This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/0273NJ6iQvZTgyuMash3xOhPLj8.roa File: 0273NJ6iQvZTgyuMash3xOhPLj8.roa (raw, json) Hash identifier: 4bykyvzdYlZRg3u7BKzjHELAB3KL3rC2juBQve+S7UU= Subject key identifier: D3:6E:F7:34:9E:A2:42:F6:53:83:2B:8C:6A:C8:77:C4:E8:4F:2E:3F Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019B7F840E388CE731EF7520F3764277328B Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/0273NJ6iQvZTgyuMash3xOhPLj8.roa Signing time: Fri 02 Jan 2026 16:21:59 +0000 ROA not before: Fri 02 Jan 2026 16:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 62.244.57.0/24 maxlen: 24 62.244.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0e:38:8c:e7:31:ef:75:20:f3:76:42:77:32:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Jan 2 16:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d36ef7349ea242f653832b8c6ac877c4e84f2e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:8d:8b:a9:b9:00:fc:90:07:0a:7d:c4:87: fc:3e:f1:18:0b:fa:c3:ba:47:91:a7:02:4a:24:7c: 8d:65:63:53:3e:8b:18:d3:0b:8a:58:f9:38:a0:0b: 1c:13:5a:3e:37:a9:a1:f5:0a:bd:f3:d5:45:6c:7d: 0d:e8:fa:b3:6e:a0:ea:f1:1a:23:f5:81:a7:10:bd: 8f:6b:cd:6d:b7:cc:04:06:5b:04:41:18:3a:bf:be: ca:6a:a9:6f:7d:c2:60:94:16:9e:57:10:b6:de:d8: ac:a6:65:4f:cd:71:a3:da:04:46:f1:d7:71:96:eb: c0:f1:7f:6f:5b:11:a9:ff:48:9e:43:93:fe:fb:88: 49:ef:69:5e:0b:da:35:5e:a4:76:d6:98:08:93:9f: a1:8d:9a:73:c3:b7:4d:82:97:f1:51:cf:c0:8e:b1: bb:1b:ee:e7:02:dd:2a:14:49:12:72:73:45:3e:7c: f7:26:fb:c5:d0:7c:98:e6:36:89:20:4b:6e:dd:7c: d8:ba:2f:96:92:4e:59:20:be:d0:78:1e:2f:57:91: 76:bb:74:b1:2a:82:5a:27:08:37:79:c9:65:f2:20: d8:0c:da:a4:6a:ed:21:e2:6d:2a:15:38:91:a7:28: 7d:e8:bc:42:62:5c:8e:df:16:e7:02:03:05:7e:42: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:F7:34:9E:A2:42:F6:53:83:2B:8C:6A:C8:77:C4:E8:4F:2E:3F X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/0273NJ6iQvZTgyuMash3xOhPLj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.57.0-62.244.58.255 Signature Algorithm: sha256WithRSAEncryption 8d:0e:59:b6:41:e7:0f:9a:36:40:f8:c5:f7:a8:01:40:65:60: d4:a5:ae:c3:e6:5b:0f:0d:34:31:c2:70:97:79:40:8f:67:c9: 87:8e:2c:51:61:9d:71:69:4e:23:0f:78:c1:9c:99:f5:18:00: e1:78:41:f4:a3:76:97:3f:be:46:56:6e:25:75:00:53:6e:60: ae:e5:23:86:66:5b:60:e2:1f:0b:ea:6d:ad:de:c6:c0:0b:6c: 61:42:f2:38:b2:6c:0e:a5:9d:73:d9:6f:53:a4:5e:cd:4c:02: 73:81:22:89:6e:de:79:3c:c3:1e:de:2f:ac:fe:08:fb:97:14: 9d:c8:33:50:41:ef:3e:c1:e2:8a:43:93:93:35:0b:be:67:69: bf:cc:e7:6f:65:b0:a0:29:27:91:59:48:47:f9:fb:6b:9b:6c: 2e:5f:5c:b0:1a:e7:d1:16:bc:8d:32:0d:80:95:c0:88:33:30: f5:04:25:a8:50:24:a5:bc:3f:fc:af:96:fd:e5:a9:33:32:05: dd:4c:b4:6d:ba:47:69:d3:e8:04:5c:6b:f8:7c:01:40:6c:e6: 88:4a:bf:dc:7e:dc:89:84:56:55:de:6b:23:e8:f2:f7:f1:b5: 32:b5:cd:d4:8a:6c:51:c5:18:5f:76:fe:d0:bf:c1:47:12:fb: 35:1e:4f:9c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hA44jOcx73Ug83ZCdzKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwMTAyMTYyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzZlZjczNDllYTI0MmY2NTM4MzJiOGM2YWM4NzdjNGU4NGYyZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv+Ni6m5APyQBwp9xIf8PvEYC/rD ukeRpwJKJHyNZWNTPosY0wuKWPk4oAscE1o+N6mh9Qq989VFbH0N6PqzbqDq8Roj 9YGnEL2Pa81tt8wEBlsEQRg6v77KaqlvfcJglBaeVxC23tispmVPzXGj2gRG8ddx luvA8X9vWxGp/0ieQ5P++4hJ72leC9o1XqR21pgIk5+hjZpzw7dNgpfxUc/AjrG7 G+7nAt0qFEkScnNFPnz3JvvF0HyY5jaJIEtu3XzYui+Wkk5ZIL7QeB4vV5F2u3Sx KoJaJwg3ecll8iDYDNqkau0h4m0qFTiRpyh96LxCYlyO3xbnAgMFfkJLLwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNNu9zSeokL2U4MrjGrId8ToTy4/MB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvMDI3M05KNmlRdlpUZ3l1TWFzaDN4T2hQTGo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAA+9DkD BAA+9DowDQYJKoZIhvcNAQELBQADggEBAI0OWbZB5w+aNkD4xfeoAUBlYNSlrsPm Ww8NNDHCcJd5QI9nyYeOLFFhnXFpTiMPeMGcmfUYAOF4QfSjdpc/vkZWbiV1AFNu YK7lI4ZmW2DiHwvqba3exsALbGFC8jiybA6lnXPZb1OkXs1MAnOBIolu3nk8wx7e L6z+CPuXFJ3IM1BB7z7B4opDk5M1C75nab/M529lsKApJ5FZSEf5+2ubbC5fXLAa 59EWvI0yDYCVwIgzMPUEJahQJKW8P/yvlv3lqTMyBd1MtG26R2nT6ARca/h8AUBs 5ohKv9x+3ImEVlXeayPo8vfxtTK1zdSKbFHFGF92/tC/wUcS+zUeT5w= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:55 2026 by rpki-client