This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/9oQBTXlH4ga0jxaDaQ46_0675r4.roa File: 9oQBTXlH4ga0jxaDaQ46_0675r4.roa (raw, json) Hash identifier: lfc14Nf9rZ4eQfU7CROzJbAHaEHHz0RDwVBA24tGJp0= Subject key identifier: F6:84:01:4D:79:47:E2:06:B4:8F:16:83:69:0E:3A:FF:4E:BB:E6:BE Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019B77594A11C26AE2E882CC87AB55B53BDE Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/9oQBTXlH4ga0jxaDaQ46_0675r4.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15169 IP address blocks: 62.182.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4a:11:c2:6a:e2:e8:82:cc:87:ab:55:b5:3b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f684014d7947e206b48f1683690e3aff4ebbe6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:ef:5a:02:9a:55:cc:70:89:22:76:08:ea: c6:96:51:60:03:fc:98:c6:a2:b0:b1:e0:84:4a:13: a9:b8:97:90:85:ad:6f:d0:88:de:71:c3:a7:94:d3: 00:0d:9d:1e:07:38:17:37:ba:4b:ee:de:99:04:ec: a3:d5:cb:38:69:81:ba:72:60:67:27:a3:9b:f2:34: bf:75:d4:84:6f:28:97:43:5f:d8:5c:4f:08:70:b6: 57:da:7a:1a:67:72:1d:d0:07:0b:bb:67:24:b5:72: 0e:7d:e2:a2:29:c5:96:c1:f2:0c:d8:6d:d4:0e:7c: 8a:21:16:47:c7:02:81:df:ad:1e:9c:0b:ba:3c:4b: ff:84:4c:21:a9:e2:c2:68:ea:7a:62:39:00:69:b5: 78:d4:97:12:e3:1f:3c:a3:4b:d5:22:33:76:e2:c2: f7:96:c9:62:2c:14:df:c4:08:d5:ac:03:47:5d:39: 04:83:f8:a1:07:16:e7:21:17:25:26:2f:04:1c:26: 1f:e2:28:83:b0:22:34:5a:c9:bc:69:c4:fc:6e:c8: ef:0e:69:76:64:57:42:a1:6d:98:bd:a1:d9:3c:59: 80:a1:48:63:2b:b5:ea:09:a2:86:d8:81:2d:5f:a3: e3:b3:8f:72:d1:de:6c:f5:ec:b7:f3:31:f9:b8:01: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:84:01:4D:79:47:E2:06:B4:8F:16:83:69:0E:3A:FF:4E:BB:E6:BE X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/9oQBTXlH4ga0jxaDaQ46_0675r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.188.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:1f:1c:71:ee:7e:b9:e4:4a:b0:d8:40:62:50:79:27:f6:46: 69:dd:99:38:7e:7f:3e:af:2c:e0:0d:f3:9b:1f:19:9b:7d:f0: a6:3c:a5:72:26:f6:1c:e7:97:16:4a:70:07:72:82:fa:09:11: d0:10:70:fc:82:f0:49:00:c0:a9:c0:cc:f7:80:d1:ac:ee:53: 6d:28:28:8a:1c:2f:a6:69:62:51:54:7e:4a:d1:03:3c:5f:92: 0b:ea:b6:02:89:88:ce:92:7f:56:9e:c9:72:ee:f4:34:1e:3e: 63:c5:e0:73:d5:09:5b:60:e1:2c:f7:c6:ad:d8:d6:e9:13:c7: 8d:9a:47:d3:d3:ba:75:eb:b1:0f:21:bf:de:78:14:2a:64:95: d9:e1:13:86:1e:52:15:7a:ec:2d:cd:cc:00:5c:bb:2d:25:c8: b4:d6:10:ca:a0:68:31:da:28:03:a4:48:62:3b:73:bd:0f:5d: 38:0c:d9:b1:ca:71:b1:aa:a9:f9:a5:c6:b7:54:0e:c0:90:6b: 77:72:15:06:7f:d3:30:9c:fd:0d:3c:fe:89:aa:7d:1d:ef:2b: ef:f6:0b:25:f5:10:7e:79:e1:f1:78:04:8c:3f:a8:60:09:5b: 1c:d5:9f:85:1c:ee:80:7a:cc:1c:73:18:c4:69:3d:57:f3:31: cc:86:5d:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUoRwmri6ILMh6tVtTveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjg0MDE0ZDc5NDdlMjA2YjQ4ZjE2ODM2OTBlM2FmZjRlYmJlNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s/vWgKaVcxwiSJ2COrGllFgA/yY xqKwseCEShOpuJeQha1v0IjeccOnlNMADZ0eBzgXN7pL7t6ZBOyj1cs4aYG6cmBn J6Ob8jS/ddSEbyiXQ1/YXE8IcLZX2noaZ3Id0AcLu2cktXIOfeKiKcWWwfIM2G3U DnyKIRZHxwKB360enAu6PEv/hEwhqeLCaOp6YjkAabV41JcS4x88o0vVIjN24sL3 lsliLBTfxAjVrANHXTkEg/ihBxbnIRclJi8EHCYf4iiDsCI0Wsm8acT8bsjvDml2 ZFdCoW2YvaHZPFmAoUhjK7XqCaKG2IEtX6Pjs49y0d5s9ey38zH5uAHYcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPaEAU15R+IGtI8Wg2kOOv9Ou+a+MB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvOW9RQlRYbEg0Z2EwanhhRGFRNDZfMDY3NXI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPra8MA0G CSqGSIb3DQEBCwUAA4IBAQAqHxxx7n655Eqw2EBiUHkn9kZp3Zk4fn8+ryzgDfOb HxmbffCmPKVyJvYc55cWSnAHcoL6CRHQEHD8gvBJAMCpwMz3gNGs7lNtKCiKHC+m aWJRVH5K0QM8X5IL6rYCiYjOkn9Wnsly7vQ0Hj5jxeBz1QlbYOEs98at2NbpE8eN mkfT07p167EPIb/eeBQqZJXZ4ROGHlIVeuwtzcwAXLstJci01hDKoGgx2igDpEhi O3O9D104DNmxynGxqqn5pca3VA7AkGt3chUGf9MwnP0NPP6Jqn0d7yvv9gsl9RB+ eeHxeASMP6hgCVsc1Z+FHO6AeswccxjEaT1X8zHMhl1B -----END CERTIFICATE-----Generated at Sun Jan 25 09:33:52 2026 by rpki-client