This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aW5H-bCTGAFyXb6KRl8QnGxL7ic.roa File: aW5H-bCTGAFyXb6KRl8QnGxL7ic.roa (raw, json) Hash identifier: 14kNAcZP0+WEhNgXZzaol5EH+NNnE3BlB7qlMY8Ae+E= Subject key identifier: 69:6E:47:F9:B0:93:18:01:72:5D:BE:8A:46:5F:10:9C:6C:4B:EE:27 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA54A97B2F2BCD32198F3554E64659A Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aW5H-bCTGAFyXb6KRl8QnGxL7ic.roa Signing time: Thu 01 Jan 2026 22:19:48 +0000 ROA not before: Thu 01 Jan 2026 22:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203484 IP address blocks: 62.73.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4a:97:b2:f2:bc:d3:21:98:f3:55:4e:64:65:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=696e47f9b0931801725dbe8a465f109c6c4bee27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:39:59:9b:ca:0a:fd:0e:47:fe:03:82:34: 4e:92:9b:16:9b:1e:f5:b4:f8:e3:ba:b9:f9:0e:db: 8f:dd:e0:4d:58:a2:7d:6c:98:d1:67:b9:9c:5e:f5: 96:56:9b:6a:33:fc:59:50:fb:ba:34:a4:32:1c:1f: aa:4a:f4:c3:63:77:19:8d:76:a2:5e:c3:78:32:2a: 75:da:44:c6:04:ed:cc:6f:b5:0d:6e:42:d8:62:58: 64:a9:6b:99:30:ba:a5:c3:66:15:2c:ab:55:a1:25: 4c:a3:1d:3b:ce:78:67:af:f8:53:44:a2:ba:eb:7e: de:47:8f:93:23:d0:d4:31:67:71:16:75:b4:ce:1b: 4e:0d:78:80:bf:b9:a4:0a:f5:e1:12:37:10:91:08: c6:b7:81:31:ad:30:34:e7:dd:c8:9a:f4:e3:c2:2f: 41:1d:f9:a6:4d:6c:16:92:7c:f1:d3:a6:c4:9b:c0: 7c:35:75:dd:43:7b:41:c1:81:76:7b:b8:35:2a:cc: ac:9a:29:a8:d6:73:2a:49:e5:7c:81:78:22:a4:7e: f7:19:49:b7:2b:b9:5f:91:58:ae:2b:f6:4b:4f:fb: ee:10:aa:6e:80:b2:67:ba:17:bd:ef:a9:c3:eb:cb: 03:c3:0a:c6:94:2e:0b:82:9e:fe:47:22:f1:6f:81: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6E:47:F9:B0:93:18:01:72:5D:BE:8A:46:5F:10:9C:6C:4B:EE:27 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aW5H-bCTGAFyXb6KRl8QnGxL7ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.73.114.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:44:c4:30:64:9b:0a:67:51:f2:51:f1:2b:a6:ea:58:6e:cc: 93:51:84:be:eb:4d:9a:39:10:ad:83:35:ad:34:91:f7:5d:17: 1a:6f:c6:e9:55:49:ae:c9:d5:fc:e6:12:c3:61:b9:67:33:53: b5:c3:f7:ba:ad:57:f2:16:81:5d:6a:f6:32:63:2b:45:c2:5f: 55:95:15:9b:ad:8b:3f:87:4b:ac:e4:23:bc:02:10:6f:9c:3e: dc:3d:7b:85:56:de:1c:2a:a3:a3:e8:18:58:88:cf:e1:25:7a: 69:8c:13:a1:dd:eb:6d:e3:34:60:73:15:ec:9e:25:6e:17:43: 0f:72:81:3c:8b:36:1f:ef:b2:d7:db:66:d5:53:f7:97:42:68: ea:61:30:66:e7:ca:de:84:4d:8f:f1:6f:47:96:38:cd:84:6c: 10:f5:30:82:f4:fe:be:c6:94:de:4d:94:11:a5:36:5c:31:7f: 84:a0:dc:4f:35:6d:4f:24:93:1a:78:86:5d:50:ad:1f:cb:e7: 9f:0c:65:b0:22:c3:6a:5f:8e:67:66:1b:bb:ef:51:36:11:2d: 19:9e:aa:8a:e6:52:79:3e:9f:e7:18:88:6c:7f:ce:be:20:ef: ff:58:bf:36:57:6f:f7:5e:cc:4d:b5:4a:23:ab:47:b7:ce:fb: 21:c4:46:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUqXsvK80yGY81VOZGWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTZlNDdmOWIwOTMxODAxNzI1ZGJlOGE0NjVmMTA5YzZjNGJlZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMM5WZvKCv0OR/4DgjROkpsWmx71 tPjjurn5DtuP3eBNWKJ9bJjRZ7mcXvWWVptqM/xZUPu6NKQyHB+qSvTDY3cZjXai XsN4Mip12kTGBO3Mb7UNbkLYYlhkqWuZMLqlw2YVLKtVoSVMox07znhnr/hTRKK6 637eR4+TI9DUMWdxFnW0zhtODXiAv7mkCvXhEjcQkQjGt4ExrTA0593ImvTjwi9B HfmmTWwWknzx06bEm8B8NXXdQ3tBwYF2e7g1Ksysmimo1nMqSeV8gXgipH73GUm3 K7lfkViuK/ZLT/vuEKpugLJnuhe976nD68sDwwrGlC4Lgp7+RyLxb4H1ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGluR/mwkxgBcl2+ikZfEJxsS+4nMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvYVc1SC1iQ1RHQUZ5WGI2S1JsOFFuR3hMN2ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPklyMA0G CSqGSIb3DQEBCwUAA4IBAQCKRMQwZJsKZ1HyUfErpupYbsyTUYS+602aORCtgzWt NJH3XRcab8bpVUmuydX85hLDYblnM1O1w/e6rVfyFoFdavYyYytFwl9VlRWbrYs/ h0us5CO8AhBvnD7cPXuFVt4cKqOj6BhYiM/hJXppjBOh3ett4zRgcxXsniVuF0MP coE8izYf77LX22bVU/eXQmjqYTBm58rehE2P8W9HljjNhGwQ9TCC9P6+xpTeTZQR pTZcMX+EoNxPNW1PJJMaeIZdUK0fy+efDGWwIsNqX45nZhu771E2ES0ZnqqK5lJ5 Pp/nGIhsf86+IO//WL82V2/3XsxNtUojq0e3zvshxEZv -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:01 2026 by rpki-client