This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DVsyGqMLtA1m9wPCCqf3m9zQvl8.roa File: DVsyGqMLtA1m9wPCCqf3m9zQvl8.roa (raw, json) Hash identifier: p6AH7frSc5bY/KD85CWNY+VqeQiBIXvzpzrEp1bOjhY= Subject key identifier: 0D:5B:32:1A:A3:0B:B4:0D:66:F7:03:C2:0A:A7:F7:9B:DC:D0:BE:5F Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A525526F3D4080C9FC4B8A5CC769 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DVsyGqMLtA1m9wPCCqf3m9zQvl8.roa Signing time: Fri 02 Jan 2026 14:20:17 +0000 ROA not before: Fri 02 Jan 2026 14:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14616 IP address blocks: 62.41.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a5:25:52:6f:3d:40:80:c9:fc:4b:8a:5c:c7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d5b321aa30bb40d66f703c20aa7f79bdcd0be5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:9f:54:d8:b1:9a:29:41:d2:b7:88:78:ea: 59:dd:c4:b5:59:fc:e3:21:6d:37:fe:2d:ad:cf:c5: d9:35:3a:7a:cd:78:50:f2:bf:62:72:f0:33:df:dc: 02:02:20:77:15:16:b0:fa:2f:1a:42:57:90:5a:36: 16:d6:2f:5d:f9:e6:d8:5b:a7:7f:e5:69:6f:b7:40: 45:07:cb:7c:03:31:0d:15:ca:5a:d4:c4:a1:ea:fa: 80:56:e7:c3:ac:23:53:22:44:a9:e6:3c:4e:af:6e: 3e:80:8f:40:d4:1d:9a:ee:a9:14:76:88:e7:08:22: 3b:5d:4e:7b:32:f3:9b:07:1c:f8:c7:25:d3:d7:40: 62:2c:82:32:0e:49:26:7e:f5:05:de:e6:ca:bb:ea: 57:d4:65:b4:30:7d:6c:8f:77:55:9c:c1:3d:45:38: ba:bd:0d:29:c1:3b:a6:a7:56:91:e6:a6:55:b9:59: 6a:99:f6:91:43:77:c2:68:bc:a8:db:67:1f:4f:fd: 23:ea:e1:b9:5c:1b:20:d8:74:7f:6f:36:8e:cf:96: f4:9c:53:93:70:23:69:0c:f7:a2:26:cd:e7:57:2e: bc:42:13:2a:af:99:72:6d:01:e1:ca:65:d1:12:cc: 96:28:5f:22:20:02:3a:61:2a:fe:f0:38:dd:48:49: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:32:1A:A3:0B:B4:0D:66:F7:03:C2:0A:A7:F7:9B:DC:D0:BE:5F X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DVsyGqMLtA1m9wPCCqf3m9zQvl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.41.66.0/23 Signature Algorithm: sha256WithRSAEncryption a6:fe:c6:16:f0:fc:d0:f1:aa:42:c1:a8:94:ba:86:20:95:b6: 8f:3a:1c:cd:33:de:08:71:58:54:14:9e:c0:77:d6:a8:13:c5: c0:a5:f4:3d:be:b9:fc:5e:26:a6:2c:c0:f5:a8:c0:c1:67:90: a6:25:cb:ce:77:79:e4:e9:c8:2c:4a:25:65:61:6a:82:70:3c: e2:11:88:9c:16:00:c7:8b:7c:61:3f:33:bb:89:7a:82:09:d3: e1:d2:30:86:99:17:c7:11:00:df:a5:bb:b8:6e:4f:5f:ac:fe: 4c:5c:23:93:4d:c8:a4:b5:fc:e0:98:d8:ef:39:86:eb:13:97: 6c:bb:f1:64:4c:ff:b3:99:58:3b:15:ec:92:b8:5f:04:77:af: 7c:39:a5:b9:08:e8:29:55:17:a9:2d:34:ea:b9:32:b0:52:77: 28:26:33:d7:d1:eb:21:e7:26:9a:80:b2:bf:ce:cc:62:ab:c2: 12:42:dc:72:c5:21:46:4f:a4:28:58:b3:e0:a6:49:bd:87:51: fc:96:10:28:e1:2a:69:25:c9:68:5c:c0:a0:a9:54:94:ae:f8: ca:b4:59:33:9c:2e:e5:a1:ab:09:4d:6a:8b:16:e6:54:8c:a1: 78:4f:40:f1:c2:98:1d:8f:6e:8d:4c:1a:f6:dd:4d:d0:4e:cb: 8d:07:d2:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FKUlUm89QIDJ/EuKXMdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDViMzIxYWEzMGJiNDBkNjZmNzAzYzIwYWE3Zjc5YmRjZDBiZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtCfVNixmilB0reIeOpZ3cS1Wfzj IW03/i2tz8XZNTp6zXhQ8r9icvAz39wCAiB3FRaw+i8aQleQWjYW1i9d+ebYW6d/ 5Wlvt0BFB8t8AzENFcpa1MSh6vqAVufDrCNTIkSp5jxOr24+gI9A1B2a7qkUdojn CCI7XU57MvObBxz4xyXT10BiLIIyDkkmfvUF3ubKu+pX1GW0MH1sj3dVnME9RTi6 vQ0pwTump1aR5qZVuVlqmfaRQ3fCaLyo22cfT/0j6uG5XBsg2HR/bzaOz5b0nFOT cCNpDPeiJs3nVy68QhMqr5lybQHhymXREsyWKF8iIAI6YSr+8DjdSEm+5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1bMhqjC7QNZvcDwgqn95vc0L5fMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvRFZzeUdxTUx0QTFtOXdQQ0NxZjNtOXpRdmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPilCMA0G CSqGSIb3DQEBCwUAA4IBAQCm/sYW8PzQ8apCwaiUuoYglbaPOhzNM94IcVhUFJ7A d9aoE8XApfQ9vrn8XiamLMD1qMDBZ5CmJcvOd3nk6cgsSiVlYWqCcDziEYicFgDH i3xhPzO7iXqCCdPh0jCGmRfHEQDfpbu4bk9frP5MXCOTTciktfzgmNjvOYbrE5ds u/FkTP+zmVg7FeySuF8Ed698OaW5COgpVRepLTTquTKwUncoJjPX0esh5yaagLK/ zsxiq8ISQtxyxSFGT6QoWLPgpkm9h1H8lhAo4SppJcloXMCgqVSUrvjKtFkznC7l oasJTWqLFuZUjKF4T0Dxwpgdj26NTBr23U3QTsuNB9JF -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:13 2026 by rpki-client