This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/vBppG8Mg7oRHsrhyiYDXoiSqGf4.roa File: vBppG8Mg7oRHsrhyiYDXoiSqGf4.roa (raw, json) Hash identifier: 72XGmJFSDv7XgHO+CWKYzJO2val05ol+esDyJnu5oeI= Subject key identifier: BC:1A:69:1B:C3:20:EE:84:47:B2:B8:72:89:80:D7:A2:24:AA:19:FE Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14BCE177039C9BC81DB24C99EA748B Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/vBppG8Mg7oRHsrhyiYDXoiSqGf4.roa Signing time: Fri 02 Jan 2026 14:20:24 +0000 ROA not before: Fri 02 Jan 2026 14:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199190 IP address blocks: 62.50.148.0/24 maxlen: 24 62.50.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:bc:e1:77:03:9c:9b:c8:1d:b2:4c:99:ea:74:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc1a691bc320ee8447b2b8728980d7a224aa19fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:15:38:f0:04:04:3d:25:e2:e2:04:b3:66: 3f:82:c7:27:35:0c:18:54:66:c7:7d:be:1f:02:8d: 6c:a4:52:73:6d:81:c1:c4:39:75:31:d0:5f:a1:cb: c0:72:07:89:99:11:3b:c2:f7:e3:4b:62:e3:d3:38: 9c:73:48:8d:74:15:f4:66:f3:c8:f4:80:e2:33:60: e6:6d:e3:f0:30:89:b1:3d:95:f6:ba:af:1d:d0:16: e4:c5:1c:6a:6d:ad:b1:0c:1f:d6:4b:bf:08:14:43: d1:e7:ef:89:dd:4b:65:19:e4:db:f5:b3:b4:a1:12: df:2a:57:e0:3d:4a:c1:78:89:ac:52:2a:84:d6:6c: 14:13:57:69:0a:14:36:0e:d2:b6:ff:b7:1e:ca:36: a1:cd:08:e8:cd:2b:21:05:fd:2b:89:2c:f9:0d:bd: 47:6f:36:30:15:fe:c1:73:fe:3b:96:07:d4:ff:ae: cf:f9:87:9e:bf:0d:9c:1d:c5:bd:f5:18:1d:04:78: 62:45:b7:4e:8c:79:21:a2:8c:d2:57:d2:0d:ee:f1: 8c:57:61:18:73:8c:f7:e4:a4:fe:a7:8b:7a:8f:b2: 3e:6c:94:38:26:a9:9c:c8:1e:4d:63:d2:43:15:d2: 0f:f8:95:12:ed:8e:92:d2:f5:b6:50:86:bc:16:e2: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1A:69:1B:C3:20:EE:84:47:B2:B8:72:89:80:D7:A2:24:AA:19:FE X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/vBppG8Mg7oRHsrhyiYDXoiSqGf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.50.148.0/23 Signature Algorithm: sha256WithRSAEncryption 66:1a:10:5d:4b:33:35:58:f5:4b:25:9b:f1:13:25:c2:4f:a0: 86:35:97:3a:07:10:7f:87:80:6a:cc:86:c9:27:5f:92:c0:9c: 89:c5:a3:f3:e2:3f:cc:9a:0b:36:a6:01:a5:cb:7f:1e:57:1f: e1:ad:f1:6a:b6:ef:ec:56:c9:e8:50:8a:52:42:20:bb:f2:26: d3:fb:2f:6b:fb:a1:d1:7c:21:49:0f:34:a9:c0:da:f1:6a:71: 82:dc:19:80:1f:0d:b0:bf:ae:48:ed:09:d8:dd:fa:c1:16:87: 44:7e:f4:ca:21:05:8a:02:5f:82:c0:ec:24:da:0b:79:94:ec: c1:1e:7c:51:e4:a8:be:24:b9:87:dd:62:ad:af:86:94:94:4d: 5c:e4:97:99:7a:59:70:c6:07:99:4d:88:1e:b2:7b:b4:88:f4: ee:b4:60:54:8a:82:c9:d8:c3:f9:e7:47:c2:52:49:5c:ea:55: 0c:77:75:42:f1:49:27:26:7b:e9:e0:68:7d:92:20:ef:26:bb: 07:08:a7:a0:fe:e9:1b:9c:7f:ff:78:11:55:13:dd:68:33:65: 88:f4:8b:b2:70:12:3d:9d:43:d5:6d:80:3c:01:74:67:c8:f5: 0a:44:15:49:1c:cf:e0:a8:5c:19:ef:0b:76:c4:9c:89:4f:7c: c3:2b:27:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FLzhdwOcm8gdskyZ6nSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzFhNjkxYmMzMjBlZTg0NDdiMmI4NzI4OTgwZDdhMjI0YWExOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojUVOPAEBD0l4uIEs2Y/gscnNQwY VGbHfb4fAo1spFJzbYHBxDl1MdBfocvAcgeJmRE7wvfjS2Lj0zicc0iNdBX0ZvPI 9IDiM2DmbePwMImxPZX2uq8d0BbkxRxqba2xDB/WS78IFEPR5++J3UtlGeTb9bO0 oRLfKlfgPUrBeImsUiqE1mwUE1dpChQ2DtK2/7ceyjahzQjozSshBf0riSz5Db1H bzYwFf7Bc/47lgfU/67P+Yeevw2cHcW99RgdBHhiRbdOjHkhoozSV9IN7vGMV2EY c4z35KT+p4t6j7I+bJQ4JqmcyB5NY9JDFdIP+JUS7Y6S0vW2UIa8FuIV2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwaaRvDIO6ER7K4comA16Ikqhn+MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvdkJwcEc4TWc3b1JIc3JoeWlZRFhvaVNxR2Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPjKUMA0G CSqGSIb3DQEBCwUAA4IBAQBmGhBdSzM1WPVLJZvxEyXCT6CGNZc6BxB/h4BqzIbJ J1+SwJyJxaPz4j/Mmgs2pgGly38eVx/hrfFqtu/sVsnoUIpSQiC78ibT+y9r+6HR fCFJDzSpwNrxanGC3BmAHw2wv65I7QnY3frBFodEfvTKIQWKAl+CwOwk2gt5lOzB HnxR5Ki+JLmH3WKtr4aUlE1c5JeZellwxgeZTYgesnu0iPTutGBUioLJ2MP550fC Uklc6lUMd3VC8UknJnvp4Gh9kiDvJrsHCKeg/ukbnH//eBFVE91oM2WI9IuycBI9 nUPVbYA8AXRnyPUKRBVJHM/gqFwZ7wt2xJyJT3zDKydR -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:03 2026 by rpki-client