This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/h3bN54PPRhqmCZBeac3jHLn1p1w.roa File: h3bN54PPRhqmCZBeac3jHLn1p1w.roa (raw, json) Hash identifier: +bpjRWZef5iWUxJEtjeSaP0QouwUTIg6D/gePNZ/ePk= Subject key identifier: 87:76:CD:E7:83:CF:46:1A:A6:09:90:5E:69:CD:E3:1C:B9:F5:A7:5C Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf Certificate serial: 019B77C6F31B7D6CF9984D3BB4AC56232360 Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/h3bN54PPRhqmCZBeac3jHLn1p1w.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60751 IP address blocks: 62.164.200.0/21 maxlen: 21 62.164.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f3:1b:7d:6c:f9:98:4d:3b:b4:ac:56:23:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8776cde783cf461aa609905e69cde31cb9f5a75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:b4:75:45:9b:c9:1e:5c:9e:37:44:34:33: 65:4d:37:5e:3e:78:66:d6:79:ec:68:ea:5b:a9:87: cc:41:73:69:5d:2d:77:4f:0d:c4:90:9a:c7:00:af: 7f:3c:eb:11:ba:77:9a:a7:52:71:ae:02:f3:55:d4: 44:08:aa:91:6c:72:a5:76:5c:23:2b:3d:f4:e1:67: 54:5f:7c:63:bc:e6:58:79:c6:25:78:0e:37:09:18: 45:28:6a:04:86:65:2a:86:64:8c:dd:e3:7b:f5:da: c5:cf:49:46:53:08:88:96:77:c5:89:2a:5c:9d:fd: 04:af:01:95:0d:24:80:be:66:64:61:ae:4a:2b:f2: 1a:94:1c:9d:54:74:1f:f2:7f:67:d4:94:b1:a0:e1: 81:24:d4:e3:cd:0d:50:ce:6a:80:01:55:c7:3a:d7: 51:65:2d:eb:f1:f1:55:5c:3f:9f:27:88:b8:45:7c: 7f:e1:c9:ca:a1:d2:3c:5d:9e:bd:2e:53:22:cd:97: be:11:6c:e9:19:88:92:59:b4:9e:e1:51:34:7c:d6: 64:6c:be:2b:87:69:be:dd:3d:25:83:3a:b7:d9:70: 92:71:56:80:34:8d:eb:ff:8e:a9:3e:ab:8d:34:b7: 1e:e5:9a:9c:b3:a9:d7:77:ed:6a:07:4f:e4:86:c3: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:76:CD:E7:83:CF:46:1A:A6:09:90:5E:69:CD:E3:1C:B9:F5:A7:5C X509v3 Authority Key Identifier: keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/h3bN54PPRhqmCZBeac3jHLn1p1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.200.0/21 Signature Algorithm: sha256WithRSAEncryption c0:68:56:4a:95:91:ed:1d:53:3d:bc:c0:b7:28:e8:a1:ac:4d: 6a:32:e7:34:ed:2c:99:27:2a:a7:cd:93:30:38:2c:7f:f3:8c: 41:5e:b5:f7:c2:48:44:1f:a2:67:12:ef:91:0e:78:92:bd:d5: 49:be:f2:90:eb:9d:20:41:a4:56:c5:df:41:18:7d:f5:08:0f: a4:82:c5:68:f3:76:fd:bf:80:27:fd:74:d9:9c:61:4e:2f:f3: 61:d8:b8:a7:30:7e:a3:9f:a9:5d:6d:78:48:4f:ef:90:93:9d: 8e:ad:c7:45:43:e8:6c:d8:4c:43:2a:11:5a:85:09:a6:d5:56: 5c:a8:72:93:82:bd:24:79:6a:28:1b:62:0c:78:43:dc:ea:fc: cc:5c:6f:57:a5:71:38:a2:37:bc:91:49:5f:73:69:0c:5a:1d: 78:fa:58:ac:c4:f8:56:3d:0b:75:b8:17:46:00:85:b6:78:4c: 0f:36:30:d7:1e:76:92:b4:4a:eb:75:36:a1:f9:f2:38:09:4c: 71:58:d6:3d:98:e8:43:0e:dd:e7:52:74:ef:1c:8a:a0:0f:f3: 9c:8f:25:cd:f0:b9:35:0b:38:b5:9f:27:47:1a:73:9b:9e:be: 7d:f0:f5:45:a1:23:f8:17:2e:6f:3d:40:ac:28:f7:44:bd:18: ef:29:57:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvMbfWz5mE07tKxWIyNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTFiOGI3YTFkYTY0MDM0ODQ5M2I5YzZmNGVhZDQ5NmUz ODYxY2YwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzc2Y2RlNzgzY2Y0NjFhYTYwOTkwNWU2OWNkZTMxY2I5ZjVhNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsje0dUWbyR5cnjdENDNlTTdePnhm 1nnsaOpbqYfMQXNpXS13Tw3EkJrHAK9/POsRuneap1JxrgLzVdRECKqRbHKldlwj Kz304WdUX3xjvOZYecYleA43CRhFKGoEhmUqhmSM3eN79drFz0lGUwiIlnfFiSpc nf0ErwGVDSSAvmZkYa5KK/IalBydVHQf8n9n1JSxoOGBJNTjzQ1QzmqAAVXHOtdR ZS3r8fFVXD+fJ4i4RXx/4cnKodI8XZ69LlMizZe+EWzpGYiSWbSe4VE0fNZkbL4r h2m+3T0lgzq32XCScVaANI3r/46pPquNNLce5Zqcs6nXd+1qB0/khsMSZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFId2zeeDz0YapgmQXmnN4xy59adcMB8GA1UdIwQY MBaAFMDhuLeh2mQDSEk7nG9OrUluOGHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hZmNlZDgtNWM0OC00NzQwLWE2MzUt MTYxMWM5MGJhMzNiLzEvaDNiTjU0UFBSaHFtQ1pCZWFjM2pITG4xcDF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hZmNlZDgtNWM0OC00NzQwLWE2MzUtMTYxMWM5MGJhMzNi LzEvd09HNHQ2SGFaQU5JU1R1Y2IwNnRTVzQ0WWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPqTIMA0G CSqGSIb3DQEBCwUAA4IBAQDAaFZKlZHtHVM9vMC3KOihrE1qMuc07SyZJyqnzZMw OCx/84xBXrX3wkhEH6JnEu+RDniSvdVJvvKQ650gQaRWxd9BGH31CA+kgsVo83b9 v4An/XTZnGFOL/Nh2LinMH6jn6ldbXhIT++Qk52OrcdFQ+hs2ExDKhFahQmm1VZc qHKTgr0keWooG2IMeEPc6vzMXG9XpXE4oje8kUlfc2kMWh14+lisxPhWPQt1uBdG AIW2eEwPNjDXHnaStErrdTah+fI4CUxxWNY9mOhDDt3nUnTvHIqgD/OcjyXN8Lk1 Czi1nydHGnObnr598PVFoSP4Fy5vPUCsKPdEvRjvKVcG -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:48 2026 by rpki-client