This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_U0JpdeTYc2j_Y7vTdpRekeuFLg.roa File: _U0JpdeTYc2j_Y7vTdpRekeuFLg.roa (raw, json) Hash identifier: LH6HVHUjH8Ia5eklotLJ9bu+rV30u101PL72F+pdu30= Subject key identifier: FD:4D:09:A5:D7:93:61:CD:A3:FD:8E:EF:4D:DA:51:7A:47:AE:14:B8 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E8628144D4C5C4C3BC542B7BCAAC Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_U0JpdeTYc2j_Y7vTdpRekeuFLg.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38920 IP address blocks: 62.244.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e8:62:81:44:d4:c5:c4:c3:bc:54:2b:7b:ca:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4d09a5d79361cda3fd8eef4dda517a47ae14b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:40:23:db:a9:d4:56:9e:c5:56:6c:af:8a:ef: 85:7d:b6:71:45:71:74:d6:e4:78:ce:79:92:f8:8a: 21:61:6e:08:a1:cf:e7:96:c1:51:ea:b8:01:c6:36: 73:04:12:59:d1:bf:6d:66:70:23:4c:ef:e1:1b:4e: 93:b9:70:46:1c:55:f9:6e:42:d9:c6:e6:2e:0c:85: f9:99:44:cf:41:b1:4c:30:96:06:72:71:b8:78:c7: 69:02:f2:66:24:3f:2c:b2:0c:5e:01:c5:46:d0:c9: d1:d7:3f:a1:d6:21:56:27:98:c3:a2:61:57:83:90: 03:26:33:70:7c:e7:d5:4d:61:76:92:d3:70:bf:78: 4a:1d:24:46:e5:2b:8e:c8:a1:2f:aa:a8:ee:9e:88: 69:37:11:cc:ae:27:a4:c5:f9:26:79:3b:44:79:f1: ce:63:e7:e2:d4:61:87:3a:0e:fd:c6:97:c2:90:b5: 57:b7:35:8c:fb:d4:3d:50:e3:97:52:01:03:15:72: d8:98:e3:60:96:c8:ed:ea:02:3b:9b:5b:e9:a6:ed: 4b:72:e4:7e:3e:80:54:a3:f7:b4:93:8e:88:05:6f: 69:1b:ed:94:18:38:fc:89:5d:6e:8b:2d:e3:68:00: 6d:15:7c:26:b5:a8:21:4c:56:ed:5c:35:3a:a6:3a: de:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:09:A5:D7:93:61:CD:A3:FD:8E:EF:4D:DA:51:7A:47:AE:14:B8 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_U0JpdeTYc2j_Y7vTdpRekeuFLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.237.0/24 Signature Algorithm: sha256WithRSAEncryption d1:95:12:bf:d4:8f:ee:74:8b:68:8a:7e:fc:83:16:75:19:d0: 7e:fe:e4:11:41:c2:43:b5:4c:f0:ec:8f:08:16:89:8d:11:b1: 8a:ff:69:24:85:35:03:69:e9:5a:4d:9f:ad:4b:36:99:ee:f4: 94:30:8f:18:ce:e8:94:62:a9:4b:1c:a4:23:28:22:90:5d:da: ce:9f:42:07:8e:1d:c9:a5:28:09:61:0d:66:28:ec:dc:b2:93: e2:71:18:3a:8f:e6:f7:81:7e:69:95:86:1a:8b:69:ff:7a:22: 60:09:10:9e:1c:22:bc:08:16:af:5d:ac:92:b9:be:ce:ab:8b: fd:88:4e:56:af:1d:a7:91:52:e7:5f:76:33:60:94:2b:cd:54: 2d:e9:5e:89:38:2b:4c:59:c5:35:b2:d2:6b:51:33:56:c8:72: b6:71:bb:ec:f8:13:ae:bf:27:a6:9e:9d:6b:c7:e0:4c:b0:9c: 80:8e:a0:b9:e2:ad:bf:7b:5f:10:00:94:f5:68:f5:1c:ab:99: 0a:84:63:4a:80:83:26:fc:0d:0e:79:54:8c:96:18:a0:44:a9: 40:e2:aa:99:1f:8f:3e:54:1d:8a:ba:7e:36:dd:5b:b4:11:d2: c2:ca:4f:30:07:c1:b8:ac:32:a4:f8:dc:70:13:9a:4d:d1:b5: fb:b3:ee:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+higUTUxcTDvFQre8qsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDRkMDlhNWQ3OTM2MWNkYTNmZDhlZWY0ZGRhNTE3YTQ3YWUxNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Aj26nUVp7FVmyviu+FfbZxRXF0 1uR4znmS+IohYW4Ioc/nlsFR6rgBxjZzBBJZ0b9tZnAjTO/hG06TuXBGHFX5bkLZ xuYuDIX5mUTPQbFMMJYGcnG4eMdpAvJmJD8ssgxeAcVG0MnR1z+h1iFWJ5jDomFX g5ADJjNwfOfVTWF2ktNwv3hKHSRG5SuOyKEvqqjunohpNxHMriekxfkmeTtEefHO Y+fi1GGHOg79xpfCkLVXtzWM+9Q9UOOXUgEDFXLYmONglsjt6gI7m1vppu1LcuR+ PoBUo/e0k46IBW9pG+2UGDj8iV1uiy3jaABtFXwmtaghTFbtXDU6pjreFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1NCaXXk2HNo/2O703aUXpHrhS4MB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvX1UwSnBkZVRZYzJqX1k3dlRkcFJla2V1RkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPvTtMA0G CSqGSIb3DQEBCwUAA4IBAQDRlRK/1I/udItoin78gxZ1GdB+/uQRQcJDtUzw7I8I FomNEbGK/2kkhTUDaelaTZ+tSzaZ7vSUMI8YzuiUYqlLHKQjKCKQXdrOn0IHjh3J pSgJYQ1mKOzcspPicRg6j+b3gX5plYYai2n/eiJgCRCeHCK8CBavXaySub7Oq4v9 iE5Wrx2nkVLnX3YzYJQrzVQt6V6JOCtMWcU1stJrUTNWyHK2cbvs+BOuvyemnp1r x+BMsJyAjqC54q2/e18QAJT1aPUcq5kKhGNKgIMm/A0OeVSMlhigRKlA4qqZH48+ VB2Kun423Vu0EdLCyk8wB8G4rDKk+NxwE5pN0bX7s+42 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:18 2026 by rpki-client