This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/YuGYvjrFzLezHsgzIUZ0asWCqVk.roa File: YuGYvjrFzLezHsgzIUZ0asWCqVk.roa (raw, json) Hash identifier: aZLneGXD5YvsOe9tvMiGcrBxDYxxGmpY4vDCZwd72Z8= Subject key identifier: 62:E1:98:BE:3A:C5:CC:B7:B3:1E:C8:33:21:46:74:6A:C5:82:A9:59 Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019B77C71F4DC22092A3141BE89E1998878C Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/YuGYvjrFzLezHsgzIUZ0asWCqVk.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28707 IP address blocks: 62.213.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1f:4d:c2:20:92:a3:14:1b:e8:9e:19:98:87:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62e198be3ac5ccb7b31ec8332146746ac582a959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:31:6b:ea:86:b1:b5:2c:ad:79:b6:4c:28: 9c:e3:c5:ea:14:5b:bc:50:3d:23:9c:77:05:b4:1b: 6b:70:fd:35:13:21:59:59:cd:c6:1e:dd:ec:84:2d: a2:01:2a:0c:73:88:22:b3:89:69:cb:43:6b:6f:ca: e6:63:d3:f1:1a:bc:63:b5:4c:60:3c:e8:a9:ce:f7: 45:a9:96:98:9b:73:6d:cc:1c:ed:17:f6:71:5d:79: 3e:a4:be:a9:c9:df:0b:17:dd:5e:42:73:e6:fd:99: f5:80:da:70:e2:f5:d9:41:4c:09:f1:aa:c4:cc:ab: d7:6d:9c:c8:7e:f1:38:e9:9d:38:92:b2:ed:12:3c: f8:36:9f:03:15:45:f8:6f:de:c5:cb:8c:e5:b9:92: 4c:c6:f1:bf:77:bf:2b:b6:73:ec:12:e4:8e:e3:aa: 95:9a:9d:b1:7c:62:4a:76:f5:55:2d:26:bb:b6:cb: 9e:1e:57:df:12:91:d3:03:54:5c:f4:a9:0b:45:88: 86:6d:02:26:21:2e:31:59:73:51:b3:fe:bd:ea:27: ac:3c:83:c2:38:5b:74:03:19:a1:a4:fa:84:60:0e: 4e:27:07:cd:d3:8c:23:b9:5c:39:57:f5:5a:4b:86: e1:f1:0b:da:e1:b2:cc:6a:52:b8:c7:1b:9b:5b:6c: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E1:98:BE:3A:C5:CC:B7:B3:1E:C8:33:21:46:74:6A:C5:82:A9:59 X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/YuGYvjrFzLezHsgzIUZ0asWCqVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.213.192.0/19 Signature Algorithm: sha256WithRSAEncryption 78:66:a7:5f:49:17:69:dd:6e:ac:67:46:91:0d:14:bb:9a:bb: 8f:63:0d:a2:ba:a7:3d:6f:9a:e0:30:d9:3e:72:fe:15:d4:98: 80:14:a2:0c:c7:d8:8f:a2:c8:74:42:53:2a:29:a2:53:58:68: 85:a1:0a:20:65:c6:cd:80:ca:4b:6a:ae:3c:1f:0f:08:00:26: ae:79:fa:18:8b:e3:92:c5:a1:0a:c3:d9:ef:14:c2:11:d5:d6: ba:bf:dd:7e:29:48:0f:d4:35:7f:fb:81:2e:e2:e1:24:9f:93: 90:b6:db:ca:05:5a:ce:f2:97:3f:b4:4a:9f:35:4b:b4:b7:2a: 4a:67:ab:53:30:5c:2f:3c:b6:2d:ee:c5:63:09:eb:ac:25:3d: f6:e4:4a:59:07:5d:97:ba:5d:80:c4:1c:6e:c2:97:dc:98:18: c8:d3:74:73:d9:9d:cd:c6:35:ed:6c:2b:d0:1f:67:a6:00:28: fd:8a:40:7e:30:54:ff:64:12:be:1f:fe:b1:27:21:19:a4:d7: 65:93:2a:c5:d8:37:9e:6e:10:43:ea:2a:e8:0d:ff:35:ef:4a: 5d:88:2a:3f:d1:fd:2d:29:c0:14:01:fa:dc:24:92:fb:f9:19: 9a:5d:46:7b:d1:71:5b:ab:4b:e1:28:71:c5:9b:b3:60:59:4e: 70:d3:b9:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx9NwiCSoxQb6J4ZmIeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmUxOThiZTNhYzVjY2I3YjMxZWM4MzMyMTQ2NzQ2YWM1ODJhOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdIxa+qGsbUsrXm2TCic48XqFFu8 UD0jnHcFtBtrcP01EyFZWc3GHt3shC2iASoMc4gis4lpy0Nrb8rmY9PxGrxjtUxg POipzvdFqZaYm3NtzBztF/ZxXXk+pL6pyd8LF91eQnPm/Zn1gNpw4vXZQUwJ8arE zKvXbZzIfvE46Z04krLtEjz4Np8DFUX4b97Fy4zluZJMxvG/d78rtnPsEuSO46qV mp2xfGJKdvVVLSa7tsueHlffEpHTA1Rc9KkLRYiGbQImIS4xWXNRs/696iesPIPC OFt0AxmhpPqEYA5OJwfN04wjuVw5V/VaS4bh8Qva4bLMalK4xxubW2xB2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLhmL46xcy3sx7IMyFGdGrFgqlZMB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvWXVHWXZqckZ6TGV6SHNneklVWjBhc1dDcVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPtXAMA0G CSqGSIb3DQEBCwUAA4IBAQB4ZqdfSRdp3W6sZ0aRDRS7mruPYw2iuqc9b5rgMNk+ cv4V1JiAFKIMx9iPosh0QlMqKaJTWGiFoQogZcbNgMpLaq48Hw8IACauefoYi+OS xaEKw9nvFMIR1da6v91+KUgP1DV/+4Eu4uEkn5OQttvKBVrO8pc/tEqfNUu0typK Z6tTMFwvPLYt7sVjCeusJT325EpZB12Xul2AxBxuwpfcmBjI03Rz2Z3NxjXtbCvQ H2emACj9ikB+MFT/ZBK+H/6xJyEZpNdlkyrF2DeebhBD6iroDf8170pdiCo/0f0t KcAUAfrcJJL7+RmaXUZ70XFbq0vhKHHFm7NgWU5w07n2 -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:56 2026 by rpki-client