This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa File: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (raw, json) Hash identifier: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M= Subject key identifier: 87:55:13:E8:D1:60:DD:9A:58:7A:28:82:80:74:41:A7:ED:54:F8:D0 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B7B36D0A92365DCC726F0F73F23493A7E Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62046 IP address blocks: 62.181.56.0/24 maxlen: 24 212.59.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d0:a9:23:65:dc:c7:26:f0:f7:3f:23:49:3a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=875513e8d160dd9a587a2882807441a7ed54f8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:a2:8f:30:9b:ef:a1:cb:43:bd:13:2a:c3: 41:1a:5f:0d:1a:df:75:35:42:55:af:f9:a0:c6:75: 02:c4:63:09:6c:0c:1b:ab:b6:71:a7:b2:d2:2d:64: 9b:53:c9:2b:b2:f1:07:9f:4a:f3:83:6b:6c:3f:4a: c0:49:66:24:61:c6:dd:71:01:9c:c2:e1:c8:98:15: 46:22:24:f9:a2:01:6b:a8:f8:2c:8e:bf:09:e0:3c: 92:63:c1:ac:47:1b:92:c8:aa:ab:1d:1b:5b:94:dd: ee:95:13:62:37:0e:6f:0f:98:33:b3:aa:f4:3a:e3: 8c:51:06:f6:f0:c8:56:05:da:8a:6c:1f:30:22:b6: da:01:fc:2b:5a:81:17:a4:eb:49:e1:7d:5d:d5:49: e7:f9:1d:91:8d:7f:20:a3:b5:de:3b:fd:0a:a6:d9: 2b:b9:8f:fb:68:45:84:c2:07:02:77:d6:e8:63:1c: e1:e9:ad:27:a2:f2:ed:4b:31:c3:1e:2d:5e:cd:16: 08:b8:02:8f:1e:89:6c:a1:ae:a4:f6:f7:88:b9:26: 52:c4:59:3d:b8:8b:69:04:dd:82:44:0f:ec:bb:b2: 5b:1e:09:7b:e9:e7:95:53:73:ff:57:f0:f7:f3:44: 05:2b:fa:c9:fd:99:1a:30:9f:d3:3a:fa:a5:03:e7: 17:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:55:13:E8:D1:60:DD:9A:58:7A:28:82:80:74:41:A7:ED:54:F8:D0 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.56.0/24 212.59.104.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:73:85:e2:43:c8:4d:e4:97:c3:76:24:37:0d:81:5b:56:a0: d0:ae:51:b8:a9:74:fb:1e:45:e8:73:8a:b4:26:d2:0b:1e:fb: 31:01:ee:9b:45:bd:89:c8:2c:3a:9c:3e:29:dc:2e:ca:4b:0c: 3a:68:37:b0:b7:64:ea:94:36:6e:1c:9e:33:ac:51:e9:43:01: 16:53:6f:f0:35:94:5c:7a:bf:83:8d:76:83:4f:eb:9a:13:b6: 6c:b1:81:cc:c3:14:b4:62:cb:23:0a:a9:96:69:ab:38:63:94: 39:7e:30:60:28:18:bc:93:33:1a:8a:2e:48:f8:5d:7f:cd:57: 48:c4:1f:ce:95:cb:4d:d3:cd:45:8e:6f:1b:c2:d2:72:25:0d: 13:be:37:61:22:8d:29:c1:6d:4c:7d:68:18:29:50:52:08:3d: 1f:99:3a:77:cf:bb:28:20:db:d9:49:b0:a1:fb:e3:0c:f3:a4: 21:ce:d1:ae:9a:2a:46:58:dd:5e:75:b1:92:2c:05:42:74:3d: 27:13:ce:76:aa:7a:b5:58:70:38:45:90:5f:0d:07:0e:3f:1a: 2e:e4:13:0b:fd:d9:ec:62:bd:8e:b1:c6:74:74:00:91:36:7e: 7a:33:49:0b:33:29:c1:9d:ef:75:d2:6b:42:7e:7f:7e:44:fd: 7e:bf:9d:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NtCpI2Xcxybw9z8jSTp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzU1MTNlOGQxNjBkZDlhNTg3YTI4ODI4MDc0NDFhN2VkNTRmOGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb2ijzCb76HLQ70TKsNBGl8NGt91 NUJVr/mgxnUCxGMJbAwbq7Zxp7LSLWSbU8krsvEHn0rzg2tsP0rASWYkYcbdcQGc wuHImBVGIiT5ogFrqPgsjr8J4DySY8GsRxuSyKqrHRtblN3ulRNiNw5vD5gzs6r0 OuOMUQb28MhWBdqKbB8wIrbaAfwrWoEXpOtJ4X1d1Unn+R2RjX8go7XeO/0Kptkr uY/7aEWEwgcCd9boYxzh6a0novLtSzHDHi1ezRYIuAKPHolsoa6k9veIuSZSxFk9 uItpBN2CRA/su7JbHgl76eeVU3P/V/D380QFK/rJ/ZkaMJ/TOvqlA+cXYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIdVE+jRYN2aWHoogoB0QaftVPjQMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvaDFVVDZORmczWnBZZWlpQ2dIUkJwLTFVLU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPrU4AwQA 1DtoMA0GCSqGSIb3DQEBCwUAA4IBAQCMc4XiQ8hN5JfDdiQ3DYFbVqDQrlG4qXT7 HkXoc4q0JtILHvsxAe6bRb2JyCw6nD4p3C7KSww6aDewt2TqlDZuHJ4zrFHpQwEW U2/wNZRcer+DjXaDT+uaE7ZssYHMwxS0YssjCqmWaas4Y5Q5fjBgKBi8kzMaii5I +F1/zVdIxB/OlctN081Fjm8bwtJyJQ0TvjdhIo0pwW1MfWgYKVBSCD0fmTp3z7so INvZSbCh++MM86QhztGumipGWN1edbGSLAVCdD0nE852qnq1WHA4RZBfDQcOPxou 5BML/dnsYr2OscZ0dACRNn56M0kLMynBne910mtCfn9+RP1+v50H -----END CERTIFICATE-----Generated at Mon Jan 26 08:04:33 2026 by rpki-client