This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_0yShHb3_Lvo8oOIhf1dP9etifM.roa
File: _0yShHb3_Lvo8oOIhf1dP9etifM.roa (raw, json)
Hash identifier: C5c+j5BtUc+Edi1FogFMem4oHE95WUZxlK525NIu8Uk=
Subject key identifier: FF:4C:92:84:76:F7:FC:BB:E8:F2:83:88:85:FD:5D:3F:D7:AD:89:F3
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 019B76EBA4C0DD4AFE5FAAF0AE3083FB3BD9
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_0yShHb3_Lvo8oOIhf1dP9etifM.roa
Signing time: Thu 01 Jan 2026 00:18:33 +0000
ROA not before: Thu 01 Jan 2026 00:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199598
IP address blocks: 62.228.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:a4:c0:dd:4a:fe:5f:aa:f0:ae:30:83:fb:3b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 00:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff4c928476f7fcbbe8f2838885fd5d3fd7ad89f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:39:9e:8e:66:2f:c6:a6:10:30:8a:ad:0a:
47:da:28:85:46:f9:d3:e9:4a:f0:80:1c:20:ec:2b:
be:ff:23:bb:4f:1e:5d:29:8e:ad:f9:c5:3b:bb:53:
c5:3f:96:17:5e:26:73:bc:ce:06:64:cd:f4:95:8b:
1a:af:c9:eb:39:60:63:79:21:0b:c3:95:20:9b:04:
01:0f:11:7c:8b:b1:fe:25:c5:1c:22:2f:d1:31:26:
34:4b:2e:25:85:40:65:05:78:71:42:52:49:fb:87:
e8:13:b8:fd:a9:ef:70:81:d0:fd:c8:0c:5e:af:77:
ab:45:a0:82:60:6e:03:d3:91:e3:11:de:32:3e:39:
fe:3d:b7:e6:f8:9b:db:0e:7e:c9:c0:ed:ae:20:ec:
4a:60:94:8d:0f:6e:22:cb:0b:55:a1:7c:f3:08:ff:
b3:f4:a9:6c:d5:7f:28:9a:88:85:0c:6f:bd:04:bb:
66:09:3f:73:67:06:ca:99:9d:3d:aa:61:19:13:f2:
da:a6:e6:13:27:b2:95:ae:52:65:e8:0b:80:e1:6a:
60:24:00:7f:3e:13:c9:46:fd:62:be:17:69:9d:45:
c2:1c:63:99:93:59:81:d5:1c:02:fb:18:fe:6e:af:
dc:98:24:7b:29:0f:e2:40:51:a1:b0:36:81:52:ca:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:92:84:76:F7:FC:BB:E8:F2:83:88:85:FD:5D:3F:D7:AD:89:F3
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_0yShHb3_Lvo8oOIhf1dP9etifM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.253.0/24
Signature Algorithm: sha256WithRSAEncryption
23:af:de:07:ed:e0:7c:b9:55:cb:4a:ca:f4:be:92:7e:2e:cf:
12:16:90:06:6b:64:17:64:8c:a2:54:01:19:5d:01:cb:df:83:
e4:87:69:80:5f:95:67:8a:80:9f:03:d2:d8:7c:31:4d:70:4b:
fe:80:5a:c4:88:7a:aa:df:62:d8:5d:1b:ea:b4:44:fa:57:8c:
7a:41:b9:e4:55:ab:38:02:68:23:8e:07:53:b0:f2:05:ea:f1:
33:de:1e:b3:53:c9:37:b7:af:74:4b:79:7c:cb:21:20:9d:96:
d2:25:2f:54:b7:39:df:7e:93:25:0a:8f:fa:53:5a:f1:4d:d9:
9a:c3:03:f4:d3:89:d2:4c:15:24:b9:0a:89:2f:85:74:53:30:
fc:3d:b2:68:7b:11:c8:87:09:ff:80:bb:d8:17:0f:b4:3e:a1:
18:66:3c:0f:29:16:30:40:49:47:50:42:14:13:0b:f5:ef:d6:
06:d8:60:45:53:bc:e5:5a:be:45:d7:8f:46:c6:d2:b9:00:3e:
81:7c:d4:b3:02:00:19:9a:97:5b:5b:fb:32:9e:ba:40:80:dc:
3d:42:7f:78:54:4d:19:b8:73:6a:5c:5b:3b:b2:b6:94:61:c6:
fd:f4:15:7f:3c:04:b1:7c:ba:08:26:c2:7e:30:26:9c:cd:69:
22:55:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:59:57 2026 by rpki-client