This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j299wif7krujI7wEzjiO0jEs2dE.roa File: j299wif7krujI7wEzjiO0jEs2dE.roa (raw, json) Hash identifier: +V+le6rzXzAoWFnAG/0dE+ssJ9bx8pJNj83c+ArxJrk= Subject key identifier: 8F:6F:7D:C2:27:FB:92:BB:A3:23:BC:04:CE:38:8E:D2:31:2C:D9:D1 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019A7C06E3C4C6640A8A46CC0EF3ECFB77B5 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j299wif7krujI7wEzjiO0jEs2dE.roa Signing time: Thu 13 Nov 2025 07:03:37 +0000 ROA not before: Thu 13 Nov 2025 07:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203410 IP address blocks: 62.105.206.0/24 maxlen: 24 62.105.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:06:e3:c4:c6:64:0a:8a:46:cc:0e:f3:ec:fb:77:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 13 07:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f6f7dc227fb92bba323bc04ce388ed2312cd9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:ef:ec:41:6c:e8:06:fd:2d:69:1f:28:55: 95:a5:50:e5:ba:27:05:ec:1b:b2:b8:2c:f2:ec:94: 93:ed:2b:2b:4c:00:4a:83:20:38:48:0e:07:e7:e9: 46:1a:47:a0:1a:6e:74:81:5d:bf:82:2b:98:e2:59: 8e:7e:5c:45:51:4d:92:c8:f5:4c:f0:46:65:43:4f: e6:cd:3b:1b:1b:60:d8:64:bf:2b:fa:33:d0:b3:0c: 69:7b:33:84:37:68:b4:37:3e:14:01:80:61:5f:c0: de:3e:5b:13:bf:a0:15:4c:d6:ed:a4:5a:ff:b4:f2: 70:bf:ab:e9:c8:35:4e:86:29:70:a7:3b:3a:65:08: 49:e5:c1:9d:c3:6a:86:d3:7f:ec:e2:d7:15:6e:e8: db:12:14:de:ea:0b:c0:b9:a2:59:cc:cb:12:0a:6b: 55:5b:f5:d7:c1:57:13:c7:35:c6:d0:49:c9:47:12: 56:51:9a:ef:8d:b9:09:df:1a:ce:10:55:71:ff:60: e6:e0:53:17:c2:df:02:51:6e:6a:75:37:9d:41:5c: a2:81:78:16:48:a6:10:42:6d:69:b8:79:bb:88:1f: d3:02:94:89:76:26:be:a1:31:a7:f3:f2:7a:95:0d: b2:bd:af:42:11:3f:be:67:cd:70:07:b9:b0:96:e5: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:7D:C2:27:FB:92:BB:A3:23:BC:04:CE:38:8E:D2:31:2C:D9:D1 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j299wif7krujI7wEzjiO0jEs2dE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.105.206.0/23 Signature Algorithm: sha256WithRSAEncryption 96:54:c9:d9:28:16:89:21:14:ab:0b:e2:62:5f:de:4f:f4:9a: 3a:12:b3:d6:f8:09:45:cc:57:98:71:9d:f0:d8:e7:a0:8e:a3: e7:8b:41:a1:6e:fd:85:d0:b0:bb:54:c4:13:13:de:61:67:6c: 29:9b:d2:a8:cb:7a:10:e3:a3:74:94:e2:c3:86:5a:52:58:d9: 0c:6a:c3:41:50:b4:7e:5e:f8:32:ae:bc:ce:95:e7:88:88:58: b6:ff:85:fa:11:3d:ac:f6:2f:57:45:7c:8d:4d:18:d6:34:bf: 09:93:60:74:ea:ca:bd:2e:11:d5:fe:cb:fd:d9:8e:45:e5:94: 9f:8b:19:7d:21:72:09:cb:d7:f8:b1:2e:1d:fa:50:3a:4a:5a: de:21:53:1d:54:f5:42:ca:92:f5:b5:52:dd:b8:67:b4:6c:65: ad:b1:d1:68:00:03:f6:ce:12:6a:4d:e5:9f:e0:12:86:1b:e9: 13:59:b9:39:b7:6b:e6:f9:88:dd:75:2a:03:05:88:a5:ae:24: 98:8a:94:ea:41:d2:7d:f3:99:35:0d:be:21:39:e9:22:f8:90: 51:dd:40:ce:14:14:7f:23:67:0f:38:c2:6c:f3:cc:3a:0b:dd: 66:8c:b0:ae:63:bf:39:87:94:79:28:ab:62:5c:3a:aa:8e:36: 8a:66:fd:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp8BuPExmQKikbMDvPs+3e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTEzMDcwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjZmN2RjMjI3ZmI5MmJiYTMyM2JjMDRjZTM4OGVkMjMxMmNkOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/vv7EFs6Ab9LWkfKFWVpVDluicF 7BuyuCzy7JST7SsrTABKgyA4SA4H5+lGGkegGm50gV2/giuY4lmOflxFUU2SyPVM 8EZlQ0/mzTsbG2DYZL8r+jPQswxpezOEN2i0Nz4UAYBhX8DePlsTv6AVTNbtpFr/ tPJwv6vpyDVOhilwpzs6ZQhJ5cGdw2qG03/s4tcVbujbEhTe6gvAuaJZzMsSCmtV W/XXwVcTxzXG0EnJRxJWUZrvjbkJ3xrOEFVx/2Dm4FMXwt8CUW5qdTedQVyigXgW SKYQQm1puHm7iB/TApSJdia+oTGn8/J6lQ2yva9CET++Z81wB7mwluUitQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9vfcIn+5K7oyO8BM44jtIxLNnRMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvajI5OXdpZjdrcnVqSTd3RXpqaU8wakVzMmRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPmnOMA0G CSqGSIb3DQEBCwUAA4IBAQCWVMnZKBaJIRSrC+JiX95P9Jo6ErPW+AlFzFeYcZ3w 2OegjqPni0Ghbv2F0LC7VMQTE95hZ2wpm9Koy3oQ46N0lOLDhlpSWNkMasNBULR+ XvgyrrzOleeIiFi2/4X6ET2s9i9XRXyNTRjWNL8Jk2B06sq9LhHV/sv92Y5F5ZSf ixl9IXIJy9f4sS4d+lA6SlreIVMdVPVCypL1tVLduGe0bGWtsdFoAAP2zhJqTeWf 4BKGG+kTWbk5t2vm+YjddSoDBYilriSYipTqQdJ985k1Db4hOeki+JBR3UDOFBR/ I2cPOMJs88w6C91mjLCuY785h5R5KKtiXDqqjjaKZv1A -----END CERTIFICATE-----Generated at Sat Dec 6 15:05:47 2025 by rpki-client