This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-hrB_4i445lAPatm9pXp75UPr1I.roa File: 1-hrB_4i445lAPatm9pXp75UPr1I.roa (raw, json) Hash identifier: YEzNTLD9wfX8VjD6MK1Rs1n5S4HzUgswhciPZWTMqSc= Subject key identifier: FA:1A:C1:FF:88:B8:E3:99:40:3D:AB:66:F6:95:E9:EF:95:0F:AF:52 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA1AF2A45D3714BF25B7430272FAB Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-hrB_4i445lAPatm9pXp75UPr1I.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31198 IP address blocks: 62.228.242.0/24 maxlen: 24 62.228.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a1:af:2a:45:d3:71:4b:f2:5b:74:30:27:2f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa1ac1ff88b8e399403dab66f695e9ef950faf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8a:c4:c7:08:86:fa:e4:96:3b:06:79:26:68: eb:94:3b:77:2e:44:4f:8d:a0:05:4d:82:5e:59:44: aa:56:c4:1a:b8:5e:24:69:21:67:1a:78:95:20:2a: 5d:08:84:3e:21:5b:c9:a7:5f:52:25:7c:58:6b:0a: a1:3d:6e:8e:d0:15:21:73:3d:19:6f:85:22:e3:75: c6:9a:87:64:62:89:da:75:52:41:59:30:69:74:f4: da:f6:62:b9:63:ed:d3:7f:68:4f:9d:60:f2:ec:0a: fa:c9:e0:92:8e:15:1b:40:22:9d:8c:51:7b:a4:76: bf:81:3a:30:a2:b0:f0:d4:db:91:34:01:c5:55:2d: f1:52:60:4d:80:4e:16:e1:36:11:db:04:87:6c:53: 21:a3:30:94:90:aa:18:c5:c6:ac:af:5a:bc:aa:51: 2f:cb:0f:92:81:03:20:87:1a:8e:00:70:ac:66:8c: 28:16:7c:4f:d3:25:32:a7:02:86:43:8f:4d:d2:40: 53:ad:3b:18:85:7f:ac:a7:fa:6b:60:8a:28:4d:e4: 99:52:a4:10:0e:be:f2:df:3a:e2:29:a0:90:09:06: 4c:95:09:89:45:56:6e:e8:d1:6c:a8:e8:3f:26:1f: 7b:68:16:fc:db:e6:5b:8a:82:4e:c1:f1:36:54:2f: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1A:C1:FF:88:B8:E3:99:40:3D:AB:66:F6:95:E9:EF:95:0F:AF:52 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-hrB_4i445lAPatm9pXp75UPr1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.242.0/24 62.228.252.0/24 Signature Algorithm: sha256WithRSAEncryption 94:0f:d1:88:76:c2:f0:8b:a0:bd:75:1b:fd:b4:06:7e:d4:14: da:26:f1:e7:0a:e8:cc:6e:20:eb:18:2f:df:2b:71:fb:e8:01: fd:b2:fb:e0:8c:ef:e0:d6:91:ec:86:b0:b1:64:bc:27:b9:85: e4:b1:9a:15:9c:46:5f:c3:c5:19:42:b3:d8:a2:60:76:4f:0f: 89:b1:86:24:54:7e:ef:9c:e4:08:57:ac:78:f3:5b:cd:b1:a5: d0:2f:47:30:21:47:19:99:cd:b2:04:ac:c8:f3:49:4d:80:0b: 47:96:5a:18:d7:62:75:a1:ba:8c:73:8c:3a:a2:e7:4e:b6:e3: f7:82:c5:29:37:79:32:0f:37:e8:9f:a5:3e:74:cb:67:d1:ad: e6:cb:61:a5:c6:8d:cc:42:67:e1:23:f9:c8:f2:a4:c7:48:39: 4a:26:e8:bb:27:bf:10:17:1c:7b:cc:34:31:b5:06:4f:5e:07: 02:20:db:44:8f:63:0d:68:6a:1d:5f:f3:b0:74:39:dd:f8:e4: e7:29:e3:95:df:63:02:28:e8:cb:b7:4f:21:c3:c8:46:93:0b: 40:9a:6d:26:40:cb:19:77:01:79:d5:77:2c:ea:ad:10:1e:86: b0:6d:39:73:40:c8:06:06:30:ba:47:76:c1:bf:da:95:ff:a7: c4:e1:5f:5d -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt266GvKkXTcUvyW3QwJy+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTFhYzFmZjg4YjhlMzk5NDAzZGFiNjZmNjk1ZTllZjk1MGZhZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IrExwiG+uSWOwZ5JmjrlDt3LkRP jaAFTYJeWUSqVsQauF4kaSFnGniVICpdCIQ+IVvJp19SJXxYawqhPW6O0BUhcz0Z b4Ui43XGmodkYonadVJBWTBpdPTa9mK5Y+3Tf2hPnWDy7Ar6yeCSjhUbQCKdjFF7 pHa/gToworDw1NuRNAHFVS3xUmBNgE4W4TYR2wSHbFMhozCUkKoYxcasr1q8qlEv yw+SgQMghxqOAHCsZowoFnxP0yUypwKGQ49N0kBTrTsYhX+sp/prYIooTeSZUqQQ Dr7y3zriKaCQCQZMlQmJRVZu6NFsqOg/Jh97aBb82+ZbioJOwfE2VC9LdQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPoawf+IuOOZQD2rZvaV6e+VD69SMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvMS1ockJfNGk0NDVsQVBhdG05cFhwNzVVUHIxSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTMvNjE4ZTUzLWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0 OS8xLzFCR3J4TUJHaXJLSkhxcksyNkRjQTNlVGI5VS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAD7k8gME AD7k/DANBgkqhkiG9w0BAQsFAAOCAQEAlA/RiHbC8IugvXUb/bQGftQU2ibx5wro zG4g6xgv3ytx++gB/bL74Izv4NaR7IawsWS8J7mF5LGaFZxGX8PFGUKz2KJgdk8P ibGGJFR+75zkCFesePNbzbGl0C9HMCFHGZnNsgSsyPNJTYALR5ZaGNdidaG6jHOM OqLnTrbj94LFKTd5Mg836J+lPnTLZ9Gt5sthpcaNzEJn4SP5yPKkx0g5Sibouye/ EBcce8w0MbUGT14HAiDbRI9jDWhqHV/zsHQ53fjk5ynjld9jAijoy7dPIcPIRpML QJptJkDLGXcBedV3LOqtEB6GsG05c0DIBgYwukd2wb/alf+nxOFfXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:52 2026 by rpki-client