This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/diTpDcQV1hJhwW2jUQIMay9fans.roa File: diTpDcQV1hJhwW2jUQIMay9fans.roa (raw, json) Hash identifier: bv+C168Ppj6md6pEtWzK8GIbrplV3RXupQDn2OyhLhw= Subject key identifier: 76:24:E9:0D:C4:15:D6:12:61:C1:6D:A3:51:02:0C:6B:2F:5F:6A:7B Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019ABFE65AFA5F3A828DEF0A19FF6EB4B9B6 Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/diTpDcQV1hJhwW2jUQIMay9fans.roa Signing time: Wed 26 Nov 2025 11:22:16 +0000 ROA not before: Wed 26 Nov 2025 11:22:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28707 IP address blocks: 62.213.192.0/19 maxlen: 24 2a00:c78::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:e6:5a:fa:5f:3a:82:8d:ef:0a:19:ff:6e:b4:b9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Nov 26 11:22:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7624e90dc415d61261c16da351020c6b2f5f6a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:56:51:6a:a5:98:ee:ed:0f:98:19:ff:98: e8:86:51:8a:78:a0:02:b5:f6:c7:47:bc:6f:9d:db: e4:9e:e9:22:71:72:e4:bf:1e:56:e3:b3:ff:c5:e6: 87:8e:8d:dc:49:a1:38:20:f2:54:c7:d9:ce:8b:9f: 0f:df:b4:61:69:aa:06:8b:e3:55:1f:6a:38:29:1d: 1b:51:b9:cb:d7:0a:af:e8:34:96:49:0c:f8:2a:7f: f3:64:21:53:e1:c2:02:0f:ca:8a:e9:25:c4:8b:af: 2e:50:ba:eb:b0:b5:e9:5d:17:5b:ec:29:3a:48:a6: 21:d2:61:d4:73:fd:e5:5c:29:66:68:56:4c:6d:8f: cb:0e:7d:4a:8c:c2:eb:d8:ea:9d:b0:2d:5e:b1:f0: d0:fd:d1:66:90:d6:ef:9b:30:24:ec:fa:ba:e7:42: f0:54:a3:8f:ef:9f:9b:6a:fa:1e:f9:9a:b4:f2:e6: b4:34:2f:cc:51:75:01:9e:cd:d0:f5:ae:8c:40:60: 15:21:d0:0d:76:83:d1:2c:37:0f:09:6a:e7:81:4c: e9:b5:ea:97:14:7d:e0:7b:d7:7d:37:38:96:0e:86: 7e:e0:28:e8:03:0e:2f:1e:7d:a1:ef:23:1a:55:cb: d3:57:fb:a6:3f:68:72:ce:18:2a:9e:10:f9:77:ed: fa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:24:E9:0D:C4:15:D6:12:61:C1:6D:A3:51:02:0C:6B:2F:5F:6A:7B X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/diTpDcQV1hJhwW2jUQIMay9fans.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.213.192.0/19 IPv6: 2a00:c78::/32 Signature Algorithm: sha256WithRSAEncryption 48:9a:96:1c:50:94:65:8e:72:8c:ac:bd:06:54:54:81:58:e6: 4e:c2:e7:13:17:2d:07:9b:70:a4:a0:70:ad:75:9b:a6:42:4e: 3d:c5:7a:38:dd:ff:aa:ec:ac:35:55:8b:fa:99:b6:91:f4:1d: 36:4b:4d:99:a8:47:91:f0:25:62:8c:84:17:9e:02:16:02:c3: 39:ea:bf:16:ed:c4:39:79:11:d1:20:46:36:3c:81:33:75:80: 9f:34:8b:7e:6c:18:6e:ea:2f:d8:aa:7a:cd:02:ff:d4:8d:0f: 46:e2:78:5b:9c:d2:7b:ba:43:0a:f7:e2:0d:ad:c9:35:4a:bc: b4:36:97:ba:47:c5:80:04:ba:c2:3e:bd:b3:4a:10:25:da:f8: 20:d8:1c:61:51:82:a7:05:7e:50:aa:ef:dc:e3:67:ab:fd:18: c8:1d:96:bd:a7:a8:4e:d4:f8:ca:13:48:ca:ba:49:e9:00:b4: 22:ab:11:db:e3:ad:63:fb:dc:c0:49:af:4f:7d:23:74:b9:b6: f3:f8:58:81:af:a7:b7:a7:4b:90:16:e3:13:75:3c:76:f0:1f: 10:ba:f2:d8:09:e5:ec:b9:b5:b9:0f:80:8c:f4:5a:e7:a2:2f: 1d:e8:e5:a4:66:2d:02:70:90:7d:72:0b:8e:24:20:30:7b:d5: e9:d4:4d:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZq/5lr6XzqCje8KGf9utLm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjUxMTI2MTEyMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjI0ZTkwZGM0MTVkNjEyNjFjMTZkYTM1MTAyMGM2YjJmNWY2YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf9WUWqlmO7tD5gZ/5johlGKeKAC tfbHR7xvndvknukicXLkvx5W47P/xeaHjo3cSaE4IPJUx9nOi58P37RhaaoGi+NV H2o4KR0bUbnL1wqv6DSWSQz4Kn/zZCFT4cICD8qK6SXEi68uULrrsLXpXRdb7Ck6 SKYh0mHUc/3lXClmaFZMbY/LDn1KjMLr2OqdsC1esfDQ/dFmkNbvmzAk7Pq650Lw VKOP75+bavoe+Zq08ua0NC/MUXUBns3Q9a6MQGAVIdANdoPRLDcPCWrngUzpteqX FH3ge9d9NziWDoZ+4CjoAw4vHn2h7yMaVcvTV/umP2hyzhgqnhD5d+36RQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHYk6Q3EFdYSYcFto1ECDGsvX2p7MB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvZGlUcERjUVYxaEpod1cyalVRSU1heTlmYW5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFPtXAMA0E AgACMAcDBQAqAAx4MA0GCSqGSIb3DQEBCwUAA4IBAQBImpYcUJRljnKMrL0GVFSB WOZOwucTFy0Hm3CkoHCtdZumQk49xXo43f+q7Kw1VYv6mbaR9B02S02ZqEeR8CVi jIQXngIWAsM56r8W7cQ5eRHRIEY2PIEzdYCfNIt+bBhu6i/YqnrNAv/UjQ9G4nhb nNJ7ukMK9+INrck1Sry0Npe6R8WABLrCPr2zShAl2vgg2BxhUYKnBX5Qqu/c42er /RjIHZa9p6hO1PjKE0jKuknpALQiqxHb461j+9zASa9PfSN0ubbz+FiBr6e3p0uQ FuMTdTx28B8QuvLYCeXsubW5D4CM9Frnoi8d6OWkZi0CcJB9cguOJCAwe9Xp1E2S -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:23 2025 by rpki-client