This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/359PtD2aT4lYVKLtb8GpHiwDpSM.roa
File: 359PtD2aT4lYVKLtb8GpHiwDpSM.roa (raw, json)
Hash identifier: +hV5lfZcoxfXxvE4zajqvEY/eOPBG4IbY8Wpf+1cu3I=
Subject key identifier: DF:9F:4F:B4:3D:9A:4F:89:58:54:A2:ED:6F:C1:A9:1E:2C:03:A5:23
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 019B76EBA918D8FDBC21EA40DED843F5DFED
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/359PtD2aT4lYVKLtb8GpHiwDpSM.roa
Signing time: Thu 01 Jan 2026 00:18:34 +0000
ROA not before: Thu 01 Jan 2026 00:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204592
IP address blocks: 62.228.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:a9:18:d8:fd:bc:21:ea:40:de:d8:43:f5:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 00:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df9f4fb43d9a4f895854a2ed6fc1a91e2c03a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:c4:b2:3f:e8:25:97:3f:e6:42:d5:22:f7:
77:0a:74:ec:63:23:0d:bd:aa:bc:e2:ba:c4:d5:ec:
df:38:47:98:e4:dd:c6:f8:80:18:2a:11:ac:1d:d4:
7b:1a:56:b5:73:5e:91:9c:2f:22:47:46:34:0c:f6:
14:45:0b:8c:63:66:e6:bf:c6:ff:5d:70:45:a8:e2:
12:e8:27:ab:46:9b:6a:70:d7:4c:b3:94:71:53:85:
04:82:ec:6f:a4:be:59:74:60:94:14:d4:69:dd:db:
4a:ae:a8:b6:17:60:9c:01:73:c3:fc:f7:b6:d6:48:
28:e7:2b:fc:d2:28:8c:bb:92:22:78:ac:20:4a:b3:
cd:59:6d:b9:c0:29:0b:1b:46:a2:14:c0:c6:69:64:
0c:a8:ad:96:64:f3:dc:fa:9e:d0:b5:94:a4:5c:42:
bc:b2:8b:fb:ea:93:68:e9:4e:7c:f4:1a:17:0a:c9:
8d:52:c7:ef:fe:c4:5f:10:06:95:70:eb:23:ef:10:
6f:c7:ef:90:b5:c9:04:59:f1:50:bc:e5:94:4f:0f:
51:92:6e:be:0a:18:f0:41:95:9e:c6:37:7a:3b:0c:
13:38:d5:d7:23:ae:c3:8c:41:b2:8e:17:9c:d0:59:
0d:de:97:66:93:62:74:58:31:8f:19:84:46:6e:d7:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9F:4F:B4:3D:9A:4F:89:58:54:A2:ED:6F:C1:A9:1E:2C:03:A5:23
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/359PtD2aT4lYVKLtb8GpHiwDpSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:49:a1:3d:47:64:aa:43:1c:a7:4f:dd:cd:a4:66:a7:fe:4f:
3a:dc:c8:c1:e7:22:70:cc:b3:a3:4c:d1:02:6a:cf:fc:4e:9b:
29:76:02:e4:f6:dc:d8:0a:1f:5f:ee:c9:42:2d:a9:8a:b7:f6:
e4:97:9d:19:dd:c7:bf:22:30:40:d8:96:e9:89:61:f5:76:3b:
ac:1e:a1:c5:e6:94:75:da:31:51:34:06:5c:8d:00:38:d1:e3:
59:85:76:72:47:45:f5:cf:3d:f6:aa:72:79:30:d1:f1:74:9e:
c2:48:05:dd:69:83:7a:5d:1d:c4:ab:01:0e:f0:6f:80:a2:b9:
12:e3:be:46:6d:27:1b:b4:dc:18:7f:e2:91:ba:af:0a:6b:84:
e6:a4:60:5e:ef:72:ce:6b:66:69:e7:7f:a2:f5:32:08:9a:82:
7b:0e:3c:e0:b9:85:b9:b4:02:61:70:8f:7a:a5:28:bc:1b:7f:
02:3c:9e:ff:5d:3e:52:4a:de:37:4c:bd:43:40:63:ec:7d:c7:
27:9a:9f:64:85:4c:16:70:58:8f:59:e3:7b:9c:9b:8b:89:95:
3f:5c:45:a1:f7:48:20:d7:c4:29:d1:1b:ab:11:ae:f1:e3:1e:
cb:1e:e3:11:cb:bf:23:7c:f8:74:4a:c4:72:6a:63:4b:6e:ed:
44:f4:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:07:07 2026 by rpki-client