This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/DvIXkhqBYB1CNCsvtOQdhfIz6iI.roa File: DvIXkhqBYB1CNCsvtOQdhfIz6iI.roa (raw, json) Hash identifier: WtwbKx7EDAG40O4+pnLNdkRgCJIycpEiuUwlCosElYc= Subject key identifier: 0E:F2:17:92:1A:81:60:1D:42:34:2B:2F:B4:E4:1D:85:F2:33:EA:22 Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278 Certificate serial: 019B7D5B5DF8FAF0CC6C04C28D1FB533A4A6 Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/DvIXkhqBYB1CNCsvtOQdhfIz6iI.roa Signing time: Fri 02 Jan 2026 06:18:18 +0000 ROA not before: Fri 02 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 62.229.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:5d:f8:fa:f0:cc:6c:04:c2:8d:1f:b5:33:a4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278 Validity Not Before: Jan 2 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ef217921a81601d42342b2fb4e41d85f233ea22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:03:2e:fa:6b:ae:cc:5b:b5:f0:c9:b4:3c: d8:0e:db:f0:a5:d4:de:14:21:1e:81:a1:e4:ce:2c: 62:51:c3:9a:68:76:d1:93:95:9c:93:bf:14:75:3f: 10:27:16:bd:b5:7b:0d:c1:9f:8d:be:68:a0:80:87: 37:79:65:79:57:28:cb:26:7d:b4:28:ee:f3:e9:18: 76:a4:d3:d0:bb:20:d6:11:f6:35:a5:da:13:98:87: a3:2c:87:09:15:6e:24:ed:32:b9:5d:7c:01:55:c9: c8:2b:13:46:d3:4b:93:9a:c7:80:19:a1:b1:fc:95: 9e:3c:a2:c7:64:6f:8f:4b:3f:0d:ac:d0:79:e9:ca: d6:11:9c:01:1f:41:0b:fd:1e:07:4c:85:b4:a5:cb: 10:cf:d6:41:21:37:af:c0:a4:b6:93:9e:bf:05:aa: 45:2c:92:9e:ed:2e:ed:2c:17:c6:bc:7d:4f:43:57: ba:bd:45:a5:18:55:e2:5f:98:95:05:9f:05:16:05: e7:76:6e:08:54:61:04:7e:62:99:b2:72:83:5a:a6: 5f:fd:ab:be:2c:9b:f8:17:46:6d:57:fa:ff:6b:62: 2d:8f:a6:2a:da:48:c6:b0:e2:4a:77:14:bb:29:11: a9:6a:ce:6b:f3:24:e7:a5:40:f9:58:d4:6f:6b:f5: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F2:17:92:1A:81:60:1D:42:34:2B:2F:B4:E4:1D:85:F2:33:EA:22 X509v3 Authority Key Identifier: keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/DvIXkhqBYB1CNCsvtOQdhfIz6iI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:85:18:a4:64:ca:1e:cd:8f:73:8b:ee:20:1c:15:72:e9:b5: 7a:be:7a:55:18:af:d2:34:a2:43:88:1e:4a:46:c9:67:74:29: 39:97:78:e9:1b:3e:c4:54:70:0f:76:97:21:cd:48:5d:a5:83: d2:af:77:c7:ca:f9:0d:15:f8:34:23:76:52:35:58:5c:3c:c9: 84:b0:5f:a6:2e:7c:13:e3:1c:3d:28:14:42:de:98:ba:fb:f7: 7a:ef:9a:f0:45:0f:73:66:3e:71:42:81:6f:23:a0:98:1d:65: fd:79:bc:e1:7b:24:fd:6b:8b:64:62:ed:61:d7:be:79:93:b4: e7:93:6d:9f:eb:9c:6d:cf:1e:7c:10:33:1e:6f:fe:5b:f0:47: fe:b7:4d:87:cb:3e:48:18:bc:ad:08:cb:7a:d7:9c:53:06:b8: 16:09:6f:ba:4f:17:4c:02:7a:9f:be:62:7d:a6:83:3e:8b:4d: 62:82:a0:bd:4f:27:84:ee:58:bb:2a:1d:72:18:aa:41:35:87: 7d:a3:d0:64:73:f9:87:35:bb:77:e2:a7:4e:08:7b:e8:c9:11: a1:df:1f:d3:fe:54:17:a9:06:01:07:60:bd:07:29:13:c4:ef: 7e:2e:f9:57:bf:4d:31:ae:53:3d:c6:ff:b3:d3:83:00:a6:9c: e7:ed:40:85 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9W134+vDMbATCjR+1M6SmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWJlZThmZTc1NDlkMWE5YWU1NTllNWRhMDgxNjQyZTll YWMyNzgwHhcNMjYwMTAyMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWYyMTc5MjFhODE2MDFkNDIzNDJiMmZiNGU0MWQ4NWYyMzNlYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvUDLvprrsxbtfDJtDzYDtvwpdTe FCEegaHkzixiUcOaaHbRk5Wck78UdT8QJxa9tXsNwZ+NvmiggIc3eWV5VyjLJn20 KO7z6Rh2pNPQuyDWEfY1pdoTmIejLIcJFW4k7TK5XXwBVcnIKxNG00uTmseAGaGx /JWePKLHZG+PSz8NrNB56crWEZwBH0EL/R4HTIW0pcsQz9ZBITevwKS2k56/BapF LJKe7S7tLBfGvH1PQ1e6vUWlGFXiX5iVBZ8FFgXndm4IVGEEfmKZsnKDWqZf/au+ LJv4F0ZtV/r/a2Itj6Yq2kjGsOJKdxS7KRGpas5r8yTnpUD5WNRva/VqFQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFA7yF5IagWAdQjQrL7TkHYXyM+oiMB8GA1UdIwQY MBaAFErr7o/nVJ0amuVZ5doIFkLp6sJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3V2dWotZFVuUnFhNVZubDJnZ1dRdW5xd25nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hMTg5NjAtMmNmYS00NmI3LThlNWEt MmUyZDkzYzQ3NTRiLzEvRHZJWGtocUJZQjFDTkNzdnRPUWRoZkl6NmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9hMTg5NjAtMmNmYS00NmI3LThlNWEtMmUyZDkzYzQ3NTRi LzEvU3V2dWotZFVuUnFhNVZubDJnZ1dRdW5xd25nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPuUwDQYJ KoZIhvcNAQELBQADggEBAI+FGKRkyh7Nj3OL7iAcFXLptXq+elUYr9I0okOIHkpG yWd0KTmXeOkbPsRUcA92lyHNSF2lg9Kvd8fK+Q0V+DQjdlI1WFw8yYSwX6YufBPj HD0oFELemLr793rvmvBFD3NmPnFCgW8joJgdZf15vOF7JP1ri2Ri7WHXvnmTtOeT bZ/rnG3PHnwQMx5v/lvwR/63TYfLPkgYvK0Iy3rXnFMGuBYJb7pPF0wCep++Yn2m gz6LTWKCoL1PJ4TuWLsqHXIYqkE1h32j0GRz+Yc1u3fip04Ie+jJEaHfH9P+VBep BgEHYL0HKRPE734u+Ve/TTGuUz3G/7PTgwCmnOftQIU= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:10 2026 by rpki-client