This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa File: 1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa (raw, json) Hash identifier: p5UNy6JSWBgEDxhzbnTAtJTc0CoC4BoiXS2WVhGNjLY= Subject key identifier: FA:29:FB:2C:C8:45:A5:0D:D2:44:66:BE:22:FD:76:C3:E2:FD:A2:C1 Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa Certificate serial: 019B7FF29F95D27634EB51BC53034413A698 Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa Signing time: Fri 02 Jan 2026 18:22:45 +0000 ROA not before: Fri 02 Jan 2026 18:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 62.122.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9f:95:d2:76:34:eb:51:bc:53:03:44:13:a6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa Validity Not Before: Jan 2 18:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa29fb2cc845a50dd24466be22fd76c3e2fda2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:de:d5:a1:71:f4:57:be:24:46:b4:2c:0e: b8:cf:93:26:a8:14:8f:82:91:e2:1a:b7:64:69:c5: 06:d5:96:f3:72:fb:e1:8e:4f:d1:f4:81:70:ac:56: f1:46:c6:5f:94:71:db:9c:cb:f1:dc:3b:fb:ad:dd: c9:13:f6:2c:bc:c4:81:13:fc:90:89:88:3c:43:39: e9:b5:e1:38:78:cd:2f:95:5a:54:fe:dd:e0:f1:22: 40:e1:f9:71:74:60:ff:6d:df:cc:ee:b1:9c:e6:51: 7f:09:f0:2e:a7:6f:cb:d2:f5:11:c1:69:75:5e:c6: 22:8f:b4:bf:c5:2b:3d:3b:11:25:3d:6e:14:52:b9: e7:9c:72:99:c2:c9:c8:56:6e:c5:0b:3e:f8:68:35: 16:ad:ec:ea:11:5a:33:8a:64:16:9c:9e:7a:db:ec: ca:fa:3f:31:07:bf:b4:41:79:30:8d:8c:1f:8c:a0: 1f:f6:fb:66:3e:4d:2a:29:9d:fa:ad:31:d1:b0:cc: 0e:87:ad:da:a4:65:06:35:ae:9b:16:a2:e6:64:06: 30:48:8f:2a:ba:d8:25:0a:b3:7a:7e:87:01:0f:89: f3:41:a2:3d:b5:c8:6d:81:55:3f:24:3f:8b:cd:ea: 7e:dd:ed:14:4e:cc:40:9a:75:cd:bc:ee:2a:f1:c6: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:29:FB:2C:C8:45:A5:0D:D2:44:66:BE:22:FD:76:C3:E2:FD:A2:C1 X509v3 Authority Key Identifier: keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.31.0/24 Signature Algorithm: sha256WithRSAEncryption 84:c8:ef:74:fc:2d:01:fe:73:52:9c:b6:ca:c5:76:66:b4:81: 43:29:e2:b2:a0:6b:3f:95:1f:0f:3e:a2:a5:3e:53:b8:35:2a: 29:c8:f9:77:c2:62:a7:ed:40:32:2a:2f:47:2c:0c:52:a4:6f: 6a:d9:26:08:29:92:61:89:67:2f:76:c5:77:4a:4a:27:4d:e7: 79:51:8e:b2:0a:4f:3f:25:84:7a:40:84:53:44:c5:e3:7b:a9: b3:8e:a2:cd:2b:db:09:d5:d1:0d:29:62:79:48:2b:1a:d7:2d: ef:3c:bc:ef:7d:76:29:d5:a3:ca:74:36:ea:0d:2b:63:df:0e: 72:22:db:d7:fe:d1:0f:10:01:8e:9c:6e:34:3a:89:89:07:2e: 36:78:c9:3e:02:2c:fa:93:c8:e2:6d:5b:58:cc:d7:5a:45:68: bb:6d:b2:af:d4:20:47:99:75:65:f9:2d:df:ae:97:8f:30:5c: 8b:14:00:6f:c3:b9:10:e5:72:3f:bf:89:e6:08:13:97:59:a5: 81:2b:24:30:b9:74:2d:21:06:04:ba:78:0e:be:a8:33:d8:6e: 03:e5:b5:29:b8:9e:6b:a5:93:94:82:f8:80:45:38:6a:c8:57: 4c:7b:d7:86:ba:cf:09:90:9f:f2:08:b4:1f:49:7f:0a:3c:a8: 3a:dd:e8:d1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8p+V0nY061G8UwNEE6aYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjNkMTA0MGMwNWYwOTlmYjRmZWRiNDk4YmI0YTE0ODMy Nzk4ZmEwHhcNMjYwMTAyMTgyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTI5ZmIyY2M4NDVhNTBkZDI0NDY2YmUyMmZkNzZjM2UyZmRhMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUje1aFx9Fe+JEa0LA64z5MmqBSP gpHiGrdkacUG1Zbzcvvhjk/R9IFwrFbxRsZflHHbnMvx3Dv7rd3JE/YsvMSBE/yQ iYg8QznpteE4eM0vlVpU/t3g8SJA4flxdGD/bd/M7rGc5lF/CfAup2/L0vURwWl1 XsYij7S/xSs9OxElPW4UUrnnnHKZwsnIVm7FCz74aDUWrezqEVozimQWnJ562+zK +j8xB7+0QXkwjYwfjKAf9vtmPk0qKZ36rTHRsMwOh63apGUGNa6bFqLmZAYwSI8q utglCrN6focBD4nzQaI9tchtgVU/JD+Lzep+3e0UTsxAmnXNvO4q8cY4tQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPop+yzIRaUN0kRmviL9dsPi/aLBMB8GA1UdIwQY MBaAFJkj0QQMBfCZ+0/ttJi7ShSDJ5j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMt MjA2ZTgyMzM2Y2RlLzEvMS1pbjdMTWhGcFEzU1JHYS1JdjEydy1MOW9zRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2MvNGQwNWNmLTYzYjAtNDZhZi05ZTJjLTIwNmU4MjMzNmNk ZS8xL21TUFJCQXdGOEpuN1QtMjBtTHRLRklNbm1Qby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD56HzAN BgkqhkiG9w0BAQsFAAOCAQEAhMjvdPwtAf5zUpy2ysV2ZrSBQynisqBrP5UfDz6i pT5TuDUqKcj5d8Jip+1AMiovRywMUqRvatkmCCmSYYlnL3bFd0pKJ03neVGOsgpP PyWEekCEU0TF43ups46izSvbCdXRDSlieUgrGtct7zy87312KdWjynQ26g0rY98O ciLb1/7RDxABjpxuNDqJiQcuNnjJPgIs+pPI4m1bWMzXWkVou22yr9QgR5l1Zfkt 366XjzBcixQAb8O5EOVyP7+J5ggTl1mlgSskMLl0LSEGBLp4Dr6oM9huA+W1Kbie a6WTlIL4gEU4ashXTHvXhrrPCZCf8gi0H0l/CjyoOt3o0Q== -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:10 2026 by rpki-client