This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa File: idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa (raw, json) Hash identifier: iSNlVvk976S8zGXNaqHMWJhFzSvDbSMz0/sY5GUQxFg= Subject key identifier: 89:D6:C8:55:8D:36:32:A9:13:D9:6D:52:CF:61:E7:EA:F9:BB:5A:07 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBAA3CDE36C58972CD8B9B0D87BDC7 Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa Signing time: Thu 01 Jan 2026 00:18:34 +0000 ROA not before: Thu 01 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207971 IP address blocks: 62.228.246.0/24 maxlen: 24 62.228.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:aa:3c:de:36:c5:89:72:cd:8b:9b:0d:87:bd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89d6c8558d3632a913d96d52cf61e7eaf9bb5a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:20:1e:42:74:8e:07:5b:c9:b8:75:35:8d: 0b:75:f1:77:ca:0a:30:d4:24:68:67:1e:20:42:d8: 09:ac:0e:f3:49:04:1e:38:c4:06:1f:0e:9e:26:e0: 8d:2d:28:3d:9c:a3:29:66:e4:ea:54:0e:41:9d:67: d4:4c:5c:bb:12:12:b4:85:05:c1:a8:05:79:e8:9f: 10:ff:0f:19:74:f2:f5:66:5d:84:6c:32:a3:59:01: dd:c7:b7:b3:5f:9f:4b:ba:0e:1c:73:5e:9a:4e:ec: 83:d8:40:2b:43:9e:27:2b:37:1a:a1:68:00:35:8e: f2:cd:c0:55:d5:46:2d:fb:49:d6:e0:f8:be:40:54: 05:d5:0a:4c:1f:a1:6e:90:97:76:bb:fc:95:c6:02: f5:d8:33:7b:b8:8f:d4:23:50:a5:3b:f8:e2:aa:09: f0:a1:e0:d6:95:29:e1:2f:b9:b8:a0:07:b5:22:5d: 24:d3:79:6d:c4:10:ea:42:c4:02:c4:a0:6e:a8:30: bf:da:75:32:d6:d5:a8:96:d1:5b:37:9b:a6:0e:89: 1e:af:ae:dd:80:df:09:50:12:6f:c2:93:ce:ba:c8: 60:a8:66:80:f1:a7:16:01:30:64:e0:b7:80:e0:8e: 95:a3:a4:3f:32:2b:b6:c2:a3:7b:43:c5:ea:b3:4b: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D6:C8:55:8D:36:32:A9:13:D9:6D:52:CF:61:E7:EA:F9:BB:5A:07 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.246.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:5b:f8:88:0a:e0:85:12:b2:95:82:3f:a6:5a:8a:f6:a1:1f: 13:8e:68:2b:a3:55:83:d4:4b:41:04:fb:28:93:68:85:78:ea: ae:6f:31:e6:a1:99:7f:e3:5b:e4:ce:88:98:21:f5:3b:78:7a: 4f:c5:17:b1:77:4d:42:1e:e0:6f:cc:24:b4:1f:ce:d7:34:6d: fe:23:ce:9e:18:50:13:f9:ad:d1:a9:e4:40:d4:1f:ea:10:0e: f1:08:c4:93:41:0a:f1:d8:f7:51:a2:14:7c:f6:dd:b8:6b:2d: 3f:ee:6d:2a:db:10:70:82:37:da:13:83:67:ae:d3:dd:55:94: 14:bb:52:b0:f7:76:da:2e:ed:67:04:2e:43:57:cf:25:79:ac: 08:96:64:06:5a:d8:58:fa:1c:9c:83:09:b4:84:f2:ce:09:a4: 7f:46:af:08:08:96:92:70:7d:4a:5c:7b:2a:04:51:cd:d7:cd: b4:21:ea:84:83:69:c5:df:5e:b1:ea:d8:8f:4b:cd:4a:95:e3: 19:41:e8:46:83:f4:09:3e:0e:08:84:0c:6f:3d:af:6c:af:fa: 00:65:d4:77:6b:d4:b9:8e:60:6a:b7:41:0b:9c:5a:7f:a2:ba: 47:0f:ae:b6:ff:0c:08:8b:b7:95:ff:c1:42:3f:c8:f7:c8:1e: 5c:9c:f1:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266o83jbFiXLNi5sNh73HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWQ2Yzg1NThkMzYzMmE5MTNkOTZkNTJjZjYxZTdlYWY5YmI1YTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogAgHkJ0jgdbybh1NY0LdfF3ygow 1CRoZx4gQtgJrA7zSQQeOMQGHw6eJuCNLSg9nKMpZuTqVA5BnWfUTFy7EhK0hQXB qAV56J8Q/w8ZdPL1Zl2EbDKjWQHdx7ezX59Lug4cc16aTuyD2EArQ54nKzcaoWgA NY7yzcBV1UYt+0nW4Pi+QFQF1QpMH6FukJd2u/yVxgL12DN7uI/UI1ClO/jiqgnw oeDWlSnhL7m4oAe1Il0k03ltxBDqQsQCxKBuqDC/2nUy1tWoltFbN5umDoker67d gN8JUBJvwpPOushgqGaA8acWATBk4LeA4I6Vo6Q/Miu2wqN7Q8Xqs0tDWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInWyFWNNjKpE9ltUs9h5+r5u1oHMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvaWRiSVZZMDJNcWtUMlcxU3oySG42dm03V2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPuT2MA0G CSqGSIb3DQEBCwUAA4IBAQCNW/iICuCFErKVgj+mWor2oR8Tjmgro1WD1EtBBPso k2iFeOqubzHmoZl/41vkzoiYIfU7eHpPxRexd01CHuBvzCS0H87XNG3+I86eGFAT +a3RqeRA1B/qEA7xCMSTQQrx2PdRohR89t24ay0/7m0q2xBwgjfaE4NnrtPdVZQU u1Kw93baLu1nBC5DV88leawIlmQGWthY+hycgwm0hPLOCaR/Rq8ICJaScH1KXHsq BFHN1820IeqEg2nF316x6tiPS81KleMZQehGg/QJPg4IhAxvPa9sr/oAZdR3a9S5 jmBqt0ELnFp/orpHD662/wwIi7eV/8FCP8j3yB5cnPF6 -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:44 2026 by rpki-client