This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/9xohe0WrdtI7HVhoFYevFGaGlbc.roa File: 9xohe0WrdtI7HVhoFYevFGaGlbc.roa (raw, json) Hash identifier: JlRzOAenO4QPVaHIwuTlBW/1CKfl7RhsHIL/eBfeU2g= Subject key identifier: F7:1A:21:7B:45:AB:76:D2:3B:1D:58:68:15:87:AF:14:66:86:95:B7 Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019B7F840BEE2150A607B51394124C347A8D Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/9xohe0WrdtI7HVhoFYevFGaGlbc.roa Signing time: Fri 02 Jan 2026 16:21:58 +0000 ROA not before: Fri 02 Jan 2026 16:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 62.244.11.0/24 maxlen: 24 62.244.12.0/24 maxlen: 24 62.244.29.0/24 maxlen: 24 62.244.36.0/24 maxlen: 24 62.244.37.0/24 maxlen: 24 62.244.41.0/24 maxlen: 24 62.244.43.0/24 maxlen: 24 62.244.45.0/24 maxlen: 24 62.244.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0b:ee:21:50:a6:07:b5:13:94:12:4c:34:7a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Jan 2 16:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f71a217b45ab76d23b1d58681587af14668695b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:20:67:55:5c:96:66:06:54:ac:87:c2:59: d4:89:45:52:82:52:27:50:c1:bb:81:15:44:9d:3a: cc:b9:e9:23:66:ee:cb:92:47:95:cb:f0:84:90:76: bb:e6:fc:bf:76:c8:84:c7:41:12:37:9d:7d:0b:31: 7a:3d:3f:7d:c4:68:e3:69:46:bf:af:ab:2e:fd:23: 81:4f:54:7b:f6:cd:23:fb:8f:63:08:1c:3d:b3:34: 5f:33:57:88:ab:b9:6e:d4:f2:45:02:7e:a9:63:1b: 76:44:b4:0a:1b:9a:fb:aa:1f:75:86:d2:90:9e:ff: c2:a3:3b:52:a1:8d:cf:0c:86:44:e7:ca:d9:17:28: 11:c1:44:06:c6:97:fd:7b:a5:cf:5b:c7:6b:f8:ac: 0b:b6:87:10:eb:82:96:b7:36:d3:6a:0a:c5:18:6b: 1f:ef:ac:76:1d:6c:68:89:d6:bf:42:2a:b9:f0:08: 97:f8:a2:05:d5:54:48:03:64:a5:94:3e:95:4b:8f: 35:ca:0a:25:49:2e:5a:d4:4a:cb:b4:69:9d:88:76: af:43:27:9b:0d:97:a9:76:3b:10:1d:2b:8e:2f:58: 92:a0:bb:b7:e8:2b:27:d8:1c:69:85:df:55:d1:52: a7:23:74:b5:4d:87:f5:de:2f:be:7c:08:8c:5a:07: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1A:21:7B:45:AB:76:D2:3B:1D:58:68:15:87:AF:14:66:86:95:B7 X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/9xohe0WrdtI7HVhoFYevFGaGlbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.11.0-62.244.12.255 62.244.29.0/24 62.244.36.0/23 62.244.41.0/24 62.244.43.0/24 62.244.45.0/24 62.244.56.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:c0:7f:bc:81:0e:64:3b:b5:77:95:29:b8:14:cc:05:87:dd: 55:c4:7e:08:38:83:6c:24:62:c9:78:e9:7e:5d:2a:4a:ba:13: 7b:20:06:81:b0:50:0c:b4:e4:a9:30:7f:81:e1:71:55:89:10: c4:9d:eb:57:a3:84:4c:19:24:64:af:ba:9f:fe:4a:03:b0:52: c7:4b:4b:b0:96:26:b6:79:5b:a1:2a:07:e0:47:1a:1a:d9:d3: c3:da:df:b6:b6:3c:37:77:9f:ab:91:fc:2f:85:f5:44:59:39: db:02:ad:d2:1b:6e:df:46:7b:da:48:38:bf:0d:93:27:dd:7e: b3:ad:85:bf:91:b9:5a:b8:42:0e:08:a7:a1:e0:04:73:79:4e: 56:6b:eb:fd:88:6e:a8:fc:54:3d:81:8e:a7:21:a1:ec:86:b6: 59:87:1d:b5:c8:1d:f1:6b:39:66:8c:9a:a5:29:67:eb:6a:57: 1a:d3:3e:4d:64:6e:2e:21:01:e6:52:49:dc:55:a0:99:77:20: f1:a6:e1:b1:97:e8:24:73:21:1a:38:83:95:c5:50:66:0d:fc: 8f:64:84:54:b3:72:ee:2f:33:8b:9b:cb:70:f3:d3:61:28:10: 3b:95:d8:89:1d:1a:ae:f3:e5:95:b8:60:11:dc:59:44:fa:91: 0a:99:9c:99 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt/hAvuIVCmB7UTlBJMNHqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwMTAyMTYyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzFhMjE3YjQ1YWI3NmQyM2IxZDU4NjgxNTg3YWYxNDY2ODY5NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ogZ1VclmYGVKyHwlnUiUVSglIn UMG7gRVEnTrMuekjZu7LkkeVy/CEkHa75vy/dsiEx0ESN519CzF6PT99xGjjaUa/ r6su/SOBT1R79s0j+49jCBw9szRfM1eIq7lu1PJFAn6pYxt2RLQKG5r7qh91htKQ nv/CoztSoY3PDIZE58rZFygRwUQGxpf9e6XPW8dr+KwLtocQ64KWtzbTagrFGGsf 76x2HWxoida/Qiq58AiX+KIF1VRIA2SllD6VS481ygolSS5a1ErLtGmdiHavQyeb DZepdjsQHSuOL1iSoLu36Csn2Bxphd9V0VKnI3S1TYf13i++fAiMWgemrwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFPcaIXtFq3bSOx1YaBWHrxRmhpW3MB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvOXhvaGUwV3JkdEk3SFZob0ZZZXZGR2FHbGJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAA+9AsD BAA+9AwDBAA+9B0DBAE+9CQDBAA+9CkDBAA+9CsDBAA+9C0DBAA+9DgwDQYJKoZI hvcNAQELBQADggEBACrAf7yBDmQ7tXeVKbgUzAWH3VXEfgg4g2wkYsl46X5dKkq6 E3sgBoGwUAy05Kkwf4HhcVWJEMSd61ejhEwZJGSvup/+SgOwUsdLS7CWJrZ5W6Eq B+BHGhrZ08Pa37a2PDd3n6uR/C+F9URZOdsCrdIbbt9Ge9pIOL8NkyfdfrOthb+R uVq4Qg4Ip6HgBHN5TlZr6/2Ibqj8VD2BjqchoeyGtlmHHbXIHfFrOWaMmqUpZ+tq VxrTPk1kbi4hAeZSSdxVoJl3IPGm4bGX6CRzIRo4g5XFUGYN/I9khFSzcu4vM4ub y3Dz02EoEDuV2IkdGq7z5ZW4YBHcWUT6kQqZnJk= -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:28 2026 by rpki-client