This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/v1ehkcQQ4D4NKf55F5_02z6i834.roa File: v1ehkcQQ4D4NKf55F5_02z6i834.roa (raw, json) Hash identifier: nIrDtoZ6B4EdAYRP8cK7BwG7ahZ+Ga4Ofw6IBls4p9s= Subject key identifier: BF:57:A1:91:C4:10:E0:3E:0D:29:FE:79:17:9F:F4:DB:3E:A2:F3:7E Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C2C86F296BDEEC8E0B0EF969C388 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/v1ehkcQQ4D4NKf55F5_02z6i834.roa Signing time: Thu 01 Jan 2026 18:18:55 +0000 ROA not before: Thu 01 Jan 2026 18:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35182 IP address blocks: 62.63.176.0/21 maxlen: 24 62.63.184.0/22 maxlen: 24 62.63.188.0/23 maxlen: 24 80.233.245.0/24 maxlen: 24 80.233.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c2:c8:6f:29:6b:de:ec:8e:0b:0e:f9:69:c3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf57a191c410e03e0d29fe79179ff4db3ea2f37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:2d:aa:88:00:03:d0:7c:7d:2f:13:88:35: ec:c9:15:86:f1:cd:a3:70:08:d5:73:20:95:5b:4d: c0:e1:b5:4c:a4:64:3a:20:8f:d4:8c:27:4c:e1:08: 21:f5:18:01:74:ea:f4:19:d6:d7:35:94:8c:4b:9f: 56:ba:33:8c:29:97:ff:ef:fa:55:2e:6c:45:3c:d4: 25:c8:04:65:6e:f1:dd:55:69:8a:d9:71:92:09:3d: 06:49:b5:8c:fb:c2:4d:60:1a:4d:95:18:66:2e:8b: 7a:4a:df:41:b4:fa:23:01:38:57:db:72:af:8a:d3: 71:fe:bc:b9:0e:62:88:62:20:61:7a:96:0e:fb:de: 30:f8:c8:ed:d8:6f:15:6a:c3:13:4c:a8:0c:0d:d4: 4d:99:93:86:a6:4a:f9:34:45:1c:fb:90:48:df:14: 29:14:9a:99:10:54:0a:ae:61:ea:e1:81:98:f1:96: a6:cb:ea:c7:ca:df:00:3d:09:7c:66:4f:e9:c5:4c: 52:a4:cb:56:25:65:0a:a8:a6:27:10:ba:d3:e5:ed: 75:c9:35:77:71:cd:b1:64:a3:57:15:cc:a4:8c:2e: e7:d8:38:fc:11:18:45:88:44:b2:ed:68:a7:fb:58: 91:c1:39:55:9d:4d:67:95:48:c7:39:66:02:98:62: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:57:A1:91:C4:10:E0:3E:0D:29:FE:79:17:9F:F4:DB:3E:A2:F3:7E X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/v1ehkcQQ4D4NKf55F5_02z6i834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.63.176.0-62.63.189.255 80.233.245.0/24 80.233.250.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d5:cd:87:e5:e3:68:b2:97:f1:e0:76:ea:da:30:e1:3e:97: eb:05:88:13:5b:00:6c:08:8b:a5:b1:42:8d:c4:b3:01:28:9d: 11:e8:6c:0c:3f:2a:24:5a:ea:f0:f4:0e:71:17:79:19:fc:3c: b0:13:60:36:55:14:77:cf:cb:da:23:1b:1f:05:f7:1d:12:b7: da:c0:80:15:0e:3c:6c:e8:71:df:ea:d4:0a:b2:3d:23:50:b1: 1e:46:d2:e6:75:0f:7a:11:a5:a5:6c:da:5c:76:cf:0c:cb:9a: 8d:4e:3a:07:50:1e:2b:db:63:69:bb:6e:67:21:6a:86:96:62: e1:42:8c:41:3e:10:2d:d9:e7:d1:00:1b:fe:17:23:de:f8:0f: f4:94:8a:60:ac:2f:32:97:3b:49:bc:a4:ea:f1:b3:b9:b2:63: 2f:32:32:a6:1c:99:b9:75:51:1f:26:ce:cd:3a:e3:b0:dc:81: 75:60:fa:07:e7:36:f1:d8:d1:a7:d8:b2:3d:a6:01:93:c7:8a: 89:50:ac:66:b5:ab:14:f9:80:32:ef:ec:7d:90:99:d2:3c:80: 5e:5f:3d:c3:54:15:8c:b0:38:31:72:cf:c8:cf:9e:d2:6e:13: fb:2f:fa:d5:ef:7b:f5:51:43:4d:c0:c0:47:3c:c1:4f:59:a7: c4:fb:12:ca -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6yMLIbylr3uyOCw75acOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjU3YTE5MWM0MTBlMDNlMGQyOWZlNzkxNzlmZjRkYjNlYTJmMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucgtqogAA9B8fS8TiDXsyRWG8c2j cAjVcyCVW03A4bVMpGQ6II/UjCdM4Qgh9RgBdOr0GdbXNZSMS59WujOMKZf/7/pV LmxFPNQlyARlbvHdVWmK2XGSCT0GSbWM+8JNYBpNlRhmLot6St9BtPojAThX23Kv itNx/ry5DmKIYiBhepYO+94w+Mjt2G8VasMTTKgMDdRNmZOGpkr5NEUc+5BI3xQp FJqZEFQKrmHq4YGY8Zamy+rHyt8APQl8Zk/pxUxSpMtWJWUKqKYnELrT5e11yTV3 cc2xZKNXFcykjC7n2Dj8ERhFiESy7Win+1iRwTlVnU1nlUjHOWYCmGJznwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFL9XoZHEEOA+DSn+eRef9Ns+ovN+MB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvdjFlaGtjUVE0RDROS2Y1NUY1XzAyejZpODM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAQ+P7AD BAE+P7wDBABQ6fUDBABQ6fowDQYJKoZIhvcNAQELBQADggEBACnVzYfl42iyl/Hg duraMOE+l+sFiBNbAGwIi6WxQo3EswEonRHobAw/KiRa6vD0DnEXeRn8PLATYDZV FHfPy9ojGx8F9x0St9rAgBUOPGzocd/q1AqyPSNQsR5G0uZ1D3oRpaVs2lx2zwzL mo1OOgdQHivbY2m7bmchaoaWYuFCjEE+EC3Z59EAG/4XI974D/SUimCsLzKXO0m8 pOrxs7myYy8yMqYcmbl1UR8mzs0647DcgXVg+gfnNvHY0afYsj2mAZPHiolQrGa1 qxT5gDLv7H2QmdI8gF5fPcNUFYywODFyz8jPntJuE/sv+tXve/VRQ03AwEc8wU9Z p8T7Eso= -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:25 2026 by rpki-client