This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa File: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (raw, json) Hash identifier: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4= Subject key identifier: 8A:21:5F:C1:2A:1F:F8:FA:67:B7:92:67:D5:5C:98:7B:A9:6D:19:AA Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDEEB91951994D1B128F36C1A6A1B4 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265867 IP address blocks: 62.72.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ee:b9:19:51:99:4d:1b:12:8f:36:c1:a6:a1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a215fc12a1ff8fa67b79267d55c987ba96d19aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8b:1e:3e:b1:e6:a5:9e:c3:3f:e8:88:7f:b5: 9e:9e:08:27:eb:23:1b:49:3b:ec:33:b4:a4:19:1f: 76:fd:a3:1f:d8:c4:ae:0e:e8:ec:79:c8:c8:91:06: 29:af:5c:6f:6a:ca:21:5b:10:e4:78:43:73:93:d5: 18:5d:b5:cb:c9:64:7a:e3:85:58:a2:64:80:02:96: 7d:a4:8f:75:b4:41:47:e0:d6:8b:8c:3c:78:b8:e5: cc:8b:ee:9c:30:63:65:53:63:d8:38:be:7a:0c:e9: a1:b3:46:34:45:73:f7:de:15:e2:9b:8b:30:9e:60: 8d:88:bc:4f:84:54:df:54:d6:48:c4:5b:96:ee:3b: 07:51:02:34:35:f5:52:46:47:a5:28:63:72:67:39: 22:f5:05:43:a3:80:61:76:d2:e5:cc:9e:cc:89:07: 8f:4a:60:ad:e4:b3:51:f1:7b:16:71:ba:bd:65:cd: b3:8f:4c:26:af:ee:99:7a:c4:03:2d:0f:f2:71:83: cb:0f:e4:c5:85:74:c4:26:a6:ec:8a:ac:0f:86:c0: f4:e4:9c:aa:c6:84:e9:d6:19:08:2a:06:ba:fc:90: e9:cb:84:ee:bc:02:b8:c6:8b:d2:6b:3e:8f:a8:2e: 4d:51:0e:5f:8f:93:02:33:a9:9e:1f:66:ed:1f:c2: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:21:5F:C1:2A:1F:F8:FA:67:B7:92:67:D5:5C:98:7B:A9:6D:19:AA X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.189.0/24 Signature Algorithm: sha256WithRSAEncryption ac:47:3e:d6:f7:b2:06:e0:4b:e5:5f:b0:76:ba:eb:d1:e4:3d: eb:cc:0f:e6:06:cc:65:c1:60:df:08:f2:96:e5:e4:a0:37:df: a0:80:6d:f2:15:b2:c6:f8:7f:91:b7:da:58:d6:75:fc:5f:ac: 10:25:58:e2:bd:e6:07:5c:9f:6f:db:e8:35:0a:d3:af:34:35: d6:fd:7a:c3:6d:b2:82:6d:ab:38:ee:8a:36:83:b4:51:11:2c: 6f:77:7a:5b:64:08:c4:6b:5c:01:ec:d0:be:b3:20:83:c4:8b: 65:60:97:68:84:88:2c:5c:a7:f5:a0:b0:81:6a:7b:18:2e:18: a7:e8:16:e0:be:1e:07:1c:4d:5c:a8:26:56:d9:02:b4:50:9d: 06:23:b7:34:15:5d:69:f7:03:43:a2:38:7e:2b:50:ca:5e:6d: 1d:8f:0b:2b:bd:7b:a1:db:63:fb:80:54:df:53:58:0d:e1:d4: 3e:50:3e:88:ca:2e:96:27:1c:f1:ff:d2:85:f9:a4:fa:71:05: 32:06:f3:8f:0e:16:5b:e4:92:07:f6:8f:a6:22:f8:3b:76:fa: 41:bf:c8:9f:9d:f5:53:91:18:4d:c2:f1:10:7f:c3:ac:d8:f1: 53:b0:3d:cc:ea:f4:3c:01:c6:ea:62:b2:bc:e5:7b:fd:96:c7: f6:41:bd:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87e65GVGZTRsSjzbBpqG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTIxNWZjMTJhMWZmOGZhNjdiNzkyNjdkNTVjOTg3YmE5NmQxOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54sePrHmpZ7DP+iIf7Wenggn6yMb STvsM7SkGR92/aMf2MSuDujsecjIkQYpr1xvasohWxDkeENzk9UYXbXLyWR644VY omSAApZ9pI91tEFH4NaLjDx4uOXMi+6cMGNlU2PYOL56DOmhs0Y0RXP33hXim4sw nmCNiLxPhFTfVNZIxFuW7jsHUQI0NfVSRkelKGNyZzki9QVDo4BhdtLlzJ7MiQeP SmCt5LNR8XsWcbq9Zc2zj0wmr+6ZesQDLQ/ycYPLD+TFhXTEJqbsiqwPhsD05Jyq xoTp1hkIKga6/JDpy4TuvAK4xovSaz6PqC5NUQ5fj5MCM6meH2btH8LieQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIohX8EqH/j6Z7eSZ9VcmHupbRmqMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvaWlGZndTb2YtUHBudDVKbjFWeVllNmx0R2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki9MA0G CSqGSIb3DQEBCwUAA4IBAQCsRz7W97IG4EvlX7B2uuvR5D3rzA/mBsxlwWDfCPKW 5eSgN9+ggG3yFbLG+H+Rt9pY1nX8X6wQJVjiveYHXJ9v2+g1CtOvNDXW/XrDbbKC bas47oo2g7RRESxvd3pbZAjEa1wB7NC+syCDxItlYJdohIgsXKf1oLCBansYLhin 6Bbgvh4HHE1cqCZW2QK0UJ0GI7c0FV1p9wNDojh+K1DKXm0djwsrvXuh22P7gFTf U1gN4dQ+UD6Iyi6WJxzx/9KF+aT6cQUyBvOPDhZb5JIH9o+mIvg7dvpBv8ifnfVT kRhNwvEQf8Os2PFTsD3M6vQ8AcbqYrK85Xv9lsf2Qb0t -----END CERTIFICATE-----Generated at Fri Jan 2 17:53:51 2026 by rpki-client