This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/PrbXCFhVtFkWUcwdTHxrF95uYDo.roa File: PrbXCFhVtFkWUcwdTHxrF95uYDo.roa (raw, json) Hash identifier: qYxwfpMga93RAf62Cr8sXnqP6qDnonu8QcpFUw5HhJ8= Subject key identifier: 3E:B6:D7:08:58:55:B4:59:16:51:CC:1D:4C:7C:6B:17:DE:6E:60:3A Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019B7F840E935B2A31F7F09FAC84A21D10E3 Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/PrbXCFhVtFkWUcwdTHxrF95uYDo.roa Signing time: Fri 02 Jan 2026 16:21:59 +0000 ROA not before: Fri 02 Jan 2026 16:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18811 IP address blocks: 62.244.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0e:93:5b:2a:31:f7:f0:9f:ac:84:a2:1d:10:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Jan 2 16:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eb6d7085855b4591651cc1d4c7c6b17de6e603a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:1f:1a:ca:d0:69:9d:d8:61:3c:58:6c:6c: b1:af:fd:5b:7c:2c:50:81:4c:65:a8:51:01:43:70: d9:7b:72:46:48:b8:f8:34:67:9c:67:59:b5:ef:5c: 12:d0:a3:79:48:fd:7e:49:ac:df:2c:0f:2c:0f:27: 08:87:a1:f4:d8:ba:09:f1:96:74:db:90:09:cc:76: 6a:2f:e5:9d:f6:80:1d:2b:32:88:36:7a:7d:4b:4d: 43:69:da:85:19:b4:a2:d7:b3:c4:76:a6:27:73:b8: bc:bb:12:31:8a:63:df:ce:66:f2:65:eb:f6:32:7d: fb:d2:5c:4b:d3:d7:3a:32:43:31:5a:ca:d7:d0:ea: d1:9f:da:7c:f5:57:b6:4f:0d:ca:5e:87:13:2c:20: 68:a4:95:2f:9c:f2:6c:7f:7f:a6:75:a2:86:3c:b2: 17:4b:a2:20:c8:55:49:61:9a:5d:ce:cd:90:ca:6c: d4:0a:92:bc:8c:c5:a2:82:65:4f:14:04:b5:ac:17: ca:3f:4d:d4:a6:12:74:3c:4b:8e:6a:69:3a:4e:c7: 65:ce:54:29:35:00:c3:8d:75:ac:59:3f:ed:54:0a: 7c:b3:b0:3a:95:b3:37:0e:52:47:fc:c0:dd:82:14: b3:ee:05:fb:1c:8c:32:63:a0:50:c1:b8:3a:99:77: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:D7:08:58:55:B4:59:16:51:CC:1D:4C:7C:6B:17:DE:6E:60:3A X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/PrbXCFhVtFkWUcwdTHxrF95uYDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.37.0/24 Signature Algorithm: sha256WithRSAEncryption 47:6e:73:bc:a4:b9:c0:7d:27:2d:13:a8:7a:c3:a9:70:cb:ab: af:2a:92:d5:e0:ae:70:3b:44:68:30:fc:de:10:dd:e6:e3:a4: 2e:0e:14:62:0c:78:0b:b6:74:02:7c:57:8e:74:3a:de:05:fa: e5:c0:f6:30:e5:f2:8f:68:96:81:ce:14:5e:f1:2a:6c:57:67: a9:e3:94:4a:25:ad:c6:28:6f:0b:84:dc:a3:c1:e1:22:0c:ae: 6f:1d:62:f0:4e:20:1a:24:53:5d:fc:e5:b8:fc:9e:67:b1:c0: 6b:5b:f1:cd:88:93:20:97:8f:9b:77:21:47:5d:06:fc:a3:62: 63:db:5b:55:5d:d3:3c:ba:59:86:9d:6f:40:af:7e:1e:9d:d0: 39:b3:a4:91:1f:54:78:b1:1c:cb:4d:07:e7:3b:79:d2:7f:cb: f3:75:fa:52:4d:1e:ea:29:df:f0:d8:39:3f:4f:93:4b:db:ae: 15:65:26:55:23:51:18:af:28:b5:e1:0e:45:33:7c:aa:c3:95: d6:7d:f6:8e:4c:d1:2d:17:02:ac:99:ee:25:4b:c4:81:96:b3: 02:52:c0:9d:7b:33:14:b5:b9:12:c1:fa:e2:d0:b1:39:37:4f: 39:ce:fb:d0:2b:d2:59:34:ec:9c:97:32:4d:ca:0b:38:c8:ce: 3b:1b:e4:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hA6TWyox9/CfrISiHRDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwMTAyMTYyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWI2ZDcwODU4NTViNDU5MTY1MWNjMWQ0YzdjNmIxN2RlNmU2MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL8fGsrQaZ3YYTxYbGyxr/1bfCxQ gUxlqFEBQ3DZe3JGSLj4NGecZ1m171wS0KN5SP1+SazfLA8sDycIh6H02LoJ8ZZ0 25AJzHZqL+Wd9oAdKzKINnp9S01DadqFGbSi17PEdqYnc7i8uxIximPfzmbyZev2 Mn370lxL09c6MkMxWsrX0OrRn9p89Ve2Tw3KXocTLCBopJUvnPJsf3+mdaKGPLIX S6IgyFVJYZpdzs2QymzUCpK8jMWigmVPFAS1rBfKP03UphJ0PEuOamk6TsdlzlQp NQDDjXWsWT/tVAp8s7A6lbM3DlJH/MDdghSz7gX7HIwyY6BQwbg6mXcJJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD621whYVbRZFlHMHUx8axfebmA6MB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvUHJiWENGaFZ0RmtXVWN3ZFRIeHJGOTV1WURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPvQlMA0G CSqGSIb3DQEBCwUAA4IBAQBHbnO8pLnAfSctE6h6w6lwy6uvKpLV4K5wO0RoMPze EN3m46QuDhRiDHgLtnQCfFeOdDreBfrlwPYw5fKPaJaBzhRe8SpsV2ep45RKJa3G KG8LhNyjweEiDK5vHWLwTiAaJFNd/OW4/J5nscBrW/HNiJMgl4+bdyFHXQb8o2Jj 21tVXdM8ulmGnW9Ar34endA5s6SRH1R4sRzLTQfnO3nSf8vzdfpSTR7qKd/w2Dk/ T5NL264VZSZVI1EYryi14Q5FM3yqw5XWffaOTNEtFwKsme4lS8SBlrMCUsCdezMU tbkSwfri0LE5N085zvvQK9JZNOyclzJNygs4yM47G+TO -----END CERTIFICATE-----Generated at Mon Jan 19 15:12:59 2026 by rpki-client