This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa File: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (raw, json) Hash identifier: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4= Subject key identifier: 99:7E:48:D8:CE:A2:50:AB:7C:CC:5E:01:3D:F3:D9:38:64:85:86:09 Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Certificate serial: 019B7B35CC72C95323B58B2D93E68AA38394 Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25530 IP address blocks: 62.113.32.0/23 maxlen: 24 62.113.33.0/24 maxlen: 24 62.113.34.0/23 maxlen: 23 62.113.38.0/24 maxlen: 24 62.113.40.0/24 maxlen: 24 62.113.45.0/24 maxlen: 24 62.113.46.0/24 maxlen: 24 62.113.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cc:72:c9:53:23:b5:8b:2d:93:e6:8a:a3:83:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=997e48d8cea250ab7ccc5e013df3d93864858609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:0a:60:69:e0:79:ca:16:86:b6:df:3a:a1: 57:3c:39:d0:a4:72:eb:fb:df:fc:fc:90:81:c7:80: 49:4b:cf:88:66:65:b3:91:ee:11:7a:c9:92:cd:a5: 13:2c:22:33:01:02:dc:54:3f:69:37:5c:d2:56:5e: 07:24:3d:ff:7f:80:99:0b:7f:9f:7d:a1:8c:70:4a: d5:cd:f1:14:f2:dd:c6:53:66:2c:c6:e4:d5:9e:ed: 1a:6f:e2:c3:0a:a5:a4:9d:14:69:b1:c5:21:6f:1d: fc:5d:96:da:3b:82:00:24:73:a8:d4:2f:ee:29:56: f1:51:8c:e0:7b:8a:e6:f3:d0:21:92:9d:36:73:7d: b1:ec:fa:9c:7e:28:c5:dc:cf:c8:36:f6:f4:1b:a3: af:96:c6:f2:ae:42:8c:f7:32:66:c4:c3:6b:9c:5f: c3:82:f2:69:87:70:55:44:bc:e3:f4:7f:2c:60:54: 2c:bf:fd:f3:f5:4e:96:0f:68:37:20:d9:22:e2:d7: d3:0d:6f:ca:97:d2:71:8b:6d:37:fe:73:c2:c0:05: 75:f8:b6:91:8f:48:ac:26:61:9f:57:bd:bb:52:ec: b4:6e:be:7e:d0:ea:19:36:28:7c:39:2a:a7:2d:e9: 9c:22:d0:19:2e:66:c3:74:05:80:76:3d:22:b6:55: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7E:48:D8:CE:A2:50:AB:7C:CC:5E:01:3D:F3:D9:38:64:85:86:09 X509v3 Authority Key Identifier: keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.32.0/22 62.113.38.0/24 62.113.40.0/24 62.113.45.0-62.113.47.255 Signature Algorithm: sha256WithRSAEncryption 91:70:5e:5e:d4:21:1d:82:ee:f4:ef:79:82:11:35:a4:28:bc: 14:0c:dc:aa:b0:c7:e1:a7:17:e5:72:46:9f:96:6e:2d:4e:ba: 17:86:bf:41:86:70:a8:19:b6:fe:c6:09:dc:ce:4b:9f:12:a6: 0e:c7:ad:20:0a:71:fd:a2:d1:5f:96:ea:3d:51:c1:1f:9c:40: 8d:2a:a8:14:2f:bc:97:2f:24:4c:b9:32:ed:c5:c0:2e:84:f2: 89:de:e7:5b:56:b5:c8:74:20:7a:e8:e9:03:d7:66:32:ee:36: 58:e7:a9:cc:a3:5e:67:10:f1:85:0d:fb:8c:19:e1:88:b2:d9: d2:ed:86:4d:6e:63:28:74:6a:d8:f7:df:aa:e8:e5:62:50:9e: c0:05:ff:bd:9b:e6:8f:56:26:b1:05:e8:65:c0:5b:c6:0f:02: d2:60:9b:a0:89:cd:e4:d1:4c:7c:37:5a:04:53:cc:7e:d4:09: d7:3c:65:21:04:77:1c:05:d0:4c:a6:22:f2:26:ca:97:b6:d2: 7e:0a:5f:75:27:9b:ff:30:3e:be:10:1d:aa:2e:e3:e5:e9:92: 63:30:db:f7:2c:1b:91:29:b9:45:96:71:31:7a:85:37:f0:e6: 45:22:9b:1b:8a:86:3a:9f:2e:c6:44:d2:8b:bb:c7:22:b9:c0: 36:d5:c8:d7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NcxyyVMjtYstk+aKo4OUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0 ZDgzMDAwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTdlNDhkOGNlYTI1MGFiN2NjYzVlMDEzZGYzZDkzODY0ODU4NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03sKYGngecoWhrbfOqFXPDnQpHLr +9/8/JCBx4BJS8+IZmWzke4ResmSzaUTLCIzAQLcVD9pN1zSVl4HJD3/f4CZC3+f faGMcErVzfEU8t3GU2YsxuTVnu0ab+LDCqWknRRpscUhbx38XZbaO4IAJHOo1C/u KVbxUYzge4rm89Ahkp02c32x7PqcfijF3M/INvb0G6OvlsbyrkKM9zJmxMNrnF/D gvJph3BVRLzj9H8sYFQsv/3z9U6WD2g3INki4tfTDW/Kl9Jxi203/nPCwAV1+LaR j0isJmGfV727Uuy0br5+0OoZNih8OSqnLemcItAZLmbDdAWAdj0itlX+WwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJl+SNjOolCrfMxeAT3z2ThkhYYJMB8GA1UdIwQY MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt YTk4ZWYzMDA4NTgwLzEvbVg1STJNNmlVS3Q4ekY0QlBmUFpPR1NGaGdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCPnEgAwQA PnEmAwQAPnEoMAwDBAA+cS0DBAQ+cSAwDQYJKoZIhvcNAQELBQADggEBAJFwXl7U IR2C7vTveYIRNaQovBQM3Kqwx+GnF+VyRp+Wbi1OuheGv0GGcKgZtv7GCdzOS58S pg7HrSAKcf2i0V+W6j1RwR+cQI0qqBQvvJcvJEy5Mu3FwC6E8one51tWtch0IHro 6QPXZjLuNljnqcyjXmcQ8YUN+4wZ4Yiy2dLthk1uYyh0atj336ro5WJQnsAF/72b 5o9WJrEF6GXAW8YPAtJgm6CJzeTRTHw3WgRTzH7UCdc8ZSEEdxwF0EymIvImype2 0n4KX3Unm/8wPr4QHaou4+XpkmMw2/csG5EpuUWWcTF6hTfw5kUimxuKhjqfLsZE 0ou7xyK5wDbVyNc= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:42 2026 by rpki-client