This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa File: 3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa (raw, json) Hash identifier: hzh/xwb8heLsOXwzZrTck/MAmVN9avO1bZxPN2Q3Qc4= Subject key identifier: DF:1D:59:F1:EB:96:C9:0F:28:53:67:93:AA:61:F6:A0:D6:03:52:58 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA65F0EDB344F2BA0B4FB5F607CB2 Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202117 IP address blocks: 62.228.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a6:5f:0e:db:34:4f:2b:a0:b4:fb:5f:60:7c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1d59f1eb96c90f28536793aa61f6a0d6035258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:82:c7:12:74:5d:5a:c4:30:38:de:fb:01: ba:60:1b:b9:b9:06:39:4c:68:4a:d0:81:67:5f:73: 28:2a:af:ff:39:70:dd:63:38:19:4f:fc:ac:ae:1f: a6:9f:cd:b8:c9:24:4c:a1:ff:83:e7:e8:71:04:4b: 6a:95:03:81:c3:65:ec:0e:73:43:a1:5c:1b:55:c6: 84:f1:49:a2:54:69:24:a2:84:c6:0d:5e:16:da:7f: 82:ec:41:19:41:32:f5:40:c9:85:f3:00:63:71:b9: bf:64:d2:1c:a8:9d:56:e7:2d:23:8e:f6:23:5b:f4: 67:9a:90:1f:bd:3a:db:3a:9e:ca:4c:50:c8:0e:29: 93:e1:54:ab:33:3d:5c:5f:bf:19:83:c7:2a:89:9d: 80:8d:56:67:a2:f4:67:91:5e:46:48:02:88:f4:ee: 29:eb:08:4d:1c:64:9b:3b:f7:30:bd:ba:5e:56:eb: 75:6e:ff:4c:2a:0f:ce:c1:f1:37:fb:25:6d:7a:c3: 2f:4d:9f:f8:9d:85:ed:6a:66:1d:29:f0:ad:84:12: 6d:95:8d:77:53:78:90:a6:2b:48:bf:71:17:b3:9a: 31:52:6d:9e:04:cc:44:40:b0:4a:73:14:47:64:1d: c3:93:50:d8:1e:55:72:63:3c:0b:1f:e4:ca:bd:7f: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1D:59:F1:EB:96:C9:0F:28:53:67:93:AA:61:F6:A0:D6:03:52:58 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.249.0/24 Signature Algorithm: sha256WithRSAEncryption a6:96:d0:6a:7b:ae:69:6a:5d:0b:1c:fa:b0:cb:cf:89:4d:2d: 04:a4:31:8e:07:5c:46:65:a7:93:0e:fd:d1:5a:cc:e6:eb:64: 41:e9:81:2f:fb:a9:2c:57:c4:51:38:75:c5:97:d4:c5:bb:69: 42:29:57:42:f6:75:bb:32:24:f1:9b:3b:50:24:ea:0c:5f:c7: f2:dc:e9:46:5d:c0:a3:58:f8:a7:8b:de:3d:d9:c4:dd:cc:3b: ff:df:d7:16:0d:25:95:e7:ea:61:35:9a:f3:55:12:cb:4d:96: 2f:40:08:39:6e:32:ea:6f:6c:16:27:63:1f:4b:e1:41:19:e6: b9:e0:1b:67:25:5a:cb:b7:e6:01:74:c8:af:98:41:2a:17:34: c1:63:bd:86:cb:ec:72:c4:a5:cd:a8:3b:66:d1:e6:71:89:4a: c5:cc:ee:46:e7:d6:49:53:95:a7:df:ee:9a:a3:1f:6e:03:0a: e7:a5:5d:c2:42:23:0c:0e:df:e0:cb:4a:8c:93:9c:aa:73:25: de:64:24:eb:71:84:9f:08:db:38:6e:c3:17:f6:8e:82:5d:0c: 15:ee:75:13:45:17:1e:d5:dc:3c:9b:49:4d:e4:28:8c:bd:16: d4:27:67:6e:25:72:a6:e5:1c:c9:ce:70:94:7d:0e:14:71:0f: ea:fd:3f:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266ZfDts0TyugtPtfYHyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjFkNTlmMWViOTZjOTBmMjg1MzY3OTNhYTYxZjZhMGQ2MDM1MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfOCxxJ0XVrEMDje+wG6YBu5uQY5 TGhK0IFnX3MoKq//OXDdYzgZT/ysrh+mn824ySRMof+D5+hxBEtqlQOBw2XsDnND oVwbVcaE8UmiVGkkooTGDV4W2n+C7EEZQTL1QMmF8wBjcbm/ZNIcqJ1W5y0jjvYj W/RnmpAfvTrbOp7KTFDIDimT4VSrMz1cX78Zg8cqiZ2AjVZnovRnkV5GSAKI9O4p 6whNHGSbO/cwvbpeVut1bv9MKg/OwfE3+yVtesMvTZ/4nYXtamYdKfCthBJtlY13 U3iQpitIv3EXs5oxUm2eBMxEQLBKcxRHZB3Dk1DYHlVyYzwLH+TKvX9HZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8dWfHrlskPKFNnk6ph9qDWA1JYMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvM3gxWjhldVd5UThvVTJlVHFtSDJvTllEVWxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuT5MA0G CSqGSIb3DQEBCwUAA4IBAQCmltBqe65pal0LHPqwy8+JTS0EpDGOB1xGZaeTDv3R Wszm62RB6YEv+6ksV8RROHXFl9TFu2lCKVdC9nW7MiTxmztQJOoMX8fy3OlGXcCj WPini9492cTdzDv/39cWDSWV5+phNZrzVRLLTZYvQAg5bjLqb2wWJ2MfS+FBGea5 4BtnJVrLt+YBdMivmEEqFzTBY72Gy+xyxKXNqDtm0eZxiUrFzO5G59ZJU5Wn3+6a ox9uAwrnpV3CQiMMDt/gy0qMk5yqcyXeZCTrcYSfCNs4bsMX9o6CXQwV7nUTRRce 1dw8m0lN5CiMvRbUJ2duJXKm5RzJznCUfQ4UcQ/q/T9t -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:12 2026 by rpki-client