This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/aa9c3i_QmzIlTyi0XFZwJXrmq48.roa File: aa9c3i_QmzIlTyi0XFZwJXrmq48.roa (raw, json) Hash identifier: HcRPfUnw0rt8gf5+bGCJq0Ra7n/YA9e5E/2HwqC6qHA= Subject key identifier: 69:AF:5C:DE:2F:D0:9B:32:25:4F:28:B4:5C:56:70:25:7A:E6:AB:8F Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019B7F840FB75C634A71F9A13DC0349DAAD1 Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/aa9c3i_QmzIlTyi0XFZwJXrmq48.roa Signing time: Fri 02 Jan 2026 16:21:59 +0000 ROA not before: Fri 02 Jan 2026 16:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398704 IP address blocks: 62.244.29.0/24 maxlen: 24 62.244.41.0/24 maxlen: 24 62.244.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0f:b7:5c:63:4a:71:f9:a1:3d:c0:34:9d:aa:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Jan 2 16:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69af5cde2fd09b32254f28b45c5670257ae6ab8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:46:5e:51:db:60:b4:4b:56:06:4b:e7:96: 82:2c:0e:c3:8f:a8:38:11:55:45:34:6e:03:ad:0e: fd:d8:e9:95:c1:90:e1:b8:34:58:5c:9a:78:2d:91: 82:6b:de:b7:74:f0:fc:f8:46:24:75:0f:79:a8:48: a2:6f:86:28:6f:af:46:68:f9:05:51:1e:78:ea:e5: cd:da:df:3d:34:14:d9:2b:7f:d2:35:81:47:eb:22: 20:51:23:b7:20:68:9a:31:a2:b4:61:ac:54:92:65: 21:81:bf:ec:ec:bf:2c:1e:29:c4:92:56:b5:c3:1c: 1e:e4:9d:76:2c:38:43:b7:0e:9d:27:2d:70:20:6f: 20:07:3d:ed:f7:3a:3e:e0:f1:c5:86:6b:a2:15:0a: 73:54:c3:20:e7:d2:44:a4:7e:0f:23:ec:6d:64:8e: 79:dc:70:79:ba:b4:52:14:81:ab:95:f8:7a:07:8f: c4:be:62:b4:c0:21:02:c5:7f:64:2c:77:5d:a3:31: f5:ef:81:01:96:73:61:79:5d:3a:1b:7f:e6:0a:b7: 1b:ad:5d:c5:78:8d:2c:e9:75:76:b8:a4:7e:e3:eb: 43:66:17:ac:01:98:f3:73:b1:b4:38:00:fd:49:66: 8b:f9:b1:b7:62:87:3e:ef:5c:06:16:5d:c0:bc:80: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:5C:DE:2F:D0:9B:32:25:4F:28:B4:5C:56:70:25:7A:E6:AB:8F X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/aa9c3i_QmzIlTyi0XFZwJXrmq48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.29.0/24 62.244.41.0/24 62.244.56.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:b1:1a:0b:db:fd:a2:5d:16:e8:c9:2f:f6:20:89:4b:d3:9d: 84:a6:4b:b5:ec:4b:e9:fc:54:a3:9f:cd:37:58:5c:de:25:29: b4:44:61:e2:a0:90:6b:d3:61:5c:03:b7:b4:53:64:0f:20:cc: 9b:3b:c8:e4:2d:47:52:50:e0:b8:4e:25:6b:4e:2e:15:0b:8c: 26:a7:94:74:c2:0b:4a:ec:f5:d3:f9:0a:1d:a9:01:cc:26:96: 17:d1:cb:20:15:7e:c1:d0:41:99:6d:33:90:d4:9c:71:ff:01: 69:58:a9:19:ad:02:4a:97:71:e9:53:6f:47:5c:58:0f:a8:56: a2:52:16:11:c9:74:17:e2:45:18:40:0c:3e:a9:33:3f:21:a3: c9:e1:45:41:0f:32:74:e1:16:84:50:1e:ab:a3:62:8b:f0:f9: 80:63:5b:d5:68:98:1a:c2:8f:25:d4:4d:36:27:1f:47:a5:b8: 1f:5d:bf:55:b7:b6:3c:fc:1b:1c:71:98:72:73:91:f2:ff:7e: 64:85:6a:ef:17:42:71:aa:27:1e:79:df:b3:2b:4f:c2:fc:ba: ba:7b:9e:7d:d9:c0:1a:1e:17:12:eb:29:76:c3:d3:4f:1d:cd: 1d:ff:4f:07:10:89:81:94:fd:9c:d2:8d:73:00:56:82:9e:bc: 1a:95:88:68 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hA+3XGNKcfmhPcA0narRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwMTAyMTYyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWFmNWNkZTJmZDA5YjMyMjU0ZjI4YjQ1YzU2NzAyNTdhZTZhYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/xGXlHbYLRLVgZL55aCLA7Dj6g4 EVVFNG4DrQ792OmVwZDhuDRYXJp4LZGCa963dPD8+EYkdQ95qEiib4Yob69GaPkF UR546uXN2t89NBTZK3/SNYFH6yIgUSO3IGiaMaK0YaxUkmUhgb/s7L8sHinEkla1 wxwe5J12LDhDtw6dJy1wIG8gBz3t9zo+4PHFhmuiFQpzVMMg59JEpH4PI+xtZI55 3HB5urRSFIGrlfh6B4/EvmK0wCECxX9kLHddozH174EBlnNheV06G3/mCrcbrV3F eI0s6XV2uKR+4+tDZhesAZjzc7G0OAD9SWaL+bG3Yoc+71wGFl3AvIApRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGmvXN4v0JsyJU8otFxWcCV65quPMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvYWE5YzNpX1FteklsVHlpMFhGWndKWHJtcTQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPvQdAwQA PvQpAwQAPvQ4MA0GCSqGSIb3DQEBCwUAA4IBAQCPsRoL2/2iXRboyS/2IIlL052E pku17Evp/FSjn803WFzeJSm0RGHioJBr02FcA7e0U2QPIMybO8jkLUdSUOC4TiVr Ti4VC4wmp5R0wgtK7PXT+QodqQHMJpYX0csgFX7B0EGZbTOQ1Jxx/wFpWKkZrQJK l3HpU29HXFgPqFaiUhYRyXQX4kUYQAw+qTM/IaPJ4UVBDzJ04RaEUB6ro2KL8PmA Y1vVaJgawo8l1E02Jx9HpbgfXb9Vt7Y8/BsccZhyc5Hy/35khWrvF0Jxqiceed+z K0/C/Lq6e5592cAaHhcS6yl2w9NPHc0d/08HEImBlP2c0o1zAFaCnrwalYho -----END CERTIFICATE-----Generated at Mon Jan 19 15:13:42 2026 by rpki-client