This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/00K95uzAVC-As-Iyho8vnUOQDZ8.roa File: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (raw, json) Hash identifier: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg= Subject key identifier: D3:42:BD:E6:EC:C0:54:2F:80:B3:E2:32:86:8F:2F:9D:43:90:0D:9F Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Certificate serial: 019B7C80A552A9AF6BB67757277D37E55912 Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/00K95uzAVC-As-Iyho8vnUOQDZ8.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15506 IP address blocks: 62.169.0.0/22 maxlen: 22 62.169.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a5:52:a9:af:6b:b6:77:57:27:7d:37:e5:59:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d342bde6ecc0542f80b3e232868f2f9d43900d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:d2:2c:65:7d:6b:24:22:d9:c9:d9:52:fe: e1:12:7c:d3:cb:df:1f:1d:46:2d:6a:36:45:f2:46: e9:24:2e:61:91:2d:16:12:e6:27:0a:3c:32:4c:ba: ad:0f:91:e1:45:06:69:b8:af:0a:c3:5e:24:ad:d5: da:f9:8e:fa:c0:7f:5d:6f:79:e1:c1:dc:1a:39:bc: a2:33:ca:c0:52:2d:00:71:3f:f2:43:2a:14:90:98: b4:ee:f7:94:a7:17:02:9b:d8:b6:e1:c2:48:e6:ac: 23:34:76:d9:70:f9:a6:9f:b6:6f:22:76:db:ef:05: 2a:52:59:b9:90:94:b3:a8:14:8b:4c:58:42:3b:59: 66:f3:19:ff:2f:40:48:54:34:b6:eb:78:b3:dd:eb: 3f:39:93:0d:2a:d0:72:60:22:cc:0c:9d:9b:7f:27: 0d:f6:4e:fa:68:26:50:b0:be:84:4c:72:49:ee:1a: 5f:f9:e5:54:50:ec:44:f1:dd:56:02:a7:32:cf:65: 17:74:4f:c6:87:97:5f:e5:c1:b8:c2:d1:03:32:e4: 26:42:90:d1:8e:80:06:16:20:9a:7c:b3:fb:33:08: 38:bb:dc:c2:ec:50:d7:6f:06:4c:5c:24:97:38:53: c1:d3:a9:f1:f5:76:48:18:8e:d4:9b:86:ef:05:c1: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:42:BD:E6:EC:C0:54:2F:80:B3:E2:32:86:8F:2F:9D:43:90:0D:9F X509v3 Authority Key Identifier: keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/00K95uzAVC-As-Iyho8vnUOQDZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.0.0/21 Signature Algorithm: sha256WithRSAEncryption 07:ae:78:26:41:6a:af:a6:f9:d7:81:ba:9f:ca:7b:03:6c:ec: 2e:7b:58:75:43:cb:8d:bd:f8:2b:a9:2f:68:b5:d2:3e:60:e0: 0b:a9:8c:19:5e:c3:ce:31:83:27:03:ab:d4:37:fa:72:b5:ca: 22:5c:66:4e:fa:04:48:e5:46:8b:6a:be:44:a4:64:01:14:87: f2:55:c3:fd:3d:5e:59:2b:21:a5:f1:15:d4:88:ce:53:59:b1: 96:2f:95:e0:b0:7a:ee:31:18:c6:51:a4:b5:fb:85:67:8b:36: 69:72:18:2f:12:88:23:1b:36:25:8c:c5:91:3f:7a:90:af:d7: 2d:b3:00:28:93:5d:b7:cb:49:90:eb:5e:61:63:3e:98:fa:e3: 54:1b:08:1e:05:75:ba:36:53:31:e7:59:79:12:21:0b:36:36: dc:93:75:69:97:7d:95:e9:bc:b9:a3:a0:ea:71:5f:4b:80:52: 47:b9:50:bd:20:59:0d:a7:ac:a1:49:ab:04:46:00:c1:65:2b: 00:73:6d:d8:f5:bf:33:c3:32:5c:e1:65:c3:b0:2e:54:4f:48: 22:22:13:25:43:98:d0:39:03:51:02:b3:17:dd:84:56:c7:64: c7:cb:01:39:28:27:26:69:bc:00:ac:3f:49:90:9f:6c:9d:9a: 63:61:89:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKVSqa9rtndXJ3035VkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2VlZTJkNmQ3YTUwYzkyNDk5ZGExYTIxZjJhYmI3YTJh Nzc0YzgwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzQyYmRlNmVjYzA1NDJmODBiM2UyMzI4NjhmMmY5ZDQzOTAwZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsnSLGV9ayQi2cnZUv7hEnzTy98f HUYtajZF8kbpJC5hkS0WEuYnCjwyTLqtD5HhRQZpuK8Kw14krdXa+Y76wH9db3nh wdwaObyiM8rAUi0AcT/yQyoUkJi07veUpxcCm9i24cJI5qwjNHbZcPmmn7ZvInbb 7wUqUlm5kJSzqBSLTFhCO1lm8xn/L0BIVDS263iz3es/OZMNKtByYCLMDJ2bfycN 9k76aCZQsL6ETHJJ7hpf+eVUUOxE8d1WAqcyz2UXdE/Gh5df5cG4wtEDMuQmQpDR joAGFiCafLP7Mwg4u9zC7FDXbwZMXCSXOFPB06nx9XZIGI7Um4bvBcEuGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNCvebswFQvgLPiMoaPL51DkA2fMB8GA1UdIwQY MBaAFFLO7i1telDJJJnaGiHyq7eip3TIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUt MGMwMjBhN2U0YTQ0LzEvMDBLOTV1ekFWQy1Bcy1JeWhvOHZuVU9RRFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUtMGMwMjBhN2U0YTQ0 LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPqkAMA0G CSqGSIb3DQEBCwUAA4IBAQAHrngmQWqvpvnXgbqfynsDbOwue1h1Q8uNvfgrqS9o tdI+YOALqYwZXsPOMYMnA6vUN/pytcoiXGZO+gRI5UaLar5EpGQBFIfyVcP9PV5Z KyGl8RXUiM5TWbGWL5XgsHruMRjGUaS1+4VnizZpchgvEogjGzYljMWRP3qQr9ct swAok123y0mQ615hYz6Y+uNUGwgeBXW6NlMx51l5EiELNjbck3Vpl32V6by5o6Dq cV9LgFJHuVC9IFkNp6yhSasERgDBZSsAc23Y9b8zwzJc4WXDsC5UT0giIhMlQ5jQ OQNRArMX3YRWx2THywE5KCcmabwArD9JkJ9snZpjYYnj -----END CERTIFICATE-----Generated at Mon Jan 26 08:08:01 2026 by rpki-client