This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/pXV41qSm_2IGhbO-VqQQAoI9Gxo.roa File: pXV41qSm_2IGhbO-VqQQAoI9Gxo.roa (raw, json) Hash identifier: WYSAWkbDZ3jTZa1eXvU7l9n6sPBqoNgqoxxLwbjidDQ= Subject key identifier: A5:75:78:D6:A4:A6:FF:62:06:85:B3:BE:56:A4:10:02:82:3D:1B:1A Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E8BFE0D5EF89A71DCCB0F743B351 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/pXV41qSm_2IGhbO-VqQQAoI9Gxo.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39253 IP address blocks: 62.244.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e8:bf:e0:d5:ef:89:a7:1d:cc:b0:f7:43:b3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a57578d6a4a6ff620685b3be56a41002823d1b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:10:4b:ec:af:3e:6c:f1:e2:1c:3d:f0:01: f9:a0:36:e4:b0:2e:af:9c:c1:ef:b5:a5:d4:96:74: 4c:12:97:7d:40:eb:cc:f4:82:ec:a4:73:f4:3f:9e: 01:69:be:55:85:76:2d:ae:4f:b2:98:04:72:dd:32: 19:af:4e:9b:6d:26:26:aa:fb:3d:23:1b:ab:8b:a7: 50:54:e4:6f:0e:c0:d1:47:0b:80:f4:2d:b2:a7:d3: ba:2f:63:1a:6e:6c:8c:50:bb:f3:ea:01:0f:ca:09: ca:2f:4f:23:e9:64:cc:63:d6:e7:98:8f:82:a3:cf: a6:c3:b5:a9:3c:fc:30:cf:1b:29:a5:98:22:42:52: 7d:d8:de:e8:16:31:b6:4c:46:c6:c5:1b:74:30:c8: 89:5a:51:d8:2c:50:e2:fa:e9:18:9d:c8:0e:dd:c4: 20:9b:99:aa:87:3a:9e:66:69:a0:72:e9:39:35:41: 2f:b2:19:bf:85:1c:31:fa:97:2a:34:e6:bc:93:a9: 5d:70:6d:23:f3:9f:35:75:74:5c:f6:79:4e:bd:1b: 24:0e:e1:a4:01:bb:63:12:cf:ac:4a:30:9f:d3:2a: 66:e4:00:c1:c1:6f:56:19:41:69:85:bd:9c:1f:79: 1c:b7:13:75:3d:bb:ec:b2:d1:a6:b2:1a:20:ab:30: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:75:78:D6:A4:A6:FF:62:06:85:B3:BE:56:A4:10:02:82:3D:1B:1A X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/pXV41qSm_2IGhbO-VqQQAoI9Gxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.243.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:07:05:90:8b:6b:f4:c9:14:e2:e9:b7:1b:2b:3e:81:ca:2c: 42:c6:c8:d3:2c:1b:79:3e:8d:e9:dd:ac:66:60:5f:30:1f:e7: 56:c5:f7:b4:7d:f5:b7:78:de:1d:75:52:52:a6:03:67:5f:4a: 36:65:ee:9c:1b:d6:d9:9e:15:3d:fd:41:69:42:fd:15:ef:19: fd:e8:0b:ec:ae:d3:4a:44:0d:03:86:9e:90:c9:b0:10:6c:1b: 49:02:f7:2f:1a:fe:c0:75:75:0e:12:de:a4:09:bc:8b:3e:92: cb:7e:9f:24:06:2e:a6:7c:11:86:68:e9:35:9d:b6:1d:aa:1b: e9:a6:86:65:53:9a:30:18:2d:35:be:c1:50:8b:1a:88:dc:8a: 54:84:7a:52:f6:64:d6:1b:61:06:ba:f3:09:a7:bf:a4:0e:0c: 52:9e:22:c4:e4:15:f3:12:40:ed:d2:ea:c3:85:3a:f3:0a:cf: 27:e0:0f:50:f6:10:88:50:d7:69:97:21:cc:d5:dc:fc:ff:3b: e0:39:d6:46:93:3c:91:a5:13:97:1e:2f:0e:c7:be:a3:c5:ed: 67:c9:88:4b:b8:5d:d9:30:cb:23:61:fe:dd:49:ae:c1:fa:f0: 12:22:ad:63:5b:c0:8b:31:90:50:e3:8b:74:ed:48:92:63:2d: d3:72:5e:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+i/4NXviacdzLD3Q7NRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTc1NzhkNmE0YTZmZjYyMDY4NWIzYmU1NmE0MTAwMjgyM2QxYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcwQS+yvPmzx4hw98AH5oDbksC6v nMHvtaXUlnRMEpd9QOvM9ILspHP0P54Bab5VhXYtrk+ymARy3TIZr06bbSYmqvs9 Ixuri6dQVORvDsDRRwuA9C2yp9O6L2MabmyMULvz6gEPygnKL08j6WTMY9bnmI+C o8+mw7WpPPwwzxsppZgiQlJ92N7oFjG2TEbGxRt0MMiJWlHYLFDi+ukYncgO3cQg m5mqhzqeZmmgcuk5NUEvshm/hRwx+pcqNOa8k6ldcG0j8581dXRc9nlOvRskDuGk AbtjEs+sSjCf0ypm5ADBwW9WGUFphb2cH3kctxN1PbvsstGmshogqzAtlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKV1eNakpv9iBoWzvlakEAKCPRsaMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvcFhWNDFxU21fMklHaGJPLVZxUVFBb0k5R3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPvTzMA0G CSqGSIb3DQEBCwUAA4IBAQCKBwWQi2v0yRTi6bcbKz6ByixCxsjTLBt5Po3p3axm YF8wH+dWxfe0ffW3eN4ddVJSpgNnX0o2Ze6cG9bZnhU9/UFpQv0V7xn96AvsrtNK RA0Dhp6QybAQbBtJAvcvGv7AdXUOEt6kCbyLPpLLfp8kBi6mfBGGaOk1nbYdqhvp poZlU5owGC01vsFQixqI3IpUhHpS9mTWG2EGuvMJp7+kDgxSniLE5BXzEkDt0urD hTrzCs8n4A9Q9hCIUNdplyHM1dz8/zvgOdZGkzyRpROXHi8Ox76jxe1nyYhLuF3Z MMsjYf7dSa7B+vASIq1jW8CLMZBQ44t07UiSYy3Tcl6k -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:22 2026 by rpki-client