This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/M1AQAqSuB08-un_puH-8qti7nu4.roa File: M1AQAqSuB08-un_puH-8qti7nu4.roa (raw, json) Hash identifier: +j/n2YJGwqOa5Evr009bt0ZfcAafKbRzeP7rabG9oEE= Subject key identifier: 33:50:10:02:A4:AE:07:4F:3E:BA:7F:E9:B8:7F:BC:AA:D8:BB:9E:EE Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD5F68921D3585FC484A434A82434 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/M1AQAqSuB08-un_puH-8qti7nu4.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 5.253.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d5:f6:89:21:d3:58:5f:c4:84:a4:34:a8:24:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33501002a4ae074f3eba7fe9b87fbcaad8bb9eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:e6:92:1e:1c:bf:6e:7f:9f:99:e2:11:94: d0:2c:84:60:3e:93:95:9b:47:42:33:7b:9f:ed:1d: 13:62:9b:05:14:34:c7:2e:85:68:aa:91:32:c0:19: 86:2e:4f:cb:df:8e:e8:2e:03:35:da:15:68:4c:01: 8d:70:83:e9:4a:8e:90:9e:e3:92:23:8e:55:6c:3f: 28:9f:49:22:28:49:75:0f:ba:08:f0:c3:65:03:89: 94:9b:ac:52:78:76:d3:b4:42:1d:4c:5f:42:b5:ec: 36:3d:1e:18:2f:3e:c0:88:9b:94:6f:72:dd:cb:71: 58:31:68:f7:a3:f7:3e:34:3c:29:01:0a:e2:ce:c4: ac:a9:84:90:8e:28:a0:5e:78:56:aa:0c:89:59:62: 82:de:19:8f:0d:eb:02:86:c3:22:01:a7:70:dc:e7: ff:38:34:7b:9a:b1:c5:2b:a4:32:05:ed:a4:65:42: 8a:9f:a9:3b:b5:44:bc:2f:df:7b:72:c0:5d:a7:b8: 25:c5:67:cf:d8:fe:fb:21:46:a7:f2:49:58:e1:42: 79:7a:6e:bf:e7:b2:0d:1e:7f:16:2c:61:e1:fd:d0: 1f:0c:fb:ac:f8:6a:22:05:9c:0c:47:fc:e3:06:5a: 4a:55:b7:a8:38:3d:50:44:3c:08:45:2e:22:6b:62: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:50:10:02:A4:AE:07:4F:3E:BA:7F:E9:B8:7F:BC:AA:D8:BB:9E:EE X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/M1AQAqSuB08-un_puH-8qti7nu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.46.0/24 Signature Algorithm: sha256WithRSAEncryption 99:d5:ec:9f:ee:7e:0b:8c:d7:34:6d:ae:83:db:d7:2d:cc:6e: 33:84:c7:2e:20:e5:34:86:4c:0f:d3:2b:c0:97:68:c5:da:11: e6:6a:8c:a0:5a:c5:e3:60:f2:54:f4:0e:bc:30:3e:7a:21:5a: a6:eb:83:60:a2:ff:5a:35:74:7a:f1:fb:e4:43:bb:4e:2b:8b: 68:e9:a8:df:d4:59:2b:5f:84:c1:81:6e:26:7a:2f:e0:bd:7c: 2b:12:5e:3c:58:65:57:ef:fe:3a:d4:e3:39:ba:20:f5:64:93: 97:da:f8:04:9b:7a:3c:ca:73:90:58:41:b7:61:4e:75:b6:fa: d9:dd:a1:00:d5:c6:7b:a2:78:5c:d6:e4:3d:cb:55:b9:20:9c: 4f:8d:2d:f2:e8:2b:72:15:96:9b:50:17:e6:bb:9f:8b:55:df: db:58:72:42:08:25:cc:dd:2f:45:e1:42:61:5a:4d:4e:87:cf: 30:db:f8:4d:b0:6c:28:3c:4d:78:0d:7d:1b:6e:9e:75:ba:8c: fb:6b:aa:ea:24:8b:7d:4c:81:9f:52:14:30:d5:86:25:d0:ec: 85:35:32:60:e6:67:41:dd:0e:b4:bb:24:a4:a3:99:dc:8c:35: 89:0c:aa:e9:b6:c7:c2:f0:85:b7:71:da:9f:1d:a5:33:44:05: 2a:c5:bf:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tX2iSHTWF/EhKQ0qCQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzUwMTAwMmE0YWUwNzRmM2ViYTdmZTliODdmYmNhYWQ4YmI5ZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oHmkh4cv25/n5niEZTQLIRgPpOV m0dCM3uf7R0TYpsFFDTHLoVoqpEywBmGLk/L347oLgM12hVoTAGNcIPpSo6QnuOS I45VbD8on0kiKEl1D7oI8MNlA4mUm6xSeHbTtEIdTF9Ctew2PR4YLz7AiJuUb3Ld y3FYMWj3o/c+NDwpAQrizsSsqYSQjiigXnhWqgyJWWKC3hmPDesChsMiAadw3Of/ ODR7mrHFK6QyBe2kZUKKn6k7tUS8L997csBdp7glxWfP2P77IUan8klY4UJ5em6/ 57INHn8WLGHh/dAfDPus+GoiBZwMR/zjBlpKVbeoOD1QRDwIRS4ia2KykwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNQEAKkrgdPPrp/6bh/vKrYu57uMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvTTFBUUFxU3VCMDgtdW5fcHVILThxdGk3bnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf0uMA0G CSqGSIb3DQEBCwUAA4IBAQCZ1eyf7n4LjNc0ba6D29ctzG4zhMcuIOU0hkwP0yvA l2jF2hHmaoygWsXjYPJU9A68MD56IVqm64Ngov9aNXR68fvkQ7tOK4to6ajf1Fkr X4TBgW4mei/gvXwrEl48WGVX7/461OM5uiD1ZJOX2vgEm3o8ynOQWEG3YU51tvrZ 3aEA1cZ7onhc1uQ9y1W5IJxPjS3y6CtyFZabUBfmu5+LVd/bWHJCCCXM3S9F4UJh Wk1Oh88w2/hNsGwoPE14DX0bbp51uoz7a6rqJIt9TIGfUhQw1YYl0OyFNTJg5mdB 3Q60uySko5ncjDWJDKrptsfC8IW3cdqfHaUzRAUqxb8i -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:27 2026 by rpki-client