This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/o8eX56TS1SQhGzwJAmHIqx0vW0U.roa File: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (raw, json) Hash identifier: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw= Subject key identifier: A3:C7:97:E7:A4:D2:D5:24:21:1B:3C:09:02:61:C8:AB:1D:2F:5B:45 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B7B36D1F9D79C62C772B86B7D064CB3F6 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/o8eX56TS1SQhGzwJAmHIqx0vW0U.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206585 IP address blocks: 62.181.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d1:f9:d7:9c:62:c7:72:b8:6b:7d:06:4c:b3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3c797e7a4d2d524211b3c090261c8ab1d2f5b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:cb:48:f3:07:7a:f2:93:ed:8b:1b:a5:82: f6:32:ab:d4:79:01:05:07:61:12:d7:6f:ef:6b:15: 2b:ce:e8:42:5d:bb:9b:4d:ff:d7:d7:89:44:f3:b0: 0f:40:ad:40:c1:5a:33:79:32:17:fe:2b:04:72:d8: 36:d4:a2:f2:92:9a:0c:12:0a:d6:4f:d2:32:5a:1d: 34:d0:99:4e:26:aa:e7:70:81:2d:7e:c3:5c:23:27: 60:7d:0c:76:2c:27:a7:5c:d8:c3:92:4b:eb:98:3e: c2:f3:44:26:2f:f1:8c:34:8b:11:5c:d7:d0:0a:1a: 36:04:fd:35:87:e9:55:3e:9f:5d:6a:8d:51:8c:2b: 95:b7:1d:e9:61:c1:f1:d4:f0:c3:1b:0a:29:82:bd: e4:57:7e:01:6e:79:3a:b0:d5:25:f9:af:84:66:8a: cd:1e:d1:a3:43:f5:62:a9:8f:62:04:0f:73:8d:c9: 81:3f:f1:e8:83:4f:08:9b:20:64:48:71:cf:d4:7b: 30:5d:61:04:ba:44:6c:b1:1b:14:76:a8:ab:f9:99: fa:cf:5a:d9:85:f4:05:ca:4d:f9:7f:71:64:45:25: e0:48:da:d4:8c:c5:b9:10:96:a8:57:3f:b0:27:24: a3:ae:4f:c2:0f:b9:d8:1d:de:e7:8d:a9:87:e8:60: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C7:97:E7:A4:D2:D5:24:21:1B:3C:09:02:61:C8:AB:1D:2F:5B:45 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/o8eX56TS1SQhGzwJAmHIqx0vW0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.60.0/23 Signature Algorithm: sha256WithRSAEncryption 08:b9:06:f4:a6:2c:72:fa:3f:8e:ee:e0:9d:38:b7:ae:b5:14: c3:40:25:c5:c3:db:74:b9:bf:ee:ad:6c:92:55:a3:ac:08:ed: ed:e8:55:a1:5e:58:05:90:04:06:d9:85:e2:12:36:10:0a:91: f4:ea:73:e0:fb:fd:75:13:57:0d:95:59:cd:b4:59:0c:22:d0: ee:83:56:4c:10:db:92:8f:78:d7:3b:47:6a:4b:9d:9a:93:8e: da:16:21:40:f6:ec:48:f5:42:08:05:bb:f5:f6:5f:ef:21:de: 99:54:5b:d9:19:b8:e8:e4:69:53:ae:0a:a0:0f:48:11:c8:15: b3:cf:19:e0:f6:0e:24:16:07:db:0b:06:17:59:ba:b1:37:34: d8:fd:68:56:7a:4d:21:51:ba:1b:aa:c3:3b:80:af:2b:d3:d6: 53:be:68:9a:a4:12:6b:6f:5f:55:4b:ef:27:30:40:f7:b9:57: 43:0a:7d:95:2a:0d:96:1d:6f:3e:80:0b:3b:1d:99:b2:83:a0: 78:e7:1c:98:73:92:5a:31:e7:96:62:cf:e6:99:69:ab:70:dc: bb:83:b9:8e:03:72:0d:ae:82:49:4a:f3:96:67:f9:47:c4:b3: 56:87:df:e9:be:fb:b3:ff:3c:43:8f:62:82:33:71:90:49:ac: 1a:bf:d9:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtH515xix3K4a30GTLP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2M3OTdlN2E0ZDJkNTI0MjExYjNjMDkwMjYxYzhhYjFkMmY1YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkjLSPMHevKT7YsbpYL2MqvUeQEF B2ES12/vaxUrzuhCXbubTf/X14lE87APQK1AwVozeTIX/isEctg21KLykpoMEgrW T9IyWh000JlOJqrncIEtfsNcIydgfQx2LCenXNjDkkvrmD7C80QmL/GMNIsRXNfQ Cho2BP01h+lVPp9dao1RjCuVtx3pYcHx1PDDGwopgr3kV34Bbnk6sNUl+a+EZorN HtGjQ/ViqY9iBA9zjcmBP/Hog08ImyBkSHHP1HswXWEEukRssRsUdqir+Zn6z1rZ hfQFyk35f3FkRSXgSNrUjMW5EJaoVz+wJySjrk/CD7nYHd7njamH6GC8QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPHl+ek0tUkIRs8CQJhyKsdL1tFMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvbzhlWDU2VFMxU1FoR3p3SkFtSElxeDB2VzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPrU8MA0G CSqGSIb3DQEBCwUAA4IBAQAIuQb0pixy+j+O7uCdOLeutRTDQCXFw9t0ub/urWyS VaOsCO3t6FWhXlgFkAQG2YXiEjYQCpH06nPg+/11E1cNlVnNtFkMItDug1ZMENuS j3jXO0dqS52ak47aFiFA9uxI9UIIBbv19l/vId6ZVFvZGbjo5GlTrgqgD0gRyBWz zxng9g4kFgfbCwYXWbqxNzTY/WhWek0hUbobqsM7gK8r09ZTvmiapBJrb19VS+8n MED3uVdDCn2VKg2WHW8+gAs7HZmyg6B45xyYc5JaMeeWYs/mmWmrcNy7g7mOA3IN roJJSvOWZ/lHxLNWh9/pvvuz/zxDj2KCM3GQSawav9nG -----END CERTIFICATE-----Generated at Mon Jan 26 08:05:06 2026 by rpki-client