This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2QJQvpS1rsjwa05jqwsV7VBdySA.roa File: 2QJQvpS1rsjwa05jqwsV7VBdySA.roa (raw, json) Hash identifier: L0UIlnos8I78aLYHv5iCbdVR1se4KWCzGaX4s6nOzmQ= Subject key identifier: D9:02:50:BE:94:B5:AE:C8:F0:6B:4E:63:AB:0B:15:ED:50:5D:C9:20 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A1F7502DD718415C4BA7F38E90B3 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2QJQvpS1rsjwa05jqwsV7VBdySA.roa Signing time: Fri 02 Jan 2026 14:20:17 +0000 ROA not before: Fri 02 Jan 2026 14:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 62.192.120.0/23 maxlen: 23 62.192.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a1:f7:50:2d:d7:18:41:5c:4b:a7:f3:8e:90:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d90250be94b5aec8f06b4e63ab0b15ed505dc920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:24:7e:da:d4:5d:84:23:0c:03:6c:4c:02: 88:d2:11:a0:09:46:cf:4f:59:b9:38:3b:97:2a:6a: 3f:ab:aa:28:29:26:9c:12:e2:12:ff:3a:e5:d2:88: a4:19:43:c9:9e:d4:93:12:94:69:73:04:e9:72:08: 03:47:82:78:10:02:6f:e4:19:e7:75:cb:40:42:b9: 47:6e:b6:a4:01:4d:a4:b5:b4:e7:3d:99:ae:77:ab: d0:81:03:f9:d9:b9:df:02:d3:88:87:b0:a2:41:1f: 2e:74:0a:e6:ec:17:1d:8d:69:d6:ae:7f:5d:84:7e: 2d:9a:e8:db:71:cd:58:71:47:5f:7c:90:8e:cc:d0: 73:24:e1:d4:34:6d:94:b8:d2:98:b5:d7:72:4b:ce: 05:cf:3a:31:71:e6:c1:13:9d:f5:f3:8c:9d:30:0f: 09:4b:ae:22:7f:2f:a6:84:13:c0:f3:93:b7:27:72: aa:51:28:92:3a:ea:14:5d:eb:86:b3:07:d9:23:05: 22:6e:73:30:fd:65:af:71:8f:d4:4a:d3:ab:fd:80: 7e:df:c0:61:a8:e8:ba:24:9f:1d:54:ad:df:3e:0c: e1:a4:60:95:d1:58:61:79:0a:43:ec:e5:47:58:91: 19:33:d9:6b:c4:80:5d:3e:7f:68:70:85:0b:99:26: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:02:50:BE:94:B5:AE:C8:F0:6B:4E:63:AB:0B:15:ED:50:5D:C9:20 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2QJQvpS1rsjwa05jqwsV7VBdySA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.120.0/22 Signature Algorithm: sha256WithRSAEncryption aa:77:73:e3:17:42:03:c4:68:fd:97:2b:ad:e6:2a:40:85:48: 1c:1c:88:8e:20:a4:50:af:ab:9c:3f:d5:e5:87:66:1f:e1:6c: 1a:e3:0f:1a:87:42:70:7e:4a:25:b5:e9:e2:5c:9e:97:72:4d: 75:83:1b:c4:cd:9c:35:54:25:b3:5f:f1:c9:7b:f8:e0:a4:38: 20:b5:0a:17:6a:3a:a4:ce:4c:ec:3c:fd:b8:68:14:78:22:1c: d0:88:78:ce:17:d1:41:8f:86:09:95:f0:3a:89:2c:03:77:6a: b3:60:0a:8a:a3:fa:e8:24:e0:8d:24:ff:77:a5:a5:50:e0:41: 8f:27:58:41:5c:35:d6:39:3f:b7:52:0b:c4:ea:fa:74:c3:ce: 5e:7d:68:60:6d:e5:19:eb:85:63:7d:a7:b8:49:3b:b5:af:5f: 1d:ae:3a:70:22:9b:40:6b:8d:e5:85:0d:15:05:97:34:f6:29: 41:e9:47:83:e4:48:60:a4:3f:4a:3d:2c:29:35:a3:bf:68:e7: b8:8a:7b:40:e5:24:af:b8:83:5b:b0:ac:59:07:7e:11:cc:2b: 38:a6:d7:1a:30:e8:c7:9b:bc:fa:ae:d4:51:ea:bf:88:3a:f0: 20:6e:77:0a:c9:68:4b:52:5c:c4:da:1a:4c:d5:c5:ac:61:b5: 9d:97:73:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FKH3UC3XGEFcS6fzjpCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTAyNTBiZTk0YjVhZWM4ZjA2YjRlNjNhYjBiMTVlZDUwNWRjOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ekkftrUXYQjDANsTAKI0hGgCUbP T1m5ODuXKmo/q6ooKSacEuIS/zrl0oikGUPJntSTEpRpcwTpcggDR4J4EAJv5Bnn dctAQrlHbrakAU2ktbTnPZmud6vQgQP52bnfAtOIh7CiQR8udArm7BcdjWnWrn9d hH4tmujbcc1YcUdffJCOzNBzJOHUNG2UuNKYtddyS84FzzoxcebBE53184ydMA8J S64ify+mhBPA85O3J3KqUSiSOuoUXeuGswfZIwUibnMw/WWvcY/UStOr/YB+38Bh qOi6JJ8dVK3fPgzhpGCV0VhheQpD7OVHWJEZM9lrxIBdPn9ocIULmSZwewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNkCUL6Uta7I8GtOY6sLFe1QXckgMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvMlFKUXZwUzFyc2p3YTA1anF3c1Y3VkJkeVNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPsB4MA0G CSqGSIb3DQEBCwUAA4IBAQCqd3PjF0IDxGj9lyut5ipAhUgcHIiOIKRQr6ucP9Xl h2Yf4Wwa4w8ah0JwfkolteniXJ6Xck11gxvEzZw1VCWzX/HJe/jgpDggtQoXajqk zkzsPP24aBR4IhzQiHjOF9FBj4YJlfA6iSwDd2qzYAqKo/roJOCNJP93paVQ4EGP J1hBXDXWOT+3UgvE6vp0w85efWhgbeUZ64Vjfae4STu1r18drjpwIptAa43lhQ0V BZc09ilB6UeD5EhgpD9KPSwpNaO/aOe4intA5SSvuINbsKxZB34RzCs4ptcaMOjH m7z6rtRR6r+IOvAgbncKyWhLUlzE2hpM1cWsYbWdl3Ph -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:15 2026 by rpki-client