This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/0hZDbxJrYBFNWkvmSImZbnA7DGo.roa File: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (raw, json) Hash identifier: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc= Subject key identifier: D2:16:43:6F:12:6B:60:11:4D:5A:4B:E6:48:89:99:6E:70:3B:0C:6A Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019B791112947445D8575B44670E9E1636BE Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/0hZDbxJrYBFNWkvmSImZbnA7DGo.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 62.223.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:12:94:74:45:d8:57:5b:44:67:0e:9e:16:36:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d216436f126b60114d5a4be64889996e703b0c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:bf:34:4a:45:25:84:63:d8:f4:4c:2e:d0: 8e:17:b3:30:0a:17:74:80:d8:e0:72:12:08:66:5c: 1d:d6:8a:2d:5d:d1:ce:bf:af:ad:c5:53:f6:62:d5: ba:24:da:78:9b:a9:62:93:ed:d0:ac:ca:1a:38:7d: a2:4d:a3:b9:d4:3a:51:cd:4b:41:3f:30:d1:d3:51: 1a:81:29:b5:84:57:a8:9e:4c:b5:20:f2:c4:00:02: e5:6f:95:aa:2c:52:5a:09:89:62:67:90:0f:82:b0: e5:e2:a1:f0:a0:34:91:5f:4b:5b:d6:1b:fa:91:11: b9:a1:32:a2:a9:48:8a:03:c8:35:61:fa:23:e4:ec: db:41:32:6a:37:d1:33:20:00:4f:4b:1a:b2:14:bd: e3:3d:7a:a3:9e:60:7f:d8:6d:dc:7b:c9:46:8c:34: fe:5f:83:70:62:8e:bf:8d:83:f1:40:4b:c4:7c:60: 8e:56:6e:2f:7e:04:35:11:bb:44:90:d7:52:5d:1d: a2:2a:dc:42:94:05:4c:98:fa:68:7a:60:b2:27:4d: d4:8f:51:ba:1b:08:71:db:ba:b0:a1:1c:d3:7e:e4: 3f:57:66:94:81:51:4e:87:dd:86:b9:68:46:63:12: 81:98:2f:0e:17:fe:c4:d3:40:56:0a:8a:bc:b0:25: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:16:43:6F:12:6B:60:11:4D:5A:4B:E6:48:89:99:6E:70:3B:0C:6A X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/0hZDbxJrYBFNWkvmSImZbnA7DGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.223.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:22:ec:ca:6c:74:24:3e:e7:23:fe:f2:f0:d2:d3:83:48:39: 44:f3:91:6b:9d:db:15:27:fe:03:65:8f:49:17:3e:8f:c5:73: 5d:7c:35:cf:99:4f:29:4e:b5:be:b4:7a:10:a0:6d:5c:8c:69: 30:e5:ba:d1:05:5a:71:7e:1d:8a:0f:95:83:00:f3:94:2e:16: f6:7f:49:c4:f3:24:e1:79:8f:58:1f:40:54:86:fe:46:8c:e8: c5:00:61:41:b0:7a:d2:73:20:b1:02:83:78:38:e5:17:dd:68: f7:9a:1c:d1:b6:f9:25:23:65:98:aa:b9:e5:a7:54:85:b5:63: 4b:1b:96:89:c2:b0:36:67:7c:cf:97:78:81:09:8d:6c:40:94: 28:51:0e:fc:ea:4f:28:df:af:07:ce:64:24:a0:e1:7c:a0:e6: dd:73:91:32:3f:b8:af:49:fa:44:a0:56:84:4b:e3:9d:24:de: ed:e6:aa:25:aa:59:f2:5e:64:2a:3e:80:f3:94:30:97:1f:3e: 28:20:01:7f:56:61:2a:02:f0:eb:86:6b:ce:8e:be:0e:e0:d2: c7:aa:2f:30:b7:55:f5:d4:3a:fc:bf:16:80:1e:aa:e8:d0:f9: b6:ef:ab:15:dc:0c:07:e9:59:dc:17:b0:f5:a9:fc:56:31:26: 1a:62:b3:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERKUdEXYV1tEZw6eFja+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjE2NDM2ZjEyNmI2MDExNGQ1YTRiZTY0ODg5OTk2ZTcwM2IwYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJK/NEpFJYRj2PRMLtCOF7MwChd0 gNjgchIIZlwd1ootXdHOv6+txVP2YtW6JNp4m6lik+3QrMoaOH2iTaO51DpRzUtB PzDR01EagSm1hFeonky1IPLEAALlb5WqLFJaCYliZ5APgrDl4qHwoDSRX0tb1hv6 kRG5oTKiqUiKA8g1Yfoj5OzbQTJqN9EzIABPSxqyFL3jPXqjnmB/2G3ce8lGjDT+ X4NwYo6/jYPxQEvEfGCOVm4vfgQ1EbtEkNdSXR2iKtxClAVMmPpoemCyJ03Uj1G6 Gwhx27qwoRzTfuQ/V2aUgVFOh92GuWhGYxKBmC8OF/7E00BWCoq8sCVIXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIWQ28Sa2ARTVpL5kiJmW5wOwxqMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvMGhaRGJ4SnJZQkZOV2t2bVNJbVpibkE3REdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPt8sMA0G CSqGSIb3DQEBCwUAA4IBAQBrIuzKbHQkPucj/vLw0tODSDlE85FrndsVJ/4DZY9J Fz6PxXNdfDXPmU8pTrW+tHoQoG1cjGkw5brRBVpxfh2KD5WDAPOULhb2f0nE8yTh eY9YH0BUhv5GjOjFAGFBsHrScyCxAoN4OOUX3Wj3mhzRtvklI2WYqrnlp1SFtWNL G5aJwrA2Z3zPl3iBCY1sQJQoUQ786k8o368HzmQkoOF8oObdc5EyP7ivSfpEoFaE S+OdJN7t5qolqlnyXmQqPoDzlDCXHz4oIAF/VmEqAvDrhmvOjr4O4NLHqi8wt1X1 1Dr8vxaAHqro0Pm276sV3AwH6VncF7D1qfxWMSYaYrOW -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:34 2026 by rpki-client