This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa File: I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa (raw, json) Hash identifier: rgMw3gFLvDe2bJ2gkzdn82gcIPRZuH5eYyiNhuqG2wY= Subject key identifier: 23:B1:A2:D1:CF:51:D4:8D:A7:91:30:5A:FC:58:A5:15:19:AB:87:50 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA147D03E14020952C376B06D657E Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24655 IP address blocks: 62.228.230.0/24 maxlen: 24 62.228.233.0/24 maxlen: 24 81.4.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a1:47:d0:3e:14:02:09:52:c3:76:b0:6d:65:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23b1a2d1cf51d48da791305afc58a51519ab8750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ea:70:3c:61:3e:46:99:95:50:9d:06:b4:36: 15:52:f8:3f:04:c1:06:64:81:65:1d:a3:e9:6e:59: 14:f9:52:80:53:fd:ff:99:3a:4b:5b:c1:b5:ad:ab: 9c:f5:7e:d3:83:2c:e8:8e:77:7c:cd:03:35:14:bd: 71:69:6c:1e:f6:25:43:81:1e:77:90:c0:bf:c8:3d: 07:21:bb:52:c4:bd:e3:1f:b0:08:0f:0f:48:82:17: 78:71:4b:24:7a:47:b9:95:7f:d0:4b:b9:71:48:5d: eb:58:13:d3:89:ad:5b:5d:65:af:d4:36:26:63:9c: 50:cc:21:bf:e0:8c:97:c8:cf:23:af:97:d1:36:c1: 99:4e:89:78:a7:52:57:48:73:60:0b:37:72:cb:75: 2b:10:11:45:84:72:e6:6f:4d:7a:06:9e:3e:6d:51: 99:4c:eb:d7:b3:36:06:74:81:32:bc:34:07:23:82: 8d:88:92:c9:9c:2b:1b:20:11:68:02:95:90:a6:fa: b9:6f:99:53:c8:d8:4c:06:96:6b:c5:c7:1f:9f:1a: 31:9a:e9:0c:5e:f0:5b:38:cf:e7:cf:86:88:76:ae: f0:84:97:5a:14:15:a4:51:cd:d8:92:12:92:f2:18: a8:4b:45:ea:69:6b:91:88:56:ac:4f:e7:0e:ce:7c: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B1:A2:D1:CF:51:D4:8D:A7:91:30:5A:FC:58:A5:15:19:AB:87:50 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.230.0/24 62.228.233.0/24 81.4.190.0/23 Signature Algorithm: sha256WithRSAEncryption 81:2a:bb:f8:7a:df:fd:13:2d:8e:ba:63:d8:5d:b8:b5:e2:b0: 35:27:43:12:be:c9:e8:39:37:29:8e:a2:60:fc:92:8c:52:5f: 37:c7:5d:1f:d8:85:ab:fa:ca:a6:91:8a:99:17:2b:b2:25:98: a0:17:b2:92:9d:95:c1:d9:50:b1:02:a1:fb:65:16:4b:d4:a5: d1:8b:7d:98:d6:f1:1c:ee:14:f7:91:4c:56:53:20:3f:0d:90: 33:52:8e:5f:90:08:e1:79:63:f8:09:ae:45:36:0f:0a:e9:46: 41:4d:b6:f9:63:12:06:b9:6f:c2:d7:4c:86:2c:7d:e0:54:82: ff:01:68:72:41:1b:b2:ce:59:77:46:e1:9d:bd:19:aa:61:e9: b5:98:bf:1a:13:e3:c8:d5:d1:cc:a4:7a:b7:7b:79:a0:8b:fc: b0:ac:a3:6b:11:91:9b:77:92:e6:3d:17:a9:80:3d:29:dc:87: a3:3a:25:50:37:dc:c1:38:e6:10:8f:2f:3f:aa:24:9a:11:b4: 49:de:7f:0d:ce:ff:92:c4:5c:47:02:df:e0:04:ed:b7:ba:d4: 31:c0:29:1c:82:cf:e0:ca:08:4b:ea:10:f9:85:bd:59:d6:68: ab:e7:b8:c5:ca:2c:53:96:b6:73:c7:d2:7a:2a:8f:e2:1b:93: 79:0c:1f:54 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt266FH0D4UAglSw3awbWV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2IxYTJkMWNmNTFkNDhkYTc5MTMwNWFmYzU4YTUxNTE5YWI4NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6upwPGE+RpmVUJ0GtDYVUvg/BMEG ZIFlHaPpblkU+VKAU/3/mTpLW8G1rauc9X7Tgyzojnd8zQM1FL1xaWwe9iVDgR53 kMC/yD0HIbtSxL3jH7AIDw9Ighd4cUskeke5lX/QS7lxSF3rWBPTia1bXWWv1DYm Y5xQzCG/4IyXyM8jr5fRNsGZTol4p1JXSHNgCzdyy3UrEBFFhHLmb016Bp4+bVGZ TOvXszYGdIEyvDQHI4KNiJLJnCsbIBFoApWQpvq5b5lTyNhMBpZrxccfnxoxmukM XvBbOM/nz4aIdq7whJdaFBWkUc3YkhKS8hioS0XqaWuRiFasT+cOznwR9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCOxotHPUdSNp5EwWvxYpRUZq4dQMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvSTdHaTBjOVIxSTJua1RCYV9GaWxGUm1yaDFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPuTmAwQA PuTpAwQBUQS+MA0GCSqGSIb3DQEBCwUAA4IBAQCBKrv4et/9Ey2OumPYXbi14rA1 J0MSvsnoOTcpjqJg/JKMUl83x10f2IWr+sqmkYqZFyuyJZigF7KSnZXB2VCxAqH7 ZRZL1KXRi32Y1vEc7hT3kUxWUyA/DZAzUo5fkAjheWP4Ca5FNg8K6UZBTbb5YxIG uW/C10yGLH3gVIL/AWhyQRuyzll3RuGdvRmqYem1mL8aE+PI1dHMpHq3e3mgi/yw rKNrEZGbd5LmPRepgD0p3IejOiVQN9zBOOYQjy8/qiSaEbRJ3n8Nzv+SxFxHAt/g BO23utQxwCkcgs/gyghL6hD5hb1Z1mir57jFyixTlrZzx9J6Ko/iG5N5DB9U -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:35 2026 by rpki-client