This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa File: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (raw, json) Hash identifier: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw= Subject key identifier: 0A:A1:BD:05:8A:2A:05:56:D4:89:A6:0F:50:4B:78:A6:39:41:87:28 Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310 Certificate serial: 019B79ED2BC2D384C379B9011C24DEA27C1B Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1902 IP address blocks: 62.152.128.0/20 maxlen: 20 62.152.141.0/24 maxlen: 24 62.152.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2b:c2:d3:84:c3:79:b9:01:1c:24:de:a2:7c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa1bd058a2a0556d489a60f504b78a639418728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:fb:78:2b:c9:60:16:70:63:bd:bf:ea:69: 50:a3:39:5e:6d:2e:06:71:51:e4:45:2e:6c:80:b9: 80:43:e1:c0:d9:3f:6c:78:a1:95:b3:a4:c8:32:d4: 40:2c:73:7d:3a:cf:99:f1:f7:5a:09:35:0b:5d:f3: b5:38:5f:b3:2f:5d:e8:17:39:f4:e7:c8:09:52:32: f6:94:5b:86:2b:16:78:d5:cc:c4:2f:8d:37:43:98: d0:92:4e:77:0a:99:7b:ee:d3:7f:56:8b:e7:d5:b7: 2d:6f:ba:22:8b:22:15:45:73:1d:59:dc:60:14:73: b9:d4:26:ba:68:81:f0:1e:41:4b:57:c3:1f:7a:c4: 96:d9:ff:65:b5:5e:a6:a6:cb:7c:bb:f7:e3:5b:21: 84:e2:57:83:c1:e0:a4:d4:da:30:23:e4:fe:54:31: ae:88:a7:72:c8:97:30:36:6b:4b:e1:4e:e3:c0:b5: 67:ed:2a:c4:27:00:76:f2:cf:20:d1:2f:18:71:f4: 11:2c:6a:8c:47:f8:56:a6:f3:cc:87:7d:8d:b3:53: 89:e6:e4:e2:66:81:0e:9b:46:67:02:5d:87:64:9e: b6:fa:c9:1e:c6:71:0f:6b:9d:3d:bb:6a:cb:59:9f: 01:64:e1:ba:60:13:89:6c:cc:8f:b6:29:64:11:ce: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A1:BD:05:8A:2A:05:56:D4:89:A6:0F:50:4B:78:A6:39:41:87:28 X509v3 Authority Key Identifier: keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.152.128.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:66:cc:f4:90:74:d7:c7:3a:8d:79:4e:9f:6e:48:16:2e:08: dd:4a:40:b3:48:58:f8:bf:72:04:f3:c0:40:69:67:19:c2:65: 13:df:b3:9d:f3:6b:b3:c6:73:96:08:1d:08:ab:6e:65:5c:97: ff:8e:a8:ac:77:e4:71:25:e0:b4:a0:b8:a5:52:e0:2f:33:81: a6:31:b2:f5:1c:85:96:25:a0:fd:c6:3b:41:1a:7a:9a:89:ad: 51:3c:c2:44:88:0b:b3:79:d1:62:42:95:75:00:34:06:f3:7f: b4:40:05:2c:1b:c6:b9:a5:e7:50:41:3b:9e:fc:bd:10:b3:85: bf:35:a6:fe:3a:22:08:9c:b1:38:9b:d3:5d:14:9f:0a:3f:f8: 11:de:22:73:b1:13:9a:46:5e:91:94:c2:c6:95:50:24:de:9a: b5:83:42:34:48:e5:e2:a2:7a:46:96:d4:75:69:65:d7:00:90: cb:4d:46:c9:3e:85:c1:10:3c:de:df:4c:91:7b:ef:6b:f1:5c: c7:49:db:e6:da:87:15:4c:24:3e:79:34:19:9e:c2:ea:c1:35: a4:15:a1:54:13:24:8f:8e:0c:75:8b:39:58:8a:d8:fb:85:89: 40:63:87:1e:00:01:5c:72:f6:60:e3:94:c0:4b:99:53:cb:12: cb:d8:c2:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SvC04TDebkBHCTeonwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4 ZjYzMTAwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWExYmQwNThhMmEwNTU2ZDQ4OWE2MGY1MDRiNzhhNjM5NDE4NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSX7eCvJYBZwY72/6mlQozlebS4G cVHkRS5sgLmAQ+HA2T9seKGVs6TIMtRALHN9Os+Z8fdaCTULXfO1OF+zL13oFzn0 58gJUjL2lFuGKxZ41czEL403Q5jQkk53Cpl77tN/Vovn1bctb7oiiyIVRXMdWdxg FHO51Ca6aIHwHkFLV8MfesSW2f9ltV6mpst8u/fjWyGE4leDweCk1NowI+T+VDGu iKdyyJcwNmtL4U7jwLVn7SrEJwB28s8g0S8YcfQRLGqMR/hWpvPMh32Ns1OJ5uTi ZoEOm0ZnAl2HZJ62+skexnEPa509u2rLWZ8BZOG6YBOJbMyPtilkEc72mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqhvQWKKgVW1ImmD1BLeKY5QYcoMB8GA1UdIwQY MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt YjMxNmRiNTkzOGZmLzEvQ3FHOUJZb3FCVmJVaWFZUFVFdDRwamxCaHlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPpiAMA0G CSqGSIb3DQEBCwUAA4IBAQAdZsz0kHTXxzqNeU6fbkgWLgjdSkCzSFj4v3IE88BA aWcZwmUT37Od82uzxnOWCB0Iq25lXJf/jqisd+RxJeC0oLilUuAvM4GmMbL1HIWW JaD9xjtBGnqaia1RPMJEiAuzedFiQpV1ADQG83+0QAUsG8a5pedQQTue/L0Qs4W/ Nab+OiIInLE4m9NdFJ8KP/gR3iJzsROaRl6RlMLGlVAk3pq1g0I0SOXionpGltR1 aWXXAJDLTUbJPoXBEDze30yRe+9r8VzHSdvm2ocVTCQ+eTQZnsLqwTWkFaFUEySP jgx1izlYitj7hYlAY4ceAAFccvZg45TAS5lTyxLL2MLs -----END CERTIFICATE-----Generated at Sun Jan 25 18:22:02 2026 by rpki-client