This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/O1ItMRw9wxb8OLoBzUvjVAYIXgU.roa File: O1ItMRw9wxb8OLoBzUvjVAYIXgU.roa (raw, json) Hash identifier: pI8kdZ3zSA/cDhrjWlp18FOm4vIH2mSaLg1YgI5IsGA= Subject key identifier: 3B:52:2D:31:1C:3D:C3:16:FC:38:BA:01:CD:4B:E3:54:06:08:5E:05 Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B7EA739D03E77AB8EFB8AAF0280B40293 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/O1ItMRw9wxb8OLoBzUvjVAYIXgU.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205025 IP address blocks: 62.101.160.0/24 maxlen: 24 62.101.161.0/24 maxlen: 24 62.101.162.0/24 maxlen: 24 62.101.163.0/24 maxlen: 24 62.101.164.0/24 maxlen: 24 62.101.165.0/24 maxlen: 24 62.101.166.0/24 maxlen: 24 62.101.167.0/24 maxlen: 24 82.198.32.0/24 maxlen: 24 82.198.33.0/24 maxlen: 24 82.198.34.0/24 maxlen: 24 82.198.35.0/24 maxlen: 24 185.53.102.0/24 maxlen: 24 185.53.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:39:d0:3e:77:ab:8e:fb:8a:af:02:80:b4:02:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b522d311c3dc316fc38ba01cd4be35406085e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d9:c1:5c:f4:b1:25:0f:25:1b:35:82:6f:69: b9:c1:66:ae:56:90:58:76:21:c8:45:5a:92:45:28: f2:a1:c4:7c:b0:c7:9e:79:41:ef:30:4f:8e:30:c8: 6f:9e:70:d7:b4:32:0f:e0:ac:f8:c6:0e:1b:16:b0: 40:f8:5b:4b:05:bb:70:49:a8:c5:cf:b4:7f:74:09: 7f:b0:f3:22:c3:46:a2:89:57:4f:6d:0c:ae:f4:8a: 38:a1:8b:b6:e8:75:9b:8b:3e:7c:f9:74:a4:12:61: c0:5d:28:b2:eb:a3:04:ac:d9:da:cd:11:27:cf:4f: e0:1e:4c:1b:12:b6:cf:62:7a:92:0f:fc:66:71:6e: 00:bb:c9:6a:91:0b:06:bc:82:af:57:43:fc:7f:84: b1:4a:e7:b4:24:d9:76:1e:4b:bf:08:89:c3:79:b1: 77:8c:61:83:05:16:8a:dc:9d:e9:98:1b:d5:f1:8f: 2e:11:fc:f2:81:81:32:ad:0a:df:4b:42:c7:87:96: ca:ef:f9:05:36:84:4b:8d:8b:e7:7c:12:c8:ce:4a: a4:49:03:85:08:6a:33:c4:1a:a1:b9:2e:a8:e9:76: e1:14:bf:44:c4:48:b0:d2:8e:45:70:71:cb:fb:16: 85:56:3a:5a:e0:79:fa:db:cc:e1:f2:fc:fe:31:50: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:52:2D:31:1C:3D:C3:16:FC:38:BA:01:CD:4B:E3:54:06:08:5E:05 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/O1ItMRw9wxb8OLoBzUvjVAYIXgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.101.160.0/21 82.198.32.0/22 185.53.102.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:d8:90:29:99:ec:5a:24:d4:19:c1:0f:dc:60:f3:64:ce:31: 9e:63:69:d2:b7:6d:ca:e9:fd:d9:45:b8:f2:d8:62:af:c7:09: f1:cc:56:06:77:ab:f8:80:a4:a0:f8:3b:60:cf:e1:70:3f:f7: 91:fb:08:cd:d4:5b:fd:3b:9b:a9:e1:4b:fd:79:67:2a:45:1f: f5:2c:ca:ae:40:7b:e1:ae:90:9e:1b:ee:ed:e2:b3:47:db:21: 16:17:c9:67:3b:03:1f:36:e6:f1:e7:6e:67:d2:ae:48:7f:16: b9:0d:97:56:21:34:c9:53:9a:c0:46:db:41:19:fc:54:e9:04: bb:8f:4b:1a:45:b5:e7:56:f2:73:0e:f7:63:c8:22:b3:a6:85: 93:df:13:9c:0a:1a:ac:70:79:f1:c7:53:a4:dc:67:72:5e:87: f6:ed:c2:2e:f7:b7:47:a7:ab:11:9b:ba:21:4e:13:92:b0:e3: 29:39:fd:60:6d:d4:73:91:a9:26:b3:ca:09:5c:74:12:d4:d7: fc:21:b7:13:fa:65:b2:87:45:1c:6c:83:2d:c4:83:e8:47:76: c2:c0:da:a5:c6:1d:17:a7:5e:92:58:c3:f7:37:69:21:44:a4: 07:63:14:c5:d0:0f:21:23:16:f6:3c:cf:35:69:8c:d5:ef:0e: 1c:eb:75:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pznQPnerjvuKrwKAtAKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjUyMmQzMTFjM2RjMzE2ZmMzOGJhMDFjZDRiZTM1NDA2MDg1ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dnBXPSxJQ8lGzWCb2m5wWauVpBY diHIRVqSRSjyocR8sMeeeUHvME+OMMhvnnDXtDIP4Kz4xg4bFrBA+FtLBbtwSajF z7R/dAl/sPMiw0aiiVdPbQyu9Io4oYu26HWbiz58+XSkEmHAXSiy66MErNnazREn z0/gHkwbErbPYnqSD/xmcW4Au8lqkQsGvIKvV0P8f4SxSue0JNl2Hku/CInDebF3 jGGDBRaK3J3pmBvV8Y8uEfzygYEyrQrfS0LHh5bK7/kFNoRLjYvnfBLIzkqkSQOF CGozxBqhuS6o6XbhFL9ExEiw0o5FcHHL+xaFVjpa4Hn628zh8vz+MVDWIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDtSLTEcPcMW/Di6Ac1L41QGCF4FMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvTzFJdE1Sdzl3eGI4T0xvQnpVdmpWQVlJWGdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDPmWgAwQC UsYgAwQBuTVmMA0GCSqGSIb3DQEBCwUAA4IBAQCc2JApmexaJNQZwQ/cYPNkzjGe Y2nSt23K6f3ZRbjy2GKvxwnxzFYGd6v4gKSg+Dtgz+FwP/eR+wjN1Fv9O5up4Uv9 eWcqRR/1LMquQHvhrpCeG+7t4rNH2yEWF8lnOwMfNubx525n0q5Ifxa5DZdWITTJ U5rARttBGfxU6QS7j0saRbXnVvJzDvdjyCKzpoWT3xOcChqscHnxx1Ok3GdyXof2 7cIu97dHp6sRm7ohThOSsOMpOf1gbdRzkakms8oJXHQS1Nf8IbcT+mWyh0UcbIMt xIPoR3bCwNqlxh0Xp16SWMP3N2khRKQHYxTF0A8hIxb2PM81aYzV7w4c63Wz -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:30 2026 by rpki-client