This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa File: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (raw, json) Hash identifier: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M= Subject key identifier: 57:16:B7:83:12:11:06:EC:E9:BE:60:BF:2E:D6:22:A2:2C:0F:91:2F Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8C6C5EFACDF92AC1F6B742432364 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44709 IP address blocks: 62.219.10.0/24 maxlen: 24 62.219.14.0/24 maxlen: 24 62.219.83.0/24 maxlen: 24 62.219.106.0/24 maxlen: 24 62.219.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:6c:5e:fa:cd:f9:2a:c1:f6:b7:42:43:23:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5716b783121106ece9be60bf2ed622a22c0f912f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c2:b5:f3:40:83:37:31:12:a5:98:4c:b8:11: 4e:a4:f7:c2:7c:d1:e8:7e:ea:23:c1:99:b6:56:36: 41:7d:34:18:c2:19:ab:fd:93:a5:b4:d8:ce:24:fc: a8:79:46:b5:a5:45:c1:c6:37:33:ff:04:f9:1d:6d: 50:fd:67:7c:26:67:bb:73:6c:f8:22:06:65:6a:e2: d3:f0:4c:18:d4:ec:fc:a9:cf:30:34:ca:ad:ef:47: 6c:2e:d6:4a:3f:e9:b6:7a:c5:dd:95:4e:2b:3f:e9: cd:cd:fe:e6:59:d5:4e:b6:75:61:53:9b:62:d7:44: d1:99:d0:08:4b:f9:fb:a9:0f:e7:0f:4e:bf:d4:fd: ac:f0:44:40:6d:25:62:50:09:4c:c0:e5:e1:16:48: 69:08:22:2b:ca:5b:2c:41:71:d3:07:a4:01:06:21: 14:ec:68:00:b9:3c:f4:48:ae:5a:2c:40:05:47:86: 9d:25:6b:a7:e6:39:44:4a:f1:d0:3c:8c:b0:67:c4: 70:e8:2f:73:0e:a9:7e:c2:5e:81:8f:50:e0:76:33: c0:14:f2:c9:6a:24:a7:8d:ee:17:29:82:5a:d2:a1: 38:16:51:1e:bd:4e:15:d1:2d:3b:33:9d:8b:9e:3b: 3f:60:2d:63:8c:dc:76:d4:5c:17:db:91:17:30:09: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:16:B7:83:12:11:06:EC:E9:BE:60:BF:2E:D6:22:A2:2C:0F:91:2F X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.219.10.0/24 62.219.14.0/24 62.219.83.0/24 62.219.106.0/24 62.219.197.0/24 Signature Algorithm: sha256WithRSAEncryption 50:8b:56:4d:f3:aa:b6:ef:d5:3b:44:c7:03:fc:80:eb:3b:ee: 0c:5e:72:c9:f1:4a:26:11:8d:57:bf:7d:5e:2d:cc:cb:26:cd: 98:3b:02:c5:b4:57:0e:56:ef:6a:af:e8:b5:40:a0:65:24:63: 2b:96:82:4d:ef:84:d9:89:d1:73:4d:f0:52:be:ed:fb:4a:e2: e1:65:2d:56:64:1f:03:d8:43:8e:3f:61:bb:36:3a:8b:a3:ce: ab:85:cb:92:b8:ad:77:3c:87:9f:14:54:4c:66:92:f3:ab:6b: 4f:01:7b:a9:d5:23:52:83:50:01:05:06:f7:61:5c:99:0c:bd: c0:7f:ea:78:e0:b9:c7:c1:60:47:c0:1e:87:44:5a:a5:f3:a2: 45:03:da:4e:09:7c:b3:f1:73:35:c3:36:d2:d5:40:fa:0f:3f: 09:06:65:4a:e7:be:da:96:1d:07:7c:de:d9:df:e6:b7:b2:c9: 56:c2:64:92:39:e0:db:10:f1:0f:62:5a:17:e8:3d:9f:f8:95: 22:0e:2e:b2:92:a2:83:e9:34:d0:2e:7e:62:0b:5a:d0:bb:fb: e5:44:20:0a:38:02:f0:d7:08:1e:c1:83:d3:3e:e2:79:6e:9f: be:b2:2a:c4:08:34:01:d0:5e:df:6c:af:77:6c:59:96:4c:3f: ec:27:65:1e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt264xsXvrN+SrB9rdCQyNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzE2Yjc4MzEyMTEwNmVjZTliZTYwYmYyZWQ2MjJhMjJjMGY5MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78K180CDNzESpZhMuBFOpPfCfNHo fuojwZm2VjZBfTQYwhmr/ZOltNjOJPyoeUa1pUXBxjcz/wT5HW1Q/Wd8Jme7c2z4 IgZlauLT8EwY1Oz8qc8wNMqt70dsLtZKP+m2esXdlU4rP+nNzf7mWdVOtnVhU5ti 10TRmdAIS/n7qQ/nD06/1P2s8ERAbSViUAlMwOXhFkhpCCIrylssQXHTB6QBBiEU 7GgAuTz0SK5aLEAFR4adJWun5jlESvHQPIywZ8Rw6C9zDql+wl6Bj1DgdjPAFPLJ aiSnje4XKYJa0qE4FlEevU4V0S07M52Lnjs/YC1jjNx21FwX25EXMAnueQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFcWt4MSEQbs6b5gvy7WIqIsD5EvMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvVnhhM2d4SVJCdXpwdm1DX0x0WWlvaXdQa1M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPtsKAwQA PtsOAwQAPttTAwQAPttqAwQAPtvFMA0GCSqGSIb3DQEBCwUAA4IBAQBQi1ZN86q2 79U7RMcD/IDrO+4MXnLJ8UomEY1Xv31eLczLJs2YOwLFtFcOVu9qr+i1QKBlJGMr loJN74TZidFzTfBSvu37SuLhZS1WZB8D2EOOP2G7NjqLo86rhcuSuK13PIefFFRM ZpLzq2tPAXup1SNSg1ABBQb3YVyZDL3Af+p44LnHwWBHwB6HRFql86JFA9pOCXyz 8XM1wzbS1UD6Dz8JBmVK577alh0HfN7Z3+a3sslWwmSSOeDbEPEPYloX6D2f+JUi Di6ykqKD6TTQLn5iC1rQu/vlRCAKOALw1wgewYPTPuJ5bp++sirECDQB0F7fbK93 bFmWTD/sJ2Ue -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:44 2026 by rpki-client