This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/Dx65O-asK1-UgVb-ZGw1lB5CJx8.roa File: Dx65O-asK1-UgVb-ZGw1lB5CJx8.roa (raw, json) Hash identifier: s8rkkFQ6+V5aJw27ojd1rWR8DbltWhE5KRrj3bBMD1U= Subject key identifier: 0F:1E:B9:3B:E6:AC:2B:5F:94:81:56:FE:64:6C:35:94:1E:42:27:1F Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019B77594B7459B2BFA6E87845532D66147F Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/Dx65O-asK1-UgVb-ZGw1lB5CJx8.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 62.182.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4b:74:59:b2:bf:a6:e8:78:45:53:2d:66:14:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f1eb93be6ac2b5f948156fe646c35941e42271f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:9b:f4:c1:57:23:77:14:0d:8f:8b:57:96: d3:52:9e:45:a5:f9:ff:17:a2:c9:17:ff:b4:01:52: 93:31:7a:e7:26:6a:0a:f4:2b:ad:62:67:3e:10:28: 38:f3:e8:27:db:ec:b7:15:8d:b4:b5:d0:c1:19:51: 1c:21:95:07:e3:70:a2:6f:25:16:12:f1:f2:f3:74: aa:5b:2c:fc:cd:21:84:48:3c:d6:8e:dd:02:ce:22: a2:6b:ec:e2:b1:ce:1e:18:55:01:e3:9a:1c:8f:2d: 73:de:aa:c8:f6:f2:b3:85:f0:b7:7b:80:ee:60:8c: ba:dd:e3:5f:7e:91:76:2b:e5:f3:df:44:61:62:89: 54:c7:4e:e5:b6:b8:49:f4:db:49:0e:7a:24:5c:cf: 7e:db:a8:53:aa:fb:a8:c2:6d:f1:0f:a9:23:f6:9c: 2e:4a:23:37:90:14:2a:38:04:a2:ea:2c:cd:36:e2: d8:a9:50:5e:2a:0f:21:ae:1a:59:cd:98:01:b2:65: 9d:ea:0b:bd:3a:e7:43:2b:57:86:41:0a:29:7b:fc: af:bd:d3:0a:a3:f9:fe:cd:83:00:81:65:f1:56:73: ad:d9:18:b1:e2:55:39:4b:e8:39:d8:c1:75:fa:94: 77:f9:98:3b:ff:58:a8:fc:ac:b0:a5:b1:dd:40:a5: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1E:B9:3B:E6:AC:2B:5F:94:81:56:FE:64:6C:35:94:1E:42:27:1F X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/Dx65O-asK1-UgVb-ZGw1lB5CJx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.188.0/24 Signature Algorithm: sha256WithRSAEncryption 35:c2:ba:66:25:a5:7c:37:fc:ff:b5:a5:f7:0f:6b:65:96:e2: 78:25:b7:5d:6e:40:72:7e:e8:98:e5:f6:d4:f5:6f:29:63:26: f8:a8:be:dd:ad:ff:3a:65:a8:60:9c:eb:78:ca:8a:8f:e7:f6: df:71:85:05:97:50:e5:29:be:98:4f:b1:12:b0:06:bb:21:55: 97:cb:8b:1b:27:45:7b:a1:33:46:6d:a4:5b:43:35:35:fe:4d: 6a:bf:a8:a3:20:f4:00:19:b3:3e:f9:47:06:1f:41:df:98:83: c6:5e:f8:dc:1c:58:38:75:2c:85:13:ac:e0:62:a0:a6:a2:78: 9f:c6:73:d6:89:31:77:05:e1:eb:55:67:74:9f:40:84:60:9f: af:1e:13:f7:bb:d1:80:f7:ee:9d:b9:e7:51:2a:be:18:9b:3c: 46:45:71:fa:7d:91:fc:24:2f:78:4a:fa:47:dc:4a:a4:7d:3d: 2c:9a:d0:57:d2:51:37:c7:84:2c:ec:b7:02:81:1a:15:db:9f: d9:62:f8:d1:49:28:47:ad:cd:0e:a2:a6:9d:db:02:80:95:46: 27:a2:18:40:ca:81:1e:92:0a:af:8e:87:fd:34:df:19:7e:43: 37:87:56:8c:3a:71:de:97:95:fe:a1:78:c8:51:30:3e:d5:e0: 9f:a8:a2:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUt0WbK/puh4RVMtZhR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjFlYjkzYmU2YWMyYjVmOTQ4MTU2ZmU2NDZjMzU5NDFlNDIyNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpSb9MFXI3cUDY+LV5bTUp5Fpfn/ F6LJF/+0AVKTMXrnJmoK9CutYmc+ECg48+gn2+y3FY20tdDBGVEcIZUH43CibyUW EvHy83SqWyz8zSGESDzWjt0CziKia+zisc4eGFUB45ocjy1z3qrI9vKzhfC3e4Du YIy63eNffpF2K+Xz30RhYolUx07ltrhJ9NtJDnokXM9+26hTqvuowm3xD6kj9pwu SiM3kBQqOASi6izNNuLYqVBeKg8hrhpZzZgBsmWd6gu9OudDK1eGQQope/yvvdMK o/n+zYMAgWXxVnOt2Rix4lU5S+g52MF1+pR3+Zg7/1io/KywpbHdQKXNLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8euTvmrCtflIFW/mRsNZQeQicfMB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvRHg2NU8tYXNLMS1VZ1ZiLVpHdzFsQjVDSng4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPra8MA0G CSqGSIb3DQEBCwUAA4IBAQA1wrpmJaV8N/z/taX3D2tlluJ4JbddbkByfuiY5fbU 9W8pYyb4qL7drf86ZahgnOt4yoqP5/bfcYUFl1DlKb6YT7ESsAa7IVWXy4sbJ0V7 oTNGbaRbQzU1/k1qv6ijIPQAGbM++UcGH0HfmIPGXvjcHFg4dSyFE6zgYqCmonif xnPWiTF3BeHrVWd0n0CEYJ+vHhP3u9GA9+6duedRKr4YmzxGRXH6fZH8JC94SvpH 3EqkfT0smtBX0lE3x4Qs7LcCgRoV25/ZYvjRSShHrc0Ooqad2wKAlUYnohhAyoEe kgqvjof9NN8ZfkM3h1aMOnHel5X+oXjIUTA+1eCfqKJU -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:17 2026 by rpki-client