This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/OXmdplbNmQib2l2reBSTrU4L_PA.roa File: OXmdplbNmQib2l2reBSTrU4L_PA.roa (raw, json) Hash identifier: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA= Subject key identifier: 39:79:9D:A6:56:CD:99:08:9B:DA:5D:AB:78:14:93:AD:4E:0B:FC:F0 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8B0CD87CD9C2C580B19128EDB66A Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/OXmdplbNmQib2l2reBSTrU4L_PA.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16158 IP address blocks: 62.219.102.0/24 maxlen: 24 62.219.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8b:0c:d8:7c:d9:c2:c5:80:b1:91:28:ed:b6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39799da656cd99089bda5dab781493ad4e0bfcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:72:a3:13:0f:79:7f:76:c3:9a:90:48:0a: 27:dd:d9:f8:55:ff:8d:39:36:05:85:6f:b1:d5:93: a2:02:28:45:f9:0b:65:c5:5c:8f:e5:a3:c2:cf:94: 42:93:5b:6b:85:5c:67:3e:32:3d:65:ef:8f:23:96: c9:4b:e7:c1:a9:61:67:4c:d5:64:a1:99:e1:bd:d8: bc:88:8f:5b:64:55:8c:93:0f:3c:c0:60:44:84:75: d9:8e:d5:e0:c5:74:90:c7:34:86:77:11:60:1b:53: 7e:7e:49:d8:9e:12:92:c3:dc:f2:9b:6a:e1:7e:6b: 15:4b:fa:6b:db:9b:a2:f7:72:62:4c:48:c9:a9:8e: 86:55:b8:a3:63:e0:63:db:8c:dd:88:d2:db:7a:e4: 7a:35:60:8c:7c:e4:d5:6d:09:4b:9e:3e:1b:fe:6a: 61:21:88:0f:1b:6f:dc:0b:58:f0:7f:55:0d:f3:a9: a2:5c:6a:b0:22:66:00:20:5a:69:58:d0:1c:b8:8c: a9:5f:6a:7e:f3:26:9d:0f:20:23:15:bb:14:d3:92: 4d:bd:3b:71:db:1f:c7:19:54:86:fe:9d:6a:3a:ed: 9b:31:d3:c5:c5:59:9c:53:a0:e2:25:80:fa:e6:2a: 7a:08:ad:dc:6a:48:d4:08:bd:b4:64:15:0f:8b:31: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:9D:A6:56:CD:99:08:9B:DA:5D:AB:78:14:93:AD:4E:0B:FC:F0 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/OXmdplbNmQib2l2reBSTrU4L_PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.219.102.0/23 Signature Algorithm: sha256WithRSAEncryption 43:d0:3e:0c:7d:22:b4:92:59:2c:dd:90:04:68:aa:aa:14:51: fa:1b:92:be:b6:a5:90:b3:cf:31:f0:fb:08:89:0f:3f:7b:10: 9e:9d:9d:21:f1:70:ec:18:16:8c:c7:38:2b:28:d6:b1:fe:ca: 6b:55:72:09:08:20:c8:ec:b7:3c:93:f6:68:cb:b6:4a:31:62: c7:e1:85:99:95:ae:44:e2:aa:ed:1b:5f:5e:00:cd:ca:3b:46: 77:7f:d8:d5:ee:6b:0d:d2:99:10:dd:fb:e7:0b:1e:84:66:23: 17:e2:61:94:be:d3:f7:f4:cb:e7:67:d4:cd:5e:49:2d:cf:8e: bd:c4:d5:f1:7e:b7:c2:24:80:59:2e:65:1a:b7:6d:7e:be:ed: 28:7c:a4:18:c6:6c:0d:c7:bb:bd:32:c4:b4:aa:c6:85:57:79: 9f:8a:4c:90:c8:c3:d4:47:45:04:a8:df:b1:90:3c:ee:c1:f7: 09:50:8d:86:33:4f:8d:39:aa:73:3c:02:9e:6a:7f:98:0e:1a: 68:3a:da:13:06:de:eb:1d:21:6d:a3:62:00:e9:bb:e7:f7:33: 4e:5c:6a:4d:b8:4a:b1:30:e7:05:d4:a7:5a:c0:e8:64:7b:89: 16:9b:3c:c3:86:25:c5:31:73:97:7c:35:76:3c:c6:00:9b:14: 07:6c:cd:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264sM2HzZwsWAsZEo7bZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTc5OWRhNjU2Y2Q5OTA4OWJkYTVkYWI3ODE0OTNhZDRlMGJmY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JZyoxMPeX92w5qQSAon3dn4Vf+N OTYFhW+x1ZOiAihF+QtlxVyP5aPCz5RCk1trhVxnPjI9Ze+PI5bJS+fBqWFnTNVk oZnhvdi8iI9bZFWMkw88wGBEhHXZjtXgxXSQxzSGdxFgG1N+fknYnhKSw9zym2rh fmsVS/pr25ui93JiTEjJqY6GVbijY+Bj24zdiNLbeuR6NWCMfOTVbQlLnj4b/mph IYgPG2/cC1jwf1UN86miXGqwImYAIFppWNAcuIypX2p+8yadDyAjFbsU05JNvTtx 2x/HGVSG/p1qOu2bMdPFxVmcU6DiJYD65ip6CK3cakjUCL20ZBUPizGsIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDl5naZWzZkIm9pdq3gUk61OC/zwMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvT1htZHBsYk5tUWliMmwycmVCU1RyVTRMX1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPttmMA0G CSqGSIb3DQEBCwUAA4IBAQBD0D4MfSK0klks3ZAEaKqqFFH6G5K+tqWQs88x8PsI iQ8/exCenZ0h8XDsGBaMxzgrKNax/sprVXIJCCDI7Lc8k/Zoy7ZKMWLH4YWZla5E 4qrtG19eAM3KO0Z3f9jV7msN0pkQ3fvnCx6EZiMX4mGUvtP39MvnZ9TNXkktz469 xNXxfrfCJIBZLmUat21+vu0ofKQYxmwNx7u9MsS0qsaFV3mfikyQyMPUR0UEqN+x kDzuwfcJUI2GM0+NOapzPAKean+YDhpoOtoTBt7rHSFto2IA6bvn9zNOXGpNuEqx MOcF1KdawOhke4kWmzzDhiXFMXOXfDV2PMYAmxQHbM05 -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:50 2026 by rpki-client