This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/R7B3oum7BpCTPNvgBRsQX2z2FVg.roa File: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (raw, json) Hash identifier: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk= Subject key identifier: 47:B0:77:A2:E9:BB:06:90:93:3C:DB:E0:05:1B:10:5F:6C:F6:15:58 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B7B36CFACD44B494A6DAD068847AFDF30 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/R7B3oum7BpCTPNvgBRsQX2z2FVg.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50949 IP address blocks: 62.181.48.0/24 maxlen: 24 62.181.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cf:ac:d4:4b:49:4a:6d:ad:06:88:47:af:df:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47b077a2e9bb0690933cdbe0051b105f6cf61558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:33:a3:6b:26:ad:a8:3b:82:bb:ad:cd:ed: 5c:17:a0:c1:4a:7f:6c:e5:8e:9c:94:de:b1:2c:75: 06:c3:49:98:04:65:81:d4:c4:04:9a:11:a2:dc:6c: 6f:fc:2d:7b:9f:18:4b:9b:d4:47:cb:43:b1:1e:94: 97:ae:8c:55:c4:a0:86:d0:f5:d0:18:47:51:87:6c: 26:6d:48:e2:cf:c4:41:62:65:25:bc:64:87:3a:4d: c5:89:b7:f6:be:c2:38:97:5f:4a:a5:49:31:55:02: cc:23:ab:5f:48:43:c4:f2:66:f9:50:b2:ef:49:92: b5:f1:b6:a4:73:15:70:21:77:61:0d:aa:50:25:e1: ed:76:c5:7f:81:0e:2d:74:69:2c:03:34:bd:1f:a7: ec:ba:39:72:a5:fa:8b:8a:16:c2:c9:f2:14:ed:a9: ad:b7:9d:86:c9:08:c3:88:80:8b:ba:1f:dd:cf:a8: 44:6b:7b:c9:62:21:e6:9b:81:f7:0c:c5:be:d8:b5: e4:4e:45:12:72:8d:03:c3:19:cc:70:ca:e4:a6:69: 4c:25:b3:d9:fd:fc:61:61:f6:e0:66:d0:ff:f1:4d: 0a:cb:f9:3a:5f:b4:b8:06:f7:0a:a3:f5:f4:26:73: b6:0a:7b:4a:d1:ad:21:38:bf:69:bd:c6:cd:02:98: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B0:77:A2:E9:BB:06:90:93:3C:DB:E0:05:1B:10:5F:6C:F6:15:58 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/R7B3oum7BpCTPNvgBRsQX2z2FVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.48.0/23 Signature Algorithm: sha256WithRSAEncryption 06:44:b2:06:cf:1f:0e:c8:df:f2:09:2e:23:71:11:2a:25:df: 54:3e:14:fa:1d:92:68:ec:3f:9e:a4:f6:f0:b0:06:6f:71:c4: b6:e2:18:73:d4:1d:4a:8b:1e:29:9d:c5:2b:ce:9e:ed:22:54: 80:c5:72:22:78:da:3e:5f:f9:f8:3d:fa:aa:85:00:cc:14:ce: a5:e8:38:3b:33:f5:9d:86:2c:a2:23:55:3b:db:a3:2c:ab:15: 1f:b1:73:0d:05:18:9a:b6:2b:83:3e:eb:64:3b:4a:1d:2b:67: e0:75:5f:f3:23:a2:3d:38:72:bf:45:b0:f9:71:a5:87:ae:ac: 08:09:0d:06:bf:8f:85:f5:86:3e:a0:a5:dd:42:c4:f8:fd:f9: 9e:c1:8a:0b:2e:70:ea:5c:ac:ce:b2:99:12:43:73:f0:c4:45: 9f:2e:88:dc:45:03:c2:0e:71:fd:85:82:04:2f:1b:be:78:79: da:02:74:6c:34:e6:22:cf:46:c0:ad:13:d4:d8:65:5f:6a:15: 34:78:10:dd:f0:ae:38:4a:31:4e:93:2a:7c:49:89:d2:9c:be: a5:b8:68:c0:24:29:0f:73:a5:1a:8b:9c:43:b5:1e:85:55:c6: 3c:1f:80:77:e1:8f:8a:c3:d0:ab:d8:81:1e:ef:28:61:1c:a3: d1:00:08:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ns+s1EtJSm2tBohHr98wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2IwNzdhMmU5YmIwNjkwOTMzY2RiZTAwNTFiMTA1ZjZjZjYxNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSgzo2smrag7grutze1cF6DBSn9s 5Y6clN6xLHUGw0mYBGWB1MQEmhGi3Gxv/C17nxhLm9RHy0OxHpSXroxVxKCG0PXQ GEdRh2wmbUjiz8RBYmUlvGSHOk3Fibf2vsI4l19KpUkxVQLMI6tfSEPE8mb5ULLv SZK18bakcxVwIXdhDapQJeHtdsV/gQ4tdGksAzS9H6fsujlypfqLihbCyfIU7amt t52GyQjDiICLuh/dz6hEa3vJYiHmm4H3DMW+2LXkTkUSco0DwxnMcMrkpmlMJbPZ /fxhYfbgZtD/8U0Ky/k6X7S4BvcKo/X0JnO2CntK0a0hOL9pvcbNApipgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEewd6LpuwaQkzzb4AUbEF9s9hVYMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvUjdCM291bTdCcENUUE52Z0JSc1FYMnoyRlZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPrUwMA0G CSqGSIb3DQEBCwUAA4IBAQAGRLIGzx8OyN/yCS4jcREqJd9UPhT6HZJo7D+epPbw sAZvccS24hhz1B1Kix4pncUrzp7tIlSAxXIieNo+X/n4PfqqhQDMFM6l6Dg7M/Wd hiyiI1U726MsqxUfsXMNBRiatiuDPutkO0odK2fgdV/zI6I9OHK/RbD5caWHrqwI CQ0Gv4+F9YY+oKXdQsT4/fmewYoLLnDqXKzOspkSQ3PwxEWfLojcRQPCDnH9hYIE Lxu+eHnaAnRsNOYiz0bArRPU2GVfahU0eBDd8K44SjFOkyp8SYnSnL6luGjAJCkP c6Uai5xDtR6FVcY8H4B34Y+Kw9Cr2IEe7yhhHKPRAAid -----END CERTIFICATE-----Generated at Mon Jan 26 08:04:19 2026 by rpki-client