This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/djk33VTAFS7Xg0krsRI1T_nFwPA.roa File: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (raw, json) Hash identifier: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28= Subject key identifier: 76:39:37:DD:54:C0:15:2E:D7:83:49:2B:B1:12:35:4F:F9:C5:C0:F0 Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd Certificate serial: 019B7C126CF4EC0CD061039AE1BEFF51C2A8 Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/djk33VTAFS7Xg0krsRI1T_nFwPA.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6903 IP address blocks: 62.113.86.0/24 maxlen: 24 62.113.89.0/24 maxlen: 24 62.113.90.0/24 maxlen: 24 62.113.95.0/24 maxlen: 24 62.113.120.0/21 maxlen: 21 62.113.124.0/22 maxlen: 22 195.2.64.0/23 maxlen: 23 195.2.68.0/23 maxlen: 23 195.2.72.0/24 maxlen: 24 195.2.77.0/24 maxlen: 24 195.2.82.0/23 maxlen: 23 195.2.87.0/24 maxlen: 24 195.2.88.0/22 maxlen: 22 195.2.94.0/23 maxlen: 23 213.189.192.0/24 maxlen: 24 213.189.196.0/23 maxlen: 23 213.189.198.0/24 maxlen: 24 213.189.200.0/24 maxlen: 24 213.189.207.0/24 maxlen: 24 213.189.208.0/23 maxlen: 23 213.189.211.0/24 maxlen: 24 213.189.212.0/23 maxlen: 23 213.189.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6c:f4:ec:0c:d0:61:03:9a:e1:be:ff:51:c2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=763937dd54c0152ed783492bb112354ff9c5c0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:56:67:ef:84:10:34:f1:cd:db:42:84:e2: 0c:59:9b:6d:30:73:f4:77:6a:ea:32:ca:6f:93:87: ae:78:36:f2:8c:40:39:a0:5d:27:a8:76:de:b5:34: 7c:70:0f:66:ed:4a:3c:93:13:f7:87:95:84:8e:2d: 54:c3:8d:f6:ec:1f:ec:88:98:31:ab:dc:d5:5e:ac: d8:ec:e5:c0:80:2e:c4:e0:13:3f:05:b2:a2:4b:0d: 6f:32:c7:9c:14:eb:24:60:f2:af:4c:c5:b5:1b:e5: 77:76:dc:c5:b5:46:23:6a:b9:b3:92:09:c9:85:4e: da:79:2e:f3:61:05:2d:84:f6:26:45:c0:56:0e:d1: 6d:41:7d:ff:f5:7b:8d:67:b6:8d:ef:f8:5f:7e:ad: 99:34:09:dd:85:92:4d:86:d9:01:d7:51:97:11:0c: 84:99:20:f0:c5:c9:9b:ff:81:77:07:8e:19:76:6f: d6:05:66:02:84:e6:cf:71:17:b4:64:a7:d3:0f:30: c5:c6:68:b7:79:01:9b:ef:7c:a2:2b:3e:34:e2:23: 46:54:2a:86:fa:a2:03:8c:1d:4a:ed:c9:01:d0:6d: e9:47:b8:1b:1c:3b:e1:53:d9:25:55:6b:f9:fb:48: a3:6b:a6:42:8e:4b:16:82:83:41:35:0d:83:4a:2f: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:39:37:DD:54:C0:15:2E:D7:83:49:2B:B1:12:35:4F:F9:C5:C0:F0 X509v3 Authority Key Identifier: keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/djk33VTAFS7Xg0krsRI1T_nFwPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.86.0/24 62.113.89.0-62.113.90.255 62.113.95.0/24 62.113.120.0/21 195.2.64.0/23 195.2.68.0/23 195.2.72.0/24 195.2.77.0/24 195.2.82.0/23 195.2.87.0-195.2.91.255 195.2.94.0/23 213.189.192.0/24 213.189.196.0-213.189.198.255 213.189.200.0/24 213.189.207.0-213.189.209.255 213.189.211.0-213.189.214.255 Signature Algorithm: sha256WithRSAEncryption b6:1d:53:86:10:6d:ec:fb:55:8f:4c:25:50:dc:82:2d:c7:5e: d1:33:7b:c5:a1:13:0b:70:07:85:5a:8b:27:77:22:80:0d:7c: d3:5e:21:f9:c3:1f:ee:57:58:f4:eb:3a:9a:6c:8c:db:8d:a5: b1:96:ec:5d:67:dd:47:6a:40:bd:bf:8f:2f:67:95:17:9b:c7: e0:45:46:54:b4:d3:23:22:e6:a2:ba:6b:fa:4a:85:ad:7d:49: 4c:02:7f:f7:a8:c9:04:d9:fa:e7:b4:81:ba:fb:c3:66:dc:0f: a7:97:00:93:5d:d1:a0:5f:83:fc:5f:f5:3e:8e:c6:a0:c6:c7: ce:23:4e:dc:0f:4c:6f:2f:cf:48:31:6a:22:a0:62:ef:a3:1a: 40:a2:0e:d9:d3:87:1e:95:63:c5:81:23:63:ec:3b:79:e5:e1: e7:21:36:3a:2f:ff:62:76:fb:b9:07:63:f2:1d:06:0c:ca:50: 70:f2:41:4e:cb:68:91:57:a5:cc:1a:40:4b:65:cd:9d:79:5e: 87:13:b1:11:72:5e:af:42:c9:ac:90:39:ed:86:b4:e1:71:bb: 86:44:3d:55:36:5b:ac:6a:14:d4:03:65:94:27:da:ca:cf:26: 8f:ce:6a:06:42:35:e0:8a:0c:5d:5c:fe:4b:8a:f4:86:08:e6: 68:42:99:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt8Emz07AzQYQOa4b7/UcKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1 NTBlYmQwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjM5MzdkZDU0YzAxNTJlZDc4MzQ5MmJiMTEyMzU0ZmY5YzVjMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVhWZ++EEDTxzdtChOIMWZttMHP0 d2rqMspvk4eueDbyjEA5oF0nqHbetTR8cA9m7Uo8kxP3h5WEji1Uw4327B/siJgx q9zVXqzY7OXAgC7E4BM/BbKiSw1vMsecFOskYPKvTMW1G+V3dtzFtUYjarmzkgnJ hU7aeS7zYQUthPYmRcBWDtFtQX3/9XuNZ7aN7/hffq2ZNAndhZJNhtkB11GXEQyE mSDwxcmb/4F3B44Zdm/WBWYChObPcRe0ZKfTDzDFxmi3eQGb73yiKz404iNGVCqG +qIDjB1K7ckB0G3pR7gbHDvhU9klVWv5+0ija6ZCjksWgoNBNQ2DSi+9rwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFHY5N91UwBUu14NJK7ESNU/5xcDwMB8GA1UdIwQY MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt MzE5NzExMDA5N2M5LzEvZGprMzNWVEFGUzdYZzBrcnNSSTFUX25Gd1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5 LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAA+ cVYwDAMEAD5xWQMEAD5xWgMEAD5xXwMEAz5xeAMEAcMCQAMEAcMCRAMEAMMCSAME AMMCTQMEAcMCUjAMAwQAwwJXAwQCwwJYAwQBwwJeAwQA1b3AMAwDBALVvcQDBADV vcYDBADVvcgwDAMEANW9zwMEAdW90DAMAwQA1b3TAwQA1b3WMA0GCSqGSIb3DQEB CwUAA4IBAQC2HVOGEG3s+1WPTCVQ3IItx17RM3vFoRMLcAeFWosndyKADXzTXiH5 wx/uV1j06zqabIzbjaWxluxdZ91HakC9v48vZ5UXm8fgRUZUtNMjIuaiumv6SoWt fUlMAn/3qMkE2frntIG6+8Nm3A+nlwCTXdGgX4P8X/U+jsagxsfOI07cD0xvL89I MWoioGLvoxpAog7Z04celWPFgSNj7Dt55eHnITY6L/9idvu5B2PyHQYMylBw8kFO y2iRV6XMGkBLZc2deV6HE7ERcl6vQsmskDnthrThcbuGRD1VNlusahTUA2WUJ9rK zyaPzmoGQjXgigxdXP5LivSGCOZoQpku -----END CERTIFICATE-----Generated at Mon Jan 26 06:29:24 2026 by rpki-client