This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ejLt9nzW9LsQJwUCo4ZdJMGvdnk.roa File: ejLt9nzW9LsQJwUCo4ZdJMGvdnk.roa (raw, json) Hash identifier: xcHTsrnXTEQ0UIrCFfVELUAC48mnn+l6Rkf+wvVVq+8= Subject key identifier: 7A:32:ED:F6:7C:D6:F4:BB:10:27:05:02:A3:86:5D:24:C1:AF:76:79 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14BF352D3A76C23F5D23A5885D20D2 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ejLt9nzW9LsQJwUCo4ZdJMGvdnk.roa Signing time: Fri 02 Jan 2026 14:20:24 +0000 ROA not before: Fri 02 Jan 2026 14:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203410 IP address blocks: 62.105.206.0/24 maxlen: 24 62.105.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:bf:35:2d:3a:76:c2:3f:5d:23:a5:88:5d:20:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a32edf67cd6f4bb10270502a3865d24c1af7679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:28:19:a7:99:25:3d:a1:be:81:6b:06:c4:34: ff:52:d7:d5:69:68:6c:ba:82:a5:ac:1b:28:bf:96: a7:b8:c1:5c:ef:32:df:76:97:e3:e8:ae:42:ed:ba: f2:30:c1:09:f2:8b:ba:4a:82:a2:07:b0:74:92:bd: 24:cb:bd:19:a1:47:c4:d6:4b:19:13:cc:78:b1:6a: 9f:72:c6:62:5d:69:ea:81:24:10:90:de:af:0d:ab: 22:50:d9:11:6d:00:1a:a5:fc:5e:5f:8a:59:be:c8: 36:bd:41:6e:5a:c3:19:26:46:75:aa:ac:a4:eb:2b: 54:30:44:44:d4:e5:7a:3e:68:38:e9:46:8b:99:7e: c1:9d:5d:14:4a:00:b8:14:59:7f:29:e3:e3:49:11: 04:6f:3b:f7:e9:6c:14:5f:41:cf:f3:87:1a:37:ec: 40:32:fb:08:cd:8c:37:81:bd:9a:50:53:23:45:cd: 53:ba:51:b1:00:54:15:ea:48:89:df:b9:c4:8a:b4: 7c:47:ae:80:3a:9a:c8:21:de:74:d4:f5:f0:f3:2b: 81:97:75:aa:4d:8d:5c:a1:1c:82:06:0d:86:67:dd: 1f:02:35:5e:ae:5a:10:95:e0:68:9f:63:28:3a:a5: 6e:8f:52:2f:d0:b9:e4:bd:90:2c:75:32:62:7d:77: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:32:ED:F6:7C:D6:F4:BB:10:27:05:02:A3:86:5D:24:C1:AF:76:79 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ejLt9nzW9LsQJwUCo4ZdJMGvdnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.105.206.0/23 Signature Algorithm: sha256WithRSAEncryption bd:5c:e0:da:d0:44:d7:86:c2:e4:a6:6b:e5:87:22:32:6f:42: ef:c4:e9:26:5d:02:e1:fe:9e:0b:f4:a8:66:68:de:f2:61:51: e3:cf:ef:ba:ee:5b:12:4e:5f:27:cd:1c:ac:3c:d2:c8:73:0f: ed:de:bd:67:45:f9:e3:5d:aa:cc:e8:c1:2c:01:4a:e0:2a:08: 71:85:df:29:c9:41:01:c2:02:b7:b6:fd:a2:42:f7:3f:fe:21: df:56:ac:14:25:b6:b8:f8:6d:e4:71:eb:a8:6c:4f:63:e1:2c: 8f:9d:c4:12:7c:bf:da:0e:4e:eb:1d:00:4e:5a:a5:2c:d7:4f: 6b:20:7c:41:8c:a1:dd:2a:ba:cf:d4:c3:e0:b8:fb:79:d8:d3: 23:a1:a9:32:af:b4:03:b0:fc:20:7d:f6:54:1a:ac:8b:7b:af: 16:e8:c4:1c:b0:f5:19:65:df:27:30:e5:25:19:dc:b5:3b:07: 7c:6b:90:ab:54:da:82:05:fe:e6:e6:56:df:dc:97:19:27:fc: 19:f1:58:28:58:60:16:43:b0:ba:be:7f:f1:7e:89:53:a3:f2: 60:68:d1:4e:94:16:d2:c5:26:c1:6e:3c:38:69:65:36:f7:e0: cb:14:1d:54:61:8a:c7:0a:28:fe:dd:a5:ab:4c:54:53:69:57: 7e:fc:c2:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FL81LTp2wj9dI6WIXSDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTMyZWRmNjdjZDZmNGJiMTAyNzA1MDJhMzg2NWQyNGMxYWY3Njc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ygZp5klPaG+gWsGxDT/UtfVaWhs uoKlrBsov5anuMFc7zLfdpfj6K5C7bryMMEJ8ou6SoKiB7B0kr0ky70ZoUfE1ksZ E8x4sWqfcsZiXWnqgSQQkN6vDasiUNkRbQAapfxeX4pZvsg2vUFuWsMZJkZ1qqyk 6ytUMERE1OV6Pmg46UaLmX7BnV0USgC4FFl/KePjSREEbzv36WwUX0HP84caN+xA MvsIzYw3gb2aUFMjRc1TulGxAFQV6kiJ37nEirR8R66AOprIId501PXw8yuBl3Wq TY1coRyCBg2GZ90fAjVerloQleBon2MoOqVuj1Iv0LnkvZAsdTJifXf09QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoy7fZ81vS7ECcFAqOGXSTBr3Z5MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvZWpMdDluelc5THNRSndVQ280WmRKTUd2ZG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPmnOMA0G CSqGSIb3DQEBCwUAA4IBAQC9XODa0ETXhsLkpmvlhyIyb0LvxOkmXQLh/p4L9Khm aN7yYVHjz++67lsSTl8nzRysPNLIcw/t3r1nRfnjXarM6MEsAUrgKghxhd8pyUEB wgK3tv2iQvc//iHfVqwUJba4+G3kceuobE9j4SyPncQSfL/aDk7rHQBOWqUs109r IHxBjKHdKrrP1MPguPt52NMjoakyr7QDsPwgffZUGqyLe68W6MQcsPUZZd8nMOUl Gdy1Owd8a5CrVNqCBf7m5lbf3JcZJ/wZ8VgoWGAWQ7C6vn/xfolTo/JgaNFOlBbS xSbBbjw4aWU29+DLFB1UYYrHCij+3aWrTFRTaVd+/MIB -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:14 2026 by rpki-client