This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/1RM4oPNA5zV8gpBFXwkv_ja9FiQ.roa File: 1RM4oPNA5zV8gpBFXwkv_ja9FiQ.roa (raw, json) Hash identifier: CPN5leskj6WSt3dvfwwAxdnUjDWOGaEyTKMTxOxmgto= Subject key identifier: D5:13:38:A0:F3:40:E7:35:7C:82:90:45:5F:09:2F:FE:36:BD:16:24 Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8 Certificate serial: 019B7B366FD77E2BEF7678FB502D675F4916 Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/1RM4oPNA5zV8gpBFXwkv_ja9FiQ.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 62.201.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6f:d7:7e:2b:ef:76:78:fb:50:2d:67:5f:49:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51338a0f340e7357c8290455f092ffe36bd1624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:5d:6f:14:c2:03:e5:a3:7f:85:65:49:7d: 30:63:ea:61:07:4b:df:98:54:df:46:a2:ee:ab:70: ea:72:d3:34:23:16:49:94:3d:76:15:63:93:1b:0c: 40:4b:12:91:f7:1c:79:91:0e:7a:8e:f1:02:1a:15: 2a:d2:12:9f:d4:d7:07:07:6b:21:c6:36:75:2b:11: 05:f1:8f:28:31:74:90:8b:19:82:ea:9f:6c:3f:95: 2b:b1:5f:e2:6e:be:b6:dc:83:bc:77:c4:03:6c:9b: 1b:07:8c:5f:30:b0:10:31:fb:ac:6a:fc:0d:78:a6: 59:7e:80:ae:5e:5d:7e:66:b0:92:d9:2b:ec:6b:ae: c1:83:f5:83:e7:60:14:c3:8c:ef:8f:92:69:c7:57: b3:2c:c5:28:ec:3d:75:91:cd:b3:db:27:f0:17:e9: d6:d0:ff:3f:42:a0:da:22:cc:82:33:6a:4a:a7:98: c5:3d:10:d6:fa:c9:ef:99:2f:71:0a:36:0e:03:76: 17:c5:b7:3f:83:bd:5c:48:95:eb:73:6f:92:2a:e8: 11:d1:04:09:15:c4:f8:49:45:cf:fb:f1:5c:56:24: 01:7d:bd:8d:f5:65:83:7a:f8:a4:91:e5:db:db:3e: 03:2d:7e:09:7d:0a:9f:dc:13:5b:a1:98:bd:b2:23: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:13:38:A0:F3:40:E7:35:7C:82:90:45:5F:09:2F:FE:36:BD:16:24 X509v3 Authority Key Identifier: keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/1RM4oPNA5zV8gpBFXwkv_ja9FiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.172.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:7c:a2:bf:48:d6:b5:b0:db:22:e7:4f:db:33:8c:0b:02:bc: f0:e5:be:2c:4c:42:77:fd:a1:0c:58:42:87:35:0a:1a:4d:29: bc:9e:87:a7:54:94:64:44:21:24:1b:c4:ef:a5:36:1d:91:99: ae:f4:84:39:5f:1d:4a:7a:9e:43:78:1a:c5:c6:0c:e0:77:e2: d9:26:84:65:de:2b:75:9e:33:db:8a:40:21:44:f1:50:da:ac: 02:c3:be:dd:37:c1:d9:73:f0:df:46:56:34:13:78:b7:b0:ab: e5:89:e8:06:49:dd:e4:56:2e:20:38:12:ba:e0:bb:e5:1d:ff: 24:3d:e1:5f:d8:62:12:03:57:f7:14:78:52:d1:f6:91:2b:cc: 8d:be:c5:4e:4b:e3:af:ed:9c:23:14:93:9d:0e:56:a0:76:18: 1b:66:47:76:eb:66:1f:e0:54:df:43:89:9e:d9:3b:9d:6d:dc: 34:06:ff:f5:69:9d:c5:45:73:d9:92:7e:b2:69:8b:3b:82:01: e8:3b:e4:ce:5e:7e:fd:ba:a9:74:4f:cb:76:81:48:08:32:36: c6:5b:a4:c9:49:65:f1:e3:f8:47:13:54:92:bb:4e:8c:65:3d: 8b:ef:ac:40:7a:08:f0:73:10:3d:37:0f:40:e5:cc:b7:20:5d: 40:01:28:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nm/Xfivvdnj7UC1nX0kWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZDg4MGU4ODcwNzdmYWQ4MmI3NGM5OTgwMTBmYTliMjUz ZTBlYTgwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTEzMzhhMGYzNDBlNzM1N2M4MjkwNDU1ZjA5MmZmZTM2YmQxNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOZdbxTCA+Wjf4VlSX0wY+phB0vf mFTfRqLuq3DqctM0IxZJlD12FWOTGwxASxKR9xx5kQ56jvECGhUq0hKf1NcHB2sh xjZ1KxEF8Y8oMXSQixmC6p9sP5UrsV/ibr623IO8d8QDbJsbB4xfMLAQMfusavwN eKZZfoCuXl1+ZrCS2Svsa67Bg/WD52AUw4zvj5Jpx1ezLMUo7D11kc2z2yfwF+nW 0P8/QqDaIsyCM2pKp5jFPRDW+snvmS9xCjYOA3YXxbc/g71cSJXrc2+SKugR0QQJ FcT4SUXP+/FcViQBfb2N9WWDevikkeXb2z4DLX4JfQqf3BNboZi9siNHRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUTOKDzQOc1fIKQRV8JL/42vRYkMB8GA1UdIwQY MBaAFOnYgOiHB3+tgrdMmYAQ+pslPg6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYt ZmFjZjQ4NTg2MjQ5LzEvMVJNNG9QTkE1elY4Z3BCRlh3a3ZfamE5RmlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYtZmFjZjQ4NTg2MjQ5 LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsmsMA0G CSqGSIb3DQEBCwUAA4IBAQBsfKK/SNa1sNsi50/bM4wLArzw5b4sTEJ3/aEMWEKH NQoaTSm8noenVJRkRCEkG8TvpTYdkZmu9IQ5Xx1Kep5DeBrFxgzgd+LZJoRl3it1 njPbikAhRPFQ2qwCw77dN8HZc/DfRlY0E3i3sKvliegGSd3kVi4gOBK64LvlHf8k PeFf2GISA1f3FHhS0faRK8yNvsVOS+Ov7ZwjFJOdDlagdhgbZkd262Yf4FTfQ4me 2Tudbdw0Bv/1aZ3FRXPZkn6yaYs7ggHoO+TOXn79uql0T8t2gUgIMjbGW6TJSWXx 4/hHE1SSu06MZT2L76xAegjwcxA9Nw9A5cy3IF1AASgN -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:49 2026 by rpki-client