This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/iUrWFPg1al1ir4N_O7XnvuH7dYE.roa File: iUrWFPg1al1ir4N_O7XnvuH7dYE.roa (raw, json) Hash identifier: U43SKbFid6vB7ZikEeN3R3c6BL9KhEcAf9OIPugAeqM= Subject key identifier: 89:4A:D6:14:F8:35:6A:5D:62:AF:83:7F:3B:B5:E7:BE:E1:FB:75:81 Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37 Certificate serial: 019B79100D75FE7F7305A6E731582952DB1C Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/iUrWFPg1al1ir4N_O7XnvuH7dYE.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60762 IP address blocks: 176.62.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0d:75:fe:7f:73:05:a6:e7:31:58:29:52:db:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=894ad614f8356a5d62af837f3bb5e7bee1fb7581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:89:17:86:29:12:42:6a:8d:c4:83:e7:16: b8:af:d2:bb:fc:6c:b8:5b:de:ad:b7:c0:05:dd:de: 40:2a:48:cc:97:5e:8f:a0:5a:7e:fd:a5:30:68:f3: 08:7f:b5:c0:24:7a:cc:60:37:9b:86:90:50:78:16: 1a:52:15:55:36:d2:7a:9e:47:93:63:85:3b:1d:7c: d7:29:57:c8:a8:01:92:09:73:f2:4a:a7:fb:24:9b: 8f:40:7d:42:a0:6f:33:b0:a0:f5:9d:c0:7e:75:09: 78:9c:be:c9:55:50:e7:4c:3c:30:50:d5:db:61:6b: 7b:37:2e:d8:59:27:ba:ff:50:08:aa:6d:db:c5:87: e5:15:b5:15:22:f5:38:43:c4:ba:17:d4:28:81:89: 72:87:54:19:f0:7d:b5:c3:31:fe:7c:9e:7b:31:b4: 83:0c:85:cd:47:33:d4:27:ba:3d:f3:a1:04:cc:10: 0a:da:3c:37:39:5c:f8:de:c1:5e:0b:5a:c6:e6:27: 52:9c:c5:a6:f3:0c:e9:a4:32:86:23:b2:0f:c2:8a: 04:dc:aa:0a:e7:e7:45:ad:e3:0e:ce:6e:b5:d2:ad: 70:8a:05:68:eb:01:c8:e2:94:17:db:21:c8:df:9c: 30:c5:da:a6:09:27:1f:2e:d9:c5:1f:59:19:9e:7d: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4A:D6:14:F8:35:6A:5D:62:AF:83:7F:3B:B5:E7:BE:E1:FB:75:81 X509v3 Authority Key Identifier: keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/iUrWFPg1al1ir4N_O7XnvuH7dYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.62.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:d2:23:e2:d4:ed:0d:a4:01:83:ca:51:fb:ba:60:02:d7:b1: 3d:ae:06:85:da:33:11:f7:f5:cf:63:ad:b6:8e:fb:e8:23:7a: 47:64:5e:a1:f9:4b:37:38:c8:7f:f4:3e:ce:f2:f0:c9:99:38: 73:e4:1d:04:85:39:69:89:6c:d1:df:ca:01:fe:d8:82:3b:fd: 92:dd:86:02:1d:6d:d6:ff:ff:01:ae:d3:fb:84:fa:51:50:fc: 7e:96:b7:f8:72:83:96:d5:9e:83:01:9b:6f:e7:95:d5:3f:f4: 1e:3a:25:ef:7f:ba:0f:be:1d:49:b5:1b:97:96:7c:a2:c4:b5: 27:02:df:12:18:41:20:5c:0a:a4:12:47:40:be:be:15:ea:8a: 0f:ce:09:b1:cf:7c:f7:ba:5f:cf:d5:5d:0f:a9:bb:3f:7f:95: 4f:d9:b1:b3:ab:da:04:a8:84:54:4f:89:7b:c2:c9:01:c8:2b: 45:7a:36:67:95:a4:b0:8b:d1:51:04:14:97:27:b0:bb:9e:f7: d7:97:a3:3b:c1:7d:74:b4:0c:f8:9b:10:44:f2:13:f1:28:87: c1:fc:9c:28:66:68:1c:fd:e6:36:6f:c5:10:88:6c:ad:7f:74: 85:18:94:c5:6c:e5:04:d1:9b:f2:0b:1b:a8:2d:fc:d4:db:fe: fd:60:7e:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EA11/n9zBabnMVgpUtscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ODYwMjhjOWZlYjZmMTQyYjNmZWNiNjQ2NjdmNDg4NzRi YTljMzcwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTRhZDYxNGY4MzU2YTVkNjJhZjgzN2YzYmI1ZTdiZWUxZmI3NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucuJF4YpEkJqjcSD5xa4r9K7/Gy4 W96tt8AF3d5AKkjMl16PoFp+/aUwaPMIf7XAJHrMYDebhpBQeBYaUhVVNtJ6nkeT Y4U7HXzXKVfIqAGSCXPySqf7JJuPQH1CoG8zsKD1ncB+dQl4nL7JVVDnTDwwUNXb YWt7Ny7YWSe6/1AIqm3bxYflFbUVIvU4Q8S6F9QogYlyh1QZ8H21wzH+fJ57MbSD DIXNRzPUJ7o986EEzBAK2jw3OVz43sFeC1rG5idSnMWm8wzppDKGI7IPwooE3KoK 5+dFreMOzm610q1wigVo6wHI4pQX2yHI35wwxdqmCScfLtnFH1kZnn2z7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlK1hT4NWpdYq+Dfzu1577h+3WBMB8GA1UdIwQY MBaAFLmGAoyf628UKz/stkZn9Ih0upw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYt M2E0NDY4YzRkZmRmLzEvaVVyV0ZQZzFhbDFpcjROX083WG52dUg3ZFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYtM2E0NDY4YzRkZmRm LzEvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsD4fMA0G CSqGSIb3DQEBCwUAA4IBAQA70iPi1O0NpAGDylH7umAC17E9rgaF2jMR9/XPY622 jvvoI3pHZF6h+Us3OMh/9D7O8vDJmThz5B0EhTlpiWzR38oB/tiCO/2S3YYCHW3W //8BrtP7hPpRUPx+lrf4coOW1Z6DAZtv55XVP/QeOiXvf7oPvh1JtRuXlnyixLUn At8SGEEgXAqkEkdAvr4V6ooPzgmxz3z3ul/P1V0Pqbs/f5VP2bGzq9oEqIRUT4l7 wskByCtFejZnlaSwi9FRBBSXJ7C7nvfXl6M7wX10tAz4mxBE8hPxKIfB/JwoZmgc /eY2b8UQiGytf3SFGJTFbOUE0ZvyCxuoLfzU2/79YH5Z -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:42 2026 by rpki-client