This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa
File: EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa (raw, json)
Hash identifier: pwqZR3sLomznVe36SGqzsoCNYDQVFyLcuDqHZembszU=
Subject key identifier: 12:D4:8C:02:C1:DB:55:3E:0F:C6:6F:4C:0F:66:C1:2F:96:6F:E5:F0
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 019B76EBA61B2A73E319D36582DB9B39925B
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa
Signing time: Thu 01 Jan 2026 00:18:33 +0000
ROA not before: Thu 01 Jan 2026 00:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201444
IP address blocks: 62.228.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:a6:1b:2a:73:e3:19:d3:65:82:db:9b:39:92:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 00:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12d48c02c1db553e0fc66f4c0f66c12f966fe5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:48:a0:8f:df:69:9a:6f:8a:82:21:95:66:
76:ff:e2:cd:22:0d:92:2a:c9:94:ce:73:70:bc:a5:
02:95:12:e3:65:4e:e5:04:63:06:64:98:ae:61:7b:
63:f8:3a:e5:17:69:72:4f:9c:7d:9f:b0:05:8a:69:
fd:ff:c3:6f:c0:65:8a:25:6f:ec:31:06:87:9a:4d:
6b:5d:18:37:c4:f9:dd:0e:60:42:64:e6:39:ca:83:
06:d1:82:9f:c5:c1:d5:82:40:5f:5f:ad:0b:1d:6a:
a7:51:f8:88:dc:ac:b4:07:01:6e:e4:5e:11:ed:c3:
9f:7d:5b:22:60:91:9b:e7:50:ca:60:13:d2:04:64:
8c:a8:b5:60:22:28:81:e5:a7:a6:31:cc:68:57:94:
98:6c:e7:93:6c:e9:36:21:c4:25:0a:f8:4a:33:c0:
78:65:2a:d2:94:75:35:84:22:89:c9:f0:ec:98:e7:
b9:07:1a:f2:98:4b:a4:b0:4c:8e:88:60:fa:31:0a:
21:ac:ab:cd:9e:0d:1c:87:24:e4:e1:b1:04:18:5c:
eb:00:b0:82:fd:08:55:61:bb:64:b7:54:4e:f5:52:
39:6e:a7:02:aa:bd:25:91:b8:86:cc:c4:4d:fd:8d:
eb:27:71:44:d2:61:8a:cd:66:a1:63:e7:90:be:54:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:8C:02:C1:DB:55:3E:0F:C6:6F:4C:0F:66:C1:2F:96:6F:E5:F0
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8e:19:46:a8:5b:87:41:6b:14:3e:70:db:3a:77:93:3b:78:
cf:32:96:1f:ab:5e:ef:85:94:c2:f1:30:5e:ec:8c:6c:1e:fe:
62:43:e4:17:f2:d2:a5:7b:52:b8:1d:9e:90:c6:f4:f2:02:2e:
ff:bc:80:01:d6:28:0a:14:5a:ac:d9:26:69:5f:d9:ca:52:83:
1c:24:74:bd:b7:10:1b:dc:de:95:2b:0a:21:4e:d7:b2:87:8f:
f9:a9:27:0e:17:86:1c:b3:4a:73:3e:27:8c:9c:5e:3c:84:f5:
e9:61:90:20:ae:bc:3e:34:bb:06:51:54:09:e3:9d:97:cf:21:
ab:36:d5:d3:4c:c9:5a:5d:3c:43:35:66:ad:41:e5:51:2c:16:
12:14:65:91:3b:dc:f8:70:e0:dd:28:61:f9:b4:64:30:6a:65:
b0:8b:33:0c:c5:22:51:62:b6:47:4b:32:58:90:ad:ff:48:d6:
3a:6b:f1:d3:a0:7d:6b:5f:00:c1:d2:51:cf:36:7a:4a:d2:75:
4b:60:20:46:f0:68:9b:c9:d3:40:fd:4f:60:d5:04:fe:b3:40:
66:23:01:b2:8d:08:20:e9:94:78:11:2a:42:b3:10:c5:50:2c:
10:dc:75:8b:da:85:5f:56:06:ed:07:21:02:d7:69:a7:f3:23:
05:3e:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:59:41 2026 by rpki-client