This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/Js4E3rnoh4mQIPNOStdJD87IpLY.roa File: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (raw, json) Hash identifier: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24= Subject key identifier: 26:CE:04:DE:B9:E8:87:89:90:20:F3:4E:4A:D7:49:0F:CE:C8:A4:B6 Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Certificate serial: 019B7834A2B10126433A5A190E464E44756B Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/Js4E3rnoh4mQIPNOStdJD87IpLY.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12713 IP address blocks: 62.75.1.0/24 maxlen: 24 62.75.2.0/24 maxlen: 24 62.75.3.0/24 maxlen: 24 62.75.8.0/24 maxlen: 24 62.75.10.0/24 maxlen: 24 62.75.13.0/24 maxlen: 24 62.75.15.0/24 maxlen: 24 62.75.16.0/23 maxlen: 23 62.75.18.0/23 maxlen: 23 62.75.20.0/24 maxlen: 24 62.75.21.0/24 maxlen: 24 62.75.22.0/24 maxlen: 24 62.75.23.0/24 maxlen: 24 62.75.24.0/23 maxlen: 23 62.75.52.0/24 maxlen: 24 62.75.54.0/24 maxlen: 24 62.75.58.0/24 maxlen: 24 62.75.62.0/24 maxlen: 24 62.75.64.0/24 maxlen: 24 62.75.107.0/24 maxlen: 24 62.75.108.0/24 maxlen: 24 2a00:1cb8:1::/48 maxlen: 48 2a00:1cb8:2::/48 maxlen: 48 2a00:1cb8:2:1::/64 maxlen: 64 2a00:1cb8:2:2::/64 maxlen: 64 2a00:1cb8:2:3::/64 maxlen: 64 2a00:1cb8:2:6::/64 maxlen: 64 2a00:1cb8:2:7::/64 maxlen: 64 2a00:1cb8:2:8::/64 maxlen: 64 2a00:1cb8:2:a::/64 maxlen: 64 2a00:1cb8:2:b::/64 maxlen: 64 2a00:1cb8:2:c::/64 maxlen: 64 2a00:1cb8:2:d::/64 maxlen: 64 2a00:1cb8:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a2:b1:01:26:43:3a:5a:19:0e:46:4e:44:75:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26ce04deb9e887899020f34e4ad7490fcec8a4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:0a:f0:dc:53:1d:df:6c:ba:48:37:33:da: 09:a3:25:e0:88:ca:52:91:e4:d5:91:15:5c:62:9c: b2:0f:fa:a5:5c:a5:92:9e:10:ee:d8:5f:b4:4c:52: 8c:b1:c3:e2:df:e5:8a:00:a1:e7:7c:61:f9:e2:17: c4:5e:da:56:49:19:b3:55:24:6f:bb:d2:f4:d1:7a: 66:2d:c7:39:2f:1e:ea:4a:4e:23:de:3f:66:7d:66: 84:ea:dc:c9:8c:92:23:bf:5c:24:86:bf:23:d2:51: 2a:22:54:04:a6:0f:11:b8:4e:6f:ab:a1:d6:11:de: f5:43:c2:48:dc:d2:c7:e4:e8:52:da:e1:87:8a:91: c2:89:75:dc:ed:cf:f2:ed:a3:76:40:37:17:45:3f: ff:bf:ea:2c:c0:54:aa:39:dd:04:03:47:6c:c7:87: fb:66:55:91:7d:f3:8f:71:13:c1:70:e3:9d:d1:fc: 8a:ea:d3:98:cb:23:38:4d:ee:ef:1f:7b:d7:8a:3b: 98:1b:e5:bc:d5:23:df:6c:fd:14:31:9f:a6:49:25: 17:39:e4:b5:7d:bd:f0:a4:c0:ec:63:ca:f8:07:4e: 13:97:e9:03:b3:2f:01:7a:6a:38:46:63:25:4b:91: d8:52:fc:74:75:6b:d3:7a:72:80:ec:b6:77:a7:d7: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CE:04:DE:B9:E8:87:89:90:20:F3:4E:4A:D7:49:0F:CE:C8:A4:B6 X509v3 Authority Key Identifier: keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/Js4E3rnoh4mQIPNOStdJD87IpLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.75.1.0-62.75.3.255 62.75.8.0/24 62.75.10.0/24 62.75.13.0/24 62.75.15.0-62.75.25.255 62.75.52.0/24 62.75.54.0/24 62.75.58.0/24 62.75.62.0/24 62.75.64.0/24 62.75.107.0-62.75.108.255 IPv6: 2a00:1cb8:1::-2a00:1cb8:2:ffff:ffff:ffff:ffff:ffff 2a00:1cb8:2000::/35 Signature Algorithm: sha256WithRSAEncryption 6e:d5:30:1c:7a:0e:b6:0e:45:56:1d:53:af:28:df:d6:dc:80: a4:f0:72:9d:5d:5d:d6:c0:b2:22:6d:f7:46:57:d6:78:d0:cf: d5:ee:77:92:f7:35:25:ae:74:34:03:d4:d3:3f:67:5e:c1:b7: fe:00:ca:e0:2e:f9:4e:80:15:03:46:e6:cf:33:7e:69:89:de: f5:95:94:3f:d5:1b:75:a7:75:fc:86:30:82:8e:0b:ed:00:3e: 09:1c:5c:6c:cd:17:bc:0d:d8:83:9a:a3:e7:9f:24:67:3c:10: 3d:74:91:82:95:40:e3:cb:e9:6a:9a:1b:dc:db:9d:e6:d4:2d: 35:26:b3:f1:ef:fb:b7:15:51:2d:91:e8:92:be:9a:bc:88:2b: 2f:69:e1:8e:c2:9e:11:c5:b2:84:60:c5:99:d4:ed:8e:c5:37: 69:92:8d:df:bd:96:d7:61:0a:fa:7c:68:69:b0:18:2f:e2:43: da:70:af:2e:64:bb:b0:6d:c0:b2:d3:d8:4d:a8:52:66:41:cb: 73:ba:37:7c:2f:7d:5e:48:a9:58:4c:af:ac:28:04:79:1f:07: 95:26:4f:4a:3e:ab:9e:04:d7:a9:42:46:8d:78:0f:2a:dd:9b: d7:45:0c:11:10:2b:34:d6:8c:30:12:df:36:73:e5:66:3a:6f: f0:20:31:71 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NKKxASZDOloZDkZORHVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4 YmZiYjUwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmNlMDRkZWI5ZTg4Nzg5OTAyMGYzNGU0YWQ3NDkwZmNlYzhhNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohAK8NxTHd9sukg3M9oJoyXgiMpS keTVkRVcYpyyD/qlXKWSnhDu2F+0TFKMscPi3+WKAKHnfGH54hfEXtpWSRmzVSRv u9L00XpmLcc5Lx7qSk4j3j9mfWaE6tzJjJIjv1wkhr8j0lEqIlQEpg8RuE5vq6HW Ed71Q8JI3NLH5OhS2uGHipHCiXXc7c/y7aN2QDcXRT//v+oswFSqOd0EA0dsx4f7 ZlWRffOPcRPBcOOd0fyK6tOYyyM4Te7vH3vXijuYG+W81SPfbP0UMZ+mSSUXOeS1 fb3wpMDsY8r4B04Tl+kDsy8Bemo4RmMlS5HYUvx0dWvTenKA7LZ3p9cM0QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCbOBN656IeJkCDzTkrXSQ/OyKS2MB8GA1UdIwQY MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt NzI0OTQ5YjQ2MGU5LzEvSnM0RTNybm9oNG1RSVBOT1N0ZEpEODdJcExZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5 LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBgBAIAATBaMAwDBAA+ SwEDBAI+SwADBAA+SwgDBAA+SwoDBAA+Sw0wDAMEAD5LDwMEAT5LGAMEAD5LNAME AD5LNgMEAD5LOgMEAD5LPgMEAD5LQDAMAwQAPktrAwQAPktsMCIEAgACMBwwEgMH ACoAHLgAAQMHACoAHLgAAgMGBSoAHLggMA0GCSqGSIb3DQEBCwUAA4IBAQBu1TAc eg62DkVWHVOvKN/W3ICk8HKdXV3WwLIibfdGV9Z40M/V7neS9zUlrnQ0A9TTP2de wbf+AMrgLvlOgBUDRubPM35pid71lZQ/1Rt1p3X8hjCCjgvtAD4JHFxszRe8DdiD mqPnnyRnPBA9dJGClUDjy+lqmhvc253m1C01JrPx7/u3FVEtkeiSvpq8iCsvaeGO wp4RxbKEYMWZ1O2OxTdpko3fvZbXYQr6fGhpsBgv4kPacK8uZLuwbcCy09hNqFJm Qctzujd8L31eSKlYTK+sKAR5HweVJk9KPqueBNepQkaNeA8q3ZvXRQwRECs01oww Et82c+VmOm/wIDFx -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:33 2026 by rpki-client