This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa File: MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa (raw, json) Hash identifier: gTpV76Ww0BCzvfD9wYqWRlnMaGyxOQ5bU1mc1SqNJxs= Subject key identifier: 30:C1:BA:90:06:07:75:B4:93:67:97:26:3B:E4:07:98:1C:62:BD:3E Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA3663FDCD5DC1A29612641F1682C Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51228 IP address blocks: 62.228.254.0/24 maxlen: 24 62.228.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a3:66:3f:dc:d5:dc:1a:29:61:26:41:f1:68:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30c1ba90060775b4936797263be407981c62bd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:f7:65:ca:55:0e:c8:51:e1:47:a8:ad:1a: a1:01:72:dd:43:50:2d:08:a6:ac:f0:13:c1:14:ad: e8:d4:50:b6:ee:bc:3c:20:61:db:52:55:7b:d2:8c: 28:e0:33:15:e0:3a:e3:14:ed:d2:c4:25:9a:bd:3e: 50:7e:b2:e0:7f:e4:43:df:61:b9:fb:86:84:8b:ae: 4b:3b:38:3b:6e:b7:36:b9:32:1e:9a:7d:9c:1e:63: 05:a4:98:39:07:d6:2e:fe:f3:82:43:22:7b:67:25: e0:17:47:8b:e5:b9:12:3d:6e:5a:7d:83:37:a2:c7: dd:20:b1:fb:f4:83:02:54:bd:eb:cf:7e:19:87:67: 33:ea:27:3f:81:d2:ba:41:c3:c1:15:ad:40:a9:30: 63:f1:ef:9a:f9:f0:b0:0d:70:22:10:1c:d7:b6:20: ae:1f:1a:af:18:40:1d:68:01:66:bf:a4:8d:50:15: 95:7f:2d:6c:91:23:50:3b:a4:69:2a:07:60:7f:89: 58:ed:a5:22:97:5e:ea:9f:3f:0f:a1:5e:61:6e:74: cd:e1:cb:75:17:5f:b5:6b:6c:20:a5:44:8f:90:10: 00:a5:7f:59:c8:73:36:b1:e0:0f:a7:ea:9a:ee:d9: d8:b6:c5:ea:d3:e7:b1:fa:e0:25:d0:b7:bb:e9:ef: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C1:BA:90:06:07:75:B4:93:67:97:26:3B:E4:07:98:1C:62:BD:3E X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.254.0/23 Signature Algorithm: sha256WithRSAEncryption 93:54:88:a5:51:b8:f5:c9:7b:9f:65:1b:46:dd:0f:e1:3b:94: 93:ab:2d:0f:06:b7:dd:30:b3:d7:6b:39:a3:62:a8:04:aa:41: 27:fd:cf:66:89:21:b4:0d:62:55:02:65:aa:29:d7:7b:51:bd: ae:20:bf:e2:5d:f5:3a:45:10:43:70:d9:4b:15:cf:c6:dc:0d: 13:d9:3e:e9:dd:a4:4f:33:25:12:26:08:97:81:2e:00:e2:c4: 59:37:fc:19:c1:8b:df:bc:d5:a6:8d:3e:24:c1:84:82:2c:ee: 00:0b:7c:88:f0:c1:fc:cd:78:01:23:d5:ad:ea:86:bf:90:de: 74:d4:c4:8e:ed:97:36:46:3d:7a:f5:eb:cd:4b:99:39:4f:9a: 84:64:0c:bb:57:ac:0d:c3:e9:73:8a:79:02:0f:7c:a4:0c:21: 23:7c:30:58:5d:74:93:42:c6:6a:28:93:5e:87:bc:90:65:26: 38:ac:65:08:d0:49:fd:5b:53:15:8b:ee:ce:2e:1b:6b:e4:a8: 8b:2e:1e:48:64:7b:76:b2:3b:2a:89:97:0f:de:b0:5d:00:ec: 6c:fe:28:25:1d:00:21:44:d3:69:f6:02:c4:1f:bb:32:cf:79: 0d:c4:9e:dd:df:13:c4:a0:ac:85:1e:15:9d:04:0e:52:dc:d1: b3:ba:04:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266NmP9zV3BopYSZB8WgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGMxYmE5MDA2MDc3NWI0OTM2Nzk3MjYzYmU0MDc5ODFjNjJiZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnD3ZcpVDshR4UeorRqhAXLdQ1At CKas8BPBFK3o1FC27rw8IGHbUlV70owo4DMV4DrjFO3SxCWavT5QfrLgf+RD32G5 +4aEi65LOzg7brc2uTIemn2cHmMFpJg5B9Yu/vOCQyJ7ZyXgF0eL5bkSPW5afYM3 osfdILH79IMCVL3rz34Zh2cz6ic/gdK6QcPBFa1AqTBj8e+a+fCwDXAiEBzXtiCu HxqvGEAdaAFmv6SNUBWVfy1skSNQO6RpKgdgf4lY7aUil17qnz8PoV5hbnTN4ct1 F1+1a2wgpUSPkBAApX9ZyHM2seAPp+qa7tnYtsXq0+ex+uAl0Le76e/vEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDDBupAGB3W0k2eXJjvkB5gcYr0+MB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvTU1HNmtBWUhkYlNUWjVjbU8tUUhtQnhpdlQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPuT+MA0G CSqGSIb3DQEBCwUAA4IBAQCTVIilUbj1yXufZRtG3Q/hO5STqy0PBrfdMLPXazmj YqgEqkEn/c9miSG0DWJVAmWqKdd7Ub2uIL/iXfU6RRBDcNlLFc/G3A0T2T7p3aRP MyUSJgiXgS4A4sRZN/wZwYvfvNWmjT4kwYSCLO4AC3yI8MH8zXgBI9Wt6oa/kN50 1MSO7Zc2Rj169evNS5k5T5qEZAy7V6wNw+lzinkCD3ykDCEjfDBYXXSTQsZqKJNe h7yQZSY4rGUI0En9W1MVi+7OLhtr5KiLLh5IZHt2sjsqiZcP3rBdAOxs/iglHQAh RNNp9gLEH7syz3kNxJ7d3xPEoKyFHhWdBA5S3NGzugRS -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:30 2026 by rpki-client