CHJ6REH Z8f/3vE/85JkNk9tstnIYjlMqndmn9nxwGr+UGSmvOsK6EJPSRByLiB2BasC+/UT RBuyebzc0fDyy70kNFds0xnpkhTeg5GLNRSVCzWTskZoBe5GXSimyx6o6Dvmo/Xn Z0X6wrB6U+1EMSXJGhcUmhoYInE66jU//DHWAsGReqAjND67rrNe9UC7l749jyjm HW6GmVtsLyIrtsAlmzGBrDi9AEVIYeY6+7FU7wCpJQA6rUYS01veWEJ1C/7qqHTJ 3XY72VAh5Cv9yv84bfZ6OVL5Sz7wM8Rkki0JuFxyf0p1+Cbs3L2pZwflCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9WoGWw3IQsAxq5Fm4AQ68VYSnoMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvXzFhZ1piRGNoQ3dER3JrV2JnQkRyeFZoS2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki2MA0G CSqGSIb3DQEBCwUAA4IBAQAuIvVdfysneBh8+S9+tVu3wHzl5CTGuaAhyk9VN0Uc hqbq634V/T+QblxkRFGEyoN/K7sI5pNYprwTdfVfev9ah1jGiX0TmECuEScqnayA uXLZYtJfnaOKOp3aKHHt2Xe6xygyA5MmQYl+jbVlVX5ruaBIVLSs6lo5HDRAbXnI QtTaUjs6HwfGkdQCbJiK2zePLJZwsSLDxiUbm7wuyZ9XL8u4mieWd34uHrgZuLMG thfnyFtSQFgGvQyBzBBttVK7ID4U7bu+finePQid4FLGedLCHkSZv+7/JFVOx+oq fcigLVPuXSRuwGSlIRpwx1TnQYBx4xJH42WJ9qdhK6DX -----END CERTIFICATE-----Generated at Fri Jan 2 17:52:24 2026 by rpki-client