This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/F0XAb48S91CSxwm8b3AvOQbb2cw.roa File: F0XAb48S91CSxwm8b3AvOQbb2cw.roa (raw, json) Hash identifier: qumqIkC9PZFv+PqUTj/y7A2khHU3mUgREGvmo52LEpY= Subject key identifier: 17:45:C0:6F:8F:12:F7:50:92:C7:09:BC:6F:70:2F:39:06:DB:D9:CC Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Certificate serial: 019B77C6AB8790D660E3AFBA3F90EEF1B2FD Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/F0XAb48S91CSxwm8b3AvOQbb2cw.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57208 IP address blocks: 62.201.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ab:87:90:d6:60:e3:af:ba:3f:90:ee:f1:b2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1745c06f8f12f75092c709bc6f702f3906dbd9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:cf:56:1a:21:52:51:12:fc:c5:c1:01:47: 29:35:cb:ca:9a:6e:8f:47:28:e8:a8:90:af:64:c5: a8:af:6e:0f:7b:87:98:66:18:5a:80:8c:bd:e7:ca: 3d:91:cd:df:86:9b:07:3f:cd:38:e5:62:e4:1f:b0: a9:56:fe:f3:88:b1:18:a2:73:ef:ec:5e:b5:72:91: 59:7b:d1:7f:89:e1:e7:8c:6f:82:2d:39:ae:08:bd: 0d:b3:f3:48:f5:33:26:98:df:40:84:78:c7:ca:f6: 04:a9:6a:ae:c6:f3:9b:14:11:77:11:d6:7b:62:db: 1c:2e:74:46:38:bc:0b:ec:ad:e9:6b:c4:6e:51:3c: bd:aa:7b:88:27:77:70:20:3d:3e:3e:22:d8:16:86: e2:61:53:bd:19:10:bb:87:4a:af:01:d6:44:65:53: 69:0a:47:cd:68:0a:57:5c:3f:63:96:2a:08:1f:c7: 04:86:04:75:fa:47:fa:cb:53:6e:ed:f8:e6:a6:0b: 3f:1f:2a:4a:63:bd:dc:a7:3d:f3:1c:52:f3:80:94: 06:47:60:11:6c:fc:8e:48:79:3b:2a:85:af:62:6d: 27:1d:7b:2a:e4:af:6f:7d:ad:79:21:05:e9:ff:88: 2a:fc:c8:47:36:51:10:69:ad:f5:90:38:a4:5a:1c: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:45:C0:6F:8F:12:F7:50:92:C7:09:BC:6F:70:2F:39:06:DB:D9:CC X509v3 Authority Key Identifier: keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/F0XAb48S91CSxwm8b3AvOQbb2cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.42.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:1a:b5:fe:ff:89:97:90:d4:e3:8a:6c:c9:dd:b5:16:9d:91: 3c:79:c9:99:41:c9:b5:f2:92:3e:46:77:a7:df:58:7b:fb:06: 73:d1:fb:e8:86:c9:52:fb:17:a1:f0:f7:c6:5e:33:80:5c:27: bc:49:2b:f3:a3:29:17:39:13:fa:6c:cf:72:91:77:9c:94:2e: e4:a2:3a:c2:41:62:c1:87:a3:09:45:bd:2a:cf:38:34:54:36: 46:9f:d5:c4:c0:4a:d3:b6:9e:5f:e5:ba:c0:cc:d7:33:87:16: ba:2c:a9:4c:5b:3d:f3:8a:88:35:40:6e:99:da:7b:03:f9:f3: 17:cb:89:24:68:c8:cb:32:9d:dc:0d:28:70:57:5c:66:ab:99: 68:e4:8b:e6:09:16:c2:43:96:90:61:0a:d9:0e:3a:af:18:b5: 86:7c:f2:a2:ca:a7:46:51:23:ac:62:ec:6b:a9:f7:ae:01:6d: 05:4b:66:c3:b3:e5:b9:30:a4:53:1f:b8:63:46:68:34:84:b2: 8e:72:fc:ef:6f:5f:cd:d3:75:21:76:a3:12:0d:c3:c3:49:35: c9:4f:c1:8a:a5:e1:db:6f:b1:56:94:84:0a:ba:22:f0:2d:7b: b3:97:ba:17:a0:21:33:26:c8:e2:6c:69:90:cb:cc:53:59:fd: b8:0b:55:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xquHkNZg46+6P5Du8bL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3 ZWIxNjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzQ1YzA2ZjhmMTJmNzUwOTJjNzA5YmM2ZjcwMmYzOTA2ZGJkOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujHPVhohUlES/MXBAUcpNcvKmm6P RyjoqJCvZMWor24Pe4eYZhhagIy958o9kc3fhpsHP8045WLkH7CpVv7ziLEYonPv 7F61cpFZe9F/ieHnjG+CLTmuCL0Ns/NI9TMmmN9AhHjHyvYEqWquxvObFBF3EdZ7 YtscLnRGOLwL7K3pa8RuUTy9qnuIJ3dwID0+PiLYFobiYVO9GRC7h0qvAdZEZVNp CkfNaApXXD9jlioIH8cEhgR1+kf6y1Nu7fjmpgs/HypKY73cpz3zHFLzgJQGR2AR bPyOSHk7KoWvYm0nHXsq5K9vfa15IQXp/4gq/MhHNlEQaa31kDikWhxAlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdFwG+PEvdQkscJvG9wLzkG29nMMB8GA1UdIwQY MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt MjhjYjNiYmYwNWFlLzEvRjBYQWI0OFM5MUNTeHdtOGIzQXZPUWJiMmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPskqMA0G CSqGSIb3DQEBCwUAA4IBAQBPGrX+/4mXkNTjimzJ3bUWnZE8ecmZQcm18pI+Rnen 31h7+wZz0fvohslS+xeh8PfGXjOAXCe8SSvzoykXORP6bM9ykXeclC7kojrCQWLB h6MJRb0qzzg0VDZGn9XEwErTtp5f5brAzNczhxa6LKlMWz3ziog1QG6Z2nsD+fMX y4kkaMjLMp3cDShwV1xmq5lo5IvmCRbCQ5aQYQrZDjqvGLWGfPKiyqdGUSOsYuxr qfeuAW0FS2bDs+W5MKRTH7hjRmg0hLKOcvzvb1/N03UhdqMSDcPDSTXJT8GKpeHb b7FWlIQKuiLwLXuzl7oXoCEzJsjibGmQy8xTWf24C1Vg -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:42 2026 by rpki-client