This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/IUnxJCEXGpjb9x8O-AKLChbdKH4.roa File: IUnxJCEXGpjb9x8O-AKLChbdKH4.roa (raw, json) Hash identifier: ngyGAWfnTLrenQ1MiPj1AnwG2yKMniipm+cR6MK1lC0= Subject key identifier: 21:49:F1:24:21:17:1A:98:DB:F7:1F:0E:F8:02:8B:0A:16:DD:28:7E Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA9938049D9D88C059F3D0BC7EF6B Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/IUnxJCEXGpjb9x8O-AKLChbdKH4.roa Signing time: Thu 01 Jan 2026 00:18:34 +0000 ROA not before: Thu 01 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205972 IP address blocks: 62.228.238.0/24 maxlen: 24 2a00:1358:c002:5600::/56 maxlen: 56 2a00:1358:c100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a9:93:80:49:d9:d8:8c:05:9f:3d:0b:c7:ef:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2149f12421171a98dbf71f0ef8028b0a16dd287e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:d8:91:df:70:3d:ba:a6:d4:0b:e3:6a:d3: a0:e9:92:73:1d:d3:31:27:43:b1:bc:90:15:1f:ba: f1:29:e8:0f:2d:2d:17:fd:8d:a8:6e:6d:fd:81:3b: 1d:00:6e:a8:e3:0a:c2:32:84:9d:03:10:73:10:8f: 82:25:d6:3b:c1:14:b5:da:01:be:16:46:34:55:82: b3:d9:d2:a9:63:63:ea:8b:42:76:1b:4d:23:be:c1: f1:bb:87:20:75:35:80:2a:40:3a:01:bb:35:10:77: c7:47:d4:60:45:57:00:37:19:2e:82:0b:7e:60:46: b1:2d:a3:f1:9a:0f:92:1b:05:ca:ce:a3:0c:02:e7: 42:9c:5f:bc:41:a5:c2:e6:c6:00:3d:40:7b:12:3f: c7:ee:1a:64:06:e6:f9:3b:73:46:da:a1:bb:10:5e: a6:a2:a6:93:2e:b3:a2:22:6a:58:4d:84:f7:54:92: c4:86:5e:32:64:92:b0:5b:ef:af:cd:2a:ec:16:fa: 2c:73:1b:c5:ad:cc:a5:9c:15:a7:c4:ad:9f:70:93: 6d:ca:1e:eb:ac:31:9f:e8:9e:6e:61:60:a2:f8:c5: f5:8f:02:62:3e:c0:79:56:2f:14:4c:99:55:f2:5c: c1:d4:34:4f:44:d1:11:f2:9b:fb:a7:f0:26:b0:53: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:49:F1:24:21:17:1A:98:DB:F7:1F:0E:F8:02:8B:0A:16:DD:28:7E X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/IUnxJCEXGpjb9x8O-AKLChbdKH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.238.0/24 IPv6: 2a00:1358:c002:5600::/56 2a00:1358:c100::/48 Signature Algorithm: sha256WithRSAEncryption a0:10:ad:17:63:43:97:24:0e:5e:a9:95:2b:81:a0:9b:4e:60: 09:f9:fc:b5:af:d2:b1:2a:4b:20:0b:68:b8:17:6e:ec:c2:0d: c0:a8:e6:bd:92:fa:c7:87:f5:af:67:1a:42:a8:bd:e4:ee:3f: 80:c2:a6:e0:4d:47:34:76:a1:f7:56:6e:87:3f:80:be:9e:f1: ac:f7:bc:ef:0b:bd:67:79:ff:65:53:c7:cd:67:5c:07:d7:d7: 70:72:95:45:7c:32:09:41:2b:65:75:bb:6c:d3:cb:61:9a:fb: db:a6:5c:9d:13:6e:ce:5c:0c:ae:60:6d:c2:9c:35:76:8a:f1: 33:c4:19:20:cd:08:f7:73:40:78:2f:ec:32:9d:25:3d:b6:3e: ab:55:01:28:c0:f9:2d:34:d8:1d:95:bb:81:e0:6c:30:26:4b: 92:c1:29:bc:d7:a5:76:1e:23:5f:4d:8b:cc:06:f9:cb:80:62: 17:88:fa:78:3e:7d:94:e4:81:91:97:b0:16:1c:16:5e:d3:fc: eb:bb:f5:7b:39:d7:19:5d:94:02:cf:d1:e9:b5:dc:fd:a9:79: cb:10:f3:86:4e:09:fa:a5:f4:b7:12:a5:f4:e9:62:ea:ef:11: 2b:6c:fc:58:60:91:99:a2:e1:52:96:88:d4:31:23:f6:09:73: 67:3a:7b:5a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt266mTgEnZ2IwFnz0Lx+9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTQ5ZjEyNDIxMTcxYTk4ZGJmNzFmMGVmODAyOGIwYTE2ZGQyODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0/Ykd9wPbqm1AvjatOg6ZJzHdMx J0OxvJAVH7rxKegPLS0X/Y2obm39gTsdAG6o4wrCMoSdAxBzEI+CJdY7wRS12gG+ FkY0VYKz2dKpY2Pqi0J2G00jvsHxu4cgdTWAKkA6Abs1EHfHR9RgRVcANxkuggt+ YEaxLaPxmg+SGwXKzqMMAudCnF+8QaXC5sYAPUB7Ej/H7hpkBub5O3NG2qG7EF6m oqaTLrOiImpYTYT3VJLEhl4yZJKwW++vzSrsFvoscxvFrcylnBWnxK2fcJNtyh7r rDGf6J5uYWCi+MX1jwJiPsB5Vi8UTJlV8lzB1DRPRNER8pv7p/AmsFPpTwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCFJ8SQhFxqY2/cfDvgCiwoW3Sh+MB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvSVVueEpDRVhHcGpiOXg4Ty1BS0xDaGJkS0g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQAPuTuMBkE AgACMBMDCAAqABNYwAJWAwcAKgATWMEAMA0GCSqGSIb3DQEBCwUAA4IBAQCgEK0X Y0OXJA5eqZUrgaCbTmAJ+fy1r9KxKksgC2i4F27swg3AqOa9kvrHh/WvZxpCqL3k 7j+AwqbgTUc0dqH3Vm6HP4C+nvGs97zvC71nef9lU8fNZ1wH19dwcpVFfDIJQStl dbts08thmvvbplydE27OXAyuYG3CnDV2ivEzxBkgzQj3c0B4L+wynSU9tj6rVQEo wPktNNgdlbuB4GwwJkuSwSm816V2HiNfTYvMBvnLgGIXiPp4Pn2U5IGRl7AWHBZe 0/zru/V7OdcZXZQCz9Hptdz9qXnLEPOGTgn6pfS3EqX06WLq7xErbPxYYJGZouFS lojUMSP2CXNnOnta -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:38 2026 by rpki-client